Patent US3255730A successfully refreshed from Google Patents.
EP0029894A2
Expired / Lapsed
EP
⏱️ 0.0 years remaining
A system for achieving secure password verification
Assignee: International Business Machines Corp
•
Filing: 1980-10-07
•
Granted: —
•
Expires: 2000-10-07
Abstract
Abstract A system for identifying an individual holder (person) of an unalterable charge card-like device (CARD) at a utilization terminal (U/I Terminal) wherein a unique user entered key (asserted key K A ) is handled in a highly secure manner. The holder of the CARD causes same to be placed in a data coupling mode with the U / I Terminal. At this point, the person enters asserted key (K A ) via a keyboard (101, 201) associated with said system. A random word is generated by at least one random word generator (107, 106) located in said CARD and this random word is encrypted utilizing the asserted key K A entered by the holder at the keyboard and also encrypted under a true key K T stored (1045) in said CARD. The random word encrypted under the asserted key K A is stored (208) in said U/I Terminal and the random word encrypted under the true key K T is stored (108) in the CARD. The U/I Terminal then causes the encrypted word stored in the CARD to be transferred to the U/I Terminal (209) and the two encrypted words are compared (217) for identity. If the comparison is true, the holder of the card has entered the correct asserted key K A into the system, and his identity is presumend to be true. According to a first embodiment of the invention, the keyboard (201) is actually located in the U/I Terminal, sacrificing some security for the person's asserted key K A . According to a further embodiment of the system, the CARD is inserted into a personal portable transaction terminal (XATR) which is then inserted into the U / I Terminal. Said XATR in the possession of the holder of the CARD contains a keyboard (101) for entering the individual's asserted key K A . Additional means (109, 209) are provided when the two encrypted random words are to be transferred between the U/I Terminal and the CARD for comparison so that the transfer occurs simultaneously in bit serial mode and in the opposite order of bit significance, and whereby any attempt to subvert the data flow path within the XATR will be impossible.
Inventors
- 👤 Paul Edward Stuckert
Bibliographic Details
Application Number
—
Jurisdiction
EP
Data Source
google_patents
Last Synchronized
2026-10-24 05:29
CPC Classifications
G; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; G06; G06Q; G06Q20/00; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/38; G06Q20/40; G06Q20/409; G06Q20/4097; G06Q20/40975; G07F7/0873; G07F7/088; G07F7/0886; G07F7/1016; G07F7/1025
Claims Analysis
Total Claims: 21
Claim 1
Independent Claim
217 words
A personal identification system including the combination of a credit card-like device (CARD) to be presented by the holder of the CARD (Person), a Utilization/Identification Terminal (U/I Terminal) to which the CARD is presented for identification purposes, and a data interface (A-A') for the exchange of predetermined data between the CARD and the U/I Terminal, said CARD including means (1045) for permanently storing a secret key, K T , unique to said person, said combination being characterized by encryption means comprising at least one key-controlled block-cipher encryption device (115, 114A/B) located in said CARD, a keyboard (201 or 101) at which the person may enter a secret key, K A , at least one random word generator (107, 207 or 106) for supplying a data input word for encrypting by said encryption means, said encryption means being operable to encrypt a random word supplied by the random word generator under the stored key, K , and also being operable to encrypt the same random word under said secret key, K A , entered by the person at said keyboard, said encryption means utilizing identical encryption algorithms for each encryption operation, first comparison means (217) in said Terminal for comparing the results of said first and second encryption operations and means (also 217) for indicating a successful comparison.
Claim 2
Dependent Claim
217 words
A personal identification system including the combination of a credit card-like device (CARD) to be presented by the holder of the CARD (Person), a Utilization/Identification Terminal (U/I Terminal) to which the CARD is presented for identification purposes, and a data interface (A-A') for the exchange of predetermined data between the CARD and the U/I Terminal, said CARD including means (1045) for permanently storing a secret key, K T , unique to said person, said combination being characterized by encryption means comprising at least one key-controlled block-cipher encryption device (115, 114A/B) located in said CARD, a keyboard (201 or 101) at which the person may enter a secret key, K A , at least one random word generator (107, 207 or 106) for supplying a data input word for encrypting by said encryption means, said encryption means being operable to encrypt a random word supplied by the random word generator under the stored key, K , and also being operable to encrypt the same random word under said secret key, K A , entered by the person at said keyboard, said encryption means utilizing identical encryption algorithms for each encryption operation, first comparison means (217) in said Terminal for comparing the results of said first and second encryption operations and means (also 217) for indicating a successful comparison.
Claim 3
Dependent Claim
89 words
A personal identification system as set forth in claim characterized in that said encryption means includes a second key-controlled block--cipher encryption device (215) located in said U/I Terminal and identical in operation to the key-controlled block-cipher encryption device (115) on the CARD and wherein said keyboard (201) is located in the U/I Terminal and, means (also 201) for supplying the secret key, K A , entered by the person via said keyboard to said second cryptographic device (215) as the key input thereto for performing said second encryption operation.
Claim 4
Dependent Claim
80 words
A personal identification system as set forth in claim 2 including a first random word generator (107) located in said CARD and a second random word generator (207) located in the U/I Terminal, means (116 and/or 216) for combining the outputs of the first and second random word generators to produce a resultant random word and means (also 116, 216) for supplying the resultant random word as the data input to both said first and second encryption devices (115, 215).
Claim 5
Dependent Claim
86 words
A personal identification system as set forth in any of claims 1-3 including a second comparison means (117) located in said CARD for comparing the outputs of said first and second encryption operations, counter means (125) located in said CARD connected to the output of said second comparison means (117), means including said counter (125) for recording the number of unsuccessful compares detected by said second comparison means and means (128) actuable upon said counter reaching a predetermined value to disable the circuitry in said CARD.
Claim 6
Dependent Claim
105 words
A personal identification system as set forth in claim I wherein said combination includes a personal portable transaction device (XATR) interposed between said CARD and said U/I Terminal in data exchange relationship with both wherein data may be transferred between said CARD and said U/I Terminal, said keyboard (101) being located within said XATR, characterized by means (also 101) for transferring the secret key K A from the keyboard to the encryption means, the data transfer paths within the XATR being so configured that the keyboard entered secret key K A is never available at the data interface (A-A') between the XATR and the Terminal.
Claim 7
Dependent Claim
145 words
A personal identification system as set forth in claim 5 wherein said encryption means comprises at least one key-controlled block-cipher encryption device (114A, B) and said two keys K T and K A are divided into at least two segments wherein both segments are necessary for successful operation of the encryption means, said system including means (104, 105) for storing said key K T in two parts within the CARD and means (120) for combining said two parts to supply the full key K T to said encryption means (114A), means (101, 122) for entering a portion (K A L) of the secret key K A at the Terminal and combining said entered portion with a predetermined portion (K T H) of said stored key K T and supplying the result of the combination as the full key K A to said encryption means (114B).
Claim 8
Dependent Claim
79 words
A personal identification system as set forth in claim 5 or 6 including means (103) in said CARD for storing an index value M which when combined with a value K E subsequently entered at the keyboard (101) produces a resultant value to be utilized as the key K A, wherein said means for combining comprises a predetermined and fixed combinatorial circuit (111), and means for selectively entering a new index value into said system via said keyboard (101).
Claim 9
Dependent Claim
133 words
A personal identification system for identifying an individual holder (Person) of an unalterable charge card-like device (CARD) to a Utilization Terminal (U/I Terminal), as set forth in any of claims 1-7, further characterized by means (208, 108) for storing the random word (ERWA) encrypted under the entered key K A in said U/I Terminal and for storing the random word (ERWT) encrypted under the true key K T in the CARD, means (209) in the U/I Terminal for causing the encrypted word (ERWT) stored in the CARD to be transferred to the U/I Terminal, means (217) for comparing the two encrypted words ERWA and ERWT for identity, and means (also 217) actuable on a successful comparison for indicating to the U/I Terminal that the person has entered the proper key K A .
Claim 10
Dependent Claim
118 words
A personal identification system as set forth in claim 8 wherein said system includes a personal portable transaction device (XATR) interposed between the CARD and the U/I Terminal including means within said XATR for holding the CARD in data exchange relationship therewith and means within said XATR for coupling with said U/I Terminal in data exchange relationship whereby data may be directly transferred between the CARD and the U/I Terminal via the XATR and wherein said XATR contains said keyboard (101) and means are provided for transferring the key K A entered by the person directly to the means (114B) for encrypting the random word under the key KA, said encrypting means (114B) being located within the CARD.
Claim 11
Dependent Claim
74 words
A personal identification system as set forth in claim 9 including means (108, 109, 208, 209) for transferring the two encrypted random words ERWA and ERWT between the U/I Terminal and the CARD simultaneously in bit serial mode and in the opposite order of bit significance whereby any attempt to subvert' the data flow path within the XATR will cause an unsuccessful comparison of the two encrypted random words by said comparison means (217).
Claim 12
Dependent Claim
237 words
A personal identification system including the combination of a credit card-like device (CARD) to be presented by the holder of the CARD (Person) and a Utilization Terminal (U/I Terminal) to which the CARD is presented for the purpose of identifying the person, a data interface for the exchange of predetermined data between the CARD and the U/I Terminal, characterized by said CARD containing a first key-controlled block--cipher encryption device (115) connected with a storage means (1045) for permanently storing a secret key K T unique to said user, said U/I Terminal containing a keyboard (201) at which the holder may enter a memorized secret key K connected with a second key-controlled block-cipher encryption device (215) identical in operation to the encryption device (115) located in said CARD, said combination further including random word generation means (107, 207, 116, 216) for supplying a data input word for encrypting by said two encryption devices, means (PI) for actuating said first encryption device (115) to encrypt a random word supplied by the random word generation means under the stored key K T and for actuating the second encryption device (215) to encrypt the same random word under the keyboard entered key K A, first comparison means (217) in said Terminal, means (108, 208, 209) for transferring the encrypted random words from said first and second encryption devices to said first comparison means and means (217) for indicating a successful comparison.
Claim 13
Dependent Claim
237 words
A personal identification system including the combination of a credit card-like device (CARD) to be presented by the holder of the CARD (Person) and a Utilization Terminal (U/I Terminal) to which the CARD is presented for the purpose of identifying the person, a data interface for the exchange of predetermined data between the CARD and the U/I Terminal, characterized by said CARD containing a first key-controlled block--cipher encryption device (115) connected with a storage means (1045) for permanently storing a secret key K T unique to said user, said U/I Terminal containing a keyboard (201) at which the holder may enter a memorized secret key K connected with a second key-controlled block-cipher encryption device (215) identical in operation to the encryption device (115) located in said CARD, said combination further including random word generation means (107, 207, 116, 216) for supplying a data input word for encrypting by said two encryption devices, means (PI) for actuating said first encryption device (115) to encrypt a random word supplied by the random word generation means under the stored key K T and for actuating the second encryption device (215) to encrypt the same random word under the keyboard entered key K A, first comparison means (217) in said Terminal, means (108, 208, 209) for transferring the encrypted random words from said first and second encryption devices to said first comparison means and means (217) for indicating a successful comparison.
Claim 14
Dependent Claim
103 words
A personal identification system as set forth in claim 11 wherein said random word generation means comprises a first random word generator (107) located in said card and a second random word generator (207) located in said U/I Terminal, combinatorial circuit means (116, 216) for combining the outputs of said first and second random word generators to produce a third random word which is supplied to said first and second encryption devices as the data word to be encrypted, and storage means (108, 208) located in the CARD and U/I Terminal for respectively storing the outputs of said first and second encryption devices.
Claim 15
Dependent Claim
89 words
A personal identification system as set forth in claim 11 or 12 including a second comparison means (117) located in said CARD for comparing the outputs of said first and second encryption devices, counter means (125) in said CARD connected to the output of said second comparison means (117), means (104, 117) for incrementing the value stored in said counter whenever an unsuccessful compare is detected by said second comparison means and means (128) actuable upon said counter reaching a predetermined value to disable the circuitry in said CARD.
Claim 16
Dependent Claim
29 words
A personal identification system as set forth in claim 13 including means (117) for resetting said counter (125) to zero whenever a successful comparison occurs in said comparison means.
Claim 17
Dependent Claim
283 words
A personal identification system including the combination of a credit card-like device (CARD) to be presented by the holder of the CARD (Person) and a Utilization Terminal (U/I Terminal) to which the CARD is presented for the purpose of identifying said person, said combination including a personal portable transaction device (XATR) totally under the control of the person having a first data exchange interface for the exchange of data between said CARD and said XATR and a second data exchange interface for the transfer of data between said XATR and said U/I Terminal whereby selected data may be exchanged directly between said CARD and said U/I Terminal via said XATR, characterized by said XATR including a keyboard (101) at which the holder may enter a secret memorized key K A , the CARD including key-controlled block-cipher encryption means (114A, B) and a storage means (1045, 104+105) for permanently storing a secret key K T unique to said user, a random word generator (106) located in said card for supplying a i data input word for encryption by said encryption means, means (PI) actuable upon the presentation to the Terminal of the XATR containing the CARD and the entry of the memorized key K into the system to initiate an identification operation, means including said encryption means (114A) in the CARD for encrypt- i ing a random word supplied by the random word generator under the stored key K T and means (114B) for encrypting the same random word under the key K A entered by the holder at said keyboard, first comparison means (217) within said Terminal for comparing said two encryptions of said random word, and means for indicating a successful comparison.
Claim 18
Dependent Claim
283 words
A personal identification system including the combination of a credit card-like device (CARD) to be presented by the holder of the CARD (Person) and a Utilization Terminal (U/I Terminal) to which the CARD is presented for the purpose of identifying said person, said combination including a personal portable transaction device (XATR) totally under the control of the person having a first data exchange interface for the exchange of data between said CARD and said XATR and a second data exchange interface for the transfer of data between said XATR and said U/I Terminal whereby selected data may be exchanged directly between said CARD and said U/I Terminal via said XATR, characterized by said XATR including a keyboard (101) at which the holder may enter a secret memorized key K A , the CARD including key-controlled block-cipher encryption means (114A, B) and a storage means (1045, 104+105) for permanently storing a secret key K T unique to said user, a random word generator (106) located in said card for supplying a i data input word for encryption by said encryption means, means (PI) actuable upon the presentation to the Terminal of the XATR containing the CARD and the entry of the memorized key K into the system to initiate an identification operation, means including said encryption means (114A) in the CARD for encrypt- i ing a random word supplied by the random word generator under the stored key K T and means (114B) for encrypting the same random word under the key K A entered by the holder at said keyboard, first comparison means (217) within said Terminal for comparing said two encryptions of said random word, and means for indicating a successful comparison.
Claim 19
Dependent Claim
133 words
A personal identification system as set forth in claim 15 wherein said means for encrypting the random word under the key K T comprises a first key-controlled block-cipher encryption device (114A) and wherein the means for encrypting the random word under the keyboard entered key K A comprises a second key-controlled block-cipher cryptographic device (114B) identical to said first device wherein the data path between the storage means for said secret key K T to said first encryption device is totally within said CARD and is not accessible from the CARD's data interface, and means for connecting the keyboard (101) in the XATR directly to the second encryption device (114B) located within the CARD whereby the key K A is never accessible to the data interface between the XATR and the U/I Terminal.
Claim 20
Dependent Claim
79 words
A personal identification system as set forth in claim 15 or 16 including means (103) in said CARD for storing an index value M which when combined with a value K E subsequently entered at the keyboard produces a resultant value to be utilized as the key K A wherein said means for combining comprises a predetermined and fixed combinatorial circuit (111), and means (103, 101) for selectively entering a new index value into said system via said keyboard.
Claim 21
Dependent Claim
130 words
A personal identification system as set forth in claim 16 or 17 wherein said two keys K T and K A are divided into at least two segments wherein both segments are necessary for successful operation of the two encryption means, said system including means (104, 105) for storing said key K T in two parts within the CARD and means (120) for combining said two parts to supply the full key K T to said first encryption means, means (101, 122, 105) for entering a portion of the secret key K A at the Terminal and for combining said entered portion with a predetermined segment of said stored key K T and supplying the result of the combination as the full key K A to said second encryption means.
References Cited (Backward Citations)
No citation records indexed.
USPTO Annuity & Maintenance Windows
Maintenance schedule is calculated for granted US utility patents.