Patent US5239166A successfully refreshed from Google Patents.
US5239166A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Secure data interchange system erasing a card memory upon an invalid response
Assignee: Individual
•
Filing: 1991-09-09
•
Granted: 1993-08-24
•
Expires: 2011-09-09
Abstract
Abstract Systems for interchanging information, for example, obtaining cash from a terminal by use of a portable device such as a credit card are well-known but suffer from being vulnerable to fraud. In the invention a highly secure information interchange system is achieved by utilizing an intelligent card as the portable device which verifies that the terminal is a valid one and the terminal in turn verifies that the card is valid. Unauthorized users are screened out by means of a physical characteristic scan of the user such as a fingerprint which is then compared with comparable data stored on the portable device. If an invalid terminal attempts to communicate with the card, the card erases the data and programs from its memory. All programs and data in the terminal are stored in memory which loses its contents when power is interrupted, thus improving the security of the system by making unauthorized use of a terminal very difficult. The terminal can only be brought back up by authorized personnel with their own access portable devices. Both a system and a method are claimed.
Inventors
- 👤 Marcel A. Graves
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-26 15:53
CPC Classifications
G; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/32; G06F21/34; G06Q; G06Q20/00; G06Q20/22; G06Q20/229; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/38; G06Q20/40; G06Q20/401; G06Q20/4014; G06Q20/40145; G06Q20/409; G06Q20/4097; G07C; G07C9/00; G07C9/20; G07C9/22; G07C9/25; G07C9/257
Claims Analysis
Total Claims: 27
Claim 1
Independent Claim
239 words
An electronic card for use in a secure data interchange system having a terminal adapted to receive and communicate with said electronic card, said card having means for communicating with said terminal and having a memory for storing program algorithms and data therein including valid terminal verification data and valid user identification request data; said electronic card comprising: means for monitoring, for a predetermined period of time, immediately following insertion of said card in said terminal, an output from said terminal for a terminal verification message and being operable to erase said memory when said terminal verification message is not received within said predetermined period of time and being responsive to said terminal verification message received within said predetermined period of time, by comparing said received terminal verification message to said stored valid terminal verification message and being operable to erase said memory when said received terminal verification message is not valid; and means for monitoring, following receipt of a valid terminal verification message, the output from said terminal for a user identification request and being responsive to said user identification request by comparing said received user identification request to said stored valid user identification request and being operable to erase said memory when said user identification request is not valid and being operable to erase said memory when said received request is an attempt to read data from said memory before receipt of said valid user identification request.
Claim 2
Dependent Claim
239 words
An electronic card for use in a secure data interchange system having a terminal adapted to receive and communicate with said electronic card, said card having means for communicating with said terminal and having a memory for storing program algorithms and data therein including valid terminal verification data and valid user identification request data; said electronic card comprising: means for monitoring, for a predetermined period of time, immediately following insertion of said card in said terminal, an output from said terminal for a terminal verification message and being operable to erase said memory when said terminal verification message is not received within said predetermined period of time and being responsive to said terminal verification message received within said predetermined period of time, by comparing said received terminal verification message to said stored valid terminal verification message and being operable to erase said memory when said received terminal verification message is not valid; and means for monitoring, following receipt of a valid terminal verification message, the output from said terminal for a user identification request and being responsive to said user identification request by comparing said received user identification request to said stored valid user identification request and being operable to erase said memory when said user identification request is not valid and being operable to erase said memory when said received request is an attempt to read data from said memory before receipt of said valid user identification request.
Claim 3
Dependent Claim
17 words
A card as defined in claim 1, wherein each of said means for monitoring is a microprocessor.
Claim 4
Dependent Claim
66 words
A card as defined in claim 1 or 2, said memory including prestored information indicative of a predetermined user of said card and said means for monitoring, following receipt of a valid terminal verification message being operable to read said predetermined user information from said memory and being operable to transmit to said terminal said predetermined user information, upon receipt of said valid user identification request.
Claim 5
Dependent Claim
296 words
An electronic card for use in a secure data interchange system having a terminal adapted to receive and communicate with said electronic card, said card comprising: means for communicating with said terminal; memory for storing program algorithms and data therein including valid terminal verification data, valid user identification request data, and information indicative of a predetermined user of said card; means for monitoring, for a predetermined period of time, immediately following insertion of said card in said terminal, an output from said terminal for a terminal verification message and being operable to erase said memory when said terminal verification message is not received within said predetermined period of time and being responsive to said terminal verification message received within said predetermined period of time, by comparing said received terminal verification message to said stored valid terminal verification message and being operable to erase said memory when said received terminal verification message is not valid; means for monitoring, following receipt of a valid terminal verification message, the output from said terminal for a user identification request and being responsive to said user identification request by comparing said received user identification request to said stored valid user identification request and being operable to erase said memory when said user identification request is not valid identification instruction message and being operable to erase said memory when said received request is an attempt to read data from said memory before receipt of said valid user identification request; each of said means for monitoring is a microprocessor; and said means for monitoring, following receipt of a valid terminal verification message, being operable to read said predetermined user information from said memory and being operable to transmit to said terminal said predetermined user information, upon receipt of said valid user identification request.
Claim 6
Dependent Claim
296 words
An electronic card for use in a secure data interchange system having a terminal adapted to receive and communicate with said electronic card, said card comprising: means for communicating with said terminal; memory for storing program algorithms and data therein including valid terminal verification data, valid user identification request data, and information indicative of a predetermined user of said card; means for monitoring, for a predetermined period of time, immediately following insertion of said card in said terminal, an output from said terminal for a terminal verification message and being operable to erase said memory when said terminal verification message is not received within said predetermined period of time and being responsive to said terminal verification message received within said predetermined period of time, by comparing said received terminal verification message to said stored valid terminal verification message and being operable to erase said memory when said received terminal verification message is not valid; means for monitoring, following receipt of a valid terminal verification message, the output from said terminal for a user identification request and being responsive to said user identification request by comparing said received user identification request to said stored valid user identification request and being operable to erase said memory when said user identification request is not valid identification instruction message and being operable to erase said memory when said received request is an attempt to read data from said memory before receipt of said valid user identification request; each of said means for monitoring is a microprocessor; and said means for monitoring, following receipt of a valid terminal verification message, being operable to read said predetermined user information from said memory and being operable to transmit to said terminal said predetermined user information, upon receipt of said valid user identification request.
Claim 7
Dependent Claim
13 words
A card as defined in claim 4, said microprocessor including a computer program.
Claim 8
Dependent Claim
24 words
A card as defined in claim 4, said predetermined user information being indicative of a physical characteristic of an authorized user of the card.
Claim 9
Dependent Claim
27 words
A card as defined in claim 6, said physical characteristic is a computer generated image of a finger print pattern of said authorized user of said card.
Claim 10
Dependent Claim
27 words
A card as defined in claim 4, 5, 6, or 7, including means for receiving power, from said terminal, upon insertion of said card in said terminal.
Claim 11
Independent Claim
216 words
A method for providing a secure electronic card for use in a data interchange system, wherein a terminal is adapted to receive and communicate with the electronic card and wherein said card has means for communicating with said terminal and a memory for storing data and program algorithms therein including valid terminal verification data and valid user identification request data, said method comprising: monitoring by said card for a predetermined period of time, immediately following insertion of said card in said terminal, an output from said terminal for a terminal verification message; erasing said memory when said terminal verification message is not received within said predetermined period of time, and comparing said terminal verification message received within said predetermined period of time to said stored valid terminal verification message, and erasing said memory when said terminal verification message is not valid; monitoring by said card, following receipt of a valid terminal verification message, the output from said terminal for a user identification request from said terminal and comparing said received user identification request to said stored valid user identification request; and erasing said memory when said user identification request is not valid, and erasing said memory when said request is an attempt to read data from said memory before receipt of a valid user identification request.
Claim 12
Independent Claim
216 words
A method for providing a secure electronic card for use in a data interchange system, wherein a terminal is adapted to receive and communicate with the electronic card and wherein said card has means for communicating with said terminal and a memory for storing data and program algorithms therein including valid terminal verification data and valid user identification request data, said method comprising: monitoring by said card for a predetermined period of time, immediately following insertion of said card in said terminal, an output from said terminal for a terminal verification message; erasing said memory when said terminal verification message is not received within said predetermined period of time, and comparing said terminal verification message received within said predetermined period of time to said stored valid terminal verification message, and erasing said memory when said terminal verification message is not valid; monitoring by said card, following receipt of a valid terminal verification message, the output from said terminal for a user identification request from said terminal and comparing said received user identification request to said stored valid user identification request; and erasing said memory when said user identification request is not valid, and erasing said memory when said request is an attempt to read data from said memory before receipt of a valid user identification request.
Claim 13
Dependent Claim
38 words
A method as defined in claim 9, including transmitting to said terminal a card verification message for verification of said card by said terminal, following receipt, within said predetermined period of time, of said valid terminal identification message.
Claim 14
Dependent Claim
58 words
A method as defined in claim 9, said card including information, prestored therein, indicative of a predetermined user of said card, said method including: reading said stored predetermined user information from said memory; and transmitting said predetermined user information to said terminal, upon receipt of a valid user identification request, for verification by said terminal of said user.
Claim 15
Independent Claim
284 words
A method for providing a secure electronic card for use in a data interchange system, wherein a terminal is adapted to receive and communicate with the electronic card and wherein said card has means for communicating with said terminal and a memory for storing data and program algorithms therein including valid terminal verification data and valid user identification request data, said method comprising: monitoring by said card for a predetermined period of time, immediately following insertion of said card in said terminal, an output from said terminal for a terminal verification message; erasing said memory when said terminal verification message is not received within said predetermined period of time, and comparing said terminal verification message received within said predetermined period of time to said stored valid terminal verification message, and erasing said memory when said terminal verification message is not valid; monitoring by said card, following receipt of a valid terminal verification message, the output from said terminal for a user identification request from said terminal and comparing said received user identification request to said stored valid user identification request; erasing said memory when said user identification request is not valid, and erasing said memory when said request is an attempt to read data from said memory before receipt of a valid user identification request; transmitting to said terminal a card verification message, following receipt, within said predetermined period of time, of said valid terminal identification message for verification of said card by said terminal; storing information indicative of a predetermined user of said card, in said card memory; and transmitting said predetermined user information to said terminal upon receipt of a valid user identification request, for verification by said terminal of said user.
Claim 16
Independent Claim
284 words
A method for providing a secure electronic card for use in a data interchange system, wherein a terminal is adapted to receive and communicate with the electronic card and wherein said card has means for communicating with said terminal and a memory for storing data and program algorithms therein including valid terminal verification data and valid user identification request data, said method comprising: monitoring by said card for a predetermined period of time, immediately following insertion of said card in said terminal, an output from said terminal for a terminal verification message; erasing said memory when said terminal verification message is not received within said predetermined period of time, and comparing said terminal verification message received within said predetermined period of time to said stored valid terminal verification message, and erasing said memory when said terminal verification message is not valid; monitoring by said card, following receipt of a valid terminal verification message, the output from said terminal for a user identification request from said terminal and comparing said received user identification request to said stored valid user identification request; erasing said memory when said user identification request is not valid, and erasing said memory when said request is an attempt to read data from said memory before receipt of a valid user identification request; transmitting to said terminal a card verification message, following receipt, within said predetermined period of time, of said valid terminal identification message for verification of said card by said terminal; storing information indicative of a predetermined user of said card, in said card memory; and transmitting said predetermined user information to said terminal upon receipt of a valid user identification request, for verification by said terminal of said user.
Claim 17
Independent Claim
241 words
A system for the secure interchange of information comprising: at least one portable electronic card having a memory for storing program algorithms and data therein including valid terminal verification data and valid user identification request data; at least one terminal device adapted to receive and communicate with said portable electronic card; said card including: means for communicating with said terminal; means for monitoring, for a predetermined period of time, immediately following insertion of said card in said terminal, an output from said terminal for a terminal verification message and being operable to erase said memory when said terminal verification message is not received within said predetermined period of time, and being responsive to said terminal verification message received within said predetermined period of time, by comparing said received terminal verification message to said stored valid terminal verification message and being operable to erase said memory when said received terminal verification message is not valid; and means for monitoring, following receipt of a valid terminal verification message, the output from said terminal for a user identification request and being responsive to said user identification request by comparing said received user identification request to said stored valid user identification request and being operable to erase said memory when said user identification request is not valid and being operable to erase said memory when said received request is an attempt to read data from said memory before receipt of said valid user identification request.
Claim 18
Independent Claim
241 words
A system for the secure interchange of information comprising: at least one portable electronic card having a memory for storing program algorithms and data therein including valid terminal verification data and valid user identification request data; at least one terminal device adapted to receive and communicate with said portable electronic card; said card including: means for communicating with said terminal; means for monitoring, for a predetermined period of time, immediately following insertion of said card in said terminal, an output from said terminal for a terminal verification message and being operable to erase said memory when said terminal verification message is not received within said predetermined period of time, and being responsive to said terminal verification message received within said predetermined period of time, by comparing said received terminal verification message to said stored valid terminal verification message and being operable to erase said memory when said received terminal verification message is not valid; and means for monitoring, following receipt of a valid terminal verification message, the output from said terminal for a user identification request and being responsive to said user identification request by comparing said received user identification request to said stored valid user identification request and being operable to erase said memory when said user identification request is not valid and being operable to erase said memory when said received request is an attempt to read data from said memory before receipt of said valid user identification request.
Claim 19
Dependent Claim
201 words
A system as defined in claim 13, said terminal comprising: terminal memory having a valid card verification message stored therein; means for transmitting to said output said terminal verification message, upon insertion of said card in said terminal; means for monitoring, for a second predetermined period of time a card output for receipt of a card verification message and being operable to reject said card when said card verification message is not received within said second predetermined period of time, and being responsive to said card verification message received within said second predetermined period of time by comparing said received card verification message to a stored valid card verification message, and being operable to reject said card when said received card verification message is invalid; means for reading a user identification from said user following receipt of a valid card verification message; and means for transmitting to said output a user identification request, and means for monitoring said card output for receipt of said predetermined user information and being responsive to said predetermined user information for comparing said received predetermined user information to said read user identification, and being operable to reject said card when said predetermined user information is invalid.
Claim 20
Dependent Claim
27 words
A system as defined in claim 14, said card including means for transmitting to said terminal, following receipt of valid terminal verification message, a card verification message.
Claim 21
Dependent Claim
23 words
A system as defined in claim 14, said means for reading is a scanning device for scanning a physical characteristic of said user.
Claim 22
Dependent Claim
15 words
A system as defined in claim 16, said physical characteristic is a finger print pattern.
Claim 23
Dependent Claim
27 words
A system as defined in claim 13, said card including means for transmitting to said terminal, following receipt of valid terminal verification message, a card verification message.
Claim 24
Dependent Claim
23 words
A system as defined in claim 13, 14 or 18, including protection means associated with said terminal to prevent tapering with said terminal.
Claim 25
Dependent Claim
25 words
A system as defined in claim 19, said protection means including a volatile memory which looses its contents when power is interrupted to said memory.
Claim 26
Independent Claim
458 words
A system for the secure interchange of information comprising: at least one portable electronic card having a memory for storing program algorithms and data therein including valid terminal verification data and valid user identification request data; at least one terminal device adapted to receive and communicate with said portable electronic card; said card including: means for communicating with said terminal; means for monitoring, for a predetermined period of time, immediately following insertion of said card in said terminal, an output from said terminal for a terminal verification message and being operable to erase said memory when said terminal verification message is not received within said predetermined period of time, and being responsive to said terminal verification message received within said predetermined period of time, by comparing said received terminal verification message to said stored valid terminal verification message and being operable to erase said memory when said received terminal verification message is not valid; and means for monitoring, following receipt of a valid terminal verification message, the output from said terminal for a user identification request and being responsive to said user identification request by comparing said received user identification request to said stored valid user identification request and being operable to erase said memory when said user identification request is not valid and being operable to erase said memory when said received request is an attempt to read data from said memory before receipt of said valid user identification request; means for transmitting a card output, following receipt of valid terminal verification message within said predetermined period of time, a card verification message; said terminal including: terminal memory having a valid card verification message stored therein; means for transmitting to said output said terminal verification message, upon insertion of said card in said terminal; means for monitoring, for a second predetermined period of time a card output for receipt of a card verification message and being operable to reject said card when said card verification message is not received within said second predetermined period of time, and being responsive to said card verification message received within said second predetermined period of time by comparing said received card verification message to a stored valid card verification message, and being operable to reject said card when said received card verification message is invalid; means for reading a user identification from said user following receipt of a valid card verification message; and means for transmitting to said output a user identification request, and means for monitoring said card output for receipt of said predetermined user information and being responsive to said predetermined user information for comparing said received predetermined user information to said read user identification, and being operable to reject said card when said predetermined user information is invalid.
Claim 27
Independent Claim
458 words
A system for the secure interchange of information comprising: at least one portable electronic card having a memory for storing program algorithms and data therein including valid terminal verification data and valid user identification request data; at least one terminal device adapted to receive and communicate with said portable electronic card; said card including: means for communicating with said terminal; means for monitoring, for a predetermined period of time, immediately following insertion of said card in said terminal, an output from said terminal for a terminal verification message and being operable to erase said memory when said terminal verification message is not received within said predetermined period of time, and being responsive to said terminal verification message received within said predetermined period of time, by comparing said received terminal verification message to said stored valid terminal verification message and being operable to erase said memory when said received terminal verification message is not valid; and means for monitoring, following receipt of a valid terminal verification message, the output from said terminal for a user identification request and being responsive to said user identification request by comparing said received user identification request to said stored valid user identification request and being operable to erase said memory when said user identification request is not valid and being operable to erase said memory when said received request is an attempt to read data from said memory before receipt of said valid user identification request; means for transmitting a card output, following receipt of valid terminal verification message within said predetermined period of time, a card verification message; said terminal including: terminal memory having a valid card verification message stored therein; means for transmitting to said output said terminal verification message, upon insertion of said card in said terminal; means for monitoring, for a second predetermined period of time a card output for receipt of a card verification message and being operable to reject said card when said card verification message is not received within said second predetermined period of time, and being responsive to said card verification message received within said second predetermined period of time by comparing said received card verification message to a stored valid card verification message, and being operable to reject said card when said received card verification message is invalid; means for reading a user identification from said user following receipt of a valid card verification message; and means for transmitting to said output a user identification request, and means for monitoring said card output for receipt of said predetermined user information and being responsive to said predetermined user information for comparing said received predetermined user information to said read user identification, and being operable to reject said card when said predetermined user information is invalid.
References Cited (Backward Citations)
US4213038A
Cited
US4328414A
Cited
US4582985A
Cited
US4601011A
Cited
US4510382A
Cited
US4549075A
Cited
US4532508A
Cited
US4755940A
Cited
US4757543A
Cited
US4742573A
Cited
US4766433A
Cited
US4710613A
Cited
US4605844A
Cited
US4636622A
Cited
US4783823A
Cited
US4746788A
Cited
US4803351A
Cited
US4827111A
Cited
US4995086A
Cited
US4795893A
Cited
US4808802A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1996-08-23 | 1997-02-22 | 1997-08-24 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2000-08-23 | 2001-02-22 | 2001-08-24 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2004-08-23 | 2005-02-22 | 2005-08-24 | $7700.00 | Window Closed / Lapsed |