Card authentication system

• US 8,447,991 B2
• Filed: 11/06/2007
• Issued: 05/21/2013
• Est. Priority Date: 11/06/2006
• Status: Expired due to Fees

• Current Assignee: Magtek Incorporated, Washington University In St Louis
• Original Assignee: Magtek Incorporated, Washington University In St Louis
• Inventors: Hart, Annmarie D., Meyers, Lawrence R., Hernandez, Carlos, Morley, Robert E. Jr., Richter, Edward J., Indeck, Ronald S.
• Primary Examiner(s): Reza, Mohammad W
• Assistant Examiner(s): RAHIM, MONJUR
• Application Number:
  US11/935,980
• Publication Number:
  US 20080215887A1
• Time in Patent Office: 2,023 Days
• Field of Search: 713/185, 713/176, 713/172, 705/44, 705/64, 235/449, 235/492
• US Class Current: 713/185
• CPC Class Codes: G06Q 20/347 Passive cards
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/0813 Specific details related to card security
• CPC Class Codes: G07F 7/086 by passive credit-cards adapted therefor, e.g. constructive particularities to avoid counterfeiting, e.g. by inclusion of a physical or chemical security-layer for security documents G07D7/00; for the reading of record-carriers in general G06K7/00; for the design of coded credit-cards G06K19/10
• CPC Class Codes: G07F 7/12 Card verification

Abstract

A card authentication system. In one embodiment, the invention relates to a method for authenticating a data card having an intrinsic magnetic characteristic and recorded data on the data card, the method including reading information from the data card, the data card information including the intrinsic magnetic characteristic and the recorded data on the data card, encrypting the data card information, sending the encrypted data card information, receiving the encrypted data card information, decrypting a portion of the encrypted data card information, the portion including the intrinsic magnetic characteristic, generating a score indicative of a degree of correlation between the intrinsic magnetic characteristic of the data card information and a stored value, and determining an authenticity of the data card based at least in part on the score.

Claims

1. A system for authenticating a data card having an intrinsic magnetic characteristic and recorded data on the data card, the system comprising:

a reader configured to read information from the data card, the data card information comprising the intrinsic magnetic characteristic and the recorded data;

a network coupled to the reader;

a scoring server coupled to the network, the scoring server configured to;

receive a portion of the data card information encrypted, the portion comprising at least the intrinsic magnetic characteristic of the data card;

decrypt the portion; and

generate a score indicative of a degree of correlation between the intrinsic magnetic characteristic of the received data card information and a stored value; and

a second server coupled to the network and configured to determine an authenticity of the data card based at least in part on the score,

wherein a location of the scoring server is different from a location of the second server.

2. The authentication system of claim 1, wherein the scoring server is configured to provide a score indicating failure when the intrinsic magnetic characteristic of the received data card information exactly matches the stored value.

3. The authentication system of claim 1, wherein the scoring server is configured to provide the score indicative of a degree of correlation between the intrinsic magnetic characteristic of the received data card information and a plurality of stored values.

4. The authentication system of claim 3:

wherein the data card information comprises information obtained from at least one reading of the data card;

wherein the scoring server is configured to provide a score indicating failure when any two values of the intrinsic magnetic characteristic of the received data card information and the plurality of stored values exactly match.

5. The authentication system of claim 1, wherein a score above a preselected threshold is indicative of an authentic data card.

6. The authentication system of claim 1, wherein the intrinsic magnetic characteristic is a remanent noise characteristic.

7. The authentication system of claim 1, wherein the scoring server is further configured to authenticate the reader.

8. The authentication system of claim 1, wherein the scoring server is further configured to authenticate the reader using a mutual authentication process.

9. The authentication system of claim 1, further comprising:

a terminal coupled to the reader;

wherein the terminal is configured to;

encrypt the data card information and transaction information; and

send the encrypted information to an authentication server coupled to the scoring server.

10. The authentication system of claim 9, wherein the authentication server is configured to:

authenticate the transaction information;

send at least a portion of the encrypted data card information to the scoring server;

receive the score from the scoring server; and

send the score to the terminal.

11. The authentication system of claim 9, wherein the authentication server is configured to authenticate the terminal based on a Media Access Control address.

12. The authentication system of claim 9, wherein the authentication server is configured to authenticate the terminal using a mutual authentication process.

13. The authentication system of claim 9, wherein the second server is located at the terminal.

14. The authentication system of claim 1, further comprising an authorization server coupled to the scoring server, wherein the authenticity of the data card is determined, at the authorization server, based at least in part on the score.

15. A method for authenticating a data card having an intrinsic magnetic characteristic and recorded data on the data card, the method comprising:

reading information from the data card, the data card information comprising the intrinsic magnetic characteristic and the recorded data on the data card;

encrypting the data card information;

sending the encrypted data card information;

receiving the encrypted data card information;

decrypting a portion of the encrypted data card information, the portion comprising the intrinsic magnetic characteristic;

generating, at a scoring server, a score indicative of a degree of correlation between the intrinsic magnetic characteristic of the data card information and a stored value; and

determining, at a second server, an authenticity of the data card based at least in part on the score,

wherein a location of the scoring server is different from a location of the second server.

16. The method for authenticating a data card of claim 15, wherein the generating a score includes generating a score indicative of a failure when the intrinsic magnetic characteristic of the received data card information exactly matches the stored value.

17. The method for authenticating a data card of claim 15, wherein the generating a score includes generating a score indicative of a degree of correlation between the intrinsic magnetic characteristic of the data card information and a plurality of stored values.

18. The method for authenticating a data card of claim 17:

wherein the data card information comprises information obtained from at least one reading of the data card;

wherein the generating a score includes generating a score indicative of a failure when any two values of the intrinsic magnetic characteristic of the received data card information and the plurality of stored values exactly match.

19. The method for authenticating a data card of claim 15, wherein the generating a score includes generating a score indicative of an acceptable correlation when the score is above a preselected threshold.

20. The method for authenticating a data card of claim 15, wherein the intrinsic magnetic characteristic is a remanent noise characteristic.

21. The method for authenticating a data card of claim 15, wherein the reading information from the data card comprises reading information from the data card using a reader, the method further comprising authenticating the reader.

22. The method for authenticating a data card of claim 21, wherein the authenticating the reader comprises authenticating the reader using a mutual authentication process.

23. The method for authenticating a data card of claim 15, further comprising:

providing information related to a card transaction, the transaction information comprising the data card information; and

authenticating the card transaction based on the transaction information.

24. The method for authenticating a data card of claim 23, wherein the providing information related to a card transaction comprises providing information related to a card transaction using a terminal, the method further comprising:

authenticating the terminal based on a Media Access Control address.

25. The method for authenticating a data card of claim 23, wherein the providing information related to a card transaction comprises providing information related to a card transaction using a terminal, the method further comprising:

authenticating the terminal using a mutual authentication process.

26. The method for authenticating a data card of claim 15, wherein:

wherein the encrypting the data card information and the sending the encrypted data card information are performed at a terminal; and

wherein the second server is located at the terminal.

27. The method for authenticating a data card of claim 15, wherein:

wherein the receiving the encrypted data card information is performed at an authorization server; and

wherein the second server is the authorization server.

28. A method for providing a score for a data card having an intrinsic magnetic characteristic and recorded data on the data card, the method comprising:

receiving information related to the data card, the data card information comprising encrypted information comprising the intrinsic magnetic characteristic and the recorded data on the data card;

decrypting a portion of the encrypted information, the portion comprising the intrinsic magnetic characteristic;

generating, at a scoring server, a score indicative of a degree of correlation between the intrinsic magnetic characteristic of the data card information and a stored value; and

determining, at a second server, an authenticity of the data card based at least in part on the score,

wherein a location of the scoring server is different from a location of the second server.

29. The method of claim 28, wherein the score is a numerical value.

30. The method of claim 29, wherein the numerical value is a value with a range from 0 to 100.

31. The method of claim 28, wherein the score is a numerical value in a range comprising at least three values.

32. The method of claim 31, wherein the range comprises a preselected minimum, a preselected maximum, and a preselected threshold.

33. The method of claim 32:

wherein the second server is located at a merchant, and

wherein the preselected threshold is determined by the merchant.

34. The method of claim 32:

wherein the second server is an authorization server, and

wherein the preselected threshold is determined by the authorization server.

35. The method of claim 34:

wherein the information related to the data card is received from a terminal located at a merchant.