US4453074A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Protection system for intelligent cards
Assignee: American Express Co
•
Filing: 1981-10-19
•
Granted: 1984-06-05
•
Expires: 2001-10-19
Abstract
Abstract There is disclosed a protection system for intelligent cards. Each card has stored in it a code which is the encryption of a concatenation of a user secret password and a common reference text. The encryption is derived by an initialization terminal which uses the private key associated with the public key of a public-key cryptosystem key pair. Each transaction terminal with which a card is used decrypts the stored code in accordance with the public key. A transaction is effected only if the stored code decrypts into the user password which is inputted on a keyboard and the common reference text.
Inventors
- 👤 Stephen B. Weinstein
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-24 02:14
CPC Classifications
G; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/34; G06Q; G06Q20/00; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/347; G06Q20/355; G06Q20/36; G06Q20/367; G06Q20/3672; G06Q20/38; G06Q20/40; G06Q20/409; G06Q20/4097; G06Q20/40975; G07F7/1025; G07F7/1058; G07F7/1066; H; H04; H04L; H04L63/00; H04L63/04; H04L63/0428; H04L63/0442; H04L63/08; H04L63/0853; H04L2463/00; H04L2463/102
Claims Analysis
Total Claims: 22
Claim 1
Independent Claim
176 words
A system for allowing authorized users of portable intelligent cards to effect transactions via at least one transaction terminal comprising a plurality of user intelligent cards each having stored therein a code which is the encryption of a combination of a password associated with the respective user and a reference text which is common to all users, the codes stored in all of said cards having been encrypted with the same private key which is associated with the public key of a public-key cryptosystem pair; and at least one transaction terminal having means for allowing a card user to inut a password, and means for controlling (1) the retrieval of the code stored in an inserted card, (2) the decryption of the retrieved code with the use of said public key to derive a password part and a text part, (3) the comparisons of the derived password part with the inputted password, and the text part with said common reference text, and (4) the effecting of a transaction only if both of said comparisons are successful.
Claim 2
Independent Claim
176 words
A system for allowing authorized users of portable intelligent cards to effect transactions via at least one transaction terminal comprising a plurality of user intelligent cards each having stored therein a code which is the encryption of a combination of a password associated with the respective user and a reference text which is common to all users, the codes stored in all of said cards having been encrypted with the same private key which is associated with the public key of a public-key cryptosystem pair; and at least one transaction terminal having means for allowing a card user to inut a password, and means for controlling (1) the retrieval of the code stored in an inserted card, (2) the decryption of the retrieved code with the use of said public key to derive a password part and a text part, (3) the comparisons of the derived password part with the inputted password, and the text part with said common reference text, and (4) the effecting of a transaction only if both of said comparisons are successful.
Claim 3
Dependent Claim
69 words
A system in accordance with claim 1 wherein each of said cards further includes means for storing the respective password by itself; and means for accepting a password furnished by said at least one terminal, and for comparing the furnished password with the stored password; said terminal controlling means controlling the retrieval of the code stored in an inserted card only in the event the password comparison is successful.
Claim 4
Dependent Claim
20 words
A system in accordance with claim 2 having a plurality of transaction terminals, at least one of which is unattended.
Claim 5
Dependent Claim
72 words
A system in accordance with claim 3 further including at least one terminal for initializing a user intelligent card, said initializing terminal having means for assigning a password to a user whose card is to be initialized, means for deriving a code by encrypting with said private key the combination of the assigned password and said common reference text, and means for controlling the storage in said card of said derived code.
Claim 6
Dependent Claim
72 words
A system in accordance with claim 2 further including at least one terminal for initializing a user intelligent card, said initializing terminal having means for assigning a password to a user whose card is to be initialized, means for deriving a code by encrypting with said private key the combination of the assigned password and said common reference text, and means for controlling the storage in said card of said derived code.
Claim 7
Dependent Claim
20 words
A system in accordance with claim 1 having a plurality of transaction terminals, at least one of which is unattended.
Claim 8
Dependent Claim
72 words
A system in accordance with claim 6 further including at least one terminal for initializing a user intelligent card, said initializing terminal having means for assigning a password to a user whose card is to be initialized, means for deriving a code by encrypting with said private key the combination of the assigned password and said common reference text, and means for controlling the storage in said card of said derived code.
Claim 9
Dependent Claim
72 words
A system in accordance with claim 1 further including at least one terminal for initializing a user intelligent card, said initializing terminal having means for assigning a password to a user whose card is to be initialized, means for deriving a code by encrypting with said private key the combination of the assigned password and said common reference text, and means for controlling the storage in said card of said derived code.
Claim 10
Dependent Claim
23 words
A system in accordance with claim 8 wherein said initializing terminal further controls the separate storage in said card of the assigned password.
Claim 11
Dependent Claim
105 words
A terminal for initializing portable intelligent cards to be used with at least one transaction terminal, each intelligent card having a memory therein, comprising means for assigning a password to a user whose card is to be initialized, means for deriving a code which is the encryption of a combination of the assigned password and a reference text which is common to all users, the code for each user being derived with use of the same private key which is associated with the public key of a public-key cryptosystem pair, and means for controlling the storage in a user card of the respective derived code.
Claim 12
Dependent Claim
105 words
A terminal for initializing portable intelligent cards to be used with at least one transaction terminal, each intelligent card having a memory therein, comprising means for assigning a password to a user whose card is to be initialized, means for deriving a code which is the encryption of a combination of the assigned password and a reference text which is common to all users, the code for each user being derived with use of the same private key which is associated with the public key of a public-key cryptosystem pair, and means for controlling the storage in a user card of the respective derived code.
Claim 13
Dependent Claim
25 words
An initializing terminal in accordance with claim 10 further including means for controlling the separate storage in a user card of the respective assigned password.
Claim 14
Dependent Claim
94 words
A portable intelligent card for use in effecting transactions via at least one transaction terminal comprising a housing, a memory within said housing for storing a code, said code being the encryption of a combination of a password associated with the respective card user and a reference text which is common to all other users of like cards, said code having been encrypted with the private key which is associated with the public key of a public key cryptosystem pair, and means for allowing said stored code to be accessed externally of the card.
Claim 15
Dependent Claim
94 words
A portable intelligent card for use in effecting transactions via at least one transaction terminal comprising a housing, a memory within said housing for storing a code, said code being the encryption of a combination of a password associated with the respective card user and a reference text which is common to all other users of like cards, said code having been encrypted with the private key which is associated with the public key of a public key cryptosystem pair, and means for allowing said stored code to be accessed externally of the card.
Claim 16
Dependent Claim
17 words
A portable intelligent card in accordance with claim 12 wherein said memory further separately stores said password.
Claim 17
Dependent Claim
27 words
A portable intelligent card in accordance with claim 13 further including means for accepting a password to be compared with the stored password and for comparing them.
Claim 18
Dependent Claim
20 words
A portable intelligent card in accordance with claim 14 further including means for controlling the outputting of said stored code.
Claim 19
Dependent Claim
21 words
A portable intelligent card in accordance with claim 15 wherein said stored code is outputted only if said comparison is successful.
Claim 20
Dependent Claim
20 words
A portable intelligent card in accordance with claim 12 further including means for controlling the outputting of said stored code.
Claim 21
Dependent Claim
24 words
A portable intelligent card in accordance with claim 12 wherein said memory stores a plurality of codes each associated with a different service provider.
Claim 22
Dependent Claim
28 words
A portable intelligent card in accordance with claim 18 wherein said memory stores associated with each of said plurality of codes an identification of the respective service provider.
References Cited (Backward Citations)
US4288659A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1987-06-05 | 1987-12-05 | 1988-06-05 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 1991-06-05 | 1991-12-05 | 1992-06-05 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 1995-06-05 | 1995-12-05 | 1996-06-05 | $7700.00 | Window Closed / Lapsed |