EP0033833A2
Expired / Lapsed
EP
⏱️ 0.0 years remaining
Transaction execution system, method of operating such a system and terminal for use in such a system
Assignee: International Business Machines Corp
•
Filing: 1981-01-08
•
Granted: —
•
Expires: 2001-01-08
Abstract
Abstract A transaction execution system including at least one transaction terminal (A, B) in communication with a host data processing system (A, B). A transaction at the terminal (A) is authorised based, at least in part, upon correspondence of personal identification data entered by the terminal operator at a keyboard (32) with account identification data read from an account card by card reader (30). When the personal identification data is not derived from the account identification data, the correspondence check is made at the host data processor system (A, B) by comparison of encrypted identification data with validation data. The host may, upon failure of correspondence, communicate a conditional authorization message to the terminal, including the validation data, which enables the terminal operator to again attempt to enter the correct personal identification data. The check is performed at the terminal between the communicated validation data and the newly entered personal data. This saves a reference back to the host. The host data base stores as validation data encrypted identification data, and only double encrypted identification data appears on the communication lines.
Inventors
- 👤 Donald Joseph Chesarek
Bibliographic Details
Application Number
—
Jurisdiction
EP
Data Source
google_patents
Last Synchronized
2026-10-26 01:50
CPC Classifications
G; G06; G06Q; G06Q40/00; G06Q40/02; G06Q20/00; G06Q20/38; G06Q20/40; G06Q20/401; G06Q20/4012; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1016
Claims Analysis
Total Claims: 17
Claim 1
Independent Claim
181 words
A transaction execution system comprising a host data processor system and at least one consumer operated terminal in communication with the host system and at which an intended user of the system enters a transaction request, said request including two messages, the first message including information derived from data machine read at the terminal from a user entered card and the second being derived from information entered manually at the terminal by the user, and said request being communicated to the host system where a series of tests are performed in response to the received request, said series including a test for predetermined correspondence of one of the messages with test data stored in the host system and accessed in accordance with an address dependant on the other message, characterised in that if each of the series of tests is satisfied except the aforesaid correspondence test, conditional authorisation of the transaction request is communicated to the terminal together with the accessed test data so that a repeat correspondence test can be conducted at the terminal without reference to the host system.
Claim 2
Dependent Claim
181 words
A transaction execution system comprising a host data processor system and at least one consumer operated terminal in communication with the host system and at which an intended user of the system enters a transaction request, said request including two messages, the first message including information derived from data machine read at the terminal from a user entered card and the second being derived from information entered manually at the terminal by the user, and said request being communicated to the host system where a series of tests are performed in response to the received request, said series including a test for predetermined correspondence of one of the messages with test data stored in the host system and accessed in accordance with an address dependant on the other message, characterised in that if each of the series of tests is satisfied except the aforesaid correspondence test, conditional authorisation of the transaction request is communicated to the terminal together with the accessed test data so that a repeat correspondence test can be conducted at the terminal without reference to the host system.
Claim 3
Dependent Claim
54 words
A system as claimed in claim 1, further characterised by means at the terminal to obtain a random or pseudo random number unique to each transaction request, to concatenate the unique number with the corresponding information entered by the user at the terminal, and to encode the concatenation prior to transmission to the host.
Claim 4
Dependent Claim
64 words
A system as claimed in claim 2, further characterised in that the test data stored at the host system comprises the information enterable at the terminal by the permitted users of the system encoded according to a first algorithm and further characterised by means at the terminal for encoding user entered information according to the same algorithm, prior to concatenation with the unique number.
Claim 5
Dependent Claim
62 words
A system as claimed in claim 2 or 3, further characterised by means at the host system to generate or derive the same unique number as that comprised in a received transaction request, to concatenate the same unique number with the test data accessed in accordance with the received transaction request, and to encode the concatenation prior to transmission to the terminal.
Claim 6
Independent Claim
46 words
A system as claimed in any one of claims 1 to 4, further characterised in that means at terminal enter the accessed test data in storage prior to the repeat correspondence test and, after completion of the correspondence test or tests, erase the data from storage.
Claim 7
Independent Claim
114 words
A method of operating a terminal in a transaction execution system in response to a transaction approval message received at the terminal from a host system; the terminal including means for receiving identification data from a terminal operator, said method being characterised by comprising the steps of: determining that a message received from said host system establishes a conditional transaction approval state, said message including validation data and being conditional on satisfactory identification of the user; responsive to a conditional transaction approval state, receiving identification data from said terminal operator; comparing the validation data and the identification data for a predetermined correspondence, and generating a transaction approval state if there is the predetermined correspondence.
Claim 8
Independent Claim
114 words
A method of operating a terminal in a transaction execution system in response to a transaction approval message received at the terminal from a host system; the terminal including means for receiving identification data from a terminal operator, said method being characterised by comprising the steps of: determining that a message received from said host system establishes a conditional transaction approval state, said message including validation data and being conditional on satisfactory identification of the user; responsive to a conditional transaction approval state, receiving identification data from said terminal operator; comparing the validation data and the identification data for a predetermined correspondence, and generating a transaction approval state if there is the predetermined correspondence.
Claim 9
Dependent Claim
58 words
A method as claimed in claim 6, further characterised in that the validation data is encoded according to first and second enciphering procedures and in that said comparing step further comprises the step of deciphering said validation data in accordance with said first and second enciphering procedures to generate deciphered validation data for comparison with said identification data.
Claim 10
Dependent Claim
85 words
A method as claimed in claim 6, further characterised in that the validation data is encoded according to first and second enciphering procedures and in that said comparing step further comprises the step of deciphering said validation data in accordance with said first enciphering procedure to generate deciphered validation data; enciphering said identification data in accordance with said second enciphering procedure to generate enciphered identification data; and comparing said deciphered validation data and said enciphered identification data for correspondence to generate said transaction approval state.
Claim 11
Independent Claim
168 words
A method for operating a computing system selectively to authorize, reject, and conditionally authorize transaction requests, the computing system including a data base of validation data elements associated with data base access data, enciphering means for operating on data according to an enciphering procedure, and communication means for communicating data with respect to a transaction terminal, the method comprising the steps of: receiving on said communication means a transaction request message including data base access data and enciphered identification data; retrieving from said data base the validation data element corresponding to said data base access data; deciphering said identification data in accordance with said enciphering procedure to generate deciphered identification data; comparing said deciphered identification data and said validation data element to generate a conditional approval state upon failure of correspondence; enciphering said validation data element in accordance with said enciphering procedure to generate enciphered validation data; responsive to said conditional approval state, communicating onto said communication means a conditional transaction approval message including said enciphered validation data.
Claim 12
Independent Claim
168 words
A method for operating a computing system selectively to authorize, reject, and conditionally authorize transaction requests, the computing system including a data base of validation data elements associated with data base access data, enciphering means for operating on data according to an enciphering procedure, and communication means for communicating data with respect to a transaction terminal, the method comprising the steps of: receiving on said communication means a transaction request message including data base access data and enciphered identification data; retrieving from said data base the validation data element corresponding to said data base access data; deciphering said identification data in accordance with said enciphering procedure to generate deciphered identification data; comparing said deciphered identification data and said validation data element to generate a conditional approval state upon failure of correspondence; enciphering said validation data element in accordance with said enciphering procedure to generate enciphered validation data; responsive to said conditional approval state, communicating onto said communication means a conditional transaction approval message including said enciphered validation data.
Claim 13
Dependent Claim
138 words
A machine implemented method for operating a microprogrammed transaction terminal in communication with a host processor to verify the relationship of card data to identification data in the terminal when the identification data is not derived from card data on the card, characterised by the steps of: transmitting to said host processor a transaction request message, including the card data and a variable number; accessing by said card data in said host processor a file of identification data check fields; concatenating said variable number and the identification data check field accessed by said card data, and encrypting the result; transmitting to said terminal a transaction reply message, including the encrypted result; at the terminal, decrypting said encrypted result; and comparing the identification data check field decrypted from said reply message with identification data entered at the terminal keyboard.
Claim 14
Dependent Claim
138 words
A machine implemented method for operating a microprogrammed transaction terminal in communication with a host processor to verify the relationship of card data to identification data in the terminal when the identification data is not derived from card data on the card, characterised by the steps of: transmitting to said host processor a transaction request message, including the card data and a variable number; accessing by said card data in said host processor a file of identification data check fields; concatenating said variable number and the identification data check field accessed by said card data, and encrypting the result; transmitting to said terminal a transaction reply message, including the encrypted result; at the terminal, decrypting said encrypted result; and comparing the identification data check field decrypted from said reply message with identification data entered at the terminal keyboard.
Claim 15
Dependent Claim
70 words
A method as claimed in claim 10, further characterised by the additional steps of: concatenating said variable number with an encrypted identification data and encrypting the concatenated number before transmitting the variable number to said host, at said host, decrypting the encrypted concatenated number to derive the encrypted identification data, and comparing said encrypted identification data with the identification data check field to validate the identification data at the host.
Claim 16
Independent Claim
170 words
A method for operating a transaction terminal to verify the authenticity of a personal identification number, the terminal including means operable by a terminal operator for entering said personal identification number and a data base access number, and communication means for sending data to and receiving data from a host system, the method comprising encrypting a first personal identification number entered into said terminal according to first and second enciphering processes to generate a twice encrypted identification number; preparing a transaction request message, including a data base access number and said twice encrypted identification number; and transmitting said transaction request message onto said communication means; and being characterised by receiving from said communication means a conditional approval transaction reply message, including encrypted validation data; decrypting said validation data according to said first and second enciphering processes to generate deciphered validation data; and comparing said deciphered validation data with a personal identification number re-entered into said terminal to generate a transaction approval signal if a match is established by said comparison.
Claim 17
Independent Claim
170 words
A method for operating a transaction terminal to verify the authenticity of a personal identification number, the terminal including means operable by a terminal operator for entering said personal identification number and a data base access number, and communication means for sending data to and receiving data from a host system, the method comprising encrypting a first personal identification number entered into said terminal according to first and second enciphering processes to generate a twice encrypted identification number; preparing a transaction request message, including a data base access number and said twice encrypted identification number; and transmitting said transaction request message onto said communication means; and being characterised by receiving from said communication means a conditional approval transaction reply message, including encrypted validation data; decrypting said validation data according to said first and second enciphering processes to generate deciphered validation data; and comparing said deciphered validation data with a personal identification number re-entered into said terminal to generate a transaction approval signal if a match is established by said comparison.
References Cited (Backward Citations)
No citation records indexed.
USPTO Annuity & Maintenance Windows
Maintenance schedule is calculated for granted US utility patents.