EP0101711A1 - A portable device for storing and transferring data - Google Patents

A portable device for storing and transferring data

Info

Publication number
EP0101711A1
EP0101711A1 EP83900809A EP83900809A EP0101711A1 EP 0101711 A1 EP0101711 A1 EP 0101711A1 EP 83900809 A EP83900809 A EP 83900809A EP 83900809 A EP83900809 A EP 83900809A EP 0101711 A1 EP0101711 A1 EP 0101711A1
Authority
EP
European Patent Office
Prior art keywords
card
data
terminal
computer
micro
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP83900809A
Other languages
German (de)
French (fr)
Inventor
Patrick Victor Cremin
Patrick Gerard Carroll
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Telefonaktiebolaget LM Ericsson AB
Original Assignee
Telefonaktiebolaget LM Ericsson AB
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Telefonaktiebolaget LM Ericsson AB filed Critical Telefonaktiebolaget LM Ericsson AB
Publication of EP0101711A1 publication Critical patent/EP0101711A1/en
Withdrawn legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
    • G07F7/1008—Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
    • G06K19/00—Record carriers for use with machines and with at least a part designed to carry digital markings
    • G06K19/06—Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code
    • G06K19/067—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components
    • G06K19/07—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components with integrated circuit chips
    • G06K19/0723—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components with integrated circuit chips the record carrier comprising an arrangement for non-contact communication, e.g. wireless communication circuits on transponder cards, non-contact smart cards or RFIDs
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/22—Payment schemes or models
    • G06Q20/229—Hierarchy of users of accounts
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/341—Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401—Transaction verification
    • G06Q20/4014—Identity check for transactions
    • G06Q20/40145—Biometric identity checks
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/409—Device specific authentication in transaction processing
    • G06Q20/4097—Device specific authentication in transaction processing using mutual authentication between devices and transaction partners
    • G06Q20/40975—Device specific authentication in transaction processing using mutual authentication between devices and transaction partners using encryption therefor
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
    • G07C9/00—Individual registration on entry or exit
    • G07C9/20—Individual registration on entry or exit involving the use of a pass
    • G07C9/22—Individual registration on entry or exit involving the use of a pass in combination with an identity check of the pass holder

Definitions

  • the present invention relates to a portable device for storing and transferrin data, the device being of the type comprising memory means for storing th data and an identifying characteristic to prevent unauthorised use of th device, coupling means for coupling the device to an external terminal or othe device for transferring data, micro-computer means to update the data in th device after data transfer, means to compare an identifying characteristi entered by the user with the identifying characteristic stored in the memor means, and clock means to drive the micro-computer.
  • Such devices are well known, and generally are in the form of a substantiall flat pocket sized card.
  • a monetary balance or any other data may be stored i the device, and transferred to another device.
  • a coupling terminal is normall provided for routing the data being transferred and the two portable devices between which a transaction is to be made are connected into the coupling terminal.
  • U.S. Patent Specifications Nos. 4,211,919, 4,102,493, 4,092,524, 4,007,355, 4,001,550 and 3,971,916 describe such devices and terminals.
  • OMPI Secondly, where data is transferred from a card, it is relatively easy to tap into the line transferring the data and record the transaction. Accordingly, the transaction may be replayed an unlimited number of times, and thus in the case of funds transfer, an amount of money may be fraudulently transferred an unlimited number of times.
  • the invention achieves these objects and overcomes the problems of prior art devices by virtue of the fact that the memory means in the portable device stores a plurality of identifying characteristics and the micro-computer means selects at least one of the identifying characteristics and queries the user on the selected characteristics prior to data transfer.
  • the advantage of the invention is .that it provides a device which is relatively secure against fraudulent use. This is because the invention permits a user of the device to be queried on one or more of a number of identifying charac ⁇ teristics, and this has the further advantage that the number of characteristics on which the user is queried, may be increased or decreased, depending on, for example, the type of data being transferred. If the data being transferred is of relatively limited value and/or importance, only one or a few characteristics may be selected. However, if the data is important, or of a high value, then many more characteristics may be selected. For example, in the case of user making a small purchase, he may be queried on only one characteristic thereby . having the advantage of saving time, for example, at a checkout in store. While on the other hand, if he is making a large purchase, many mor characteristics may be selected.
  • the micro-computer means randomly selects one or more of th identifying characteristics.
  • the advantage of this feature of the invention i that it makes it more difficult for fraudulent use of the card.
  • the number of identifying characteristic selected by the micro-computer means is dependent on the data to b transferred.
  • This feature of the invention is that it permits relatively small and unimportant transactions to be carried out quicker than larger or more important transactions, thereby adding to the speed at which transactions may be carried out.
  • At least one of the identifying characteristics is variable with time.
  • At least some of the identifying characteristics are characteristics of the user, and at least one of the variable identifying characteristics is the users age.
  • the micro-computer means comprises means to date stamp each data transfer to make it a unique transaction.
  • the computer means comprises means to update the data in the memory means at certain pre-determinad times.
  • the advantage of this feature of the invention is that it permits the data in the card to be updated by other pre-determined data at pre-determined times.
  • a particular advantage of this feature of the invention is that when the device is used for the storage and transfer of monetary amounts, the balance in the card may be increased or decreased by cerain pre-determined amounts at certain pre-determined times, for example, where standing orders or the like are to be transferred.
  • the data stored in the memory means is a monetary balance.
  • the advantage of this feature of the invention is that it permits the device to be used in a funds transfer system.
  • Fig. 1 is a perspective view of a portable device according to the invention
  • Fig. 2 is a circuit diagram of the device of Fig. 1,
  • Fig. 3 is a perspective view from one side of a coupling terminal, also according to the invention, for use with the portable device of Fig. 1,
  • Fig. 4 is a plan view of the coupling terminal of Fig. 3,
  • Fig. 5 is a circuit diagram of the coupling terminal of Fig. 3,
  • Fig. 6 is a flow diagram illustrating the operations carried out by the terminal of Fig. 3,
  • Fig. 7 is a circuit diagram of a coupling terminal according to another embodiment of the invention
  • Fig. 8 is a flow diagram for the coupling terminal of Fig. 7,
  • Fig. 9 is a circuit diagram of a terminal according to a further embodiment o the invention.
  • Fig. 10 is a flow diagram for the terminal of Fig. 9,
  • Fig. 11 is a circuit diagram of a coupling terminal according to a still further embodiment of the invention.
  • Fig. 12 is a flow diagram for the terminal of Fig. 11,
  • Fig. 13 is a circuit diagram of a coupling terminal according to a still further embodiment of the invention.
  • Fig. 14 is a flow diagram for the terminal of Fig. 13.
  • a portable device for storing and transferring " data according to the invention, in this case, for use in storing and transferring monetary funds.
  • the device is indicated generally by the reference numeral 1 and is substantially card-shaped, suitable for carrying around in a person's pocket, as for example a pocket calculator.
  • the outer dimensions of the device hereinafter referred to as the card 1 are as follows:
  • the card 1 is used in a funds transfer system and each person, organization or the like participating in the system, has a card 1.
  • each person has a consumer card into which his wages and/or other funds are transferred, and from which he may transfer funds to make purchases.
  • Each tracsr for example, has a traders card, which receives funds from the consumers card at the consumers card at the point of sale. The trader may also have a separate card from which wages are paid. All cards are substantially similar and minor differences between consumer cards, traders card and organizations card and the like are described in more detail below.
  • a coupling terminal 2 also according to the invention through which funds are transferred between the two cards 1 is also ptovided.
  • Device receiving slots in this case card-receiving slots 3 and 4 in the terminal accommodate two cards between which funds are to be transferred.
  • Each trader and organization and the like, where funds are to be transferred has a coupling terminal.
  • the terminals are substantially similar to each other with only minor variations. Such variations are merely to adapt the terminals to the specific type of funds transfer they are used for, and are described in more detail below.
  • Figs. 1 and 2 For simplicity and ease of understanding the invention, the consumer card illustrated in Figs. 1 and 2 is initially described in detail and the remaining cards are then briefly discussed. After describing the cards, a coupling terminal, for use by a trader at the point of sale is described in detail, and then the remaining coupling terminals are briefly described.
  • the consumer card 1 comprises a housing 5 of plastics material.
  • a memory means in this case a 4K battery powered CMOS RAM memory 7 is mounted in the housing 5.
  • the memory 7 comprises a plurality of memory positions which are not illustrated. These positions store the following data:
  • a The monetary balance in the card.
  • b A serial number of the card.
  • c An authenticating code which is common to and recognisable by all other cards used in the system. This code ensures that spurious cards cannot be used,
  • d A plurality of static identifying characteristics of the card holder, in this case, for example, a personal identification number, specific identifying characteristics of the card holder, such as the colour of the holders eyes, the colour of his hair, height,weight and the like.
  • OMPI e Variable identifying characteristics of the card holder, for exampl his age.
  • f The card holders dynamics signature, which is stored digitally.
  • g The expiry date of the card.
  • the card will store up to twenty identifying characteristics both static and variable.
  • the computer 6 comprises a central processing unit 12 which manages the operations of the card.
  • a ROM 11 having a capacity of at least 2K bytes is linked to the central processing unit 12, and contains stored programs to direct the operation of the computer 6.
  • a RAM 14 is also linked to the central processing unit 12.
  • the central processing unit 12 is linked to the memory 7 and randomly selects personal identifying characteristics from the memory to query the card holder prior to a transaction to establish teh authenticity of the card and the holder.
  • a program in the ROM 11 programmes the central processing unit 12 to query the card holder on varying numbers of personal identifying characteristics depending on the size of the transaction to be entered into.
  • the central processing unit 12 requests the card holders dynamic signature. This is de ⁇ scribed in detail below. Means to compare a card holders response with the queried characteristics is provided by a programme stored in the ROM. The comparision is carried out in the central processing unit 12.
  • a clock generator 15 with a speed of 32.687 KHz controls the central processing unit 12.
  • the clock speed is kept as low as possible to reduce the power consumption of the card 1.
  • the central processing unit 12 is connected to an 1/0 driver 16.
  • a security means in this case a security chip 20, is mounted in the card 1 and linked to the micro-computer 6.
  • the micro chip 20 encodes and decodes data being transferred to and from the card 1 by a public key and secret key encription technique.
  • a public key and secret key encription technique Such technique is described in detail by Rivest, Shamin and Adleman in an article entitled “A method for obtaining digital signatures and public key crypto-systems" published in Communications of ACM,
  • the security chip 20 comprises a IK RAM 22 in which the public and secret keys of the card holder are stored inaccessibly. Each key is a 150 digit number.
  • a ROM 23 having a stored programme directs the encription and decription computations, which are carried out in a central processing unit 24.
  • the central processing unit 24 is linked to a RAM 22 and the ROM 23.
  • An 1/0 driver 25 and a clock generator 26 are linked to, and control the central processing unit 24.
  • a crystal 21 linked to the micro-computer 10 synchroneses the operation of the computer 10.
  • a digital display in this case provided by an eight digit, seven segment liquid crystal display 10 is mounted in the housing 5 to permit the balance in the memory 7 to be displayed on request.
  • the display 28 is linked to the micro ⁇ computer 10.
  • a keyboard 30 in the housing 5 and linked to the microcomputer 10 permits instructions and data to be entered into the card.
  • the keyboard 30 comprises ten alphanumerical keys 31, namely keys 0 to 9.
  • Two instruction keys are also provided on the keyboard 30 namely, an instruction key 32 to instruct the card to display the balance on the display 28, a command key 33 which initiates funds transfer between two cards.
  • the command key 33 is inoperable but the funds transfer command key 33 is used to initiate funds transfer, as described below.
  • the commands are entered into the card by the keyboards on the terminal.
  • a battery 37 in this case, a rechargable nickel cadmium battery mounted in th card 1 powers the card through the power connections 38. .
  • Coupling means for the transfer of data between two cards through a terminal is provided by an ultra-sonic coupling device 40.
  • the ultra-sonic couplin device 40 is connected to the micro-computer 10 and in use, co-operates with corresponding ultra-sonic coupling device mounted in one of the slots 3 or 4 o the terminal 2.
  • the coupling means also includes a transformer powered coil 42 for the transfer of power from a terminal 2 to charge the battery during a transaction and also to provide additional power as required to the various components on the card during a transaction.
  • the coupling coil 42 co-operates with a corresponding coil in one of the slots 3 or 4 in the terminal.
  • the ultra ⁇ sonic coupling device 40 and the coupling coil 42 are both mounted internally in the card at 43, see Fig. 1. All the components in the card just described are inter-connected on a printed circuit board (not shown) and are encased in an epoxy resin to prevent tampering.
  • Other cards are provided for use in the system, for example, a card for a trader for use at the point of sale to receive funds from consumer cards.
  • An official bank card is also provided for the banks to store funds for transfer to consumers cards on request.
  • Wages payment cards are also provided. Wages payment cards store wages and the value of the wage to be transferred to each employee.
  • Figs. 3 to 5 illustrate the coupling terminal 2 for coupling two cards for the transfer of funds between each card.
  • the coupling terminal 2 is a point of sales terminal and is used in a shop or store where customers puchase items and pay for them with their concumer card 1.
  • the terminal 2 is in two portions, a consumer portion 39 and a traders portion 41 connected by cables 44.
  • the consumer card receiving slot 3 is provided in the portion 39 and the traders card receiving slot 4 is in the portion 41.
  • a third card receiving slot 46 in the portion 41 receives a back-up card which is a duplicate of the traders card. All transactions recorded on the traders card are duplicated on the back ⁇ up card in the event of loss or damage to the traders card.
  • the slot 46 houses the back-up card in a portion of the terminal, which is accessible only by a bank.
  • Two digital displays are provided, one on each portion 39 and 41, namely, a display 47 for the consumer and display 48 for the trader. Both displays 47 and
  • Key boards 50 .and 51 for the consumer and the trader respectively are provided.
  • the consumers keyboard 50 comprises ten alpha numerical keys 54, a command key 55 to cancel an entry, and a data enter key 56 to enter data into the terminal.
  • the traders keyboard 51 also comprises ten alpha numerical keys 58 (0 to 9), and a decimal point key 59. Five command keys as follows are also provided on the traders keyboard 51:
  • a micro-computer 65 is connected to the display 47 and 48, the keyboards 50 and 51 and the card receiving slots 2, 3 and 46 is provided in the terminal 2.
  • the computer 65 routes data between the cards in the terminal, the keyboards 50 and 51 and the displays 47 and 48.
  • the micro ⁇ computer 65 comprises a micro-processor 67 to control the operations of the terminal, a ROM 68 to store the control program and other permanent data, and a RAM 69 to store temporary data and to input/output interface to control the terminal peripherals.
  • Provision for an on-line link to a bank computer via a telephone line is provided in the micro-computer 65 and is illustrated by the broken line 70.
  • the key switch 75 is a three position switch having an/off mode 76, a transaction mode 77 in which th terminal is activated for a transaction and a test mode 78 as can be seen i -Fig. 5.
  • the terminal In the test mode, the terminal carries out a self-test on all it components. This is controlled by the computer 65.
  • Transformer power coils (not shown) and ultra-sonic receivers and transmitter (also not shown) are provided in the consumer and traders card slots 3 and respectively to facilitate transformer power coupling and ultra-sonic coupling between the cards and the slots. Both the power coils and ultra-sonic receivers and transmitters are connected to the computer 65. Such couplings will be well known to those skilled in the art and it is not intended to describe them in further detail. As already described, when a card is entered in a respective slot, power is delivered through the transformer power coupling coil to charge the battery of the card and also to provide additional power to the card during transfer of the data between cards and in particular during the encription operation. The data is then transferred through the ultra-sonic coupling receivers and transmitters.
  • An electronic pressure pad 79 to electronically monitor a dynamic signature is linked to the portion 39 of the terminal 2, and connected into the computer 65 to permit the dynamic signature of the card holder to be read into the computer 65 for further transfer into the consumers card for comparision with the dynamic signature stored in the memory 7 of the card and/or for signing a transaction.
  • Such electronic' pressure pads will be well known to those skilled in the art.
  • a card holder desires to check the balance in the memory 7 of his card, he enters his personal identification number by means of the alpha numerical keys 31 on the keyboard 30 and uses the balance key 32.
  • the micro ⁇ computer 10 compares the entered number with that in the memory 7. If both compare the balance is displayed on the display 28. Because no encription or decryption of the personal identification number or the balance is required, only a small amount of power is required which is supplied by the battery 37.
  • OMPI Y ⁇ ⁇ IPO ⁇ Referring now to Fig. 6, when it is desired to transfer funds from the consumers card 1 to a traders card, the traders card is inserted in the slot 4 of the terminal 2. Normally, this would be inserted in the morning prior to the days transactions and left there for the day. Prior to any transaction taking place,
  • the flow chart of Fig. 6 illustrates the steps carried out in authenticating the card. Firstly, on insertion the card on command from the terminal does a self-test. The micro-computer 10 in the traders card, randomly selects personal identification characteristics in the memory 7 of the card and queries the trader through the traders display 48 on
  • the trader keys in the relevant responses on the key board 51 by means of the alpha numerical keys 58 and the enter key 61. These are transmitted through the micro-computer 10 to the security chip 20 for encrip ⁇ tion and are then compared with the encripted data in the memory 7. If the traders responses compare with the stored data, the card is then enabled for the
  • the consumer Prior to inserting the consumers card 1 into the terminal 2, the consumer, to save time, enters his personal identification number into the card by means of the keyboard 30. If this compares with the stored personal identification 20 number, the card is then enabled to perform the next operation in the terminal 2.
  • the cards are inserted in the terminal 2 they are addressable only through the keyboards 50 and 51 of the terminal, with the exception of the transfer key 33 of the consumers card 1.
  • the transfer key 33 of the consumers card 1 On insertion of both 25 cards in the terminal 2, power is transferred to the cards as required by the power coupling coils.
  • the consumer card on command from the terminal does a self-test.
  • the serial number, authenticating code .and expiry date of the consumers card are transferred in an encripted form from the consumers card 1 to the traders card.
  • the computer 10 of the traders card checks that the cards serial number is not on the black list and also chechs the authenticating code and the expiry date. If there is any problem with any of these three, the card is disabled, and the transaction aborted. The computer 10 of the consumer card 1 then randomly selects personal identifying characteristics from the memory 7. The com-
  • the card holder enters the responses through the keyboard 50 and the responses are encripted in the security chip 20 and the compared by the computer 10 with the stored data. If they compare, the car is then enabled for the transaction.
  • the trader then keys in by means o the keyboard 51 the amount of the transaction to be transferred from the consumers card to the traders card. This amount is displayed on both the traders and consumers displays 47 and 48. If both consumer and trader are in agreement, the consumer by using the transfer key 33 on his card 1, initiates the transfer. Initially, the message to be transferred which includes the amount of money and the card serial number, is date-stamped by the computer 10. This message is then encripted in the security chip 20 by using the traders public encription key. The encription computations are carried out in the central processing unit 24 of the security chip 20. The encripted message is then transferred through the micro-computer 65 of the terminal 2 to the traders card.
  • this transfer is made through the ultra-sonic coupling between the cards 1 and their respective slots 3 and 4.
  • the message is then transferred into the security chip 20 of the traders card and decripted using the traders secret decription key. Again, the decription computations are carried out by the central processing unit 24 of the security chip 20 of the traders card 1.
  • the date stamp is checked and the decripted amount is then entered in the balance of the memory 7 of the traders card and the serial number is stored. Simultaneously, the balance in the memory 7 of the consumers card 1 is reduced by a corresponding amount.
  • the amount to be transferred, the serial number and the time and date-stamp are the message represented by M.
  • the public key and secret key of the traders card are P and S f respectively.
  • the security chip of the consumers card encripts the message to M giving
  • the security chip 20 in the traders card operates on the message with the traders secret key, thereby giving
  • the number of personal identifying characteristics randomly selected by the computer for querying the card holder as already described may be varied depending on the size of the transaction.
  • the amount of the transaction is keyed into the terminal 2 by the trader using his keyboard 51_
  • the computer 10 in the consumers card 1 determines the number of charac ⁇ teristics on which the card holder is to be queried, makes the selection and queries the holder.
  • the computer 10 may also request the users dynamic signature. In which case the user signs his signature on the electronic pressure pad 79. This, if desired, may also be transferred with the message M to the traders card.
  • each transaction Is date stamped ensures that each transaction is unique, and if an attempt is made to repeat the transaction at a later time, into the traders card or any other card, it will be appreciated that the fact that each transaction is unique, and if an attempt is made to repeat the transaction at a later time, into the traders card or any other card, it will be appreciated that the fact that each transaction is unique, and if an attempt is made to repeat the transaction at a later time, into the traders card or any other card, it will
  • the day total key 6 is used.
  • All data transmitted between the cards and the terminal is "echoed" by the receiver to the transmitter within 1 millisecont of the transmission taking place. If a transmission error is detected by the transmitter, it retransmits the data up to a maximum of 5 times. If after 5 attempts the error is still occurring, or if the "echo" is timed out, the transaction is aborted.
  • the response occurs within 5 milliseconds, otherwise a timeout occurs and the transaction is aborted. In the case where the communication is between cards (via a terminal), the timeout occurs after 15 milliseconds.
  • the card In carrying out a self test, the card responds within 100 milliseconds with the result of the self test. The test includes a check on the card expiry date. If the self test is unsuccessful, or if its response is timed out, then the transaction is aborted.
  • a coupling terminal 80 according to another em ⁇ bodiment of the invention is illustrated.
  • the coupling terminal is referred to as an automatic payment terminal and is for use in an organization to transfer wages and salaries from an employers wages card to an employees comsumer card.
  • this terminal is substantially similar to that described with reference to Fig. 5 and similar components are identified by the same reference numerals.
  • the main difference in the terminal 80 is the fact that the traders digital display 48 is replaced by a visual display unit 81. It also has additional links 82 and 83 which enable the micro-computer 65 to be connected to a printer and the employers computer respectively (which are not shown). Additional command keys 84 are provided to control the visual display unit 81. It is not intended to describe these keys in further detail as they will be readily apparent to those skilled in the art.
  • Fig. 8 illustrates a flow chart of the operations carried out between the employers wages card and the consumers card during a wages transfer. This chart is substantially similar to Fig. 6, and the operations involved should be readily apparent to those skilled in the art.
  • Fig. 9 illustrates a circuit diagram of another coupling terminal 90 for coupling cards 1, in this case the terminal is for use in a bank branch, and is referred to as a bank branch terminal. Again, this terminal is substantially similar to those already described and similar components are identified by the same reference numerals.
  • the customers digital display is replaced by a visual display unit 91 and the consumers keyboard 50 as well as having numerical keys 54 also has twentysix alpha keys 92 and additional command -keys 93.
  • the command keys 93 include a cancel entry key, data entry key, bank giro key, a standing order key, a bank key, an update accounts key, a yes key, a no key and an end transaction key.
  • the banks keyboard 51 also comprises additional command keys 94 which include a cancel entry key, a data entry key, an authorise key, a lodge cash key, an update accounts key, a back-up card key and an end transaction key.
  • additional command keys 94 include a cancel entry key, a data entry key, an authorise key, a lodge cash key, an update accounts key, a back-up card key and an end transaction key.
  • the banks card is inserted in the card receiving slot 4 and the bank customer enters his consumer card 1 in the card receiving slot 3.
  • Fig. 10 illustrates a flow chart of the operations in initializing, in other words, entering a cash balance into the consumers card.
  • This flow chart is substan ⁇ tially similar to that described with reference to Fig. 6, and accordingly, the operations should be clear to those skilled in the art.
  • a coupling terminal 100 is a cash dispensing terminal for use in a bank to permit a bank customer to withdraw cash using his consumer card 1.
  • This terminal 100 is substantially similar to those already described and again, similar components are identified by the same reference numeral. The main differences here is that a cash dispensing mechanism 101 is provided to dispense cash on request from a consumer. Suc cash dispensers are well known and it is not intended to describe the dispense in any detail.
  • An additional command key 102 is provided to withdraw cash.
  • link 103 from the computer 65 enables an alarm to be raised when th terminal 100 runs out of cash.
  • a further security alarm 104 is provided to rais an alarm should the terminal be tampered with or a spurious card be entere into the consumer card slot 3.
  • FIG. 12 illustrates the operations carried out when the consumer withdraws cash from the dispenser. As this flow chart is again substantially similar to that described with reference to Fig. 6, the operation should be readily apparent to those skilled in the art.
  • Fig. 13 illustrates a terminal 110 according to a still further embodiment of the invention, in this case a coupling terminal for other payments.
  • this terminal 110 could be used for making social welfare payments or state pensions or the like.
  • This terminal is again substantially similar to those described and similar reference numeral ' s identify similar components.
  • the consumers keyboard 50 comprises two command keys 55, one a cancel data key and the other a data enter key.
  • the keyboard 51 comprises the following command keys: a cancel enter key, a character insert key, a character delete key, four cursor control keys, paid "oil forward key, paid roll backward key, display welfare benefit, on visual display unit key, print welfare benefit details on printer key, data enter key, end transaction key and a spare key.
  • FIG. 14 A flow diagram is illustrated in Fig. 14 which illustrates the operations undertaken when a payment is being transferred from the other payments cards, for example, a state welfare card to a consumers card.
  • the cards described could store and transfer other data, for example, data relating to national security and the like. Indeed, it is envisaged that two cards could be connected to togetherer via a telephone line by a suitable coupling terminal and messages could be relayed between cards in encoded form or otherwise. It will be appreciated that although the cards and terminals have been described as incorporating specific components, any other suitable components and circuitry could be used.
  • portable devices have been described as cards, they could be in any other suitable shape or form. Indeed, in certain cases, it is envisaged that they could be deskmounted units.
  • coupling means for coupling the cards in the slots of the terminals other than transformer coils and ultra-sonic coupling could be used.
  • inductive coupling, infrared coupling, light coupling or indeed galvanic contact couplings could be used.
  • means other than slots could be provided in the terminal for coupling.
  • pin and socket couplings * could be used, or any other suitable means.
  • the security chip could be deleted from the card, and the message being transferred need not be ' encoded. It will of course be appreciated that where encoding is used, other suitable encoding and decoding techniques besides encription could be used. Furthermore, it will be appreciated that instead of using the particular type of encription and decription described, encription according to the Data Encription Standards could be used. It is also envisaged in certain cases that a battery would be sufficient for powering the operations and power coupling could be deleted.
  • the cards will not be provided with keyboards, inwhich cases access would be through the keyboards of the terminal.
  • the display could be deleted from the cards and in certain cases, it is envisaged that only the display and a command key to enable a balance to be displayed would be provided.
  • O PI storage capacity could be used.
  • other types of batteries could b used.
  • micro-computer in th terminal may not be required. It is envisaged that in such a case the card themselves could manage their own transactions.
  • ROM of the security chip has been described as storing the public and secret keys, these keys could be stored i: any suitable location, indeed, it is envisaged that in certain cases that they could be stored in the main memory 7 of each card.
  • each card may be programmed to deduct or increase the balance on each card by certain pre ⁇ determined amounts at certain pre-determined times. For example, in the case of a consumer having a standing order which has to be paid at a particular time each month or the like, the computer would be so programmed to deduct the amount of the standing order automatically on the pre-determined day. Additionally, it will be appreciated that the person to whom the standing order is being paid would have his card programmed to incrase the balance on his carc j on the same day. For example, in the case of a standing order payable to a bank, the banks card would be programmed to increase the balance by the pre- determined amount on the particular day, while the bank customers consumer card would be reduced appropriately.
  • coupling terminals could be provided with only one receiving means, for one card. It is envisaged that such terminals could be used in for example, the bank where it was desired to couple the consumers card directly to the bank computer for the transfer of funds, another use for such a coupling terminal would be in the case where it is desired to couple a card to another card, or computer, by a telephone line, in which case the coupling device would receive the card and couple it to the telephone line.
  • the other end of the telephone line could be connected to a computer, or a similar coupling device with another card, for example a consumer card, organizations wages card or the like.
  • micro-computer 10 may randomly select the characteristics for querying the holder, these could be selected in a pre-determined manner. Furthermore, it will be appreciated that while the transactions describe between cards have been date and time stamped this is not necessary.
  • coupling terminal illustrated in Figs. 2 and 3 is in tw portions, it could if desired be formed as a single unit.

Abstract

Dispositif portatif de stockage et de transfert de fonds utilisable dans un système de transfert de fonds. Chaque dispositif portatif (1) a la forme d'une carte et comprend une mémoire (7) pour stocker un bilan monétaire, et une pluralité de caractéristiques identifiant l'usager. Un micro-ordinateur (10) dans la carte (1) met le bilan à jour après un transfert de fonds, et sélectionne au hasard une des caractéristiques d'identification pour interroger l'usager. La réponse de l'usager est comparée aux caractéristiques stockées. Des moyens de couplage ultra-sonique (40) dans la carte permettent le couplage à une autre carte (1) par l'intermédiaire d'un terminal de couplage (2). Un clavier (30) et un affichage numérique (28) permettent d'inspecter le bilan. Le micro-ordinateur (10) marque pour chaque transaction la date et l'heure.Portable device for storing and transferring funds usable in a fund transfer system. Each portable device (1) has the form of a card and comprises a memory (7) for storing a monetary balance sheet, and a plurality of characteristics identifying the user. A microcomputer (10) in the card (1) updates the balance sheet after a transfer of funds, and randomly selects one of the identifying characteristics to interrogate the user. The user's response is compared to the stored characteristics. Ultrasonic coupling means (40) in the card allow coupling to another card (1) via a coupling terminal (2). A keyboard (30) and a digital display (28) allow the balance to be inspected. The microcomputer (10) marks the date and time for each transaction.

Description

A PORTABLE DEVICE FOR STORING AND TRANSFERRING DATA
The present invention relates to a portable device for storing and transferrin data, the device being of the type comprising memory means for storing th data and an identifying characteristic to prevent unauthorised use of th device, coupling means for coupling the device to an external terminal or othe device for transferring data, micro-computer means to update the data in th device after data transfer, means to compare an identifying characteristi entered by the user with the identifying characteristic stored in the memor means, and clock means to drive the micro-computer.
Such devices are well known, and generally are in the form of a substantiall flat pocket sized card. A monetary balance or any other data may be stored i the device, and transferred to another device. A coupling terminal is normall provided for routing the data being transferred and the two portable devices between which a transaction is to be made are connected into the coupling terminal. U.S. Patent Specifications Nos. 4,211,919, 4,102,493, 4,092,524, 4,007,355, 4,001,550 and 3,971,916 describe such devices and terminals.
Unfortunately, these known devices suffer from various disadvantages, parti¬ cularly, in the field of security,both of the device and the inforf ation stored therein, and during transfer of the data. Furthermore, due to the fact that most devices need to be connected on line or into a computer, they lack versatility.
in particular, where security is concerned, none of the known devices are secure against unauthorised use. Most rely on the use of a personal identification number stored in the memory of the card, and once the correct personal identification number is proveded by the user, the card is enabled to carry out a transaction. Unfortunately, with the use of personal identification numbers, there is a limit to the security that can be provided. For example, "in four digit personal identification number, which is the more common length of number, there are only 9,999 combinations available. Accordingly, with modern high powered computers, it is relatively easy to discover the correct personal identification number stored in any particular card.
OMPI Secondly, where data is transferred from a card, it is relatively easy to tap into the line transferring the data and record the transaction. Accordingly, the transaction may be replayed an unlimited number of times, and thus in the case of funds transfer, an amount of money may be fraudulently transferred an unlimited number of times.
Additionally, it is difficult to encode data being transferred in such a way that the code cannot be relatively easily broken by unauthorised people tapping into the transfer line. Attempts have been made to overcome these problems. However, so far, none of these attempts have been totally satisfactory.
Accordingly, it is an object of the invention to provide a portable data storage and transfer device and associated terminal which ensures that the portable device is relatively secure against unauthorised use. It is also an object of the invention to provide a device which will prevent the fraudulent transfer of data by replaying a transaction an unlimited number of times. Furthermore, it is an object of the invention to provide a portable device which permits the data being transferred to be encoded, so that it is virtually impossible for an unauthorised person to decode the data. It is a further object of the invention to provide a portable device which can store and transfer data without being connected on-line to a computer, and which is particularly suitable for storing and transferring monetary amounts.
The invention achieves these objects and overcomes the problems of prior art devices by virtue of the fact that the memory means in the portable device stores a plurality of identifying characteristics and the micro-computer means selects at least one of the identifying characteristics and queries the user on the selected characteristics prior to data transfer.
The advantage of the invention is .that it provides a device which is relatively secure against fraudulent use. This is because the invention permits a user of the device to be queried on one or more of a number of identifying charac¬ teristics, and this has the further advantage that the number of characteristics on which the user is queried, may be increased or decreased, depending on, for example, the type of data being transferred. If the data being transferred is of relatively limited value and/or importance, only one or a few characteristics may be selected. However, if the data is important, or of a high value, then many more characteristics may be selected. For example, in the case of user making a small purchase, he may be queried on only one characteristic thereby . having the advantage of saving time, for example, at a checkout in store. While on the other hand, if he is making a large purchase, many mor characteristics may be selected.
Preferably, the micro-computer means randomly selects one or more of th identifying characteristics. The advantage of this feature of the invention i that it makes it more difficult for fraudulent use of the card.
In one embodiment of the invention, the number of identifying characteristic selected by the micro-computer means is dependent on the data to b transferred.
The advantage of this feature of the invention is that it permits relatively small and unimportant transactions to be carried out quicker than larger or more important transactions, thereby adding to the speed at which transactions may be carried out.
Advantageously, at least one of the identifying characteristics is variable with time.
The advantage of this feature of the invention is that it makes it more difficult for the card to be used fraudulently.
Preferably, at least some of the identifying characteristics are characteristics of the user, and at least one of the variable identifying characteristics is the users age.
The advantage of this feature of the invention is that because the charac¬ teristics relate to the user, they are relatively easily remembered.
In another embodiment of the invention, the micro-computer means comprises means to date stamp each data transfer to make it a unique transaction. The advantage of this feature of the invention is that it ensures that each transaction is a unique transaction and therefore, if repeated will be rejected because the date or time will be incorrect.
O PI In another embodiment of the invention, the computer means comprises means to update the data in the memory means at certain pre-determinad times.
The advantage of this feature of the invention is that it permits the data in the card to be updated by other pre-determined data at pre-determined times. A particular advantage of this feature of the invention is that when the device is used for the storage and transfer of monetary amounts, the balance in the card may be increased or decreased by cerain pre-determined amounts at certain pre-determined times, for example, where standing orders or the like are to be transferred. In a further embodiment of the invention the data stored in the memory means is a monetary balance.
The advantage of this feature of the invention is that it permits the device to be used in a funds transfer system.
The present invention will be more clearly understood from the following description of some preferred embodiments thereof, given by way of example only, with reference to the accompanying drawings, in which:
Fig. 1 is a perspective view of a portable device according to the invention,
Fig. 2 is a circuit diagram of the device of Fig. 1,
Fig. 3 is a perspective view from one side of a coupling terminal, also according to the invention, for use with the portable device of Fig. 1,
Fig. 4 is a plan view of the coupling terminal of Fig. 3,
Fig. 5 is a circuit diagram of the coupling terminal of Fig. 3,
Fig. 6 is a flow diagram illustrating the operations carried out by the terminal of Fig. 3,
Fig. 7 is a circuit diagram of a coupling terminal according to another embodiment of the invention, Fig. 8 is a flow diagram for the coupling terminal of Fig. 7,
Fig. 9 is a circuit diagram of a terminal according to a further embodiment o the invention,
Fig. 10 is a flow diagram for the terminal of Fig. 9,
Fig. 11 is a circuit diagram of a coupling terminal according to a still further embodiment of the invention,
Fig. 12 is a flow diagram for the terminal of Fig. 11,
Fig. 13 is a circuit diagram of a coupling terminal according to a still further embodiment of the invention,
and
Fig. 14 is a flow diagram for the terminal of Fig. 13.
Referring to the drawings, and initially to Figs. 1 to 5, there is illustrated a portable device according to the invention for storing and transferring " data according to the invention, in this case, for use in storing and transferring monetary funds. The device is indicated generally by the reference numeral 1 and is substantially card-shaped, suitable for carrying around in a person's pocket, as for example a pocket calculator. The outer dimensions of the device hereinafter referred to as the card 1 are as follows:
Length 90 mm
Width 50 mm
Thickness 13 mm
The card 1 is used in a funds transfer system and each person, organization or the like participating in the system, has a card 1. For example, each person has a consumer card into which his wages and/or other funds are transferred, and from which he may transfer funds to make purchases. Each tracsr, for example, has a traders card, which receives funds from the consumers card at the consumers card at the point of sale. The trader may also have a separate card from which wages are paid. All cards are substantially similar and minor differences between consumer cards, traders card and organizations card and the like are described in more detail below.
A coupling terminal 2 also according to the invention through which funds are transferred between the two cards 1 is also ptovided. Device receiving slots, in this case card-receiving slots 3 and 4 in the terminal accommodate two cards between which funds are to be transferred. Each trader and organization and the like, where funds are to be transferred has a coupling terminal. The terminals are substantially similar to each other with only minor variations. Such variations are merely to adapt the terminals to the specific type of funds transfer they are used for, and are described in more detail below.
For simplicity and ease of understanding the invention, the consumer card illustrated in Figs. 1 and 2 is initially described in detail and the remaining cards are then briefly discussed. After describing the cards, a coupling terminal, for use by a trader at the point of sale is described in detail, and then the remaining coupling terminals are briefly described.
CONSUMER CARD
Referring now to Figs. 1 and 2, the consumer card 1 comprises a housing 5 of plastics material. A memory means in this case a 4K battery powered CMOS RAM memory 7 is mounted in the housing 5. The memory 7 comprises a plurality of memory positions which are not illustrated. These positions store the following data:
a. The monetary balance in the card. b. A serial number of the card. c. An authenticating code which is common to and recognisable by all other cards used in the system. This code ensures that spurious cards cannot be used, d. A plurality of static identifying characteristics of the card holder, in this case, for example, a personal identification number, specific identifying characteristics of the card holder, such as the colour of the holders eyes, the colour of his hair, height,weight and the like.
OMPI e. Variable identifying characteristics of the card holder, for exampl his age. f. The card holders dynamics signature, which is stored digitally. g. The expiry date of the card.
It is envisaged that the card will store up to twenty identifying characteristics both static and variable.
A micro-computer means in this case a single chip micro-computer 10 sold under the Trade Name Sharpe Type SM3 is mounted in the housing 5 and drives the card 1. The computer 6 comprises a central processing unit 12 which manages the operations of the card. A ROM 11 having a capacity of at least 2K bytes is linked to the central processing unit 12, and contains stored programs to direct the operation of the computer 6. A RAM 14 is also linked to the central processing unit 12. The central processing unit 12 is linked to the memory 7 and randomly selects personal identifying characteristics from the memory to query the card holder prior to a transaction to establish teh authenticity of the card and the holder. A program in the ROM 11 programmes the central processing unit 12 to query the card holder on varying numbers of personal identifying characteristics depending on the size of the transaction to be entered into. In cases of particularly large transactions, the central processing unit 12 requests the card holders dynamic signature. This is de¬ scribed in detail below. Means to compare a card holders response with the queried characteristics is provided by a programme stored in the ROM. The comparision is carried out in the central processing unit 12.
A clock generator 15 with a speed of 32.687 KHz controls the central processing unit 12. The clock speed is kept as low as possible to reduce the power consumption of the card 1. The central processing unit 12 is connected to an 1/0 driver 16.
A security means, in this case a security chip 20, is mounted in the card 1 and linked to the micro-computer 6. The micro chip 20 encodes and decodes data being transferred to and from the card 1 by a public key and secret key encription technique. Such technique is described in detail by Rivest, Shamin and Adleman in an article entitled "A method for obtaining digital signatures and public key crypto-systems" published in Communications of ACM,
OMPI 1,133 Avenue of the Americas, New York N.Y. 10036, February 1978 at Pages
120 to 126.
The security chip 20 comprises a IK RAM 22 in which the public and secret keys of the card holder are stored inaccessibly. Each key is a 150 digit number. A ROM 23 having a stored programme directs the encription and decription computations, which are carried out in a central processing unit 24. The central processing unit 24 is linked to a RAM 22 and the ROM 23. An 1/0 driver 25 and a clock generator 26 are linked to, and control the central processing unit 24.
For security, all data stored in the memory 7 with the exception of the balance and a personal identification number of the card holder is stored in encripted form. Accordingly, on being entered into the memory 7 this data is first encripted by the security chip 20. Furthermore, when personal identifying data is entered into the computer 10 of the card 1, this is first encripted by the security chip 20 prior to being compared with the stored data in the memory 7. The two encripted forms of this data are then compared in the micro¬ computer 10.
A crystal 21 linked to the micro-computer 10 synchroneses the operation of the computer 10.
A digital display, in this case provided by an eight digit, seven segment liquid crystal display 10 is mounted in the housing 5 to permit the balance in the memory 7 to be displayed on request. The display 28 is linked to the micro¬ computer 10.
A keyboard 30 in the housing 5 and linked to the microcomputer 10 permits instructions and data to be entered into the card. The keyboard 30 comprises ten alphanumerical keys 31, namely keys 0 to 9. Two instruction keys are also provided on the keyboard 30 namely, an instruction key 32 to instruct the card to display the balance on the display 28, a command key 33 which initiates funds transfer between two cards. When the card 1 is in a terminal, the command key 33 is inoperable but the funds transfer command key 33 is used to initiate funds transfer, as described below. When the card is in a terminal, the commands are entered into the card by the keyboards on the terminal. A battery 37 in this case, a rechargable nickel cadmium battery mounted in th card 1 powers the card through the power connections 38. .
Coupling means for the transfer of data between two cards through a terminal is provided by an ultra-sonic coupling device 40. The ultra-sonic couplin device 40 is connected to the micro-computer 10 and in use, co-operates with corresponding ultra-sonic coupling device mounted in one of the slots 3 or 4 o the terminal 2. The coupling means also includes a transformer powered coil 42 for the transfer of power from a terminal 2 to charge the battery during a transaction and also to provide additional power as required to the various components on the card during a transaction. The coupling coil 42 co-operates with a corresponding coil in one of the slots 3 or 4 in the terminal. The ultra¬ sonic coupling device 40 and the coupling coil 42 are both mounted internally in the card at 43, see Fig. 1. All the components in the card just described are inter-connected on a printed circuit board (not shown) and are encased in an epoxy resin to prevent tampering.
Other cards are provided for use in the system, for example, a card for a trader for use at the point of sale to receive funds from consumer cards. An official bank card is also provided for the banks to store funds for transfer to consumers cards on request. Wages payment cards are also provided. Wages payment cards store wages and the value of the wage to be transferred to each employee. These additional cards are similar to the consumer cards just described with the exception that they each have a larger memory to store many transactions, and to store a black list of invalid cards. The black list is updated on an ongoing basis where the card is in a terminal which is connected on line to a central computer containing the information, or alternatively where the card is not connected on line, the list would be updated by a bank each time a withdrawal or a lodgement was being made.
COUPLING TERMINAL
Figs. 3 to 5 illustrate the coupling terminal 2 for coupling two cards for the transfer of funds between each card. In this case, the coupling terminal 2 is a point of sales terminal and is used in a shop or store where customers puchase items and pay for them with their concumer card 1. The terminal 2 is in two portions, a consumer portion 39 and a traders portion 41 connected by cables 44. The consumer card receiving slot 3 is provided in the portion 39 and the traders card receiving slot 4 is in the portion 41. A third card receiving slot 46 in the portion 41 receives a back-up card which is a duplicate of the traders card. All transactions recorded on the traders card are duplicated on the back¬ up card in the event of loss or damage to the traders card.
The slot 46 houses the back-up card in a portion of the terminal, which is accessible only by a bank.
Two digital displays are provided, one on each portion 39 and 41, namely, a display 47 for the consumer and display 48 for the trader. Both displays 47 and
48 are single line displays with forty upper-case alpha numerical characters.
Key boards 50 .and 51 for the consumer and the trader respectively are provided. The consumers keyboard 50 comprises ten alpha numerical keys 54, a command key 55 to cancel an entry, and a data enter key 56 to enter data into the terminal. The traders keyboard 51 also comprises ten alpha numerical keys 58 (0 to 9), and a decimal point key 59. Five command keys as follows are also provided on the traders keyboard 51:
60 - a cancel entry key
61 - a data enter key 62 - a display day total key for commanding the terminal to display the total of the days transactions on the display 48
63 - a display card total key for commanding the card total to be displayed
64 - an end transaction key to terminate a transaction.
Referring now to Fig. 5 a micro-computer 65 is connected to the display 47 and 48, the keyboards 50 and 51 and the card receiving slots 2, 3 and 46 is provided in the terminal 2. The computer 65 routes data between the cards in the terminal, the keyboards 50 and 51 and the displays 47 and 48. The micro¬ computer 65 comprises a micro-processor 67 to control the operations of the terminal, a ROM 68 to store the control program and other permanent data, and a RAM 69 to store temporary data and to input/output interface to control the terminal peripherals.
Provision for an on-line link to a bank computer via a telephone line is provided in the micro-computer 65 and is illustrated by the broken line 70.
OMPI A power supply unit 73 powered by the AC mains and a stand-by battery 7
. drives the terminal 2 through a key switch 75. The key switch 75 is a three position switch having an/off mode 76, a transaction mode 77 in which th terminal is activated for a transaction and a test mode 78 as can be seen i -Fig. 5. In the test mode, the terminal carries out a self-test on all it components. This is controlled by the computer 65.
Transformer power coils (not shown) and ultra-sonic receivers and transmitter (also not shown) are provided in the consumer and traders card slots 3 and respectively to facilitate transformer power coupling and ultra-sonic coupling between the cards and the slots. Both the power coils and ultra-sonic receivers and transmitters are connected to the computer 65. Such couplings will be well known to those skilled in the art and it is not intended to describe them in further detail. As already described, when a card is entered in a respective slot, power is delivered through the transformer power coupling coil to charge the battery of the card and also to provide additional power to the card during transfer of the data between cards and in particular during the encription operation. The data is then transferred through the ultra-sonic coupling receivers and transmitters.
An electronic pressure pad 79 to electronically monitor a dynamic signature is linked to the portion 39 of the terminal 2, and connected into the computer 65 to permit the dynamic signature of the card holder to be read into the computer 65 for further transfer into the consumers card for comparision with the dynamic signature stored in the memory 7 of the card and/or for signing a transaction. Such electronic' pressure pads will be well known to those skilled in the art.
In use, when a card holder desires to check the balance in the memory 7 of his card, he enters his personal identification number by means of the alpha numerical keys 31 on the keyboard 30 and uses the balance key 32. The micro¬ computer 10 compares the entered number with that in the memory 7. If both compare the balance is displayed on the display 28. Because no encription or decryption of the personal identification number or the balance is required, only a small amount of power is required which is supplied by the battery 37.
OMPI YΛ ^ IPO ^ Referring now to Fig. 6, when it is desired to transfer funds from the consumers card 1 to a traders card, the traders card is inserted in the slot 4 of the terminal 2. Normally, this would be inserted in the morning prior to the days transactions and left there for the day. Prior to any transaction taking place,
5 the trader authenticates his card. The flow chart of Fig. 6 illustrates the steps carried out in authenticating the card. Firstly, on insertion the card on command from the terminal does a self-test. The micro-computer 10 in the traders card, randomly selects personal identification characteristics in the memory 7 of the card and queries the trader through the traders display 48 on
10 the terminal 2. The trader keys in the relevant responses on the key board 51 by means of the alpha numerical keys 58 and the enter key 61. These are transmitted through the micro-computer 10 to the security chip 20 for encrip¬ tion and are then compared with the encripted data in the memory 7. If the traders responses compare with the stored data, the card is then enabled for the
15 next operation, and the back-up storage card is overwritten with the contents of the traders card. If the responses do not compare, then the card is disabled.
Prior to inserting the consumers card 1 into the terminal 2, the consumer, to save time, enters his personal identification number into the card by means of the keyboard 30. If this compares with the stored personal identification 20 number, the card is then enabled to perform the next operation in the terminal 2.
As already discussed, once the cards are inserted in the terminal 2 they are addressable only through the keyboards 50 and 51 of the terminal, with the exception of the transfer key 33 of the consumers card 1. On insertion of both 25 cards in the terminal 2, power is transferred to the cards as required by the power coupling coils.
The consumer card on command from the terminal does a self-test. The serial number, authenticating code .and expiry date of the consumers card are transferred in an encripted form from the consumers card 1 to the traders card.
30 The computer 10 of the traders card checks that the cards serial number is not on the black list and also chechs the authenticating code and the expiry date. If there is any problem with any of these three, the card is disabled, and the transaction aborted. The computer 10 of the consumer card 1 then randomly selects personal identifying characteristics from the memory 7. The com-
-*-° puter 10 queries the card holder on the selected characteristics through
- 0RE OMP the display 47 on the terminal 2. The card holder enters the responses through the keyboard 50 and the responses are encripted in the security chip 20 and the compared by the computer 10 with the stored data. If they compare, the car is then enabled for the transaction.
If the personal identifying characteristics of the response do not compare, th card is disabled and the transaction aborted. In Fig. 6, the personal identifyin characteristics are referred to as personal identifying data which is abbreviate to PID.
Once the comsumers card has been enabled, the trader then keys in by means o the keyboard 51 the amount of the transaction to be transferred from the consumers card to the traders card. This amount is displayed on both the traders and consumers displays 47 and 48. If both consumer and trader are in agreement, the consumer by using the transfer key 33 on his card 1, initiates the transfer. Initially, the message to be transferred which includes the amount of money and the card serial number, is date-stamped by the computer 10. This message is then encripted in the security chip 20 by using the traders public encription key. The encription computations are carried out in the central processing unit 24 of the security chip 20. The encripted message is then transferred through the micro-computer 65 of the terminal 2 to the traders card. As already explained, this transfer is made through the ultra-sonic coupling between the cards 1 and their respective slots 3 and 4. The message is then transferred into the security chip 20 of the traders card and decripted using the traders secret decription key. Again, the decription computations are carried out by the central processing unit 24 of the security chip 20 of the traders card 1. The date stamp is checked and the decripted amount is then entered in the balance of the memory 7 of the traders card and the serial number is stored. Simultaneously, the balance in the memory 7 of the consumers card 1 is reduced by a corresponding amount.
The encription process is explained in the following example below. Needless to say, this is merely an example and does not limit the invention. EXAMPLE
In this example, the amount to be transferred, the serial number and the time and date-stamp are the message represented by M. The public key and secret key of the traders card are P and Sf respectively. The security chip of the consumers card encripts the message to M giving
Mg = Pfc(M).
When the encripted message M is received in the traders card, the security chip 20 in the traders card operates on the message with the traders secret key, thereby giving
St(Ms) = St(Pt(M). = M and accordingly, the decripted message is transferred to the traders balance In the memory 7 of his card.
In the case of certain transactions, where it is desired to have the consumer sign the message with his secret decription key, this may also be done using the method described in .the paper of Rivest, Shamir and Adleman already referred to.
It will be appreciated that during any transaction, the number of personal identifying characteristics randomly selected by the computer for querying the card holder as already described may be varied depending on the size of the transaction. In the case of a large transaction, where the card holder should be queried on a large number of personal identifying characteristics, the amount of the transaction is keyed into the terminal 2 by the trader using his keyboard 51_ The computer 10 in the consumers card 1 determines the number of charac¬ teristics on which the card holder is to be queried, makes the selection and queries the holder. The computer 10 may also request the users dynamic signature. In which case the user signs his signature on the electronic pressure pad 79. This, if desired, may also be transferred with the message M to the traders card.
It will be appreciated that the fact that each transaction Is date stamped ensures that each transaction is unique, and if an attempt is made to repeat the transaction at a later time, into the traders card or any other card, it will
OMH not be accepted by the card since the time will not compare. Needless to say, i the trader at any time during the day wishes to check his balance in th memory 7 of his card 1, this may be done by using the card total key 63
Similarly, if he wishes to check the days total at any time, the day total key 6 is used.
All data transmitted between the cards and the terminal is "echoed" by the receiver to the transmitter within 1 millisecont of the transmission taking place. If a transmission error is detected by the transmitter, it retransmits the data up to a maximum of 5 times. If after 5 attempts the error is still occurring, or if the "echo" is timed out, the transaction is aborted.
If data is transmitted between a card and the terminal where the receiver is expected to respond to the transmitter after processing the data, the response occurs within 5 milliseconds, otherwise a timeout occurs and the transaction is aborted. In the case where the communication is between cards (via a terminal), the timeout occurs after 15 milliseconds.
In carrying out a self test, the card responds within 100 milliseconds with the result of the self test. The test includes a check on the card expiry date. If the self test is unsuccessful, or if its response is timed out, then the transaction is aborted.
Referring now to Fig. 7, a coupling terminal 80 according to another em¬ bodiment of the invention is illustrated. In this case, the coupling terminal is referred to as an automatic payment terminal and is for use in an organization to transfer wages and salaries from an employers wages card to an employees comsumer card. Essentially, this terminal is substantially similar to that described with reference to Fig. 5 and similar components are identified by the same reference numerals. The main difference in the terminal 80 is the fact that the traders digital display 48 is replaced by a visual display unit 81. It also has additional links 82 and 83 which enable the micro-computer 65 to be connected to a printer and the employers computer respectively (which are not shown). Additional command keys 84 are provided to control the visual display unit 81. It is not intended to describe these keys in further detail as they will be readily apparent to those skilled in the art.
"BUREAU
O PI Additionally, the key switch 75 as well as the on/off and self test modes 76 and
78 has two additional modes, one 85 to enable the wages to be keyed in, and a second mode 86 to enable wages to be paid, to guard against unlawful use of the terminal.
Fig. 8 illustrates a flow chart of the operations carried out between the employers wages card and the consumers card during a wages transfer. This chart is substantially similar to Fig. 6, and the operations involved should be readily apparent to those skilled in the art.
Fig. 9 illustrates a circuit diagram of another coupling terminal 90 for coupling cards 1, in this case the terminal is for use in a bank branch, and is referred to as a bank branch terminal. Again, this terminal is substantially similar to those already described and similar components are identified by the same reference numerals. In this case, the customers digital display is replaced by a visual display unit 91 and the consumers keyboard 50 as well as having numerical keys 54 also has twentysix alpha keys 92 and additional command -keys 93. The command keys 93 include a cancel entry key, data entry key, bank giro key, a standing order key, a bank key, an update accounts key, a yes key, a no key and an end transaction key. The banks keyboard 51 also comprises additional command keys 94 which include a cancel entry key, a data entry key, an authorise key, a lodge cash key, an update accounts key, a back-up card key and an end transaction key. In the case of the bank branch coupling terminal 90 the banks card is inserted in the card receiving slot 4 and the bank customer enters his consumer card 1 in the card receiving slot 3.
Fig. 10 illustrates a flow chart of the operations in initializing, in other words, entering a cash balance into the consumers card. This flow chart is substan¬ tially similar to that described with reference to Fig. 6, and accordingly, the operations should be clear to those skilled in the art.
Referring now to Fig. 11 a coupling terminal 100 according to another em¬ bodiment of the inventions is illustrated. In this case, the terminal is a cash dispensing terminal for use in a bank to permit a bank customer to withdraw cash using his consumer card 1. This terminal 100 is substantially similar to those already described and again, similar components are identified by the same reference numeral. The main differences here is that a cash dispensing mechanism 101 is provided to dispense cash on request from a consumer. Suc cash dispensers are well known and it is not intended to describe the dispense in any detail. An additional command key 102 is provided to withdraw cash. link 103 from the computer 65 enables an alarm to be raised when th terminal 100 runs out of cash. A further security alarm 104 is provided to rais an alarm should the terminal be tampered with or a spurious card be entere into the consumer card slot 3.
In this case, the banks card is inserted in the card receiving slot 4, and the consumers card is entered in the slot 3. A flow chart of Fig. 12 illustrates the operations carried out when the consumer withdraws cash from the dispenser. As this flow chart is again substantially similar to that described with reference to Fig. 6, the operation should be readily apparent to those skilled in the art.
Fig. 13 illustrates a terminal 110 according to a still further embodiment of the invention, in this case a coupling terminal for other payments. Typically, this terminal 110 could be used for making social welfare payments or state pensions or the like. This terminal is again substantially similar to those described and similar reference numeral's identify similar components. The consumers keyboard 50 comprises two command keys 55, one a cancel data key and the other a data enter key. The keyboard 51 comprises the following command keys: a cancel enter key, a character insert key, a character delete key, four cursor control keys, paid "oil forward key, paid roll backward key, display welfare benefit, on visual display unit key, print welfare benefit details on printer key, data enter key, end transaction key and a spare key.
A flow diagram is illustrated in Fig. 14 which illustrates the operations undertaken when a payment is being transferred from the other payments cards, for example, a state welfare card to a consumers card.
It is envisaged that as well as storing and transferring funds, the cards described could store and transfer other data, for example, data relating to national security and the like. Indeed, it is envisaged that two cards could be connected togehter via a telephone line by a suitable coupling terminal and messages could be relayed between cards in encoded form or otherwise. It will be appreciated that although the cards and terminals have been described as incorporating specific components, any other suitable components and circuitry could be used.
Furthermore, it will be appreciated that while the portable devices have been described as cards, they could be in any other suitable shape or form. Indeed, in certain cases, it is envisaged that they could be deskmounted units.
It is envisaged that coupling means for coupling the cards in the slots of the terminals other than transformer coils and ultra-sonic coupling could be used. For example, it is envisaged that inductive coupling, infrared coupling, light coupling or indeed galvanic contact couplings could be used. Indeed, it will be appreciated that means other than slots could be provided in the terminal for coupling. For example, pin and socket couplings* could be used, or any other suitable means.
It will also of course be appreciated that other suitable shapes and construction of terminal could be used. Furthermore, it is envisaged in certain cases, where the cards are for storing and transferring data of limited importance, the security chip could be deleted from the card, and the message being transferred need not be' encoded. It will of course be appreciated that where encoding is used, other suitable encoding and decoding techniques besides encription could be used. Furthermore, it will be appreciated that instead of using the particular type of encription and decription described, encription according to the Data Encription Standards could be used. It is also envisaged in certain cases that a battery would be sufficient for powering the operations and power coupling could be deleted. Furthermore, it is envisaged in certain cases that the cards will not be provided with keyboards, inwhich cases access would be through the keyboards of the terminal. Similarly, the display could be deleted from the cards and in certain cases, it is envisaged that only the display and a command key to enable a balance to be displayed would be provided.
Additionally, it will be appreciated that although specific micro-computers and memories have been described, other suitable computers and memories could be used. Additionally, it will be appreciated that memories of greater or lesser
O PI storage capacity could be used. Similarly, other types of batteries could b used.
Furthermore, it is envisaged that in certain cases the micro-computer in th terminal may not be required. It is envisaged that in such a case the card themselves could manage their own transactions.
Further, it will be appreciated that although specific command and alph numerical keys have been described for use with each coupling terminal, othe command keys or alpha numerical keys could be used as desired. Furthermore it will be appreciated that while some of the coupling terminals have bee described as having visual display units, this is not necessary, digital display could be used instead. Similarly, the digital displays could all be replaced b visual displays as desired. Indeed, in certain cases, it is envisaged that the coupling terminal could be provided without keyboards or display, in which case the keyboards and displays of the cards would be used.
While the various micro-computers have been described as having ROM's which store the program for directing the computer, other suitable means of storing the program could be used. Indeed, other programmes could also be used.
Furthermore, while the ROM of the security chip has been described as storing the public and secret keys, these keys could be stored i: any suitable location, indeed, it is envisaged that in certain cases that they could be stored in the main memory 7 of each card.
It is envisaged that in certain cases the micro-computer 10 of each card may be programmed to deduct or increase the balance on each card by certain pre¬ determined amounts at certain pre-determined times. For example, in the case of a consumer having a standing order which has to be paid at a particular time each month or the like, the computer would be so programmed to deduct the amount of the standing order automatically on the pre-determined day. Additionally, it will be appreciated that the person to whom the standing order is being paid would have his card programmed to incrase the balance on his carcj on the same day. For example, in the case of a standing order payable to a bank, the banks card would be programmed to increase the balance by the pre- determined amount on the particular day, while the bank customers consumer card would be reduced appropriately.
Furthermore, it will be appreciated that in certain cases it will not be necessary to time and date stamp the data being transferred.
It is also envisaged that as well as showing the balance the digital display on the consumers card, if desired, could show other data as well.
Furthermore, it is envisaged that in certain cases, coupling terminals could be provided with only one receiving means, for one card. It is envisaged that such terminals could be used in for example, the bank where it was desired to couple the consumers card directly to the bank computer for the transfer of funds, another use for such a coupling terminal would be in the case where it is desired to couple a card to another card, or computer, by a telephone line, in which case the coupling device would receive the card and couple it to the telephone line. The other end of the telephone line could be connected to a computer, or a similar coupling device with another card, for example a consumer card, organizations wages card or the like.
While the- invention has been described with the data being transferred as Including the serial number of the card, this is not necessary. It will be appreciated that it is only necessary for the serial number of the card to be transferred with the amount if it should be so desired. Furthermore, it will be appreciated that instead of the serial number of the card, the consumers bank account number could be stored in the consumer card and this could be transferred with the amount of the transaction if desired.
Furthermore, it will be appreciated that while certain identifying charac- teristics have been mentioned as being stored in the card, any other type of characteristics could be stored, whether they relate to the user or not.
Additionally, it will be appreciated that while it is desirable, it is not necessary for the micro-computer 10 to randomly select the characteristics for querying the holder, these could be selected in a pre-determined manner. Furthermore, it will be appreciated that while the transactions describe between cards have been date and time stamped this is not necessary.
Additionally, while the coupling terminal illustrated in Figs. 2 and 3 is in tw portions, it could if desired be formed as a single unit.

Claims

1. A portable device (1) for storing and transferring data, the device being of the type comprising memory means (7) for storing the data and an identifying characteristic to prevent unauthorised use of the device, coupling means (40) for coupling the device (1) to an external terminal (2) or other device (1) for transferring data, micro-computer means (10) to update the data in the device (1) after data transfer, means to compare an identifying characteristic entered by the user with the identifying characteristic stored in the memory means (7), and clock means (15) to drive the micro-computer (10), characterised in that the memory means (7) stores a plurality of identifying characteristics and the micro-computer (10) selects at least one of the identifying characteristics and queries the user on the selected characteristic prior to data transfer.
2. A device as claimed in claim 1 characterised in that the micro-computer means (10) randomly selects one or more of the identifying characteristics.
3. A device as claimed in claim 1 or 2 characterised in that the number of identifying characteristics selected by the micro-computer means (10) is de¬ pendent on the data to be transferred.
-Λ
4. A device as claimed in any preceding claim characterised in that at least one of the identifying characteristics is variable with time.
5. A device as claimed in any preceding claim characterised in that at least some of the identifying characteristics are characteristics of the user, and at least one of the variable identifying characteristics is the users age.
6. A device as claimed in any preceding claim characterised in that the micro-computer means (10) comprises means to date stamp each data transfer to make it a unique transaction.
7. A device as claimed in claim 6 characterised in that the micro-computer means (10) comprises means to time stamp each data transfer.
8. A device as claimed in any preceding claim characterised in that the computer means (10) comprises means to update the data in the memory means (7) at certain pre-determined times.
9. A device as claimed in any preceding claim characterised in that the data stored in the memory means (7) is a monetary balance.
EP83900809A 1982-02-25 1983-02-24 A portable device for storing and transferring data Withdrawn EP0101711A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
IE820411A IE820411L (en) 1982-02-25 1982-02-25 Portable device for storing and transferring data
IE41182 1982-02-25

Publications (1)

Publication Number Publication Date
EP0101711A1 true EP0101711A1 (en) 1984-03-07

Family

ID=11012092

Family Applications (1)

Application Number Title Priority Date Filing Date
EP83900809A Withdrawn EP0101711A1 (en) 1982-02-25 1983-02-24 A portable device for storing and transferring data

Country Status (8)

Country Link
EP (1) EP0101711A1 (en)
JP (1) JPS59500292A (en)
DK (1) DK487983A (en)
ES (1) ES8403647A1 (en)
FI (1) FI833882A (en)
IE (1) IE820411L (en)
NO (1) NO833890L (en)
WO (1) WO1983003018A1 (en)

Families Citing this family (50)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPS60108964A (en) * 1983-11-17 1985-06-14 Toshiba Corp Transfer processing system
EP0162221B1 (en) * 1984-03-19 1992-11-11 Omron Tateisi Electronics Co. Financial transaction processing system using on ic card
US4746787A (en) * 1984-07-20 1988-05-24 Oki Electric Industry Co., Ltd. IC card with display and card recording and reading device
US4614861A (en) * 1984-11-15 1986-09-30 Intellicard International, Inc. Unitary, self-contained card verification and validation system and method
US4689478A (en) * 1984-12-24 1987-08-25 Ncr Corporation System for handling transactions including a portable personal terminal
EP0207125B1 (en) * 1984-12-24 1990-06-27 Ncr Corporation Portable personal terminal and system for handling transactions including such terminal
GB8509135D0 (en) * 1985-04-10 1985-05-15 Gen Electric Co Plc Transaction system
JPS629470A (en) * 1985-07-05 1987-01-17 Casio Comput Co Ltd Identity collation system for individual identification card
JP2564480B2 (en) * 1985-07-16 1996-12-18 カシオ計算機株式会社 IC card system
GB8525161D0 (en) * 1985-10-11 1985-11-13 Blackwell V C Personalised identification device
JPH07104891B2 (en) * 1986-08-05 1995-11-13 沖電気工業株式会社 Transaction processor
US4800255A (en) * 1986-08-22 1989-01-24 Datatrak, Inc. Electronic access card with visual display
ATE160456T1 (en) * 1986-09-02 1997-12-15 Pitney Bowes Inc AUTOMATED TRANSACTION SYSTEM USING INSERTABLE CARDS FOR TRANSFERRING ACCOUNT DATA
US4837422A (en) * 1987-09-08 1989-06-06 Juergen Dethloff Multi-user card system
US4968873A (en) * 1987-09-08 1990-11-06 Juergen Dethloff Smart card issuing and receiving apparatus
JPH01125687A (en) * 1987-11-10 1989-05-18 Mitsubishi Electric Corp Legitimate owner confirming method
FR2624996B3 (en) * 1987-12-18 1990-03-02 Informatique Realite PORTABLE SELF-CONTAINED DEVICE FOR STORING, TRANSFERRING AND MONITORING INFORMATION
GB2220772A (en) * 1988-07-14 1990-01-17 Unisys Corp Keyboard operated system
US6003767A (en) 1989-09-06 1999-12-21 Fujitsu Limited Cashless medium for an electronic cashless system
US6926200B1 (en) 1989-09-06 2005-08-09 Fujitsu Limited Electronic cashless system
JP3184196B2 (en) * 1989-09-06 2001-07-09 株式会社富士通総研 Electronic wallet system
US6003762A (en) * 1989-09-06 1999-12-21 Fujitsu Limited Transaction terminal for an electronic cashless system
FR2661762B1 (en) * 1990-05-03 1992-07-31 Storck Jean METHOD AND DEVICE FOR TRANSACTING BETWEEN A FIRST AND AT LEAST A SECOND DATA MEDIUM AND MEDIUM FOR THIS PURPOSE.
GB9008362D0 (en) * 1990-04-12 1990-06-13 Hackremco No 574 Limited Banking computer system
CH683133A5 (en) * 1991-06-05 1994-01-14 Ascom Autelca Ag Cashier machine.
US5453601A (en) * 1991-11-15 1995-09-26 Citibank, N.A. Electronic-monetary system
JP2690229B2 (en) * 1991-11-26 1997-12-10 三菱電機株式会社 Non-contact IC card
GB9125540D0 (en) * 1991-11-30 1992-01-29 Davies John H E Access control systems
GB2275554B (en) * 1993-02-24 1996-08-14 Angewandte Digital Elektronik Card apparatus with detectable remote transmission
JPH0723460A (en) * 1993-06-21 1995-01-24 Nec Corp Operating method for black list of mobile telephone system
US5544246A (en) * 1993-09-17 1996-08-06 At&T Corp. Smartcard adapted for a plurality of service providers and for remote installation of same
US5590038A (en) * 1994-06-20 1996-12-31 Pitroda; Satyan G. Universal electronic transaction card including receipt storage and system and methods of conducting electronic transactions
GB9413614D0 (en) * 1994-07-06 1994-08-24 Ashley Philip M Credit card or the like and system utilising same
GB2314662B (en) * 1995-05-11 1998-07-08 Mondex Int Ltd Value transfer system
GB9509582D0 (en) * 1995-05-11 1995-07-05 Jonhig Ltd Value transfer system
DK0829070T3 (en) * 1995-05-15 2002-03-04 Mondex Int Ltd Restoring transactions in a value transfer system
GB2314663B (en) * 1995-05-15 1998-10-07 Mondex Int Ltd Transaction recovery in a value transfer system
JPH10162089A (en) * 1996-12-02 1998-06-19 Oki Electric Ind Co Ltd Electronic transaction system
US5809485A (en) * 1996-12-11 1998-09-15 Pitney Bowes, Inc. Method and apparatus for automatically disabling a removable, portable vault of a postage metering
US6021391A (en) * 1998-03-03 2000-02-01 Winbond Electronics Corp. Method and system for dynamic data encryption
EP0961241A3 (en) * 1998-03-30 2001-10-04 Citicorp Development Center, Inc. Multi-memory technology smart card personal banking system
JP3717031B2 (en) 1998-06-05 2005-11-16 富士通株式会社 Electronic money apparatus, method, card, and computer-readable recording medium recording electronic money processing program
US7376583B1 (en) 1999-08-10 2008-05-20 Gofigure, L.L.C. Device for making a transaction via a communications link
US7720762B1 (en) 2002-10-03 2010-05-18 Gofigure Payments, Llc System and method for electronically processing commercial transactions based upon threshold amount
US7603311B1 (en) 1999-11-29 2009-10-13 Yadav-Ranjan Rani K Process and device for conducting electronic transactions
GB2368422B (en) 2000-05-10 2003-03-26 Sony Corp Electronic settlement system, settlement management device, store device, client, data storage device, computer program, and storage medium
JP2002245427A (en) 2001-02-20 2002-08-30 Toshiba Corp Ic card, ic card terminal device and method for duplicating ic card
JP2004013438A (en) * 2002-06-05 2004-01-15 Takeshi Sakamura Electronic value data communication method, communication system, ic card, and portable terminal
US20090156202A1 (en) * 2007-12-06 2009-06-18 Celltak Corporation Methods, apparatus and systems for information exchange using portable electronic devices
US9235831B2 (en) 2009-04-22 2016-01-12 Gofigure Payments, Llc Mobile payment systems and methods

Family Cites Families (11)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US3876864A (en) * 1973-12-11 1975-04-08 Diebold Inc Teller-assisted currency dispenser system
FR2304965A2 (en) * 1974-03-25 1976-10-15 Innovation Ste Int ELECTRONIC CONTROL PROCESS AND DEVICE
US3971916A (en) * 1974-03-25 1976-07-27 Societe Internationale Methods of data storage and data storage systems
FR2311360A1 (en) * 1975-05-13 1976-12-10 Innovation Ste Int SYSTEM FOR STORING DATA CONFIDENTIALLY BY MEANS OF PORTABLE ELECTRONIC OBJECTS INCLUDING A CONFIDENTIAL CODE ERROR MEMORIZATION CIRCUIT
FR2401459A1 (en) * 1977-08-26 1979-03-23 Cii Honeywell Bull PORTABLE INFORMATION MEDIA EQUIPPED WITH A MICROPROCESSOR AND A PROGRAMMABLE DEAD MEMORY
SE426190B (en) * 1979-03-02 1982-12-13 Ekonom Panel Ab Portable bookkeeping card provided with an electronic unit
GB2066540A (en) * 1979-12-20 1981-07-08 Lethaby & Co Ltd Transaction device
US4302810A (en) * 1979-12-28 1981-11-24 International Business Machines Corporation Method and apparatus for secure message transmission for use in electronic funds transfer systems
US4341951A (en) * 1980-07-02 1982-07-27 Benton William M Electronic funds transfer and voucher issue system
FR2497617B1 (en) * 1981-01-07 1989-08-18 Transac Develop Transactions A SECURITY METHOD AND DEVICE FOR TRIPARTITY COMMUNICATION OF CONFIDENTIAL DATA
GB2092343B (en) * 1981-01-30 1985-10-09 Chalmers David Arthur Portable data carrier incorporating manually presettable processing modes

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See references of WO8303018A1 *

Also Published As

Publication number Publication date
FI833882A0 (en) 1983-10-24
JPS59500292A (en) 1984-02-23
DK487983D0 (en) 1983-10-24
NO833890L (en) 1983-10-25
WO1983003018A1 (en) 1983-09-01
ES520060A0 (en) 1984-03-16
IE820411L (en) 1983-08-25
FI833882A (en) 1983-10-24
ES8403647A1 (en) 1984-03-16
DK487983A (en) 1983-10-24

Similar Documents

Publication Publication Date Title
EP0101711A1 (en) A portable device for storing and transferring data
US4454414A (en) Funds transfer system using optically coupled, portable modules
US5778067A (en) Value transfer system
EP0958559B1 (en) Method and system of transferring currency from a first account to an ATM
US6502748B2 (en) System for card to card transfer of secure data
US4962531A (en) Transaction system comprising one or more host exchanges and a number of distributed terminal stations
US4775784A (en) Credit card imprinter authorization terminal
EP0546584A1 (en) Data transfer method
WO1990015382A1 (en) Microcomputer debit card
CN103890786A (en) Electronic information card for retrieving financial information
IL104422A (en) Method and apparatus for magnetically writing on plastic cards
EP0112814A1 (en) Funds transfer system using optically coupled, portable modules
KR20010039927A (en) Automatic vending machine
JPH11175640A (en) Electronic transaction system
EP0524186A1 (en) Method for handling cash or other confidential information electronically
CN101371269A (en) Information input apparatus and transaction processing system
US6324556B1 (en) Personal finance organizer
GB2114348A (en) Credit card checking method and apparatus
EP0407529B1 (en) Keyboard operated system
US6412691B1 (en) Electronic transaction apparatus
JPS6211991A (en) Information vending machine
KR100537488B1 (en) Automatic lottery ticket sale system
WO1990000783A1 (en) Keyboard operated system
EP1708148A2 (en) Method and system for self-administrating 'off-line' monetary transactions
JPH1040323A (en) Electronic settlement system using cash register

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 19831014

AK Designated contracting states

Designated state(s): CH DE FR GB LI NL SE

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION HAS BEEN WITHDRAWN

18W Application withdrawn

Withdrawal date: 19851007

RIN1 Information on inventor provided before grant (corrected)

Inventor name: CREMIN, PATRICK VICTOR

Inventor name: CARROLL, PATRICK GERARD