초록 ▼

A system and method for preventing counterfeiting of an identification or transaction card, and for verifying that the user of the card is an authorized user, involves the use of a unique, unalterable serial number and an exclusive OR function to generate a private key protected digital signature. T

A system and method for preventing counterfeiting of an identification or transaction card, and for verifying that the user of the card is an authorized user, involves the use of a unique, unalterable serial number and an exclusive OR function to generate a private key protected digital signature. The digital signature is stored on the card together with a card issuer record which contains sufficient information to authenticate the record. User authentication is provided by a personal identification number which is stored on the card. The personal identification number is generated by enciphering the serial number using a password as the key. The same card can be used to store a plurality of card issuer records, each including its own digital signature, and with user authentication for all records provided by a single personal identification number.

대표청구항 ▼

A system for enciphering information onto cards, each card having permanently stored thereon a serial number unique to the card, and for authenticating the cards and users of the cards, comprising: a card initialization terminal, means for combining two out of the three members of a set consisting o

A system for enciphering information onto cards, each card having permanently stored thereon a serial number unique to the card, and for authenticating the cards and users of the cards, comprising: a card initialization terminal, means for combining two out of the three members of a set consisting of user information (UI), a card issuer identification number (ID), and the serial number (SN) to obtain a checksum, and means for performing an exclusive OR operation on the checksum and a third member of the set consisting of UI, ID, and SN to obtain a composite result, said card initialization terminal including means for storing a digital signature on the card, the digital signature comprising the result of enciphering the composite result using the private key of a public key-private key pair, and means for storing the user information, the public key of the private key-public key pair, the issuer identification number, and a personal identification number on the card, said personal identification number being a function of the serial number and a password which is not stored on the card; a processing terminal including means for reading the stored public key, the card issuer identification number, the serial number, the digital signature, and the personal identification number, and means for allowing a user of the card to enter a password; means for processing the stored checksum, public key, card issuer number, and serial number, and digital signature to authenticate the card, said card authentication means including means for deciphering the digital signature using the public key stored on the card to recover the composite result, and means for performing an exclusive OR operation on the recovered composite result and one said third member of the set consisting of UI, ID and SN to recover the checksum, and means for comparing the stored checksum with a checksum computed by combining said two out of three members of the set consisting of UI, ID, and SN in order to authenticate the card; and means for processing the stored personal identification number and the entered password to authenticate the user of the card, said user identification means including means for computing a personal identification number which is to be compared with the stored personal identification number by computing said function of the serial number and the entered password.