Patent EP0186981A2 successfully refreshed from Google Patents.
EP0186981A2
Expired / Lapsed
EP
⏱️ 0.0 years remaining
Security module for an electronic funds transfer system
Assignee: International Business Machines Corp
•
Filing: 1985-12-04
•
Granted: —
•
Expires: 2005-12-04
Abstract
Abstract A security module for use in an electronic funds transfer terminal is contained in a tamper-resistant housing. The module has a PIN pad and is designed to encrypt secret data, such as users personal identity numbers (PINs), so that other terminal processes cannot gain access to it The encryption functions are carried out in a security controller which includes its own microprocessor and encryption/decryption unit
Inventors
- 👤 Peter Rigby Smith
Bibliographic Details
Application Number
—
Jurisdiction
EP
Data Source
google_patents
Last Synchronized
2026-10-31 10:17
CPC Classifications
G; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1016; G06; G06Q; G06Q20/00; G06Q20/08; G06Q20/20; G06Q20/38; G06Q20/382; G06Q20/3829; G06Q20/40; G06Q20/401; G06Q20/4012
Claims Analysis
Total Claims: 9
Claim 1
Independent Claim
197 words
A security module, for authenticating messages having a plurality of different formats and cryptographic authenticators, contained in a tamper-resistant housing and including two data input devices, a display unit, at least one input/output port for connecting the module to an external processor and a security controller, characterised in that the security controller includes: at least one read only memory which stores a state table and a module master encryption key; a control logic unit including a microprocessor and a control store which stores a plurality of different control function routines invoked by different entries in the state table; means to generate different encryption keys dependent upon a particular control function and a derivative of the module master key; and means to perform encryption and decryption operations on messages transmitted to and from the module using keys transmitted to the module encrypted under one of a number of derivatives of the module master key; whereby data input to the module at the first of the two data input devices is used to determine the control function routine that the module is to perform and the encryption key used to encode data input at the second data input device.
Claim 2
Dependent Claim
197 words
A security module, for authenticating messages having a plurality of different formats and cryptographic authenticators, contained in a tamper-resistant housing and including two data input devices, a display unit, at least one input/output port for connecting the module to an external processor and a security controller, characterised in that the security controller includes: at least one read only memory which stores a state table and a module master encryption key; a control logic unit including a microprocessor and a control store which stores a plurality of different control function routines invoked by different entries in the state table; means to generate different encryption keys dependent upon a particular control function and a derivative of the module master key; and means to perform encryption and decryption operations on messages transmitted to and from the module using keys transmitted to the module encrypted under one of a number of derivatives of the module master key; whereby data input to the module at the first of the two data input devices is used to determine the control function routine that the module is to perform and the encryption key used to encode data input at the second data input device.
Claim 3
Dependent Claim
49 words
A security module as claimed in claim 1 further characterised in the the security controller includes at least three registers:a function register, a last function register and a state register and that the state table is addressed by using a combination of the current entries in the three registers.
Claim 4
Dependent Claim
63 words
A security module as claimed in claim 1 or claim 2 further characterised in that the security controller includes a buffer store and data input from the two data input devices are stored in the buffer store before being encoded and in which the first data input device is a magnetic stripe reader and the second data input device is a PIN pad.
Claim 5
Dependent Claim
44 words
A security module as claimed in any one of claims 1, 2 or 3 including means to detect when an invalid sequence of functions has been requested for the module to perform and to invoke an abort routine when an invalid sequence is detected.
Claim 6
Independent Claim
104 words
A method of using a security module in an electronic funds transfer system terminal to secure secret data from other terminal processes,and in which the security module has a data input device for receiving secret data comprising the steps of: storing in the module a set of master keys each encrypted under a respective function key; transmitting to the security module from a terminal process a function request and a function key; decoding the appropriate master key using the function key; and encoding the secret data using the decoded master key in the security module and transmitting the encoded data to the terminal processes.
Claim 7
Independent Claim
104 words
A method of using a security module in an electronic funds transfer system terminal to secure secret data from other terminal processes,and in which the security module has a data input device for receiving secret data comprising the steps of: storing in the module a set of master keys each encrypted under a respective function key; transmitting to the security module from a terminal process a function request and a function key; decoding the appropriate master key using the function key; and encoding the secret data using the decoded master key in the security module and transmitting the encoded data to the terminal processes.
Claim 8
Dependent Claim
39 words
A method as claimed in claim 5 in which a single master key is stored in the security module and derivative master keys are generated from the master key using predetermined function request data received from the terminal processes.
Claim 9
Dependent Claim
43 words
A method as claimed in claim 5 or claim 6 in which the terminal has at least a second data input device for receiving data from a user and the operable terminal process is dependant data input at the second data input device.
References Cited (Backward Citations)
No citation records indexed.
USPTO Annuity & Maintenance Windows
Maintenance schedule is calculated for granted US utility patents.