WO1990000783A1 - Keyboard operated system - Google Patents

Keyboard operated system Download PDF

Info

Publication number
WO1990000783A1
WO1990000783A1 PCT/US1989/003049 US8903049W WO9000783A1 WO 1990000783 A1 WO1990000783 A1 WO 1990000783A1 US 8903049 W US8903049 W US 8903049W WO 9000783 A1 WO9000783 A1 WO 9000783A1
Authority
WO
WIPO (PCT)
Prior art keywords
card
personal identification
identification number
operative
teller
Prior art date
Application number
PCT/US1989/003049
Other languages
English (en)
French (fr)
Inventor
Alain Keryhuel
Original Assignee
Unisys Corporation
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Unisys Corporation filed Critical Unisys Corporation
Publication of WO1990000783A1 publication Critical patent/WO1990000783A1/en

Links

Classifications

    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07FCOIN-FREED OR LIKE APPARATUS
    • G07F7/00Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/10Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
    • G07F7/1008Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06KGRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
    • G06K19/00Record carriers for use with machines and with at least a part designed to carry digital markings
    • G06K19/06Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code
    • G06K19/067Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components
    • G06K19/07Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components with integrated circuit chips
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06KGRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
    • G06K19/00Record carriers for use with machines and with at least a part designed to carry digital markings
    • G06K19/06Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code
    • G06K19/067Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components
    • G06K19/07Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components with integrated circuit chips
    • G06K19/077Constructional details, e.g. mounting of circuits in the carrier
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06KGRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
    • G06K19/00Record carriers for use with machines and with at least a part designed to carry digital markings
    • G06K19/06Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code
    • G06K19/067Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components
    • G06K19/07Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components with integrated circuit chips
    • G06K19/077Constructional details, e.g. mounting of circuits in the carrier
    • G06K19/07701Constructional details, e.g. mounting of circuits in the carrier the record carrier comprising an interface suitable for human interaction
    • G06K19/07703Constructional details, e.g. mounting of circuits in the carrier the record carrier comprising an interface suitable for human interaction the interface being visual
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06KGRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
    • G06K7/00Methods or arrangements for sensing record carriers, e.g. for reading patterns
    • G06K7/0013Methods or arrangements for sensing record carriers, e.g. for reading patterns by galvanic contacts, e.g. card connectors for ISO-7816 compliant smart cards or memory cards, e.g. SD card readers
    • G06K7/0021Methods or arrangements for sensing record carriers, e.g. for reading patterns by galvanic contacts, e.g. card connectors for ISO-7816 compliant smart cards or memory cards, e.g. SD card readers for reading/sensing record carriers having surface contacts
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06KGRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
    • G06K7/00Methods or arrangements for sensing record carriers, e.g. for reading patterns
    • G06K7/0013Methods or arrangements for sensing record carriers, e.g. for reading patterns by galvanic contacts, e.g. card connectors for ISO-7816 compliant smart cards or memory cards, e.g. SD card readers
    • G06K7/0086Methods or arrangements for sensing record carriers, e.g. for reading patterns by galvanic contacts, e.g. card connectors for ISO-7816 compliant smart cards or memory cards, e.g. SD card readers the connector comprising a circuit for steering the operations of the card connector
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/346Cards serving only as information carrier of service

Definitions

  • the present invention relates to a system including ' a keyboard and apparatus controlled by the keyboard.
  • the present invention particularly relates to systems employing a user card.
  • Much publicly accessible equipment employs a numeric or alpha-numeric keyboard. Examples include auto tellers, public telephones, cash registers and point-of-sale terminals. Such equipment is also generally (but not necessarily particularly) characterized by including an element of money transfer or attempts at restriction only to authorized use.
  • the present invention seeks to overcome these risks by providing a system where equipment, integrity is the responsibility of the individtral user.
  • the present invention consists in a system comprising an apparatus to be controlled by means of a keyboard; a removeable card including an integral keyboard; receiving means for receiving and holding said card in association with said apparatus; coupling means for coupling said card to said apparatus; and interface means for detecting operation of said keyboard and for transferring detected commands from said keyboard to said apparatus.
  • an automatic teller In a first preferred embodiment of the invention there is shown an automatic teller.
  • the invention provides the minimum opportunity for vandalism on such a teller by presenting to the user only a simple slot.
  • the invention provides the slot for receiving the card and also provides transport means for transporting the card to an operating position whereat the coupling means and the interface means are engaged by the card. At the operating position the keyboard on the card may be operated.
  • the transport means comprises a drawer which can be extended upon arrival of the card to the operating position to allow user access to the keyboard on the card when the card is in the operating position.
  • the transport means comprises a drawer which can be extended upon arrival of the card to the operating position to allow user access to the keyboard on the card when the card is in the operating position.
  • all sensitive elements of the teller are maintained concealed and protected in the drawer until the card is in place in its operating position, itself providing protection to the sensitive elements at the operating position.
  • sensitive elements include card contact sets, optical couplers and the like.
  • the invention provides that the card includes a money memory.
  • the money memory contains a representation of an amount of money held on the card and usable with the card.
  • the automatic teller is operative to transfer money into the money memory on the card or to debit the money memory on the card for payment. In this manner a cash-free transaction is realised removing the possibility of money robbery from the teller.
  • the invention provides that the card comprises a validation memory for holding a personal identification number, the card being operative to execute its self-validation check by providing indication whether or not an entered number on the keyboard is identical to the personal identification number, and the card being operative to indicate to the teller or other apparatus whether or not the entered number is identical to the personal identification number, the teller (or other apparatus) responding to the commands from the card if, and only if, the number is indeed identical to the personal identification number.
  • the apparatus is gained if, and only if, the presenter of the card is the true owner. Only the true owner is aware of the personal identification number stored on the card. Only the true owner may cause the card to self-validate.
  • the data for self-validation is kept internal to the card. No data transfers across the boundary between the card and the teller (or other apparatus) so that attempts of fraudulent use of a card cannot succeed by examination of ingoing and outgoing data.
  • Indication to the teller (or other apparatus) that a card has self-validated can be made by provision by the card, to the teller, of a further card-identification number (similar to the user personal identification number) whereby the card itself is identified.
  • the teller (or other apparatus) may then request a further personal identification number from the user which must cross-check with the card identification number. In this way, even if a fraudulent user succeeds in convincing the teller (or other apparatus) that a card has self-validated, the teller (or other apparatus) will refuse further to co-operate with the card.
  • the card itself will not function as a keyboard for the apparatus unless it has genuinely self-validated.
  • the invention provides that the teller (or other apparatus) will destroy access to the stored personal identification number on the card if a user attempts more than a predetermined number of personal identification number entries, none of which proves correct. In this way, a fraudulently used card has its function destroyed so that it is no longer usable.
  • the teller (or other apparatus) then has the possibility of swallowing and retaining the card.
  • the invention provides that the card may self-validate when not on a teller (or other apparatus).
  • the card properly self-validated will display the default symbols in a display area, and a card improperly validated will display error symbols in the display area.
  • a person, seeking a monetary transaction with a cardholder may thus ascertain whether or not the person presenting the card is its true owner.
  • the invention includes provision whereby the card, in a self-validation check, not necessarily on a teller or other apparatus, should a personal identification number be wrongly entered more than a predetermined number of times, ceases all function for a set time (in an example chosen, five minutes) so that it would take an inordinate amount of time to try all personal identification numbers, the card not accepting a further identification number entry attempt until the lapse of the predetermined time.
  • the apparatus in the system is a telephone and the keyboard on the card is employable as the dialling keypad for the telephone.
  • the keyboard on the card is employable as the dialling keypad for the telephone.
  • a telephone is provided where a fresh keypad is presented by each user and where the telephone itself comprises no keypad. The telephone is thus proof against any keypad being vandalized.
  • the invention also provides that the telephone will only respond to a card which has successfully self-validated. This way, access to the use of the telephone is restricted to the true owners of cards.
  • the invention provides that the card includes a money memory containing a representation of a sum of money stored for use with the card, that the telephone is operative to monitor the dialled number and to determine the unit cost per unit time for the call placed, and that the telephone is operative to substract the unit cost from the representation in the money memory at each elapse of unit time during the call.
  • the system provides that the apparatus is a transfer terminal where the card is a first card, where the transfer terminal is operative simultaneously to receive the second card, where the first card and the second card each comprise a respective money memory operative to store a numerical representation of money held, and where the transfer terminal is operative to substract the representation of a sum of money from the money memory in the first card and add a sum of money to the representation of the money memory in the second card.
  • the transfer terminal can be a point-of-sale terminal for use in a shop or other selling outlet.
  • the teller terminal will respond to the cards if, and only if, both cards have properly self-validated. It is also provided that the transfer terminal or point-of-sale terminal will transfer money between the cards if, and only if, a sum of money entered on the keyboard of the first card agrees with a sum of money entered on the keyboard of the second card. In this way, only when the price is agreed, can the transfer of funds take place.
  • the invention provides that all of the money held in the first card is tranferred to the second.
  • receipts in various point-of-sale terminals throughout a shop or store can be transferred to a master cashiers card for presentation and a deposition in a teller (such as provided in the first preferred embodiment).
  • the system thereby provides for a totally moneyless trading system relying solely upon data stored on a card.
  • the card or cards are coupled to the apparatus using electrical or capacitive contacts.
  • the invention also provides that a card can communicate with the apparatus using an optical method whereby a display on the card is operated in sympathy with serial data and the attached apparatus employs an optical reader for detecting the modulation of the display.
  • FIG.1 shows a teller unit according to the first embodiment of the present invention and further shows the first stage in operation of the teller unit.
  • FIG.2 shows the teller unit of FIG.1 and shows a second stage in its operation.
  • FIG.3 shows a third stage in the operation of the teller unit of FIGS.1 and 2.
  • FIG. shows a fourth and last stage in the operation of the teller unit of FIGS.1,2 and 3.
  • FIG.5 shows a cross sectional view of the drawer unit of the teller units of FIG.1 to 4.
  • FIG.6 shows a plan view of the drawer unit of FIGS.1 to 5.
  • FIG.7 is a schematic block diagram of the component parts of a card.
  • FIG.8 is a schematic block diagram of the component parts of the teller unit.
  • FIG. is a front view of a card.
  • FIG.10 is a cross-sectional view of the card of
  • FIG.9 taken along the line X-X' looking in the direction o f the a r rows .
  • FIG.11 is an exemplary rear view of the card of FIGS. and 10.
  • FIG.12 is a flow chart of the operation of the teller.
  • FIG.13 is a flow chart of the operation of the card whilst on the teller.
  • FIG.14 is a flow chart of the operation of the card when not on the teller, and particularly exemplifies a self-validation check.
  • FIG.15 is a view of a transfer terminal or point-of-sale terminal according to another embodiment of the invention.
  • FIG.16 is a cross sectional view of the transfer terminal of FIG.15 taken along the line Y-Y', looking in the direction of the arrows.
  • FIG.17 is a schematic block diagram of the point-of-sale terminal or transfer terminal of FIGS.15 and 16.
  • FIG.18 is a flow chart of the operation of the transfer terminal or point-of-sale terminal of FIGS.15 to 17 when operating to transfer funds to a master cashier card.
  • FIG.19 is a flow chart of the operation of the point-of-sale terminal of FIGS.15 to 17 when operating to transfer an agreed amount during a sale transaction.
  • FIG.20 shows a further embodiment of the invention, the apparatus being a telephone set.
  • FIG.21 shows the telephone set of FIG.20 with a card in place.
  • FIG.22 is a schematic block diagram of the card-interactive portions of the telephone set of FIGS.20 and 21.
  • FIG.23 is a flow chart of the operation of the telephone set of FIGS.20 and 21 during the course of use.
  • FIG.1 shows a first preferred embodiment of the invention in the form of a teller unit operated by a card.
  • a teller unit 10 is recessed on a publicly accessible wall 12 by means of a flange or escutcheon 14.
  • the teller unit 10 comprises a light 16 on the top of its recessed * portion 18 which, as will later be described, serves not only to provide light for visibility, but can also be employed to activate a presented card employing solar cells.
  • a drawer unit 20 is provided with a slot 22 where-through a card 24 can be introduced.
  • the teller unit 10 also comprises a display panel 26 for use, as is known in the art, for displaying messages to be read by the user.
  • the card 24 is introduced
  • FIG.2 shows the second stage of operation of the teller unit 10.
  • the card 24 has been transported into the drawer 20, it comes to rest in a central window 30 in the centre of a depressed upper face 32 of the drawer 20.
  • the drawer 20 is then advanced by a motor
  • the user of the teller unit 10 is free to engage in transactions with the teller unit 10 using the card 24 (in a manner hereinafter described) by interacting with messages on the display panel 26 of the teller unit 10.
  • FIG. shows a third stage in the operation of the teller unit 10 executed at the end of a successful or unsuccessfully attempted transaction.
  • the card 24 is retained in the central window 30 of the drawer unit 20 which is retracted back into the teller unit as indicated by a third arrow 36.
  • FIG.4 shows the final stage in operation of the teller unit 10 where the card 24 is returned to the user, as indicated by a fourth arrow 38, back through the slot
  • FIG.5 shows a cross sectional view through the teller unit 10, in the position shown in FIG.2, along the line A-A' looking in the direction of the arrows.
  • FIG.6 shows a plan view of the drawer unit 20 of
  • FIG.2 shows the drawer unit 20 with the card absent
  • FIG.6 shows the drawer unit 20 with the card 24 shown only in phantom outline.
  • a pair of rear rollers 40 are spaced apart a little less widely than the width of the card 24, each to support a respective transport belt 42 operative to conduct the card 24 into the drawer unit 20 through the slot 22.
  • a photo detector 44 detects the insertion of the card 24.
  • the transport belts 42 are supported at their ends nearest the slot 22 by means of a common roller 46.
  • an electric motor drive causes the transport belts 42 to induce the card 24, beneath a guide 48, into the drawer unit 20 to be situated as shown in FIG.6.
  • the central window 30 is smaller in size than the overall dimension of the card 24. Because the card 24 is rigid and because the central window 30 is smaller than the card 24, the card 24 cannot be removed from the drawer unit 20 as shown in FIG.6. As will later be described, all that is necessary is that a keyboard on the card. 24 is accessible through the central window 30. Also, as will later be described, a teller contact set 50 provides electrical connection to the card 24.
  • the teller contact set 50 is presented through an aperture 52 in a card support plate 54 by electro mechanical means 57 after the card 24 has arrived beneath the central window 30. Because of the arrangement of the rollers 40,46 it is only necessary to energize one roller 40,46 in order to achieve uniform induction of the card 24 into the drawer units 20.
  • the mechanical means 57 for causing the teller contact set 50 to engage a card 24 is shown being raised by means of a solenoid and crank arm. It when in this recovery mode, where the card contact set 80 has somehow failed to communicate serial data, causes the card serial communicator 82 to strobe the selected element of the card display 74 at a speed consistent with the speed of response of a liquid crystal display.
  • serial data is thus slowly transferred from the card 24 to the teller unit 10.
  • a banking institution may recover data from a damaged card 24. Since a card 24 (as will hereinafter be described) represents a source of money, it is important to the card user to have this facility for recovering sums of money from his card should a fault occur. Not every teller unit 10 need be provided with an optical reader 100. Only those teller units where card recovery is contemplated need include an optical reader 100.
  • the card 24 itself may be provided with an optical reader 100 designed to interact with a modulated light source or source of reflection in the teller unit 10. In this way, two-way communication between a card 24 and a teller unit 10 can be achieved without direct electrical contact.
  • the teller contact set 50 and the card contact set 80 are hereinafter and herein-before described as electrical contacts, it is to be understood that, where it is not necessary to transfer significant amounts of power to a card 24 during use, capacitive, inductive or to be understood that the contact set 50 can be raised or moved into position by any individually activable electro mechanical means known in the art.
  • the transport belts 42 move as indicated by fifth arrows 56.
  • the transport belts 42 move as indicated by sixth arrows 58.
  • the transport belts 42 are moved instead in 0 the direction of the fifth arrows 56 for the card 24 to be deposited in a retention bin 60 wherefrom the owner of the teller unit 10 can retrieve a card 24 for restoration to its proper owner.
  • the card 24 is ejected over the rear rollers 40 onto a guide chute 62 into the retention 5 bin 60.
  • the guide chute 62 allows a card 24 to enter the retention bin 60 with the drawer unit 20 in the retracted position of FIGS.1 and 4.
  • the retention bin o 60 is so placed that, when the transport belts are moved as indicated by the fifth arrows 56, the card 24 is directly deposited into the retention bin 60 avoiding the guide chute 62.
  • Such a situation may occur if the drawer unit 20 for some reason becomes jammed in the extended position shown in FIG.2. It is to be understood that this is an abnormal, fault condition not encountered during regular operation of the teller unit 10.
  • the aperture 52, the card support plate 54 and the teller contact set 50 are all concealed within the drawer unit
  • the card 24 provides a protection for the more sensitive teller contact set
  • the drawer unit 20 is retracted before the card 24 is returned to the user.
  • the sensitive elements 50 52 54 are thus once again concealed within the teller unit 10 before the card 24 is removed from its position there-over.
  • FIG.7 is a schematic block diagram of the card
  • the card 24 is a so called 'smart card' comprising a low-powered card processor 64 providing, in o effect, a miniature low power computer.
  • the card processor 64 and all associated devices can be powered by means of a solar cell array 66, or can be powered by a replaceable or rechargeable power cell 68.
  • a data and address bus 70 distributes signals (in a manner known to those skilled in the art) throughout various elements of the card 24.
  • the card 24 comprises an integral keyboard 72 whose key strokes are transferred from the keyboard 72 via the data and address bus 70 to the card processor 64.
  • the card 24 comprises a card display 74, which can typically be a liquid crystal display, also driven via the data and address bus 70.
  • the card processor 64 also uses the data and address bus 70 to access a random access memory 76 and to access a read-only memory 78.
  • a card contact set 80 communicates via the data and address bus 70 with the card processor 64 and provides electrical contact with a
  • the card contact set 80 also provides electrical power to the card processor 64 (derived from the teller unit 10) when the card 24 is on the teller unit 10.
  • a card serial communicator 82 receives data from
  • the card serial communicator 82 turns parallel data from the card processor 64 into serial data for transmission via the card contact set 80. Similarly, the card serial communicator 82 turns serial
  • the card serial communicator 82 can also provide serial data to the card display 74 to modulate
  • FIG.8 shows a schematic block diagram of the teller unit 10.
  • a teller processor 84 together with all other units in the teller unit 10, are powered by a teller power supply 86 derived from the electrical supply main or from a backup emergency battery source in the event of main failure.
  • the teller power supply 86 provides electrical power, via power line 88, to the teller contact set 50, otherwise shown in FIGS.5 and 6.
  • the teller processor 84 communicates with various elements in the teller 10 via a teller data and address bus 90.
  • the teller processor 84 is, in effect, a small computer and uses the teller data and address bus 90 to communicate with a teller memory 92.
  • the teller processor 84 uses the teller data and address bus 90 to provide two way communication with a modem 94 (i.e. a modulator/demodulator) employing a teller telephone line
  • 10 can confirm validity, invalidity, viability or nonviability of any transaction desired by the user and presenter of the card 24.
  • the teller processor 84 is connected, via the teller data and address bus 90, to a teller serial communicator 98, used for communicating between the teller unit 10 and the card 24.
  • the teller serial communicator 98 is operative to receive parallel data from the teller processor 84 and convert it into serial data which is transferred through the teller contact set 50 to the card contact set 80 and thereafter to the card serial communicator 82 for presentation to the card processor 64.
  • parallel data from the card processor 64 is turned into serial data by the card serial communicator 82 and is transferred via the card contact set 80 to the teller contact set 50 and thereafter to the teller serial communicator 98 whereat it is once more turned into parallel data for presentation to the teller processor 84. In this manner, the teller unit 10 is able to communicate with the card 24.
  • the card 24 may still communicate with the teller unit 10 using an optical reader 100 (also shown in FIG.5) interacting with the card display 74.
  • the optical reader 100 provides serial data to the teller serial communicator 98 in response to modulation of the card display 74.
  • the card serial communicator 82 flashes a selected element of the card display 74 in sympathy with serial data to be communicated to the teller unit 10.
  • the optical reader 100 comprises a reflective photo detector (i.e. a light source and photo sensor for use where the card display is a liquid crystal display) which senses when the selected element of the card display 74 is in a transparent or darkened mode.
  • FIG. shows a front view of the card 24 whose schematic block diagram is shown in FIG.7.
  • the card display 74 is a liquid crystal display and is here shown as a single-row seven-segment decimal digit display. It is to be understood that the card display 74 may comprise any other display suitable for use in the card 24.
  • the card 24 is itself of the general size and thickness of a normal credit card, being in the region of
  • the solar cell array 66 is provided immediately above the keyboard 72 to one side of the card 24. When the card 24 is introduced beneath the light 16 of the teller unit 10, the solar cell array 66 powers the card 24. Should a power cell 68 be provided, the solar cell array 66 can be omitted. In those instances where the power cell 68 is rechargeable, power derived from the card contact set 80 via the teller contact set 50 can be used to recharge the power cell 68.
  • FIG.10 is a cross sectional view of the card 24 of FIG.9 taken along the line X-X' looking in the direction of the arrows.
  • Individual surface mounted integrated circuits 102 making up the elements of the block diagram of FIG.7 are mounted in a cavity formed between a hollowed front member 104 and a rear member 106 of the card 24.
  • the integrated circuits 102 are connected one with another using thin film printing techniques.
  • the rear member 106 is attached to the front member 104 by means of adhesive 108 affixed between the raised edge of the front member 104 and the rear member 106.
  • the keyboard 72 can be fabricated as a membrane keyboard, communicating with the integrated circuits 102 using thin film or flexible printed circuit board connection techniques.
  • FIG.11 shows a rear view of the card 24.
  • the card contact set 80 comprises a number of conductive areas 110 set into an insulating surround 112 and protruding through the rear member 106.
  • the card contact set 80 can comprise a small flange for supporting the rear member 106 (the flange not here being shown) and the contact set can in fact be affixed to the same face within the front member 104 as the integrated circuit 102.
  • the card contact set 80 mates with corresponding electrodes in the teller contact set 50 when the electro mechanical means 57 advances the teller contact set 50 into engagement with the card contact set 80.
  • the teller unit 10 further comprises an electro mechanical interface 114 of the type known to those skilled in the art whereby the teller processor 84 may individually command the electro mechanical means 57, may individually command electric motors causing the drawer unit 20 to advance and withdraw, and may individually command electric motors causing the transport belts 42 to be moved, each to perform selected mechanical functions.
  • the electro mechanical interface can receive the signals from the photo detector 44 to indicate the insertion of a card 24 through the slot 22.
  • Such interfaces are generally achieved using selectively addressable memory locations, latch chips and selectively energizable transistors whose output is derived from the contents of the latches.
  • input data is fed to the teller processor 84 by the teller processor 84 addressing a selected memory location whereat a buffered latch exists.
  • the contents of the buffered latch are determined by the condition of input signals and, when addressed, the selected memory location transfers its data to the teller processor 84 via the teller bus 90.
  • FIG.12 is a flow chart depicting the operation of the teller unit 10.
  • the teller unit 10 examines the output of the photo detector 44 to determine whether or not a card 24 has been inserted into the slot
  • the first test 116 continues to look for the presence of a card 24 in the slot 22 until a card 24 is detected.
  • Control then passes to a first operation 118 wherein the teller processor 84 uses the mechanical interface 114 to ensure that the card 24 is transported through the slot 22 into the drawer unit 20 until it lies in the central window 30. This is achieved by the teller processor 84 commanding the electro mechanical interface 114 to operate a motor or motors to move the tranport belt 42 until the card 24 is in the central window 30.
  • the teller processor 84 monitors the teller contact set 50 until it detects the card contact set 80 has engaged therewith. This is achieved by seeking a predetermined electrical resistance (i.e.
  • control is passed to a second operation 120 where the drawer 20 is extended, again by the teller processor 84 issuing a command to the electro mechanical interface 114 for motors (not shown in the Figures) to extend the drawer unit 20 on runners (again not shown in the drawings) into the position shown in FIG.2.
  • control passes from the second operation 120 to a third operation 122.
  • the card 24 may be issued by a bank in any one of a number of countries. Each country uses its own language and, in the case of countries like Japan, its own character set. It is appropriate that the teller unit 10 should respond to each card 24 in the appropriate language for the card user. To this end, each card 24 contains in the read-only memory 78, in a predetermined location, an indication of the bank or country wherein the card 24 was issued. This bank code is read from the card 24 by the teller 10 by means of the teller 10 issuing an instruction, via the teller serial communicator 98 and the teller contact set 50, to the card contact set 80 and the card serial communicator 82 to command the card processor 64 to examine the specific location.
  • the card processor 64 examines all incoming information requests to determine whether a request has been made to access a part of the read-only memory 78 wherein the personal identification number of the card 24 is stored. Should the teller 10 desire to read that portion of the read-only memory 78 whereat the personal identification number of the card 24 is stored, the card processor 64 refuses to divulge that information.
  • the teller 10 is able to extract the data for the read-only memory 78, and the teller unit 10 responds by selecting the appropriate language or set of symbols for use with its display panel 26.
  • Every card 24 comprises numerical keys, question and answer keys and function keys on its keyboard 72. If a particular key is pressed, the same code is provided to the teller unit 10 regardless of the country of origin of the particular card 24. Thus, whereas in English there may be provided a 'yes' and a 'no' key, and whereas in French the keys might be numbered 'oui' and 'non', and in Japanese the same two keys may be depicted on the front of the card 24 with some other characters, the codes remain the same, and operation of corresponding keys results in corresponding codes. The teller unit 10 is thus required only to produce different pictographic codes for its display panel 26 for each message it is required to displa .
  • the third operation 122 having been completed, control is passed to a fourth operation 124.
  • the teller unit 10 indicates on the display panel 26 in the appropriate language, a request that the user enter his card personal identification number.
  • the teller unit 10 also issues a command to the card 24 to be ready to receive the card's personal identification number.
  • the user then presses the keys in the keyboard 72 corresponding to the sequence of numbers or characters making up the card personal identification number.
  • Control is then passed to a fifth operation 126 wherein the teller 10 interrogates the card 24 to determine whether or not the card personal identification number has been entered and, in a second test 128, checks to see whether the card 24 provides indication that the personal identification number is correct.
  • control is passed to a third test 130 which checks if this is the third occasion of wrong entry of the card personal identification number. If the third test 130 does not detect a third occasion of wrong entry of the card personal identification number, control is passed to a sixth operation 132 wherein the teller unit 10 places a message upon its display panel 26 indicating that the card personal identification number should be re-entered. Control is then passed back to the fourth operation 124.
  • control is passed to a seventh operation 134 wherein the teller unit 10 commands the card to blow its personal identification number.
  • This is simply achieved by the teller unit 10 writing a control word in the random access memory 76 whereby, when the card processor 64 comes to interrogate the read-only memory 78 at that location where the card personal identification number is stored, the card processor 74 is unable to do so because the command word written in the random access memory forbids access to that particular address.
  • the card 24 comes again to attempt a validation process, either on the teller unit 10 or in a self-validation process, it cannot access its personal identification number and therefore cannot test for validity.
  • the card 24 is thus effectively neutralized in as much as the apparatus (in this instance, the teller unit 10) will not co-operate with the card unless it is validated by the card personal identification number corresponding to a number entered on the keyboard 72.
  • the seventh operation 134 also provides that the teller processor 84, having commanded the card 24 to blow access to the personal identification number, then uses the electro mechanical interface 114 to command movement of the transport belts 42 to swallow the card by transferring it to the retention bin 60.
  • the drawer unit 20 is simultaneously retracted and the suspected fraudulent user is deprived both of his card and of further access to the teller unit 10.
  • the seventh operation 134 passes control back to the first test 116.
  • the teller unit 10 opens the transaction by using the modem 94 to send an encrypted message via the teller telephone line
  • the teller unit 10 then requests the user to enter a further personal identification number by using the keyboard 72 of the card 24, and the teller unit 10 then compares the further personal identification number entered by the user with a personal identification number received via the teller telephone line 96 from the appropriate bank. If the further personal identification number matches, the teller processor 84 opens the transaction and allows control to pass to ninth operation
  • the random access memory 76 on the card 24 is non-volatile. It contains a money memory wherein is stored a numerical indication of a sum of money held by the card 24.
  • the card 24 may be used in the transaction
  • the random access memory 76 on the card 24 is partitioned into various areas wherein are stored amounts in different currencies.
  • the card processor 64 merely adds the appropriate amount to the appropriate area in the random access memory 76.
  • the card processor 64 merely deducts the appropriate amount from the appropriate area in the random access memory 76.
  • a fourth test 140 checks to see whether the ninth operation 138 (a transaction) is finished. If the transaction 138 is finished, the fourth test 140 passes control to a tenth operation 142 wherein the teller processor 84 uses the electro mechanical interface 114 to retract the drawer unit 20 to the position shown in FIG.4. Thereafter control is passed to an eleventh operation 144 where the teller processor 84 again uses the electro mechanical interface 114 to cause the transport belts 42 to move to return the card 24 back through the slot 38 to the user. The eleventh operation 144 passes control directly back to the first test 116.
  • FIG.13 shows the function of the card 24 when placed in the teller unit 10.
  • a fifth test 146 checks to see whether or not the card 24 is on the teller 10, as indicated in FIG.2. This is achieved by the card 24 looking for a particular predetermined codeword to be received from the teller 10. If that word is received, control is passed to a sixth test 148. If the particular codeword indicating presence on the teller 10 has not been received, control is passed back to a housekeeping operation 150 of internal functions wherein the card 24 can function in any other manner appropriate to it. As will be seen by examining FIG.9, the card is eminently suitable for use as a calculator or small memory device. The present invention provides that the card 24 can be used in such a function. Such functions are included in the housekeeping operation 150.
  • control is passed back to the fifth test 146 to see whether or not the card 24 is on the teller 10.
  • Control having passed to the sixth test 148 on the fifth test 146 having detected receipt of the codeword indicating that the card 24 is on the teller unit 10, the sixth test 148 waits for the teller unit 10 to ask for the bank code of the card 24 (corresponding to the third operation 122 of FIG.12).
  • control is passed to a twelfth operation 152 which provides the bank code to the teller unit 10 in the form of serial data via the card contact set 80.
  • the twelfth operation 152 then passes control to a seventh test 154 which checks to see whether the teller unit 10 has passed to the card 24 the particularly selected code which requests the card 24 to commence a validation operation by entry on the card keyboard 72 of the card personal identification number.
  • control is passed to a thirteenth operation 156 wherein the card 24 checks the sequence of digits pressed on its keyboard 72 against a sequence of digits stored in a predetermined location in the read-only memory 78.
  • Control is then passed to an eighth test 158 which checks to see whether or not the keyed sequence on the keyboard 72 corresponded to the stored personal identification number on the card in the read-only memory 78.
  • control is passed to a fourteenth operation 162 which performs the actual blowing.
  • the denial of access to the read-only memory location (or locations) whereat the personal identification number (or numbers) are stored is achieved by writing an interdictory control word in the random access memory 76.
  • Alternative techniques exist, such as applying a voltage level on one of the conductive areas 110 of the card contact set 80 such that a fusible link in the card 24 is blown, the fusible link, when blown, denying passage of enabling signals to the read-only memory 78.
  • the fourteenth operation 162 passes control directly to the housekeeping operation 150 which, in the fullness of time, returns control to the fifth test 146. If the eighth test 158 discovers that the sequence of keystrokes on the keyboard 72 corresponds to the stored personal identification number in the read-only memory 78, control is passed to a fifteenth operation 164. In this fifteenth operation, the card processor 64 commands the card display 74 to display a row of default characters which indicate to the user that the personal identification number of the card 24 has been correctly entered. During keying of the code, no display is provided by the card 24 so that onlookers may not learn the card 24 personal identification number.
  • the fifteenth operation 164 also informs the teller unit 10, via the card serial communicator 82 and the card contact set 80, that the card personal identification number has been correctly entered. As previously described, this is achieved by the card 24 passing to the teller unit 10 a further personal identification number which the teller unit 10 then communicates to the appropriate bank and compares against a yet further entered personal identification number by the user.
  • the number passed to the teller unit 10 as the personal identification number to be passed to the bank for receipt of the further personal identification number is encrypted so that a fraudulent user may not readily discover its value. It is preferred that the encryption key be passed from the teller unit 10 to the card 24 on each occasion, and that the teller unit 10 changes the encryption key from time-to-time, so that the fraudulent user may not know in advance what code to provide.
  • the fifteenth operation 164 passes control to a transaction operation 166, corresponding to the transaction operation 138 of FIG.12.
  • the transaction completed, the card 24 returns control to the housekeeping operation 150 which in turn, in the fullness of time, returns control to the fifth test 146.
  • FIG.14 shows a self-validation process whereby the card 24 can check its own internally stored personal identification number to show that the user is indeed the true owner of the card.
  • One of the keys 72 on the card 24 is designated as the personal identification number key.
  • the card 24 knows that it must execute a self-verification routine.
  • a tenth test 168 checks to see whether the personal identification number key has been pressed. The tenth test 168 conveniently forms part of the housekeeping operation 150 of FIG.13.
  • the tenth test 168 passes control to a sixteenth operation 172 wherein the card processor 64 blanks the card display 74 so that no characters whatsoever are displayed while a sequence of keys on the keyboard 72 are pressed intended to correspond with the card personal identification number stored in the read-only memory 78. Casual onlookers cannot thereby learn the card personal identification number. Control is passed by the sixteenth operation 172 to a seventeenth operation 174 which compares the sequence of digits or other characters entered on the keyboard 72 with the stored personal identification number in the read-only memory 78. The seventeenth operation 174 passes control to an eleventh test 176 to check whether the entered sequence of digits actually did correspond with the stored personal identification number.
  • the eleventh test 176 passes control to a twelfth test 178 which checks to see whether this is the third sequential unsuccessful instance of an attempt at entry of the personal identification number. If the twelfth test 178 does not find that it is the third abortive attempt to enter the personal identification number, it passes control to an eighteenth operation 180 which flashes a flag on the card display 74 requesting re-entry of the personal- identification number. The eighteenth operation 180 then passes control to the seventeenth operation 174.
  • the twelfth test 178 If the twelfth test 178 detects that this is indeed the third sequential abortive attempt to enter the personal identification number, the twelfth test 178 passes control to a nineteenth operation 182 where the card processor 64 causes an error message to be displayed on the card display 74 and also commences a five minute waiting process where no further operation will be accepted by the card. This five minute wait includes further attempts to enter the personal identification number. In this way, it is not possible repeatedly to attempt to identify the correct identification number by trial and error except at a very slow rate. Thus, the potential fraudulent user will be discouraged from attempting to find the personal identification number on a found or stolen card 24.
  • Using a five decimal digit personal identification number and a five minute delay would require the fraudulent user to spend approximately 2,500 hours to find the correct personal identification number. If a keyboard including alpha numerics (i.e. 26 letters and 10 decimal digits, in total 36 characters) were included in the five digits, with the five minute delay, the period extends to a remarkable approximate five million hours.
  • the delay can.be chosen to be longer or shorter than five minutes and the number of different keys involved in the personal identification word can be varied. Whatever the choice, the introduced delay causes considerable difficulty in establishing the identity of the card personal identification number.
  • the displayed error message indicates to all those around that the person in control of the card is unaware of the correct personal identification number and may be a fraudulent user.
  • the nineteenth operation 182 passes control directly back to the tenth test 168. If the eleventh test 176 indeed detects that the sequence of digits, entered on the keyboard 72, does correspond with the stored personal identification number in the read-only memory 78, control is passed to a twentieth operation 184 wherein the card processor 64 0 displays the default characters on the card display 74 indicating that the correct personal identification number has been entered. All those aware of the entry of the personal identification number can then be sure that the person operating the card 24 knows the correct 5 personal identification number and that any transaction is likely to be valid and legal.
  • the twentieth operation 184 passes control to a twenty-first operation 186, generally indicative of any transaction that the card 24 will be used to complete.
  • a simple request for example, on the part of the police
  • pressing another key on the keyboard 72 returns the twenty-first operation 186 directly to the tenth test 168.
  • the card 24 awaits commands from the apparatus whereto it is connected prior to participating in the transaction.
  • No card 24 will participate in transactions unless it has been properly validated or self-validated as described with reference to FIGS.13 and 14. No card 24, not having been validated, will respond to commands from the associated apparatus as hereinbefore and hereinafter described except to commence a validation process as shown in FIG.13.
  • the card 24 On completion of the twenty-first operation the card 24 returns control to the tenth test 168 and resumes its general housekeeping operations 170 150 until again called upon to execute some task.
  • FIG.15 shows a projected view of a transfer terminal 188, aptly used as a point-of-sale terminal in a shop or other retail outlet.
  • FIG.16 shows a cross sectional view of the transfer terminal of FIG.15 taken along the lines Y-Y' looking in the direction of the arrows.
  • the transfer terminal 188 comprises a first face 190 and a second face 192. Each face comprises a pair of spaced support brackets 194 adapted to accept a card 24. Each support bracket set 194 is provided with a contact set 196,198.
  • the first face 190 of the transfer terminal 188 is for use by the seller of goods.
  • the second face 192 of the transfer terminal 188 is intended for use by the buyer of goods.
  • the first face 190 of the transfer terminal 188 is provided with a seller contact set 196 intended to engage the card contact set 50 on the sellers card 24.
  • the buyer's card is designated as
  • the second face 192 of transfer terminal 188 is provided with a buyer contact set 198 intended to make contact with the card contact set 80 of the buyer's card 24'.
  • the transfer terminal 188 functions to transfer stored representations of money between the buyer's card 24' and the seller's card 24.
  • FIG.17 shows a schematic block diagram of the transfer terminal 188 of FIGS.15 and 16.
  • a terminal processor 200 communicates by means of a terminal bus 202 both with the buyer contact set 198 and the seller contact set 196.
  • a terminal power supply 204 provides electrical energy both to the buyer contact set 198 to energize the buyer's card 24' and to the seller contact set 196 to provide energy to the seller's card 24.
  • FIG.19 is a flow chart of the operation of the transfer terminal 188 during a sale transaction.
  • a thirteenth test 206 the teller terminal 188 interrogates the seller contact set 196 to see if a seller's card 24 is present. If a seller's card 24 is present " on the seller contact set 196, control is transferred to a fourteenth test 208. If the thirteenth test 206 fails to detect the presence of a seller's card 24 on the seller contact set 196, the terminal processor 200 continues to wait.
  • the fourteenth test 208 examines the buyer contact set 198 to determine whether a buyer's card 24' has been provided on the second face 192 of the transfer terminal 188. If no buyer's card 24' has been detected, the terminal processor 200 continues to wait. If a buyer's card 24' has been detected, control is passed to a twenty-second operation 210.
  • the twenty-second operation interrogates both cards 24,24' to see whether or not the card 24,24' has been self-validated.
  • Each card 24,24' when self-validated, and when thereafter interrogated by an apparatus, is operative to receive an encryption control word from the apparatus and to return a predetermined validation word to the apparatus, encrypted according to the encryption control word.
  • Any of numerous encryption processes known in the art may be used, ranging from digit transposition to algorithmic processes involving algebraic identities. It is not important to the present invention exactly which encryption manner is selected, merely that the individual cards 24 24' can receive, from the transfer terminal 188, a control word for controlling encryption and can return the predetermined validation word, encrypted in response to the control word to the apparatus.
  • the transfer terminal 188 provides a selected (and from time to time variable) encryption control word to each card 24 24' and each card 24,24' responds by sending back the encrypted version of the self-validation indication word. Since the word to be returned varies from time to time, a fraudulent user will find it difficult to know the correct response to generate in order to operate a transfer terminal. Since the encryption command word can vary from transfer terminal to transfer terminal 188, a card, successfully fraudulently used on one transfer terminal 188 can not be used on another.
  • the twenty-second operation 210 passes control to a fifteenth test 212 which checks to see whether or not the returned word (now decrypted), from the seller card 24 was the expected word indicating that the seller card 24 has properly self-validated. If the returned word is not the expected word indicating correct self-validation, the fifteenth test 212 passes control to a twenty-third operation 214.
  • the first face 190 and the second face 192 of the transfer terminal each comprise a terminal display 216 whereby the transfer terminal 188 provides messages to the users on either side.
  • the twenty-third operation 214 causes the transfer terminal 188 to display to the seller and to the buyer that the seller's card 24 is invalid in as much as it has not properly self-validated.
  • the twenty-third operation 214 then returns control to the thirteenth test 206.
  • control is passed to a sixteenth test 218 which performs exactly the same check concerning the self-validation of the buyer's card. If the sixteenth test 218 detects that the decrypted, returned codeword from the buyer's card 24' is not the expected word, control is passed to a twenty-fourth operation 220 whereby the transfer terminal
  • the sixteenth test 220 then returns control to the thirteenth test 206.
  • control is passed directly to a twenty-fifth operation 222 where the terminal processor 200 causes the terminal displays 216 to request the buyer and the seller to enter the amount of the proposed transaction. At this stage, the buyer and the seller must then use the keyboard 72 of their respective cards 24 24' to enter the amount of the proposed transaction so that both may agree upon the amount.
  • the twenty-fifth operation 222 passes control to a twenty-sixth operation 224 wherein the transfer terminal 188 interrogates both cards 24 24' to learn the amount which has been entered on the keyboard 72 in each case.
  • the twenty-sixth operation 224 passes control to a seventeenth test 226.
  • the seventeenth test 226 checks to see whether the entered amounts on each of the cards 24 24' are equal. If the seventeenth test 226 finds that the entered amounts are unequal, control is passed to a twenty-seventh operation 228 wherein the terminal processor 200 causes the terminal displays 216 to request both the buyer and seller to re-enter the proposed amount because the amounts in each case were not equal.
  • the twenty-seventh operation 228 passes control back to the twenty-fifth operation 222.
  • the seventeenth test 226 finds that the amounts entered on the keyboards 72 of the buyer's 24' and the seller's 24 cards are equal, it passes control to a twenty-eighth operation 230.
  • the terminal processor 200 commands the card processor 64 in the buyer card 24' to access the random access memory 76, to retrieve from the random access memory 76 (that is, the money memory) the amount of money stored therein in the appropriate currency, and to cause the amount of the proposed transaction to be subtracted from the amount in the random access memory 76. Thereafter the debited amount in the random access memory 76 is once again stored in the random access memory 76 in place of the previous, larger amount.
  • the twenty-eighth operation 230 passes control to an eighteenth test 232 to see if a negative residue is left in the random access memory 76 of the buyer's card
  • control is passed to a twenty-ninth operation
  • the terminal processor 200 commands the card processor 64 to add the proposed amount back on to the contents of the random access memory 76, so to restore the amount which was to have been charged but which cannot now be charged due to insufficiency of funds.
  • the terminal processor 200 then causes the displays 216 to 0 inform both the seller and the buyer that there are insufficient funds present on the buyer's card 24' for
  • the operation of the terminal processor 200 ends after completion of the twenty-ninth operation.
  • the eighteenth test 232 If the eighteenth test 232 discovers that the residue, remaining in the random access memory 76 of the buyer's card 24', is not negative, that is to say, that there are sufficient funds present to complete the proposed transaction, the eighteenth test 232 passes
  • the transfer terminal 188 is used as a point-of-sale terminal, the considerable advantage accrues that each sales person, issued with their own sellers card 24, can accrue, can be held accountable for and be responsible for their own particular sales. Further, with no actual money present, the risk of theft of money is reduced.
  • each seller will have a considerable amount of money stored in the random access memory 76 of his or her card. It then becomes necessary to transfer those funds into a bank or at least, to another keeper.
  • the transfer terminal 188 is simply used to transfer funds from the seller's card 24 to a master cashier's card.
  • FIG.18 shows the behaviour of the transfer terminal 188 when used in this mode.
  • the seller's card 24 is placed, this time, on the second face 192 of the transfer terminal 188 and the master cashier's card on the first face 190 of the transfer terminal.
  • the previous seller's card 24 thus takes the place of any previous buyers' cards 24' and the master cashier's card takes the place of the former seller's card 24.
  • the teller processor 200 firstly executes a nineteenth test
  • Control is then passed to a twentieth test 240, corresponding to the fourteenth test 208 of FIG.19, where the terminal processor 200 checks to see whether a card is present in the 'buyer' slot on the second face 192 of the teller terminal, in this instance the 'buyer' card being that card previously used in the 'seller' position on the first face 190 of the transfer terminal 188 during trading.
  • the twentieth test 240 passes control to a thirty-first operation 242, corresponding to the twenty-second operation 210 of
  • FIG.19 where the terminal processor 200 interrogates the previous seller's card 24 and the master cashier's card
  • Control is then passed by the thirty-first operation 242 to a twenty-first test 244 which checks to see if the now decrypted word, received from the master cashier's card, is correct. If the decrypted validation indicating word from the master cashier's card is not correct, control is passed to a thirty-second operation 246 where the terminal processor 200 causes the displays 216 to show to both parties in the transaction that the validation of the master cashier's has not been properly carried out.
  • control is passed to a twenty-second test 248 where the terminal processor 200 checks to see that the validation indicating word, received from the card on the second face 192 of the transfer terminal 188, is correct, this indicates that the previous sellers card has been properly validated. If the twenty-second test 248 finds that the card on the second face 192 of the transfer terminal 188 has not been properly validated, control is passed to a thirty-third operation 250.
  • control is passed to a thirty-fourth operation 252 wherein the entire contents of the random access memory 76 in the card on the second face 192 of the transfer terminal 188, are transferred into a cache memory in the terminal processor 200. Control is then passed to a thirty-fifth operation 254.
  • the contents of the cache memory in the terminal processor 200 are added to the contents of the random access memory 76 in the card on the first face 190 of the transfer terminal. In this manner the entire contents of the previous sellers's card are transferred to the master cashier's card.
  • FIGS.20 and 21 show a yet further embodiment of the present invention in the form of a card-operated telephone system.
  • a telephone set 256 comprises a base unit 258 and a handset 260.
  • the base unit comprises a pair of support brackets 262 and a telephone contact set 264.
  • a card 24 When a card 24 is inserted between the support bracket 262 as indicated by a seventh arrow 266, it takes up the position shown in FIG.21 with the card contact set 80 engaging the telephone contact set 264 and the card 24 itself firmly held between the support brackets which also provide stops (not shown) to stop entry of the card 24 at the correct position.
  • FIG.22 shows a block diagram of the telephone set 256 of FIGS.20 and 21.
  • the telephone serial communicator 270 accepts parallel data words from the telephone set processor 268 and turns them into a stream of serial bits for provision via the telephone contact set 264 to the card 24.
  • the telephone serial communicator 270 receives serial bits or binary digits from the telephone contact set 264, derived from the card 24, and turns them into parallel data to be provided, on the telephone set data and address bus 272, to the telephone set processor 268.
  • a telephone line interface 274 derives electrical power and control signals from a telephone line 276.
  • the electrical power is used to power the telephone set processor 268 and also to power the card 24 via the telephone contact set 264. Also, tones and other signals derived from the telephone line 276 can be passed to the card 24.
  • FIG.23 is a flow chart of the operation of the telephone set 256 during the course of a telephone call.
  • the telephone set processor 268 first checks to see whether or not the handset 260 has been lifted. If the handset 260 is still in its place on a cradle on the telephone set base 258, the telephone -set processor 268 continues to wait until the handset 260 is lifted. If the twenty-third test 278 detects that the handset 260 has been lifted, control is passed to a twenty-fourth test 280. The twenty-fourth test 280 checks to see if the card 24 has been properly self-validated.
  • the thirty-sixth operation 282 passes control to a twenty-fifth test 284 where the telephone set processor 268 waits for the card 24 to provide a codeword indicating that the telephone number which is to be dialled has been completely entered on the keyboard 72 of the card 24. At the same time, the display 74 on the card displays the number which is to be dialled for the information of the user.
  • control is passed to a thirty-seventh operation 286 where the telephone set processor 268 uses its telephone serial communicator 270 and telephone contact set 264 to interrogate the card 24 and derive therefrom the telephone number which is to be dialled. The thirty-seventh operation 286 then commences to dial the number via telephone line interface 274.
  • the thirty-seventh operation 286 passes control to a thirty-eighth operation 288 wherein the telephone set processor 268 examines the number which has been dialled and, by examination of the dialling codes used, decides the cost per unit time of the call. At this moment the timer for the call is commenced, provided the connection has been made via the telephone line interface 274 to the other telephone (i.e. when the called telephone replies).
  • the thirty-eighth operation 288 passes control to a thirty-ninth operation 290 which proceeds to subtract the cost of one call unit from the random access memory 76 in the card 24.
  • the thirty-ninth operation 290 passes control to a twenty-sixth test 292 which tests to see whether the amount of money remaining stored in the random access memory 76 of the card 24 is in fact negative. If the amount remaining in the random access memory 76 has become negative, the twenty-sixth test 292 passes control to a fortieth operation 294 which causes the cost of a unit of time to be added once more to the contents of the random access memory 76 of thecard 24 to restore the amount. Thereafter the activitiy of the telephone set processor ceases, the telephone line being
  • control is passed to a twenty-seventh test 296 which waits to see if a unit of time has been used up. If the twenty-seventh test 296 detects that the unit of time has been used up, the control is transferred back to the thirty-ninth operation 290. Otherwise, the twenty-seventh test 296 transfers control to a twenty-eighth test 298 which checks to see if the handset
  • the telephone set processor 268 hangs up and all is over.
  • the twenty-eighth 298 passes control back to the twenty-seventh test 296 waiting to charge for a further unit of time.

Landscapes

  • Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Computer Hardware Design (AREA)
  • Artificial Intelligence (AREA)
  • Computer Vision & Pattern Recognition (AREA)
  • Business, Economics & Management (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Accounting & Taxation (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
  • Control Of Vending Devices And Auxiliary Devices For Vending Devices (AREA)
PCT/US1989/003049 1988-07-14 1989-07-12 Keyboard operated system WO1990000783A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
GB8816739.0 1988-07-14
GB8816739A GB2220772A (en) 1988-07-14 1988-07-14 Keyboard operated system

Publications (1)

Publication Number Publication Date
WO1990000783A1 true WO1990000783A1 (en) 1990-01-25

Family

ID=10640425

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US1989/003049 WO1990000783A1 (en) 1988-07-14 1989-07-12 Keyboard operated system

Country Status (3)

Country Link
FR (1) FR2634300A1 (enrdf_load_stackoverflow)
GB (1) GB2220772A (enrdf_load_stackoverflow)
WO (1) WO1990000783A1 (enrdf_load_stackoverflow)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO1990007756A1 (en) * 1988-12-29 1990-07-12 Unisys Corporation Keyboard operated system
DE4110768C1 (enrdf_load_stackoverflow) * 1991-03-28 1992-11-12 Hagenuk Gmbh, 2300 Kiel, De
JP3571383B2 (ja) * 1994-10-19 2004-09-29 株式会社日立製作所 Icカード、icカードリードライト装置及び電子財布システム

Citations (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2088605A (en) * 1980-10-31 1982-06-09 Gao Ges Automation Org An identification element
WO1982003484A1 (en) * 1981-04-07 1982-10-14 William M Benton Transaction verification system using optical data communication link
WO1983003694A1 (en) * 1982-04-05 1983-10-27 Benton, William, M. Funds transfer system using optically coupled, portable modules
EP0162221A2 (en) * 1984-03-19 1985-11-27 Omron Tateisi Electronics Co. Financial transaction processing system using on IC card
EP0174016A2 (en) * 1984-09-07 1986-03-12 Casio Computer Company Limited Identification card and authentication system therefor
WO1986003040A1 (en) * 1984-11-15 1986-05-22 Intellicard International, Inc. A unitary, self-contained card verification and validation system and method
WO1986003869A1 (en) * 1984-12-24 1986-07-03 Ncr Corporation Portable personal terminal and system for handling transactions including such terminal
US4742351A (en) * 1985-07-12 1988-05-03 Casio Computer Co., Ltd. IC card system
EP0291834A1 (en) * 1987-05-15 1988-11-23 Oki Electric Industry Company, Limited IC cards and information storage circuit therefor
JPH06143050A (ja) * 1992-11-04 1994-05-24 Suzuki Motor Corp ワークストッパ装置

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
NL7802132A (nl) * 1978-02-27 1979-08-29 Philips Nv Draagbaar element voor het opnemen, onthouden, afbeelden en afgeven van digitale informatie en reserveerinrichting voor gebruik in een reser- veringssysteem.
US4529870A (en) * 1980-03-10 1985-07-16 David Chaum Cryptographic identification, financial transaction, and credential device
IE820411L (en) * 1982-02-25 1983-08-25 L M Ericsson Ltd Portable device for storing and transferring data
US4536647A (en) * 1983-07-15 1985-08-20 Atalla Corporation Pocket banking terminal, method and system
JPS6143050A (ja) * 1984-08-06 1986-03-01 Nippon Telegr & Teleph Corp <Ntt> 携帯用ダイヤルおよびそれを用いた電話機
DE3682476D1 (de) * 1985-10-07 1991-12-19 Toshiba Kawasaki Kk Tragbares elektronisches geraet.
EP0234954A3 (en) * 1986-02-28 1988-04-27 Intellicard International, Inc. Magnetic card with identification code
GB2189741B (en) * 1986-03-15 1990-06-20 Reginald Charles David Vint Pocket size bank/credit card
GB2201125A (en) * 1987-02-16 1988-08-24 De La Rue Syst Verification device

Patent Citations (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
GB2088605A (en) * 1980-10-31 1982-06-09 Gao Ges Automation Org An identification element
WO1982003484A1 (en) * 1981-04-07 1982-10-14 William M Benton Transaction verification system using optical data communication link
WO1983003694A1 (en) * 1982-04-05 1983-10-27 Benton, William, M. Funds transfer system using optically coupled, portable modules
EP0162221A2 (en) * 1984-03-19 1985-11-27 Omron Tateisi Electronics Co. Financial transaction processing system using on IC card
EP0174016A2 (en) * 1984-09-07 1986-03-12 Casio Computer Company Limited Identification card and authentication system therefor
WO1986003040A1 (en) * 1984-11-15 1986-05-22 Intellicard International, Inc. A unitary, self-contained card verification and validation system and method
WO1986003869A1 (en) * 1984-12-24 1986-07-03 Ncr Corporation Portable personal terminal and system for handling transactions including such terminal
US4742351A (en) * 1985-07-12 1988-05-03 Casio Computer Co., Ltd. IC card system
EP0291834A1 (en) * 1987-05-15 1988-11-23 Oki Electric Industry Company, Limited IC cards and information storage circuit therefor
JPH06143050A (ja) * 1992-11-04 1994-05-24 Suzuki Motor Corp ワークストッパ装置

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
PATENT ABSTRACTS OF JAPAN, Volume 10, No. 201 (E-419)(2257), 15 July 1986; & JP-A-6143050 (Nippon Telegr. & Teleph Corp.) 1 March 1986 *

Also Published As

Publication number Publication date
GB8816739D0 (en) 1988-08-17
GB2220772A (en) 1990-01-17
FR2634300B1 (enrdf_load_stackoverflow) 1995-03-24
FR2634300A1 (en) 1990-01-19

Similar Documents

Publication Publication Date Title
EP0305004B1 (en) Transaction system comprising one or more host exchanges and a number of distributed terminal stations which can be coupled to any host exchange via a network system, concentrator and terminal station suitable for use in such a transaction system, and operator identification element for use in such a terminal station
US5053607A (en) Point-of-sale device particularly adapted for processing checks
US7004385B1 (en) Currency dispensing ATM with RFID card reader
US6484936B1 (en) Terminal
US7284692B1 (en) ATM with RFID card, note, and check reading capabilities
US5592377A (en) Check cashing system
CA1101997A (en) Transaction terminal
US5955961A (en) Programmable transaction card
US7850073B1 (en) Cash dispensing automated banking machine
US6394343B1 (en) System for card to card transfer of monetary values
US5539189A (en) Card holder&#39;s paging system for commercial card data network
US20020169673A1 (en) Point of sale enhanced manager/operator override system
EP0101711A1 (en) A portable device for storing and transferring data
ZA200207253B (en) Electronic credit card-ECC.
US6672807B1 (en) Pneumatic transfer terminal and method of operation
US7783570B2 (en) Cash transaction verification and crediting apparatus
EP0793206A2 (en) IC card reader/writer and operation method thereof
EP0407529B1 (en) Keyboard operated system
EP0822525A2 (en) Anti-theft system for self-service terminal
WO1990000783A1 (en) Keyboard operated system
EP0524186A1 (en) Method for handling cash or other confidential information electronically
JP6878955B2 (ja) 自動取引装置、自動取引システム及び自動取引プログラム
JPS61166680A (ja) 電子通帳取引システム
JPS5838440Y2 (ja) 自動取引用通帳処理装置
EP1708148A2 (en) Method and system for self-administrating &#39;off-line&#39; monetary transactions

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): JP US

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): AT BE CH DE FR GB IT LU NL SE