Patent EP0055986B1 successfully refreshed from Google Patents.
EP0055986B1
Expired / Lapsed
EP
⏱️ 0.0 years remaining
Security system and apparatus for the three-way communication of confidential data
Assignee: Bull Transac
•
Filing: 1982-01-05
•
Granted: 1986-05-07
•
Expires: 2002-01-05
Abstract
Abstract PCT No. PCT/FR81/00173 Sec. 371 Date Aug. 12, 1982 Sec. 102(e) Date Aug. 12, 1982 PCT Filed Dec. 30, 1981 PCT Pub. No. WO82/02446 PCT Pub. Date Jul. 22, 1982.The invention relates to a method and devices allowing exchange of data between authorized bearers of crediting means (1) to be identified, approved and possibly coded and to remote centralized processing machines (3) via specific terminal units (2). The data produced by a bearer of a crediting means (1) after connection of said means (1) to a terminal unit (2) and sending of the identity of said means (1) are approved by a logic generation unit (15) of the means (1) from an individualization code and from transaction data. The invention applies to the exchange of data in an insecure environment and more particularly to bank credit card systems.
Inventors
- 👤 Dominique Decavele
- 👤 Jean-Pierre Fournier
Bibliographic Details
Application Number
—
Jurisdiction
EP
Data Source
google_patents
Last Synchronized
2026-11-08 01:08
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/32; H04L9/321; G; G06; G06Q; G06Q20/00; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/38; G06Q20/40; G06Q20/409; G06Q20/4097; G06Q20/40975; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; G07F7/1016; H04L9/3226; H04L2209/00; H04L2209/56
Claims Analysis
Total Claims: 9
Claim 1
Independent Claim
296 words
A security method for the three-way communication of confidential digital data in a system which allows the exchange of informations between bearers of crediting means (1) and centralized processing machines (3) via non-supervised specific terminals (2), in which method any communication between a bearer and a processing machine (3) entails communication of the identity of the crediting means (1) used by the bearer to the centralized processing machine by connecting said crediting means to in specific terminal (2), and the communication of a specific confidential code of the bearer to the system by a manual insertion of this code by the bearer at the level of the crediting means - specific terminal used, the method including the following steps in case a centralized processing machine (3) is oermanently connected to the specific terminal J sed (2) : - in the crediting means (1), an individualisation key is determined which is obtained by combining the confidential code inserted into said crediting means after connection of the latter in the specific terminal used, with a basic key stored in a permanent manner in said crediting means ; - in the crediting means, a key digit for identifying the bearer and for approving a transaction is determined by the combination of the transaction data inserted by the bearer with said individualisation key determined in said crediting means at the reception of the confidential code of the bearer; - the key digit, the transaction data and the identity of the crediting means (1) are communicated to the centralized processing machine (3) via the specific terminal used (2) in the same way as they are delivered by the crediting means (1) and - data which are inherent to the specific terminal used (2) are communicated to the centralized processing machine (3).
Claim 2
Dependent Claim
296 words
A security method for the three-way communication of confidential digital data in a system which allows the exchange of informations between bearers of crediting means (1) and centralized processing machines (3) via non-supervised specific terminals (2), in which method any communication between a bearer and a processing machine (3) entails communication of the identity of the crediting means (1) used by the bearer to the centralized processing machine by connecting said crediting means to in specific terminal (2), and the communication of a specific confidential code of the bearer to the system by a manual insertion of this code by the bearer at the level of the crediting means - specific terminal used, the method including the following steps in case a centralized processing machine (3) is oermanently connected to the specific terminal J sed (2) : - in the crediting means (1), an individualisation key is determined which is obtained by combining the confidential code inserted into said crediting means after connection of the latter in the specific terminal used, with a basic key stored in a permanent manner in said crediting means ; - in the crediting means, a key digit for identifying the bearer and for approving a transaction is determined by the combination of the transaction data inserted by the bearer with said individualisation key determined in said crediting means at the reception of the confidential code of the bearer; - the key digit, the transaction data and the identity of the crediting means (1) are communicated to the centralized processing machine (3) via the specific terminal used (2) in the same way as they are delivered by the crediting means (1) and - data which are inherent to the specific terminal used (2) are communicated to the centralized processing machine (3).
Claim 3
Dependent Claim
289 words
A security method for the three-way communication of confidential data in a system which allows the exchange of informations between bearers of crediting means (1) and centralized processing machines (3) via non-supervised specific terminals (2), in which method any communication between a bearer and a processing machine (3) entails communication of the identity of the crediting means (1) used by the bearer to the centralized processing machine by connecting said crediting means to in specific terminal (2), and the communication of a specific confidential code of the bearer to the system by a manual insertion of this code by the bearer at the level of the crediting means - specific terminal used, the method including the following steps in case a centralized processing machine (3) is not permanently connected to the specific terminal used (2) : - in said crediting means, the confidential code inserted into said crediting means by the bearer after connection of said crediting means (1) to the specific terminal used (2) is compared to a confidential code which is stored in the crediting means; - in the crediting means (1), a key digit for identifying the bearer and for approving a transaction is determined by the combination of the transaction data inserted by the bearer with an individualisation key stored in a permanent manner in the crediting means, if the introduced confidential code corresponds to the stored confidential code ; - in the specific terminal used (2), the key digit, the transaction data and the identity of the crediting means (1) such as they are delivered by the crediting means (1) are registered in view of their later communication to the centralized processing machine (3) together with data inherent to the specific terminal used (2).
Claim 4
Dependent Claim
289 words
A security method for the three-way communication of confidential data in a system which allows the exchange of informations between bearers of crediting means (1) and centralized processing machines (3) via non-supervised specific terminals (2), in which method any communication between a bearer and a processing machine (3) entails communication of the identity of the crediting means (1) used by the bearer to the centralized processing machine by connecting said crediting means to in specific terminal (2), and the communication of a specific confidential code of the bearer to the system by a manual insertion of this code by the bearer at the level of the crediting means - specific terminal used, the method including the following steps in case a centralized processing machine (3) is not permanently connected to the specific terminal used (2) : - in said crediting means, the confidential code inserted into said crediting means by the bearer after connection of said crediting means (1) to the specific terminal used (2) is compared to a confidential code which is stored in the crediting means; - in the crediting means (1), a key digit for identifying the bearer and for approving a transaction is determined by the combination of the transaction data inserted by the bearer with an individualisation key stored in a permanent manner in the crediting means, if the introduced confidential code corresponds to the stored confidential code ; - in the specific terminal used (2), the key digit, the transaction data and the identity of the crediting means (1) such as they are delivered by the crediting means (1) are registered in view of their later communication to the centralized processing machine (3) together with data inherent to the specific terminal used (2).
Claim 5
Dependent Claim
156 words
A method according to claim 1, including the following supplementary steps : - in the centralized processing machine (3), to which the specific terminal used (2) is connected, an enciphering number is created at the reception, by said centralized processing machine (3), of said identity of the crediting means (1) con- neted to said specific terminal used (2) ; - said enciphering number is transmitted from said centralized processing machine to said crediting means (1) via said specific terminal used (2) ; - an enciphering key is created in the crediting means (1) by the combination of said enciphering number with said individualisation key produced in the crediting means (1) ; - the key digit and the transaction data are enciphered in said specific terminal (2) by means of said enciphering key delivered by said crediting means (1) for the current transaction in order to transmit the enciphered data to said concerned centralized processing machine (3).
Claim 6
Dependent Claim
186 words
A crediting means (1) for putting the method according to claim 1 into practice, characterized in that it comprises : - a read-only memory for storing the identity data (10), this memory being accessible for reading purposes from a specific terminal (2) after the branching of the latter ; - a read-only memory for storing the key basis (17) which is not accessible from the outside of the crediting means (1) ; - a logic unit for creating an individualisation key (14) connected to the output of a keyboard (11) and of the memory for storing the key basis (17) ; - a logic unit for creating a key digit (15) combining the individualisation key with the transaction data inserted through the key board (11), this logic unit (15) being connected to this aim through its inputs to the outputs of the keyboard (11) and of the logic unit for creating the individualisation key (14), and by its output to at least one outer connection terminal (B15) for the terminal (2) with a view to transmit the created key digit to a centralized processing machine (3).
Claim 7
Dependent Claim
88 words
A crediting means (1) according to claim 4, characterized in that the logic unit for creating the key digit (15) further includes an enciphering input (B16) which is accessible from the outside from a centralized processing machine (3) via a specific terminal (2) to which the crediting means (1) is connected, in such a way that an enciphering key destined for this specific terminal (2) is created by the combination of the individualisation key of the crediting means with an enciphering number received through the enciphering input (B16).
Claim 8
Dependent Claim
205 words
A crediting means (1) for putting the method according to claim 2 into practice, conventionally comprising memories for storing the identity of the means, for storing the confidential code and for storing the transactions (10, 18, 19), as well as logic units for the treatment of the transactions and for the comparison (15B, 14A) of the stored confidential code with the code inserted together with each transaction, said means being characterized in that it further comprises : - a read-only memory for storing the individualisation key (17) which is inaccessible from outside the crediting means ; - a logic unit for creating a key digit (15A) by combining the individualisation key of the means (1) contained in said individualisation key memory (17) with the data inserted through a keyboard (11) and the number of the transaction, this logic unit (15A) being connected to this aim through its inputs to the output of the logic unit for treating the transactions (15B) and of the individualisation key memory (17) and through its output to at least one outer connection terminal for the terminal (2) in view of the transmission of this created key digit to the specific terminal (2) to which the crediting means (1) is connected.
Claim 9
Dependent Claim
33 words
A crediting means according to claim 6, in which the logic unit for creating the key digit (15A) and the logic unit for treating the transactions (15B) are one and the same unit.
References Cited (Backward Citations)
EP0030381A2
Cited
USPTO Annuity & Maintenance Windows
Maintenance schedule is calculated for granted US utility patents.