EP0385400A2
Expired / Lapsed
EP
⏱️ 0.0 years remaining
Multilevel security apparatus and method with personal key
Assignee: Tandem Computers Inc
•
Filing: 1990-02-27
•
Granted: —
•
Expires: 2010-02-27
Abstract
Abstract A method and apparatus concerning electronic financial transaction processing systems used by customers of certain credit or electronic banking card-issuing institutions are disclosed. The present invention involves two levels of secure interaction between the customer and the card-issuing institution. The first level of interaction involves the enrollment of a customer in the institution's electronic financial transaction processing system. The customer either selects or is issued a personal identification number and a card encoded with a personal key. The personal key and personal identification number are used to generate a PIN transmission number and personal verification number, which is stored in bank records. The second level of interaction involves the authorization of a customer's use of the electronic financial transaction processing system for executing an electronic transaction. The customer enters his personal identification number and the system reads his encoded card, both of which are used to generate a candidate PIN transmission number. The candidate PIN transmission number is transmitted to a remote processing center by computer network. The system, at the remote processing center, generates a candidate personal verification number using the transmitted candidate PIN transmission number and compares the candidate PIN transmission number for parity with a PIN transmission number stored in the institution's records.
Inventors
- 👤 Martin M. Atalla
- 👤 Webster D. Hopkins
Bibliographic Details
Application Number
—
Jurisdiction
EP
Data Source
google_patents
Last Synchronized
2026-11-08 20:58
CPC Classifications
G; G06; G06Q; G06Q20/00; G06Q20/38; G06Q20/40; G06Q20/401; G06Q20/4012; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1016; H; H04; H04L; H04L9/00; H04L9/32; H04L9/3226; H04L2209/00; H04L2209/56
Claims Analysis
Total Claims: 15
Claim 1
Independent Claim
128 words
A method for encoding a card assigned by an entity to an individual for use in secured transactions, the method comprising the steps of: generating a personal key code assigned to the individual; encoding the card with a detectable code representative of said personal key code; combining in accordance with a first logical encoding combination a secret code received from the individual with the personal key code to produce a personal identification transmission code; combining in accordance with a second logical encoding combination the personal identification transmission code and an identifying code assigned to the individual by the entity with an institutional key code associated with the entity to produce a personal identification verification code; and, storing the personal identification verification code in records maintained by the entity.
Claim 2
Independent Claim
128 words
A method for encoding a card assigned by an entity to an individual for use in secured transactions, the method comprising the steps of: generating a personal key code assigned to the individual; encoding the card with a detectable code representative of said personal key code; combining in accordance with a first logical encoding combination a secret code received from the individual with the personal key code to produce a personal identification transmission code; combining in accordance with a second logical encoding combination the personal identification transmission code and an identifying code assigned to the individual by the entity with an institutional key code associated with the entity to produce a personal identification verification code; and, storing the personal identification verification code in records maintained by the entity.
Claim 3
Independent Claim
221 words
A method operable to verify the authority of an individual to complete a transaction in association with a card which is assigned by an entity to the individual, the card having recorded thereupon a detectable code representative of a personal key code and an identifying code assigned to the individual, the entity having stored in it records a personal verification corresponding to the individual, the method comprising the steps of: sensing the personal key code and the identifying code recorded on the card; generating a personal identification transmission code at the time of transaction by combining in accordance with a first logical encoding combination a secret code received from the individual and the identifying code with the personal key code; transmitting the personal identification transmission code to the entity; generating a personal identification verification code at the time of transaction by combining in accordance with a second logical encoding combination the personal identification transmission code and the identifying code with an institutional key code associated with the entity; comparing the personal identification verification code generated at the time of transaction with the stored personal identification verification code corresponding to the individual; and transmitting a transaction authorization signal to the individual if the stored personal identification verification code identically compares with the personal identification verification code generated at the time of transaction.
Claim 4
Independent Claim
221 words
A method operable to verify the authority of an individual to complete a transaction in association with a card which is assigned by an entity to the individual, the card having recorded thereupon a detectable code representative of a personal key code and an identifying code assigned to the individual, the entity having stored in it records a personal verification corresponding to the individual, the method comprising the steps of: sensing the personal key code and the identifying code recorded on the card; generating a personal identification transmission code at the time of transaction by combining in accordance with a first logical encoding combination a secret code received from the individual and the identifying code with the personal key code; transmitting the personal identification transmission code to the entity; generating a personal identification verification code at the time of transaction by combining in accordance with a second logical encoding combination the personal identification transmission code and the identifying code with an institutional key code associated with the entity; comparing the personal identification verification code generated at the time of transaction with the stored personal identification verification code corresponding to the individual; and transmitting a transaction authorization signal to the individual if the stored personal identification verification code identically compares with the personal identification verification code generated at the time of transaction.
Claim 5
Independent Claim
163 words
A method for encoding a card assigned by an entity to an individual for use in secured transactions, the method comprising the steps of: generating a personal key code assigned to the individual; combining in accordance with a first logical encoding combination a secret code received from the individual and an identifying code assigned to the individual by the entity with the personal key code to produce an encoded personal key code; encoding the card with a detectable code that is representative of said encoded personal key code; combining in accordance with a second logical encoding combination the secret code received from the individual with the personal key code to produce a personal identification transmission code; combining in accordance with a third logical encoding combination the personal identification transmission code and the identifying code with an institutional key code associated with the entity to produce a personal identification verification code; and, storing the personal identification verification code in records maintained by the entity.
Claim 6
Independent Claim
163 words
A method for encoding a card assigned by an entity to an individual for use in secured transactions, the method comprising the steps of: generating a personal key code assigned to the individual; combining in accordance with a first logical encoding combination a secret code received from the individual and an identifying code assigned to the individual by the entity with the personal key code to produce an encoded personal key code; encoding the card with a detectable code that is representative of said encoded personal key code; combining in accordance with a second logical encoding combination the secret code received from the individual with the personal key code to produce a personal identification transmission code; combining in accordance with a third logical encoding combination the personal identification transmission code and the identifying code with an institutional key code associated with the entity to produce a personal identification verification code; and, storing the personal identification verification code in records maintained by the entity.
Claim 7
Independent Claim
278 words
A method operable to verify the authority of an individual to complete a transaction in association with a card which is assigned by an entity to the individual, the card having recorded thereupon a detectable code representative of an encoded personal key code and an identifying code assigned to the individual, the entity having stored in its records a personal verification code corresponding to the individual, the method comprising the steps of: sensing the encoded personal key code and an the identifying code recorded on the card; reproducing the personal key code at the time of transaction by combining in accordance with a first logical decoding combination the encoded personal key code sensed from the card with a secret code received from the individual at the time of transaction; generating a personal identification transmission code at the time of transaction by combining in accordance with a first logical encoding combination the secret code received from the individual and the identifying code with the personal key; transmitting the personal identification transmission code to the entity; generating a personal identification verification code at a time of transaction by combining in accordance with a second logical encoding combination the personal identification transmission code and the identifying code with an institutional key code the entity; and, comparing the personal identification verification code generated at the time of transaction with the stored personal identification verification code; and transmitting a transaction authorization signal to the individual if the stored personal identification verification code identically compares with the personal identification verification code generated at the time of transaction. corresponding to the individual stored by the entity for parity as a condition for completing the transaction.
Claim 8
Independent Claim
278 words
A method operable to verify the authority of an individual to complete a transaction in association with a card which is assigned by an entity to the individual, the card having recorded thereupon a detectable code representative of an encoded personal key code and an identifying code assigned to the individual, the entity having stored in its records a personal verification code corresponding to the individual, the method comprising the steps of: sensing the encoded personal key code and an the identifying code recorded on the card; reproducing the personal key code at the time of transaction by combining in accordance with a first logical decoding combination the encoded personal key code sensed from the card with a secret code received from the individual at the time of transaction; generating a personal identification transmission code at the time of transaction by combining in accordance with a first logical encoding combination the secret code received from the individual and the identifying code with the personal key; transmitting the personal identification transmission code to the entity; generating a personal identification verification code at a time of transaction by combining in accordance with a second logical encoding combination the personal identification transmission code and the identifying code with an institutional key code the entity; and, comparing the personal identification verification code generated at the time of transaction with the stored personal identification verification code; and transmitting a transaction authorization signal to the individual if the stored personal identification verification code identically compares with the personal identification verification code generated at the time of transaction. corresponding to the individual stored by the entity for parity as a condition for completing the transaction.
Claim 9
Dependent Claim
157 words
Apparatus for encoding each of a plurality of cards assigned to individuals by an entity for use in secure transactions, the apparatus characterized by means (6) for generating a personal key code(K p ) assigned to an individual; means (2) for receiving from an individual a secret code (PIN) known only to that individual; transducer means (12) for recording a detectable code representative of said personal key code upon the card; means (16) for producing a personal identification transmission code as a logical combination of the secret code (PIN) received from the individual with the personal key code (K p ); means (22) for producing a personal identification verification code as a logical combination of an institutional key code associated with the entity with the personal identification transmission code and a identifying code assigned to the individual by the entity; and, storage means (24) for storing the personal identification verification code in records maintained by the entity.
Claim 10
Dependent Claim
157 words
Apparatus for encoding each of a plurality of cards assigned to individuals by an entity for use in secure transactions, the apparatus characterized by means (6) for generating a personal key code(K p ) assigned to an individual; means (2) for receiving from an individual a secret code (PIN) known only to that individual; transducer means (12) for recording a detectable code representative of said personal key code upon the card; means (16) for producing a personal identification transmission code as a logical combination of the secret code (PIN) received from the individual with the personal key code (K p ); means (22) for producing a personal identification verification code as a logical combination of an institutional key code associated with the entity with the personal identification transmission code and a identifying code assigned to the individual by the entity; and, storage means (24) for storing the personal identification verification code in records maintained by the entity.
Claim 11
Independent Claim
228 words
An apparatus for verifying the authority of an individual to complete a transaction in association with a card, the card having a detectable code representative of a personal key code and an identifying code assigned to the individual recorded thereupon, the card being assigned by an entity to the individual, the entity having stored in its records a personal verifictaion code corresponding to the individual, characterized by means (28) for receiving from an individual a secret code known only to that individual; transducer means (26) for sensing the personal key code and the identifying code recorded on the card; means (30 to 35) for generating a personal identification transmission code as a logical combination of the personal key code sensed from the card with the secret code received from the individual and the identifying code; means (36) for transmitting the personal identification transmission code to the entity; means (68) for generating a personal identification verification code as a logical combination of an institutional key code associated with the entity and the personal identification transmission code and the identifying code; comparison means (74) for comparing the personal identification verification code generated at the time of transaction with a personal identification verification code associated with the individual and stored in records of the entity, said comparison means including means (76) for outputting a signal indicating that these tow codes match.
Claim 12
Independent Claim
228 words
An apparatus for verifying the authority of an individual to complete a transaction in association with a card, the card having a detectable code representative of a personal key code and an identifying code assigned to the individual recorded thereupon, the card being assigned by an entity to the individual, the entity having stored in its records a personal verifictaion code corresponding to the individual, characterized by means (28) for receiving from an individual a secret code known only to that individual; transducer means (26) for sensing the personal key code and the identifying code recorded on the card; means (30 to 35) for generating a personal identification transmission code as a logical combination of the personal key code sensed from the card with the secret code received from the individual and the identifying code; means (36) for transmitting the personal identification transmission code to the entity; means (68) for generating a personal identification verification code as a logical combination of an institutional key code associated with the entity and the personal identification transmission code and the identifying code; comparison means (74) for comparing the personal identification verification code generated at the time of transaction with a personal identification verification code associated with the individual and stored in records of the entity, said comparison means including means (76) for outputting a signal indicating that these tow codes match.
Claim 13
Dependent Claim
174 words
Apparatus for encoding each of a plurality of cards assigned to individuals by an entity for use in secure transactions, characterized by means for generating a personal key code assigned to an individual; means for receiving from an individual a secret code known only to that individual; means for producing an encoded personal key code as a logical combination of the personal key code with a secret code received from the individual and an identifying code assigned to the individual by the entity; transducer means for encoding the card with a detectable code which is representative of said encoded personal key code; means for producing a personal identification transmission code as a logical combination of the secret code received from the individual with a personal key code; means for producing a personal identification verification code as a logical combination of an institutional key code associated with the entity with the personal identification transmission code and the identifying code; and, storage means for storing the personal identification verification code in records maintained by the entity.
Claim 14
Dependent Claim
174 words
Apparatus for encoding each of a plurality of cards assigned to individuals by an entity for use in secure transactions, characterized by means for generating a personal key code assigned to an individual; means for receiving from an individual a secret code known only to that individual; means for producing an encoded personal key code as a logical combination of the personal key code with a secret code received from the individual and an identifying code assigned to the individual by the entity; transducer means for encoding the card with a detectable code which is representative of said encoded personal key code; means for producing a personal identification transmission code as a logical combination of the secret code received from the individual with a personal key code; means for producing a personal identification verification code as a logical combination of an institutional key code associated with the entity with the personal identification transmission code and the identifying code; and, storage means for storing the personal identification verification code in records maintained by the entity.
Claim 15
Dependent Claim
83 words
An apparatus according to claim 6, characterized in that means (32,34) for reproducing the personal key code at the time of transaction as a logical combination of the encoded personal key code sensed from the card with the secret code received from the individual are provided and said comparison means includes means for outputting a signal indicating transaction authorization upon a condition of identity between the stored personal identification verification code and the personal identification verification code generated at the time of transaction.
References Cited (Backward Citations)
No citation records indexed.
USPTO Annuity & Maintenance Windows
Maintenance schedule is calculated for granted US utility patents.