Authentication system between a card reader and a pay card exchanging data

Claim 1

A reciprocal authentication system for mutually authenticating an interconnected reader terminal as a first station and an electronic card as a second station towards each other, said card storing a personalized first secret code (S) and personalized second secret code (S), said second secret code being linked to said first secret code by means of a first non-personalized secret transformation function (F1), said system comprising: first transfer means (T1) for transferring said first secret code to said terminal, in said terminal first processing means for recovering by means of said first transformation function (F1) said second secret code (s1); in one of said stations random number generating means (GEN) for generating a random number (RT, QT) as a session key and second transfer means (T2) for transferring this random number to the other station; in either station second processing means for receiving said second secret code and a first part (RT) of said random number for generating by means of a second transformation function (F2) a reader access key and a card access key, respectively (KSL, KSC), in either station third processing means for receiving said reader access key and card access key, respectively, and furthermore a second part (QT) of said random number for generating a means of a third transformation function (F3) first reader comparison data and first card comparison data, respectively (DCL1, DCC1), in either station fourth processing means for receiving said reader access key and card access key, respectively, and furthermore said reader comaprison data and card comparison data, respectively for generating by means of a fourth transformation function (f4) second reader comparison data and second card comparison data (DLC2, DCC2), respectively, third transfer means (T4) for transferring said second reader comparison data and said second card comparison data from a sending station to a receiving station, in said receiving station first comparing means for comparing said second reader comparison data and second card comparison data and upon equality generating a first authorization signal, (LOK), fourth transfer means (T5) for transferring under control of said first authorization signal comparison data from said receiving station to said sending station, in said sending station second comparing means for comparing said first reader comparison data and first card comparison data and upon equality generating a second authorization signal (COK), the combination of said first and second authorization signals enabling further transfer of information between said two stations.