초록 ▼

A system for network-based electronic commerce employing integrated circuit cards is provided. In one embodiment, cardholder authentication is provided by use of on-card symmetric cryptographic processing. The cardholder thus need not be limited to performing transactions from any particular compute

A system for network-based electronic commerce employing integrated circuit cards is provided. In one embodiment, cardholder authentication is provided by use of on-card symmetric cryptographic processing. The cardholder thus need not be limited to performing transactions from any particular computer system. Asymmetric cryptographic techniques are employed for communication of transaction data over the network.

대표청구항 ▼

[ What is claimed is:] [1.]1. A computer-implemented method for securely processing commercial transactions over a network, comprising the steps of:providing a card access device;providing an integrated circuit card;establishing a connection between the card access device and the integrated circuit

[ What is claimed is:] [1.]1. A computer-implemented method for securely processing commercial transactions over a network, comprising the steps of:providing a card access device;providing an integrated circuit card;establishing a connection between the card access device and the integrated circuit card, wherein the card access device is coupled to the network;providing a cryptogram generation command comprising challenge data;transferring the cryptogram generation command from the card access device to the integrated circuit card;encrypting the challenge data using the integrated circuit card to form a response, wherein the step of encrypting the challenge data is in response to the cryptogram generation command;transferring the response from the integrated circuit card to the card access device;forming a payment instruction message at the card access device, wherein the payment instruction message comprises the response; andencrypting at least a portion of the payment instruction message using asymmetric cryptographic techniques wherein the two encrypting steps are part of a same commercial transaction.