Transaction authentication using a centrally generated transaction identifier

Claim 2

In an information transmission system comprising an authentication agency, a primary transmission path, a switch in the primary transmission path, and an information generator with a station identifier, an authentication method comprising the steps of: introducing a first user identifier from a first user identifier source into a first authentication code generator within the information generator; transmitting a transmission request from the information generator to the authentication agency; transmitting the station identifier from the information generator to the authentication agency; accessing a record in a second user identifier source of the user identifier corresponding to the station identifier in response to the transmission request; forwarding the second user identifier from the second user identifier source to a second authentication code generator within the authentication agency; generating a request identifier in a request identifier generator, in response to the transmission request; transmitting the request identifier from the request identifier generator to the first and second authentication code generators; generating a first authentication code in the first authentication code generator and a second authentication code in the second authentication code generator in response to the request identifier and the first and second user identifiers; transmitting the first and second authentication codes to a comparator; comparing the first and second authentication codes and generating a permit signal only if the comparison is successful, showing that the first user identifier and the request identifier have experienced the same total transformation as the second user identifier and the request identifier; and transmitting the permit signal to the switch, enabling information flow through the primary transmission path, whereby information flow through the primary transmission path is permitted only after successful comparison of the first and second authentication codes.

Claim 3

A method of claim 1 in which the first authentication code and the second authentication code are generated through use of identical irreversible transforms.

Claim 4

A method of claim 2 including a step of encrypting the user identifier.

Claim 5

A method of claim 1 in which the first authentication code and the second authentication code are generated through use of encryption transforms.

Claim 6

A method of claim 1 in which the request identifier includes the time and date of the transmission request.

Claim 7

A method of claim 1 in which the request identifier is a number that is not repeated within the time span of the transmission request.

Claim 10

A method of claim 8 in which the first transform and the third transform are irreversible transforms.

Claim 13

A method of a claim 1 in which transmitting the request identifier includes transforming the request identifier together with the second user identifier.

Claim 14

An authenticating information transmission system comprising an information generator, an authentication agency and a primary transmission path, the information generator communicating with the authentication agency, said agency controlling the primary transmission path, wherein the information generator comprises: requesting means for presenting a transmission request to the authentication agency; a first authentication code generator comprising a first user identifier access port, a first request identifier access port, a first transformer for combining a first user identifier and a first request identifier transmitted to the respective access port to produce a first authentication code, and a first transmitter for transmitting the first authentication code to the authentication agency; and an information source for introducing information into the primary transmission path, wherein the authentication agency comprises: a request identifier generator comprising a first transmission request access port and a second transmitter for transmitting the request identifier to the first authentication code generator and to a second authentication code generator; a user identifier source comprising a second transmission request access port and a third transmitter for transmitting a second user identifier to the second authentication code generator; the second authentication code generator comprising a second request identifier access port, a second user identifier access port, a second transformer for combining the second request identifier and the second user identifier, transmitted to the respective access port to produce a second authentication code, and a fourth transmitter for transmitting the second authentication code to a comparator; and the comparator comprising a first authentication code access port, a second authentication code access port, a comparing means for comparing the first authentication code and the second authentication code, transmitted to the respective access port, and producing a permit signal only if the first authentication code and the second authentication code, when compared by the comparing means, are equal, indicating a matching condition between the first and second authentication codes, and a fifth transmitter for transmitting the permit signal to the primary transmission path; and wherein the primary transmission path comprises a transmission controller with a permit signal access port for authorizing transmission when the permit signal is transmitted to the permit signal access port.

Claim 15

An authenticating information transmission system comprising an information generator, an authentication agency and a primary transmission path, the information generator communicating with the authentication agency, said agency controlling the primary transmission path, wherein the information generator comprises: requesting means for presenting a transmission request to the authentication agency; a first authentication code generator comprising a first user identifier access port, a first request identifier access port, a first transformer for combining a first user identifier and a first request identifier transmitted to the respective access port to produce a first authentication code, and a first transmitter for transmitting the first authentication code to the authentication agency; and an information source for introducing information into the primary transmission path, wherein the authentication agency comprises: a request identifier generator comprising a first transmission request access port and a second transmitter for transmitting the request identifier to the first authentication code generator and to a second authentication code generator; a user identifier source comprising a second transmission request access port and a third transmitter for transmitting a second user identifier to the second authentication code generator; the second authentication code generator comprising a second request identifier access port, a second user identifier access port, a second transformer for combining the second request identifier and the second user identifier, transmitted to the respective access port to produce a second authentication code, and a fourth transmitter for transmitting the second authentication code to a comparator; and the comparator comprising a first authentication code access port, a second authentication code access port, a comparing means for comparing the first authentication code and the second authentication code, transmitted to the respective access port, and producing a permit signal only if the first authentication code and the second authentication code, when compared by the comparing means, are equal, indicating a matching condition between the first and second authentication codes, and a fifth transmitter for transmitting the permit signal to the primary transmission path; and wherein the primary transmission path comprises a transmission controller with a permit signal access port for authorizing transmission when the permit signal is transmitted to the permit signal access port.

Claim 16

A device of claim 13 in which the requesting means includes a key port for accepting an enabling key with the first user identifier.

Claim 17

A device of claim 14 in which the first authentication code generator includes first encryption means for encrypting the first user identifier.

Claim 18

A device of claim 15 in which the user identifier source includes a second encryption means for encrypting the user identifier.

Claim 19

A device of claim 16 in which successive application of the first encryption means and the first transformer produces an identical transformation to successive application of the second encryption means and the second transformer.

Claim 20

A device of claim 16 in which the information generator further includes a third transformation/encryption means for combining the first authentication code and the first user identifier, the authentication agency further includes a fourth transformation/encryption means for combining the second authentication code and the second user identifier, the comparator includes a fifth encryption means at the first authentication code access port and a sixth encryption means at the second authentication code access port, wherein successive application of the first encryption means, the first transformer, the third transformation/encryption means and the fifth encryption means produces an identical transformation to the successive application of the second encryption means, the second transformer, the fourth transformation/encryption means and the sixth encryption means.

Claim 21

A device of claim 13 in which the first transformer and the second transformer produce the same irreversible transform.

Claim 22

A device of claim 13 in which the first transformer and the second transformer produce reversible encryption transforms.

Claim 23

A device of claim 13 in which the request identifier generator transmits a request identifier including the time and date of the transmission request.

Claim 24

A device of claim 13 in which the request identifier generator transmits a request identifier that is not repeated within the time span of the transmission request.

Claim 25

A device of claim 13 in which the third transmitter is also adapted for transmitting the second user identifier to the second transmitter and the second transmitter includes a third transformer for transforming the request identifier together with the second user identifier.

Claim 26

A transaction request authentication process comprising the steps of: introducing a first user identifier into a first authentication code generator, within a user device; transmitting a transaction request to an authentication agency; in the authentication agency, generating a request identifier and a second user identifier in response to the transaction request; transmitting the request identifier to the first authentication code generator and to a second authentication code generator, within the authentication agency; transmitting the second user identifier to the second authentication code generator; generating a first authentication code in response to the first user identifier and the request identifier and a second authentication code in response to the second user identifier and the request identifier; transmitting the first authentication code and the second authentication code to a comparator, within the authentication agency; generating a permit signal in the comparator in response to the first and second authentication codes; and transmitting the permit signal to a transaction device, thereby authorizing a transaction to proceed.

Claim 27

A transaction request authentication process comprising the steps of: introducing a first user identifier into a first authentication code generator, within a user device; transmitting a transaction request to an authentication agency; in the authentication agency, generating a request identifier and a second user identifier in response to the transaction request; transmitting the request identifier to the first authentication code generator and to a second authentication code generator, within the authentication agency; transmitting the second user identifier to the second authentication code generator; generating a first authentication code in response to the first user identifier and the request identifier and a second authentication code in response to the second user identifier and the request identifier; transmitting the first authentication code and the second authentication code to a comparator, within the authentication agency; generating a permit signal in the comparator in response to the first and second authentication codes; and transmitting the permit signal to a transaction device, thereby authorizing a transaction to proceed.

Claim 28

A method of claim 24 including the step of encrypting the first user identifier and the second user identifier.

Claim 29

A method of claim 24 in which the first authentication code and the second authentication code are generated using an irreversible transform.

Claim 30

A method of claim 24 in which the request identifier includes the time and date of the transaction request.

Claim 31

A method of claim 24 in which the request identifier is a number that is not repeated within the time span of the transmission request.

Claim 32

A method of claim 24 in which the first and second authentication codes are generated using an encryption transform.

Claim 33

A method of claim 24 including the steps of encrypting the first and second authentication codes.

Claim 34

A method of claim 24 including transforming the request identifier together with the second user identifier.

Claim 35

A transaction request authentication process comprising the steps of: introducing a first user identifier into a first authentication code generator, within a user device; generating a request identifier in the user device; transmitting a transaction request and the request identifier to an authentication agency; in the authentication agency, generating a second user identifier in response to the transaction request; transmitting the request identifier to the first authentication code generator and to a second authentication code generator, within the authentication agency; transmitting the second user identifier to the second authentication code generator; generating a first authentication code in response to the first user identifier and the request identifier and a second authentication code in response to the second user identifier and the request identifier; transmitting the first authentication code and the second authentication code to a comparator, within the authentication agency; generating a permit signal in the comparator in response to the first and second authentication codes; and transmitting the permit signal to a transaction device, thereby authorizing a transaction to proceed.

Claim 36

A transaction request authentication process comprising the steps of: introducing a first user identifier into a first authentication code generator, within a user device; generating a request identifier in the user device; transmitting a transaction request and the request identifier to an authentication agency; in the authentication agency, generating a second user identifier in response to the transaction request; transmitting the request identifier to the first authentication code generator and to a second authentication code generator, within the authentication agency; transmitting the second user identifier to the second authentication code generator; generating a first authentication code in response to the first user identifier and the request identifier and a second authentication code in response to the second user identifier and the request identifier; transmitting the first authentication code and the second authentication code to a comparator, within the authentication agency; generating a permit signal in the comparator in response to the first and second authentication codes; and transmitting the permit signal to a transaction device, thereby authorizing a transaction to proceed.

Claim 37

A transaction request authentication process comprising the steps of: in an authentication agency, generating a request identifier and a user identifier in response to a transaction request from a user; transmitting the request identifier to the user and to an authentication code generator; transmitting the user identifier to the authentication code generator; generating a first authentication code in the authentication code generator in response to the request identifier and the user identifier; transmitting the first authentication code to a comparator; receiving into the comparator a second authentication code produced by the user in response to the request identifier; generating a permit signal in the comparator in response to the first authentication code and the second authentication code; and transmitting the permit signal to a transaction device, thereby authorizing a transaction to proceed.

Claim 38

A transaction request authentication process comprising the steps of: in an authentication agency, generating a request identifier and a user identifier in response to a transaction request from a user; transmitting the request identifier to the user and to an authentication code generator; transmitting the user identifier to the authentication code generator; generating a first authentication code in the authentication code generator in response to the request identifier and the user identifier; transmitting the first authentication code to a comparator; receiving into the comparator a second authentication code produced by the user in response to the request identifier; generating a permit signal in the comparator in response to the first authentication code and the second authentication code; and transmitting the permit signal to a transaction device, thereby authorizing a transaction to proceed.

Claim 39

An information generator for use in an authenticating information transmission system comprising: requesting means for presenting a transmission request to an authentication agency; a first authentication code generator comprising a first user identifier access port, a first request identifier access port, a first transformer for combining a first user identifier and a first request identifier transmitted to the respective access port to produce a first authentication code, and a first transmitter for transmitting the first authentication code to the authentication agency; and an information source for introducing information into the primary transmission path.

Claim 40

An information generator for use in an authenticating information transmission system comprising: requesting means for presenting a transmission request to an authentication agency; a first authentication code generator comprising a first user identifier access port, a first request identifier access port, a first transformer for combining a first user identifier and a first request identifier transmitted to the respective access port to produce a first authentication code, and a first transmitter for transmitting the first authentication code to the authentication agency; and an information source for introducing information into the primary transmission path.

Claim 41

A device of claim 34 in which the first transformer is adapted for producing an irreversible transform.

Claim 42

An authentication agency for use in an authenticating transaction system comprising: A request identifier generator comprising a first transaction request access port and a second transmitter for transmitting the request identifier to the first authentication code generator and to a second authentication code generator; a user identifier source comprising a second transaction request access port, a third transaction request access port and a third transmitter for transmitting the second user identifier to the second authentication code generator; the second authentication code generator comprising a second request identifier access port, a second user identifier access port, a second transformer for combining the second request identifier and the second user identifier, transmitted to the respective access port to produce a second authentication code, and a fourth transmitter for transmitting the second authentication code to a comparator; and the comparator comprising a first authentication code access port, a second authentication code access port, a comparing means for comparing the first authentication code and the second authentication code, transmitted to the respective access port, and producing a permit signal in response to the first and second authentication codes, and a fifth transmitter for transmitting the permit signal to the primary transaction path for authorizing the transaction to proceed.

Claim 43

An authentication agency for use in an authenticating transaction system comprising: A request identifier generator comprising a first transaction request access port and a second transmitter for transmitting the request identifier to the first authentication code generator and to a second authentication code generator; a user identifier source comprising a second transaction request access port, a third transaction request access port and a third transmitter for transmitting the second user identifier to the second authentication code generator; the second authentication code generator comprising a second request identifier access port, a second user identifier access port, a second transformer for combining the second request identifier and the second user identifier, transmitted to the respective access port to produce a second authentication code, and a fourth transmitter for transmitting the second authentication code to a comparator; and the comparator comprising a first authentication code access port, a second authentication code access port, a comparing means for comparing the first authentication code and the second authentication code, transmitted to the respective access port, and producing a permit signal in response to the first and second authentication codes, and a fifth transmitter for transmitting the permit signal to the primary transaction path for authorizing the transaction to proceed.

Claim 44

A transaction access module for use in a authenticating transaction system comprising: requesting means for presenting a transaction request to an authentication agency; and a first authentication code generator comprising a first user identifier access port, a first request identifier access port, a first transformer for combining a first user identifier and a first request identifier to produce a first authentication code, and a first transmitter for transmitting the first authentication code to the authentication agency.

Claim 45

A transaction access module for use in a authenticating transaction system comprising: requesting means for presenting a transaction request to an authentication agency; and a first authentication code generator comprising a first user identifier access port, a first request identifier access port, a first transformer for combining a first user identifier and a first request identifier to produce a first authentication code, and a first transmitter for transmitting the first authentication code to the authentication agency.