Trusted system

• US 7,275,160 B2
• Filed: 08/17/2001
• Issued: 09/25/2007
• Est. Priority Date: 08/18/2000
• Status: Expired due to Term

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Chen, Liqun, Pearson, Siani Lynne
• Primary Examiner(s): Barrón, Jr.; Gilberto
• Assistant Examiner(s): Nalven; Andrew L
• Application Number:
  US09/932,476
• Publication Number:
  US 20020023032A1
• Time in Patent Office: 2,230 Days
• Field of Search: 705/65, 713/172, 713/201, 713/169
• US Class Current: 713/172
• CPC Class Codes: G06Q 20/20 Point-of-sale [POS] network systems
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G06Q 40/00 Finance; Insurance; Tax strategies; Processing of corporate or income taxes
• CPC Class Codes: G07F 7/005 Details or accessories
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A method for allowing a financial transaction to be performed using a electronic system, the method comprising interrogating an electronic transaction terminal with an electronic security device to obtain an integrity metric for the electronic financial transaction terminal; determining if the transaction terminal is a trusted terminal based upon the integrity metric; allowing financial transaction data to be input into the transaction terminal if the transaction terminal is identified as a trusted terminal.

Claims

1. A method for allowing a financial transaction to be performed using a electronic system, the method comprising:

interrogating an electronic transaction terminal with an electronic security device to obtain an integrity metric for the transaction terminal measured by a trusted device contained within the transaction terminal after the last restart of the transaction terminal;

determining if the transaction terminal is a trusted terminal based upon the integrity metric; and

allowing financial transaction data to be input into the transaction terminal if the transaction terminal is identified as a trusted terminal.

2. A method according to claim 1, further comprising:

providing user identification data for the user of the electronic security device to the transaction terminal via the security device to allow authorisation of the transaction associated with the financial transaction data.

3. A method according to claim 1, further comprising:

displaying a user secret if the transaction terminal is identified as a trusted terminal.

4. A method according to claim 1, further comprising:

compartmenting different types of transactions into different compartments.

5. A financial transaction system, comprising:

an electronic financial transaction terminal; and

an electronic security device having interrogation means for interrogating the transaction terminal to obtain an integrity metric for the transaction terminal measured by a trusted device contained within the transaction terminal after the last restart of the transaction terminal, determining means for determining if the transaction terminal is a trusted terminal based upon the integrity metric, and means for allowing financial transaction data to be input into the transaction terminal if the transaction terminal is identified as a trusted terminal.

6. A financial transaction system according to claim 5, wherein the electronic financial transaction terminal further comprises a display for displaying a user secret if the transaction terminal is identified as a trusted terminal.

7. A financial transaction system according to claim 6, wherein the user secret is deleted on completion of the financial transaction.

8. An electronic security transaction device having interrogation means for interrogating an electronic financial transaction terminal to obtain an integrity metric for the transaction terminal measured by a trusted device contained within the transaction terminal after the last restart of the transaction terminal, determining means for determining if the transaction terminal is a trusted terminal based upon the integrity metric, and means for allowing financial transaction data to be input into the transaction terminal if the transaction terminal is identified as a trusted terminal.

9. An electronic security transaction device according to claim 8, further comprising a switch for initiating the transfer of financial transaction data to the transaction terminal if the transaction terminal is identified as a trusted terminal.

10. An electronic security transaction device according to claim 8, wherein the transaction device is a wireless trusted personnel device.