EP0112944A1
Expired / Lapsed
EP
⏱️ 0.0 years remaining
Testing the validity of identification codes
Assignee: International Business Machines Corp
•
Filing: 1982-12-30
•
Granted: —
•
Expires: 2002-12-30
Abstract
Abstract A method and apparatus for testing the validity of personal identification numbers (PIN) entered at a transaction terminal of an electronic funds transfer network in which the PIN is not transmitted through the network. The PIN and the personal account number (PAN) are used to derive an authorisation parameter (DAP). A unique message is sent with the PAN to the host processor where the PAN is used to identify a valid authorisation parameter (VAP). The VAP is used to encode the unique message and the result (a message authentication code MAC) transmitted back to the transaction terminal. The terminal generates a parallel message authentication code by using the DAP to encode the unique message. The two MAC's are compared and the result of the comparison used to determine the validity of the PIN.
Inventors
- 👤 Christopher Holloway
Bibliographic Details
Application Number
—
Jurisdiction
EP
Data Source
google_patents
Last Synchronized
2026-10-26 11:18
CPC Classifications
G; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1016
Claims Analysis
Total Claims: 13
Claim 1
Independent Claim
194 words
A method of testing the validity of an identification code at a location connected over a communication network to a data processing centre at which valid identification codes are stored, comprising the steps of: a) receiving at the location the identification code and an index number, b) deriving from the identification code and the index number a derived authorisation parameter, c) generating a variable number unique to each particular validation test, d) storing the variable number in a location store and transmitting the variable number together with the index number to the data processing centre, e) at the data processing centre using the index number to identify or derive a valid authorisation parameter f) encrypting the variable number using the valid authorisation parameter as an encryption key and using the result as a valid message authentication code, g) at the location encrypting the variable number using the derived authorisation parameter as an encryption key and using the result as a derived message authentication code, f) comparing the valid message authentication code with the derived message authentication code and using the result of the comparison as a determination of the validity of the identification code.
Claim 2
Independent Claim
194 words
A method of testing the validity of an identification code at a location connected over a communication network to a data processing centre at which valid identification codes are stored, comprising the steps of: a) receiving at the location the identification code and an index number, b) deriving from the identification code and the index number a derived authorisation parameter, c) generating a variable number unique to each particular validation test, d) storing the variable number in a location store and transmitting the variable number together with the index number to the data processing centre, e) at the data processing centre using the index number to identify or derive a valid authorisation parameter f) encrypting the variable number using the valid authorisation parameter as an encryption key and using the result as a valid message authentication code, g) at the location encrypting the variable number using the derived authorisation parameter as an encryption key and using the result as a derived message authentication code, f) comparing the valid message authentication code with the derived message authentication code and using the result of the comparison as a determination of the validity of the identification code.
Claim 3
Dependent Claim
22 words
A method as claimed in claim 1 in which the variable number is a message containing information unique to each validation test.
Claim 4
Dependent Claim
16 words
A method as claimed in claim 2 in which the variable number includes a random number.
Claim 5
Independent Claim
23 words
A method as claimed in any one of claims 1, 2 or 3 in which step (f) is carried out at the location.
Claim 6
Independent Claim
37 words
A method as claimed in any one of claims 1, 2, 3 or 4 in which the variable number includes message information generated by the data processing centre logically combined with message information generated by the location.
Claim 7
Dependent Claim
22 words
A method as claimed in claim 5 in which the messages generated by the location and the data processing centre are concatenated.
Claim 8
Independent Claim
42 words
A method of testing as claimed in any one of the preceding claims in which the location is an electronic funds transfer system transaction terminal, the identification code is a personal identification number and the index number is a personal account number.
Claim 9
Independent Claim
32 words
A method as claimed in any one of the preceding claims including the further step of encrypting under a network master key messages sent between the location and the data processing centre.
Claim 10
Dependent Claim
165 words
A transaction terminal for connection to a data communication network in which identification numbers entered at a remote location connected to a data processing centre are tested for validity, including first means to receive and store related identification codes and index numbers, first location processing means operable to derive from the identification code and index number a derived authorisation parameter, second means operable to generate a variable number unique to each particular validation test, third means operable to transmit the index number and the variable number to the data processing centre, and to receive from the data processing centre a message authentication code, second processing means including an encryption device operable to derive a derived message authentication code by using the derived authorisation parameter as an encryption key to encode the variable number and comparing means operable to compare the received message authentication code with the derived message authentication code and using the result of the comparison to determine the validity of the identification number.
Claim 11
Dependent Claim
165 words
A transaction terminal for connection to a data communication network in which identification numbers entered at a remote location connected to a data processing centre are tested for validity, including first means to receive and store related identification codes and index numbers, first location processing means operable to derive from the identification code and index number a derived authorisation parameter, second means operable to generate a variable number unique to each particular validation test, third means operable to transmit the index number and the variable number to the data processing centre, and to receive from the data processing centre a message authentication code, second processing means including an encryption device operable to derive a derived message authentication code by using the derived authorisation parameter as an encryption key to encode the variable number and comparing means operable to compare the received message authentication code with the derived message authentication code and using the result of the comparison to determine the validity of the identification number.
Claim 12
Dependent Claim
82 words
A data communication network including a plurality of transaction terminals as claimed in claim 9 and including at each data processing centre means operable to generate a valid authorisation parameter in response to a received index number from an originating terminal, means operable to generate a valid message authentication code by encrypting the variable number using the valid authorisation parameter as an encryption key and producing a message authentication code and means to transmit the message authentication code to the originating terminal.
Claim 13
Dependent Claim
26 words
A data communication network as claimed in claim 10 operable to perform a method of testing as claimed in any one of claims 1 to 8.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
Maintenance schedule is calculated for granted US utility patents.