Authentication methods and apparatus for vehicle rentals and other applications

• US 7,568,616 B2
• Filed: 05/18/2004
• Issued: 08/04/2009
• Est. Priority Date: 08/09/2002
• Status: Expired due to Fees

• Current Assignee: Brite Smart Corporation
• Original Assignee: Brite Smart Corporation
• Inventors: Zuili, Patrick
• Primary Examiner(s): Lee; Seung H
• Application Number:
  US10/847,794
• Publication Number:
  US 20050001028A1
• Time in Patent Office: 1,904 Days
• Field of Search: 235/384, 235/382, 235/380, 235/382.5
• US Class Current: 235/382
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

An autonomous and portable smartcard reader device incorporates a high level of embedded security countermeasures. Data transfers are encrypted with two specific input devices, namely a light sensor and PIN or other keyboard entry, and at the output through the use of a dual-tone encoder-decoder. The unit may be used alone or as a plug-in to another device such as a PDA, cell phone, or remote control. The reader may further be coupled to various biometric or plug-in devices to achieve at least five levels of authentication, namely, (1) the smartcard itself; (2) the smartcard reader; (2) the PIN; (3) private-key cryptography (PKI); and (5) the (optional) biometric device. These five levels account for an extremely strong authentication applicable to public networking on public/private computers, and even on TV (satellite, cable, DVD, CD AUDIO, software applications. Transactions including payments may be carried out without any risk of communication tampering, authentication misconduct or identity theft. The invention finds utility in a wide range of applications, including commercial transactions and security, including the generation of prepaid credit/debit card numbers, vehicle rental, and other uses.

Claims

1. A method of authenticating the use of a vehicle, comprising:

installing a vehicle disable unit inside a vehicle, the vehicle disable unit being operative to disable an entry or operation of the vehicle without an appropriate authorization;

providing a card reader system separate from the vehicle, said card reader system having a keypad and a display, said card reader system comprising a transmitter and a receiver, and where said card reader system is capable of;

receiving a user request from a user for entry or operation of the vehicle equipped with the vehicle disable unit;

in response to said user request, authenticating said user and generating a request upon authentication;

encrypting the generated request; and

transmitting said encrypted generated request to the vehicle disable unit;

receiving the encrypted generated request at the vehicle disable unit, and communicating the encrypted generated request from the vehicle disable unit to a third party;

decrypting the encrypted generated request and validating the request at the third party;

receiving a signal at the vehicle disable unit from the third party, the signal indicating the validation of the generated request and thereby the authentication of the user to enter or operate said vehicle; and

if the signal indicates that the generated request is validated by the third party then deactivating the vehicle disable unit so that the vehicle can be entered or operated.

2. The method of claim 1, wherein the card reader system is capable of reading a smartcard, and submitting writing operations, to be performed by the smart card, to the smart card.

3. The method of claim 1, wherein the card reader system is capable of reading an optical card.

4. The method of claim 1, wherein the card reader system forms part of a personal digital assistant (PDA).

5. The method of claim 1, wherein the card reader system forms part of a telephone.

6. The method of claim 5, wherein the telephone is a cellular telephone.

7. The method of claim 1, wherein the signal used to authenticate the transaction is an optical signal.

8. The method of claim 1, wherein said communicating the request to a device or third party involves using a dual-tone audio signal.

9. The method of claim 8, wherein the signal is a dual tone, multi-format (DTMF) signal.

10. The method of claim 8, wherein the signal is an audio frequency shift keying (AFSK) signal.

11. The method of claim 8, wherein the signal is a private line (PL) signal.

12. The method of claim 1, wherein the encrypting the generated request includes an entry of a personal identification number (PIN) through the keyboard of the card reader system.

13. The method of claim 12, wherein an operation of the card reader system is terminated if a PIN entry is attempted more than a predetermined number of times.

14. The method of claim 1, wherein:

the card reader system further includes a biometric input; and

said receiving said user request includes receiving, at said card reader system, biometric data through the biometric input.

15. The method of claim 14, wherein the biometric data is a fingerprint or voiceprint.

16. The method of claim 1, wherein the card reader system stores information about the vehicle.

17. The method of claim 1, wherein the card reader system stores information about the use of the vehicle following authentication.

18. The method of claim 1, wherein the said encryption is performed using one or more of public key infrastructure (PKI), user entered PIN, biometric input, atomic clock or session keys.

19. The method of claim 1, wherein the said decryption is performed using one or more of public key infrastructure (PKI), user entered PIN, biometric input, atomic clock or session keys.