AP1098A - Cryptographic medium. - Google Patents
Cryptographic medium. Download PDFInfo
- Publication number
- AP1098A AP1098A APAP/P/1999/001571A AP9901571A AP1098A AP 1098 A AP1098 A AP 1098A AP 9901571 A AP9901571 A AP 9901571A AP 1098 A AP1098 A AP 1098A
- Authority
- AP
- ARIPO
- Prior art keywords
- token
- card
- electronic module
- information
- medium
- Prior art date
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
- G06K19/00—Record carriers for use with machines and with at least a part designed to carry digital markings
- G06K19/06—Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
- G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
- G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
- G07F7/1008—Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
- G06K19/00—Record carriers for use with machines and with at least a part designed to carry digital markings
- G06K19/06—Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code
- G06K19/08—Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code using markings of different kinds or more than one marking of the same kind in the same record carrier, e.g. one marking being sensed by optical and the other by magnetic means
- G06K19/083—Constructional details
- G06K19/086—Constructional details with markings consisting of randomly placed or oriented elements, the randomness of the elements being useable for generating a unique identifying signature of the record carrier, e.g. randomly placed magnetic fibers or magnetic particles in the body of a credit card
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
- G06Q20/341—Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
- G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
- G07F7/0806—Details of the card
- G07F7/0813—Specific details related to card security
- G07F7/082—Features insuring the integrity of the data on or in the card
Landscapes
- Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Physics & Mathematics (AREA)
- Theoretical Computer Science (AREA)
- Business, Economics & Management (AREA)
- Computer Security & Cryptography (AREA)
- Strategic Management (AREA)
- Accounting & Taxation (AREA)
- Computer Networks & Wireless Communication (AREA)
- General Business, Economics & Management (AREA)
- Microelectronics & Electronic Packaging (AREA)
- Storage Device Security (AREA)
- Credit Cards Or The Like (AREA)
- Casting Or Compression Moulding Of Plastics Or The Like (AREA)
- Preparation Of Compounds By Using Micro-Organisms (AREA)
- Medicinal Preparation (AREA)
- Transition And Organic Metals Composition Catalysts For Addition Polymerization (AREA)
- Laminated Bodies (AREA)
Abstract
A cryptographic medium including embedded metallic particles. I ne particles provide a unique signature when the card is exposed to a radio frequency signal. The medium includes programming and storage capability, so that protocols for different types of transactions may be stored on the medium, along with personal information associated with the user of the token. The token may take the form of a plastic card, which includes an electronic module fabricated using a multi-chip module design and including the programming and storage capability. The design allows greater computing and storage capacity on the card. At least the electronic module is encapsulated in a plascon material, giving the overall card a more physically secure construction.
Description
CRYPTOGRAPHIC MEDIUM
FIELD OF THE INVENTION
The present invention relates in general to a medium used for performing transactions, in particular, the present invention relates to a medium used for performing secure transactions, such as banking or other commercial transactions.
BACKGROUND OF THE INVENTION o Currently, activity in the area of smart cards has been driven primarily by the need to protect the telephone industry. Cellular telephones in particular are subject to fraudulent billing, at worst, and refusal to pay problems at best; in any event, the losses are measured in the millions of dollars per day in N.Y. City alone. In Europe, the GSM celluiar system took action and instituted the telephone card system, which required the use of a card to prepay the call or cash debit a prepaid account. This approach corrected the problems with the telephone charge system to some degree. However, the criminal element moved its attentions to different methods, from cloning (counterfeiting) the telephone to the attacking (fraudulent use) the prepaid cards. These cards, designed for telephone use, are for the most part decrement-only cards, or prepaid cards which are used and then thrown away. This type of card represents approximately 90% of the total number of “smart cards generated in the world.
Industry standard cards, having been developed with the phone card application in mind, took advantage of the ready accessibility of semiconductor memory chips, and the card manufacturers, seeing a disposable market as being ideal, decided to make the “smart card as an inexpensive throwaway. By making as few changes in existing products as possible, a method of billing phone calls only required the insertion of a small semiconductor die, which was then connected by wire to the minimum of contact points, into a card (paper or plastic). The very requirements which were necessary tor the one application drove the rest of the industry. The poor physical security of a die embedded into a 25mm sq. well milled in the plastic card also meant that the lifetime of the card
AP/P/ 9 9 / 0 1 5 7 1
AP Ο Ο 1 Ο 9 8 could be measured in days. Still, this continued to be suitable for the telephone industry.
Security as a whole, has been under review at all levels of the information infrastructure. Computers, which are used to access control to information, to physical locations, and to special areas are also under review. Alt software solutions for security are all too easily compromised. A token device to be held by the individual user was required.
Currently, the widespread adoption of these concepts is evident by the need for an average individual to carry a half-dozen cards, or more. What was io once a simple need and requirement, has overtime developed into an accepted practice. The downside of the widespread adoption of cards is the sheer number of cards required by an individual.
Also involved is the relationship of each individual with the computer-aided environment Microsoft, and others in the computer software business, have gone to great lengths to encourage each person to rely, to an ever-greater degree, with a computer at home and the computer in the workplace. Industry has also invested great sums of money to take advantage of the efficiencies and workflow improvements provided by the computer.
Available computer software includes hundreds of applications, which would at first glance seem benign, but may render users vulnerable and even whole industries are now blurred with respect to the computer. For example, where or what is a “virtual point of presence”? Banking in particular, which as an industry has traditionally made its profit margins on services and the need for customers to visit, or at least exchange paper (money, stocks, bonds, etc.), have a serious problem with the provision of these traditional banking services using software, through on-line companies like Microsoft and Intuit.
In recent years security of information within the banking community has been deemed as only necessary during the transmission of information over special leased “private network lines. The banks have placed cryptographic link devices between one point of communications and another, e.g., bank to bank.
In the original scheme of things this worked. Banks were primarily paper houses and the only transfer of information was in the form of messages or specific types
AP/P/ 9 9/01571
ΛΡΟ 01 ο 9 8 of information, having format and structure, but still just between the banks and ultimately to the Federal Reserve or Treasury Department.
As computers reached the desktop in size and capability, the banks, eager to become efficient, began to connect more and more employees and service groups together. The interoffice connection was considered ‘safe” largely because all of the connectivity was internal to the bank and relatively isolated.
As the banks branched out to reach customers so did the banks network facility reach out and expand the ability of the bank employees and executives to communicate with one another. Still, the security solution was defined as only io being necessary for those transactions between facilities, and this requirement could be satisfied by the communications link equipment. However, the growth of the intra-bank communications paths reached a degree of complexity and completeness which was not entirely expected. The hardware engineers had. succeeded, everyone could talk electronically to everyone else about anything.
However, all information is not equal and something must be done to control the r jw of information proportional to the need to know access of the various individuals within the bank. Customer data needed to be protected from those employees who did not need to know about account balances. Merger and acquisition trader information could not be allowed to be available to the teller at the computer-based drive in window.
Moreover, as the interconnectivity of the bank as an institution increased, the availability of information became more and more accessible to more and more people. Encryption of the links between facilities, while still necessary to protect the information being sent from one location to another, did not provide the separation of information required. Other examples of the need for the separation of information were established with the passage of the Privacy Act of 1974. This law made it mandatory for the confidential information acquired either by employers, or banks or doctors and the like, be held in confidence and protected from unauthorized or inappropriate access.
To further complicate the information distribution pool, is the rising demand to provide banking services and products to the customer via EDI or the Internet. Current use of hardware link devices does not allow for protection of the information moving from address to address or person to person within the
AP/P/ 99/01571
APO Ο 1 Ο 9 8 network of a given bank or organization. Nor does the process of protecting the link of communications provide any confidentiality to the information moving within the link.
The same situation is true for information moving from an Automated
Teller Machine (ATM) to a bank or clearinghouse. The industry as a whole has been trying to resolve this and has submitted a specification: “The Secure Electronic Transaction Specification” or SET. This specification provides for the protection of information in transmission from one EDI position to another, that is, from merchant to bank or ATM to clearinghouse. This specification, however, is io not intended to protect the information itself, just the path. It is up to the functional owner of the information to provide security to the information. To this problem is offered this solution.
It is the parallel needs of these circumstances which demands an overall solution. The deficiencies present in conventional cards which make them unsuitable as a solution are many. For example, each has a small die size defined by the 25mm well or hole in the card. Further, the practice of mounting the die in a drop of epoxy exposes it to environmental, logical, and physical abuse. This type of product offers limited physical and logical security. The result is minimal functionality and memory capacity available if the semiconductor industry is bound by the 25mm square definition imposed by the card industry.
An additional limitation is the dependence of the industry on existing solutions in cryptographic security, and the overall misapplication of these generic solutions to a very specific task.
On the logical issue, conventional cards have, on the whole, tried to use a public/private key approach for controlling access to the card information. This has had its limitations for several reasons. First, the public/private key process requires a separate co-processor to accomplish the actual computations, and this co-processor can take up to 40% of the total die size and also of the limited space in the card well. Further, the computations of public/private key are time so consuming and each effort provides an unwelcomed delay in performance. The issue of protection of an individual's private key is often overlooked, that is, the entire security scheme is dependent on the private half of the key remaining a secret.
I £ s t 0 / 6 6 /d/dV
APO Ο 1 09 8
Plastic cards have been in use for a number of years. Plastic is inexpensive, allows for shaping, printing, embossing, and for the addition of a strip of magnetic tape. However, all of these common characteristics also enable misuse when a plastic card is applied to a financial or credit application. Credit card fraud isa major problem precisely because of the ease of duplication of the plastic card.
What is required is a method or process to provide a unique characteristic to the plastic card/material which is also inexpensive so as to not impact the ubiquitous use of the product, and at the same time defeat the misuse of the io device in financial applications.
SUMMARY OF THE INVENTION
The approach of using a small 25mm sq. hole in a card was defined by the physics of the semiconductor die. The overall dimensions of s single memory die is measured in width, length, and height. The length and width are fixed and immutable. However, the average die is between 20 and 25 mils thick. And of that thickness, approximately 12 to 17 mils is occupied by the alumina substrate necessitated by the photoetching process of semiconductor manufacturing. By · putting together a multi-chip module (MCM) design which provides a high degree of density and capability, and then encapsulating the MCM in a plascon material, similar to the material currently used in the standard semiconductor manufacturing process, to provide stability, a thinning process can be executed which renders the thickness of the entire module to between 6 and 10 miis in thickness. This very thin product also takes on a very high degree of flexibility, analogous to aluminum foil and aluminum plate. This thinning removes the need for the 25mm limitation found in all other industry products. In fact, 80% of the area of the plastic card can be used to house electronic components.
Because of the plascon, the flexible MCM is completely sealed from outside environmental contaminates’. The resultant module can be laminated within two outer layers of plastic and actually be reused if the outer housing should be damaged by accident or misuse.
This provides an improvement in security, which in existing cards is minimal in the physical sense. The unprotected die of memory or processor 5
AP/P/ 9 9 / 0 1 5 7 1
APO Ο 109 8 functions is currently wire bonded to an ISO-specified metal contact materia) (see ISO Std. 7816-2 / Physical Specifications and -3 / Electrical Specifications). As such, the die is open to probing, attachments, or any other type of physical analysis. Further, when you flex the current industry standard card, the imbedded die jumps up and off of the card like a flea.
BRIEF DESCRIPTION OF THE DRAWING
Fig. 1 a block diagram showing an exeplary use of the present invention.
IO DETAILED DESCRIPTION OF THE INVENTION
Metallic material can be shaped into very small particles. Slivers of metal of varying lengths have a particular characteristic when used as an antenna for radio frequency. When the metal length and the wavelength of the radio frequency are the same, the metal material resonates, or more accurately reflects is the signal in a very efficient manner. The mixing of very small, sub-micron bipolar antennas, that is, metal particles in the plastic sluny at the time of manufacturing, would generate a naturally random disbursement of the metal particles in the resultant plastic card. This random placement of particles can then be illuminated with a very low level RF signal which reflects a unique pattern based on the physical position of the particles suspended in the material. This reflected pattern is unique for each card, unique to the frequency used to illuminate the card, and different depending on which portion of the card is used' to compare patterns.
This unique physical signature can be used to assure the physical integrity of the card as well as the unique identity of the card because the disturbance of the particles, not only as individual particles but also in relationship to each other particle as a whole entity (this is a 3 dimensional event), is detectable.
In the case of credit cards or Automatic Teller Machines (ATM) applications, the card and its unique RF signature can be read at the time of so insertion, very quickly, and the physical integrity and unique identification of the card is corroborated. The frequency at which the card is read may also change or be varied at what ever periodicity is desired. For example, on the first day of manufacture, the card is read in a stripe fashion much the same as a common 6
AP/P/ 9 9 / 0 1 571
APOO1098 magnetic stripe is read today. However, this RF reading is made at an initial frequency of 10Ghz. The reflected signal is characterized and stored in a ' database along with the account number and name of the recipient of the card.
At each reading of the card thereafter, not only can the initial reading be confirmed, the card can be read at another frequency to add to the initial characteristic database and can be used to check the same integrity and uniqueness. In a matter of days, the continuous use of the card would allow for check and counter-check against an immutable physical characteristic, assuring the issuer of the card that it had not been tampered with in any physical way.
io The card of the present invention has two physical components, the plastic carrier or body of the card and the electronic module (approximately 1 square inch of semiconductor die, interconnected and embedded in plascon). The RF signature can be read on the module as a separate entity and/or combined with the signature of the card itself, to assure the relationship of the two devices is as originally intended. Moreover, if the card body or carrier should be damaged beyond the toleration level of the issuer or holder, the original card can be destroyed and the electronic module portion can be embedded into another card body, at which time a new signature would be read and used for future RF validation processes. This would allow continuous use of the content of the
2D electronics, and reduce the replacement cost to the issuer of the cost of the plastic body or card.
A token device is consistent with Federal Information Publication System Bulletin #140-1. It is within this document that the concept is expressed that identification of an individual to a system should be token-based. The idea is that individual information should reside off of the computer system that is used for information sharing and in a piatform that is separate and isolated from access by others on that system. This means that the token may be represented by a floppy disk, a PCMCIA card, or a smartcard. The limitations of function and capacity of other cards have restricted the application of this type of a system.
Tokens have been in use for a number of years. In fact, one of the problems in the security/access control market is the number of different tokens necessary in the day’s events. A token (swipe card) is used to enter a garage area, another permits entry into a building, a third allows for access to a special 7
AP/P/ 9 9/01*71
AP Ο Ο 1 Ο 9 8 secured area, and yet another token is required for access to a computer terminal. In certain environments, the number of tokens may exceed a dozen.
This situation is caused primarily by the development of each of the various systems under different manufacturers, each of whom, in trying to get the most out of a sale, insists on their own token. A common token for all functions has not been possible for lack of computational power and memory capacity.
The present invention with its 16-bit CPU and large (initially 1 Megabyte) memory capacity offers several significant parts to the overall solution set of problems associated with security and electronic transactions.
o The 16-bit CPU offers the computational capability necessary not only to process large addressing schemes, but aiso to process a variety of protocols and the communications structures of different manufacturers. The card of the present invention can support large memory transfers and more importantly, can support multiple applications on a single card. The introduction of Constructive
Key Management cryptography enables the card to enforce this application separation. Each functional owner of a memory segment or application can operate a completely different process of access and data storage, with the knowledge that it is not possible for any one else to have access to an inappropriate information object.
2o Such a card has been manufactured by Lockheed Martin, Sillcocks Plastics, and Secure Transaction Solutions using an Intel 80188EB CPU; 64k bytes of One Time Programmable processor instructions; 512k bytes of DRAM for memory buffer and scratchpad memory for CPU activity (program execution); 512k bytes of Electrically alterable program memory; and the associated latches and switches necessary to operate the card. Additional configurations may be utilized. The CPU addressing scheme allows far direct memory addressing of 32 megabytes of memory in various configurations of RAM and ROM consistent with the requirements of the various applications.
The plastic stock material from which the card is cut is impregnated with the sub-micron chaff material necessary for the RF ID process to operate. The RF Signature and ID process is thereby associated with the card (for example, the RF signature at various frequencies and various locations on the card).
AP/P/ 99/01571
APO Ο 109 8
The card is also capable of supporting magnetic stripe, printed Information such as a 4-coior photo, fingerprint, signature block, special symbols or logos, holograms, and other pieces of printed or attached information.
The basic operating system for the CPU may be installed in the EEPROM at □ the time of manufacture, or prior to manufacturing, at the EEPROM factory.
The card is assigned to a particular user, with a unique account number, arid the RF ID is read and stored In non-voiatlle memory along with any other issuer / user-necessary information that might be desired, like a 4-color photo of the user (compressed and hashed), and a File Allocation Table (FAT) is created to allow o the CPU to parse the memory sectors for later activation for additional applications. The user, upon receipt, will activate the card if received remotely, much as one does with conventional cards, and consistent with security practice if access is granted under a separate channel of distribution, e.g., telephone, U.S. Maii, or courier. The user can accept the offered Personal Identification Number (PIN) or select his/her own.
An exemplary use of the card of the invention is now illustrated, with reference to Fig. 1. The card is presented to an ATM. The RF ID is read from the card and its value is read into a register. The CPU of the card and the ATM exchange a * series of signals to establish a common protocol. The card is capable of multiple protocols and therefore allows for a much greater degree of freedom of participation for the user.
Having achieved a common communications base, the ATM requests the PIN of the user of the card, which is stored in an encrypted form in the memory sector appropriate to that type machine, for example a MOST, or Cirrus transaction. The
PIN is transmitted on-line to the respective clearing house via the dedicated SETapproved communications link, along with the previously-stored RF ID number. This information is sent to a clearing house firewall where the format of the information is screened for conformity. If it is acceptable, the packet is allowed to continue onward to the decryption area, where the information packet is so decrypted using the indexing information bits in the header of the sent information along with the RF ID data to create a user key, which when combined with the database-stored component of a user access table generates the key to decrypt the actual packet. Within the packet are the credentials of the individual account, 9
AP/P/ 9 9 / 0 1 5 7 1
ΑΡθΟ 1 0 9 8 th© confirmation of the holder and card, and an audit of a predetermined number of past transactions which are relevant to this particular issuer. The past transactions are validated and the permission is sent to the ATM to proceed. The validation of past transactions includes the performance of several functions, the obvious update or correction if necessary, and also the assurance offered to the issuer that the message or content of encrypted data is large enough to assure no tampering or partial changes have occurred. The ATM then presents a list of actions which can be chosen by the user, and those selections are used as cryptographic splits to generate at the ATM an encrypted request/instruction io which is sent to the clearing house. The screening process is repeated and if appropriate, the transaction is allowed. The updated (audit trail included) user packet is encrypted at the clearing house and sent back to the ATM to be entered on the user's card. No encryption occurred, on the card, in this particular transaction. In another protocol, or in a different application, encryption may be
I5 desired and desired to occur on the card. The powerful 16-bit processor and memory configuration of the card supports the choice.
Use of the card of the present invention in making a credit card transaction is now described. The card is offered to the merchant terminal. The terminal reads the RF ID value and stores it in a register. The card negotiates an exchange to determine correct protocol with the merchant device. The card, having a powerful 16-bit CPU, is capable of processing many different applications and protocols, and having achieved an acceptable communications link, also negotiates the highest baud rate that is mutually acceptable, up to 115,200 baud (currently). The merchant terminal requests οπ-iine status with the respective clearing house and the combined value of the RF ID and the merchant membership number, along with the terminal ID number, are used to generate a unique key which is used to communicate and build a session key with the clearing house. The unique session key assures the participating merchant and the user of the card that the total transaction will be transmitted to the clearing house and the resulting answer will be encrypted using the identical components for key construction, assuring that the answer or acknowledgement can only be deciphered by the appropriate parties, i.e., the user and the merchant, at that
AP/P/ 9 9 / 0 1 5 7 1 io
AP Ο Ο 1 Ο 9 8 particular device. The information at the clearing house is decrypted and processed and the audited transaction is processed.
The card of the present invention may also be used to establish a secure Internet commerce relationship. A user of the Internet selects a Web page of a particular vendor. The page offers an opportunity to download transaction software. A click of the mouse and the transfer is complete. The software is sent as a serialized self-extracting executable file, which when selected will extract and install itself and present a screen that asks if now would be a good time to fill out the registration form for that particular vendor. This is also suggested to io occur off-line. The registration form is filled out and all significant data is entered, including the type of payment, credit card number, etc. The software asks if the user wishes to take advantage of a Storage of Permissions Feature, which allows the user to store on the card, the permission/identifying splits that were generated by the vendor software. The user agrees and the card is presented and the information stored. The send button is selected and the automatically-encrypted bundle is sent back to the vendor of choice. The vendor receives the encrypted bundle and opens it. Recognizing the form/structure of the bundle, the encryption is automatically keyed with the serial number of the copy of the downloaded software, and the vendor firewall allows the bundle to pass to the processing
2o area. The user, having gone back to the Web page, is now looking at the vendor i catalog and selecting items for purchase, each of which has a number. It is the combination of these numbers and the number of the serialized software that generates the selected components of the split key encryption. All messages are protected and all communications are unique between the vendor and the user.
Claims (5)
- What is claimed is:1. A cryptographic medium, comprising:a plastic base;5 metallic slivers embedded in random locations in the plastic base for providing a unique RF signature; and an electronic module coupled to the plastic base, comprising processing means, and storage means.io
- 2. The cryptographic medium of claim 1, wherein the plastic base includes a plascon material encapsulating at least the electronic module.
- 3. The cryptographic medium of ciaim 1, wherein the metallic slivers are formed is in random sizes.
- 4. The cryptographic medium of claim 1, wherein the metallic slivers are formed in random, submicron sizes.20 5. The cryptographic medium of claim 1, wherein the electronic module includes a central processing unit.6. The cryptographic medium of claim 5, wherein the central processing unit is a 16-bit central processing unit.7. The cryptographic medium of ciaim 1, wherein the electronic module includes storage memory.8. The cryptographic medium of claim 7, wherein the storage memory includes 30 user identification data.I L S t 0 / 6 6 /d/dV pji I·*-!—3APO Ο 1 0 989. The cryptographic medium of claim 8, wherein the user identification number is suitable for providing access to a financial account through use of an automated teller machine.
- 5 10. A method of forming a cryptographic medium, comprising:a) forming a plastic base having a void therein, and metallic slivers embedded therein;b) fabricating an electronic module using a multi-chip module design;c) placing the electronic module within the void; and io d) encapsulating at least the electronic module in a plascon material.11. The method of claim 10, wherein fabricating an electronic module includes fabricating a central processing unit.15 12. The method of claim 11, wherein fabricating a central processing unit includes fabricating a 16-bit central processing unit13. The method of claim 10, wherein fabricating an electronic module includes fabricating a storage memory.14. A method of using a cryptographic medium in a transaction, comprising:a) presenting a token at a transaction point;b) reading physical characteristics of the token to obtain a signature of the token;c) interpreting the signature to extract information: and25 d) determining whether the transaction will proceed based on the extracted information.15. The method of claim 14, wherein the physical characteristics of the token include the presence of metallic slivers included in the token.16. The method of claim 15, wherein the signature of the token is a radio frequency signature.I L S I 0 / 6 β /d/dV17. The method of claim 14, wherein the extracted information is security information.18. The method of claim 14, wherein the information is token user identification 5 information:19. The method of claim 14, further comprising reading data from the token.20. The method of claim 19, wherein reading data from the token includes io communicating with a processing unit disposed on the token to read the data stored in memory disposed on the token.
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US3128396P | 1996-11-20 | 1996-11-20 | |
PCT/US1997/021809 WO1998022914A2 (en) | 1996-11-20 | 1997-11-20 | Cryptographic medium |
Publications (2)
Publication Number | Publication Date |
---|---|
AP9901571A0 AP9901571A0 (en) | 1999-06-30 |
AP1098A true AP1098A (en) | 2002-08-29 |
Family
ID=21858590
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
APAP/P/1999/001571A AP1098A (en) | 1996-11-20 | 1997-11-20 | Cryptographic medium. |
Country Status (18)
Country | Link |
---|---|
EP (1) | EP1008101A4 (en) |
JP (1) | JP2001504617A (en) |
KR (1) | KR100372628B1 (en) |
CN (1) | CN1246188A (en) |
AP (1) | AP1098A (en) |
AU (1) | AU728517B2 (en) |
BR (1) | BR9713162A (en) |
CA (1) | CA2272383A1 (en) |
CZ (1) | CZ178599A3 (en) |
EA (1) | EA001552B1 (en) |
HU (1) | HUP0001638A3 (en) |
NO (1) | NO992416L (en) |
NZ (1) | NZ336338A (en) |
OA (1) | OA11120A (en) |
PL (1) | PL333506A1 (en) |
TR (1) | TR199901122T2 (en) |
UA (1) | UA43455C2 (en) |
WO (1) | WO1998022914A2 (en) |
Families Citing this family (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO2000028493A1 (en) * | 1998-11-10 | 2000-05-18 | Kent Ridge Digital Labs | A method of encryption and apparatus therefor |
AUPQ556600A0 (en) | 2000-02-14 | 2000-03-02 | Ong, Yong Kin (Michael) | Electronic funds transfers-zipfund |
CN1141680C (en) * | 2000-02-15 | 2004-03-10 | 史蒂夫·马格鲁 | Guantum dot safety device and method |
Citations (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5612532A (en) * | 1993-09-01 | 1997-03-18 | Kabushiki Kaisha Toshiba | Thin IC card and method for producing the same |
Family Cites Families (9)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
FR2590051B1 (en) * | 1985-11-08 | 1991-05-17 | Eurotechnique Sa | CARD COMPRISING A COMPONENT AND MICROMODULE WITH SIDING CONTACTS |
JPH0517270Y2 (en) * | 1986-07-03 | 1993-05-10 | ||
JPS6332658A (en) * | 1986-07-28 | 1988-02-12 | Casio Comput Co Ltd | Ic card system |
FR2620586A1 (en) * | 1987-09-14 | 1989-03-17 | Em Microelectronic Marin Sa | METHOD FOR MANUFACTURING ELECTRONIC MODULES, IN PARTICULAR FOR MICROCIRCUIT CARDS |
US5049728A (en) * | 1990-04-04 | 1991-09-17 | Rovin George H | IC card system with removable IC modules |
EP0583709B1 (en) * | 1992-08-17 | 1999-05-06 | THOMSON multimedia | Unforgeable identification device, identification device reader and method of identification |
JP2896031B2 (en) * | 1992-12-28 | 1999-05-31 | 三菱電機株式会社 | Contactless IC card terminal and contactless IC card system |
JPH07271939A (en) * | 1994-03-30 | 1995-10-20 | Mitsubishi Denki Semiconductor Software Kk | Non-contact ic card, card reader/writer and card device |
KR0137258B1 (en) * | 1994-08-03 | 1998-04-24 | 이용규 | Control apparatus of rice cooker using remote control |
-
1997
- 1997-11-20 AP APAP/P/1999/001571A patent/AP1098A/en active
- 1997-11-20 EP EP97953060A patent/EP1008101A4/en not_active Withdrawn
- 1997-11-20 AU AU56882/98A patent/AU728517B2/en not_active Ceased
- 1997-11-20 HU HU0001638A patent/HUP0001638A3/en unknown
- 1997-11-20 EA EA199900482A patent/EA001552B1/en not_active IP Right Cessation
- 1997-11-20 CN CN97181207A patent/CN1246188A/en active Pending
- 1997-11-20 WO PCT/US1997/021809 patent/WO1998022914A2/en not_active Application Discontinuation
- 1997-11-20 CA CA002272383A patent/CA2272383A1/en not_active Abandoned
- 1997-11-20 NZ NZ336338A patent/NZ336338A/en unknown
- 1997-11-20 KR KR10-1999-7004483A patent/KR100372628B1/en not_active IP Right Cessation
- 1997-11-20 TR TR1999/01122T patent/TR199901122T2/en unknown
- 1997-11-20 UA UA99063444A patent/UA43455C2/en unknown
- 1997-11-20 JP JP52400198A patent/JP2001504617A/en active Pending
- 1997-11-20 CZ CZ991785A patent/CZ178599A3/en unknown
- 1997-11-20 BR BR9713162-8A patent/BR9713162A/en unknown
- 1997-11-20 PL PL97333506A patent/PL333506A1/en unknown
-
1999
- 1999-05-19 OA OA9900104A patent/OA11120A/en unknown
- 1999-05-20 NO NO992416A patent/NO992416L/en not_active Application Discontinuation
Patent Citations (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5612532A (en) * | 1993-09-01 | 1997-03-18 | Kabushiki Kaisha Toshiba | Thin IC card and method for producing the same |
Also Published As
Publication number | Publication date |
---|---|
NO992416L (en) | 1999-07-07 |
AP9901571A0 (en) | 1999-06-30 |
AU5688298A (en) | 1998-06-10 |
UA43455C2 (en) | 2001-12-17 |
WO1998022914A3 (en) | 1998-07-23 |
EA199900482A1 (en) | 1999-12-29 |
TR199901122T2 (en) | 1999-08-23 |
KR20000057177A (en) | 2000-09-15 |
KR100372628B1 (en) | 2003-02-17 |
OA11120A (en) | 2003-04-04 |
CN1246188A (en) | 2000-03-01 |
WO1998022914A2 (en) | 1998-05-28 |
JP2001504617A (en) | 2001-04-03 |
EP1008101A4 (en) | 2003-03-26 |
EP1008101A2 (en) | 2000-06-14 |
AU728517B2 (en) | 2001-01-11 |
HUP0001638A3 (en) | 2002-01-28 |
EA001552B1 (en) | 2001-04-23 |
PL333506A1 (en) | 1999-12-20 |
NO992416D0 (en) | 1999-05-20 |
CA2272383A1 (en) | 1998-05-28 |
BR9713162A (en) | 2002-01-22 |
HUP0001638A2 (en) | 2000-09-28 |
NZ336338A (en) | 2000-02-28 |
CZ178599A3 (en) | 1999-11-17 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
Jurgensen et al. | Smart cards: the developer's toolkit | |
US7003501B2 (en) | Method for preventing fraudulent use of credit cards and credit card information, and for preventing unauthorized access to restricted physical and virtual sites | |
DE69900169T2 (en) | CREDIT CARD SYSTEM AND PROCEDURE | |
Fancher | In your pocket: smartcards | |
US7119662B1 (en) | Service system, information processing system and interrogator | |
US20060190412A1 (en) | Method and system for preventing fraudulent use of credit cards and credit card information, and for preventing unauthorized access to restricted physical and virtual sites | |
JP2002512711A (en) | Transaction method with portable identification element | |
CN104732379A (en) | Secure Payment System | |
US9978061B2 (en) | Method for processing transaction using dynamic pan | |
US7159241B1 (en) | Method for the determination of soundness of a sheet-shaped medium, and method for the verification of data of a sheet-shaped medium | |
CN102945334A (en) | Safety equipment with virtual on-chip operating system, safety device with virtual on-chip operating system, systems and methods | |
AP1098A (en) | Cryptographic medium. | |
WO1998022914A9 (en) | Cryptographic medium | |
CN108475374B (en) | Payment device with multiple modes for conducting financial transactions | |
JP2001266088A (en) | Card and its forger-preventing method | |
JP2004287805A (en) | Slave card issuance system and slave card utilization system | |
MXPA99004687A (en) | Cryptographic medium | |
Mackinnon et al. | Smart cards: A case study | |
WO2001054003A1 (en) | Secure internet payment method | |
CN111833176A (en) | Financial account opening method, financial account opening device and financial account opening system | |
Rohland | Token-based information security for commercial and federal information networks | |
HUAT | SMART CARD IMPLEMENT AIION MODEL | |
MXPA00009309A (en) | Credit card system and method |