WO1993022743A1 - Codage de cartes pouvant etre lues par une machine et systemes proteges - Google Patents

Codage de cartes pouvant etre lues par une machine et systemes proteges Download PDF

Info

Publication number
WO1993022743A1
WO1993022743A1 PCT/GB1993/000858 GB9300858W WO9322743A1 WO 1993022743 A1 WO1993022743 A1 WO 1993022743A1 GB 9300858 W GB9300858 W GB 9300858W WO 9322743 A1 WO9322743 A1 WO 9322743A1
Authority
WO
WIPO (PCT)
Prior art keywords
card
random number
meter
data
new
Prior art date
Application number
PCT/GB1993/000858
Other languages
English (en)
Inventor
David Alexander Watson
Original Assignee
Ampy Automation - Digilog Limited
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from GB929209847A external-priority patent/GB9209847D0/en
Application filed by Ampy Automation - Digilog Limited filed Critical Ampy Automation - Digilog Limited
Publication of WO1993022743A1 publication Critical patent/WO1993022743A1/fr

Links

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F15/00—Coin-freed apparatus with meter-controlled dispensing of liquid, gas or electricity
    • G07F15/003—Coin-freed apparatus with meter-controlled dispensing of liquid, gas or electricity for electricity
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/343—Cards including a counter
    • G06Q20/3433—Cards including a counter the counter having monetary units
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/02—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by keys or other credit registering devices
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
    • G07F7/1016—Devices or methods for securing the PIN and other transaction-data, e.g. by encryption
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/12—Card verification
    • G—PHYSICS
    • G05—CONTROLLING; REGULATING
    • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
    • G05B2219/00—Program-control systems
    • G05B2219/20—Pc systems
    • G05B2219/23—Pc programming
    • G05B2219/23303—Load program, optical connection between programmer and eprom

Definitions

  • This invention concerns machine readable cards and systems for encoding same to render unauthorised copies of the cards valueless.
  • the invention is of particular application to machine readable cards for controlling the supply of a consumable such as electrical energy via a prepayment meter.
  • a method of making a machine readable card for use in a metered commodity supply more secure against fraudulent copying comprises the steps of:
  • step of obtaining said new card comprises the step of encoding the said random number (or a number derived therefrom) onto the new card, together with new credit data, so that the new card includes both items of data when it is presented to the card reader in the original meter, the latter being adapted to accept credit f om the new card if both items of data are present thereon.
  • the random number may be displayed in a display in the meter to enable the customer to read and note it down for entering into the card issuing apparatus for example by a keyboard or the like.
  • the random number may be encoded onto the card as the credit data thereon is read and accepted, the step of obtaining a new card including the step of inserting the previous card into the card issuing apparatus where the encoded random number is read from the card and written to the new card to be issued.
  • the random number data is preferably buried in other data and/or otherwise encoded or encrypted so as to be incapable of being read from the card by inserting the card into a suitable card reader and attempting to decode the data read from the card.
  • the meter If the meter writes random number data to the old card, it is important that it does so in such a manner that whilst the data is available to be read therefrom for encoding a new card therewith, it cannot be read by the meter card reader from the original card as being the random number required by the originating meter to authorise credit data read thereby, so as to thereby prevent the same card being removed and reinserted and thereby inadvertently side ⁇ stepping the verification procedure.
  • the invention also lies in a machine readable card when encoded with commodity credit data and random number data as aforesaid.
  • the invention also lies in apparatus for controlling the supply of a commodity such as electrical energy following the insertion of an encoded card, comprising:
  • circuit means for checking data read from a card and comparing at least one item therefrom with a random number previously generated and stored in the said apparatus;
  • control means for releasing a quantity of a commodity in response to other data read from a card, provided the said comparison is satisfactory.
  • apparatus for issuing a coded machine readable card for insertion into a prepayment commodity supply meter comprises:
  • card encoding means for generating data for entry on the card in machine readable form corresponding to the number of units of the commodity which have been purchased;
  • (d) means for encoding the random number or a number derived therefrom onto the card in combination with the other credit data so as to be available for reading by the card reader in the meter.
  • a keypad or the like may be provided to enable the number to be inserted manually.
  • a buffer display is provided together with a correction facility so that the customer can insert the number, check what has been entered and only then enter the number into the apparatus and if correction is required, can overwrite the number in the display before authorising entry into the apparatus.
  • the card issuing apparatus includes a card reader into which the old card is inserted and the random number or a number derived therefrom is read from the card and processed by the apparatus and embedded into the data stored on the new card.
  • the old card is taken in by the apparatus so that it cannot be reused.
  • the system proposed by the invention provides security against the fraudulent manufacture of magnetically encoded cards without the need for any form of accountancy back-up and can be tailored to give any degree of confidence.
  • the system may be used, for example on prepayment electricity meters which display the random reference number in the following manner.
  • a consumer wishes to purchase a card he must refer to the display on the meter for the reference number (RN) which he must then enter, via a keypad into a card dispenser.
  • the dispenser will then request an amount of money to be inserted, after which a card will be issued.
  • RN reference number
  • the new card will have buried in it the older reference number and when inserted into the prepayment meter (which will still be displaying the same reference number), the card will be checked by the meter and if verified (ie the appropriate reference number (RN) can be decoded from the data on the card) the purchased units will be credited, and a new randomly derived reference number (RN) will be displayed for use when the next card is to be purchased.
  • the appropriate reference number RN
  • RN randomly derived reference number
  • the RN will be random-within a range chosen to give to the degree of confidence required. 00 to 99 should be sufficient for most applications. 000 to FFF (4095 DIFFERENT CODES) covering higher level requirements, whilst still being manageable for the consumer to remember or write.
  • the RN will be embedded within the recorded data on each card in such a way that the pattern cannot readily be anticipated by anyone wishing to attempt fraud.
  • An additional feature may be provided to allow for any consumer who wishes to obtain a card without a RN or who has forgotten his RN.
  • the dispenser may include an emergency card button, which after insertion of a nominal sum of money (to deter children) will provide an emergency card.
  • This emergency card will credit the meter in the normal way but the meter will now show a modified RN, and is programmed so as to refuse further emergency cards.
  • the consumer must now take this modified RN to the card dispenser which will demand payment for the emergency card in addition to the value of the new card being requested. Because the consumer has to pay for the emergency card with his next normal card, this will prevent this facility becoming a route for fraud.
  • the consumer may alternatively take the RN number to a sales outlet and when paying the money over the counter for the new card, indicate to the sales assistant the RN (memorised or otherwise recalled) from the meter display, who will then issue a card using a card editor which will encode on the card at least the RN if not the data relating to the units purchased.
  • the units and RN data may be encrypted onto the card, appropriate decryption being provided within the card reading and data decoding facilities within the meter.
  • the encryption may involve the random number so that for example the encryption algorithm used is selected depending on the value of the RN and/or the data relating to the units purchased may be encrypted in a unique way for each different RN value, so that when decrypted, there is a double check that the value of the units stored on the card has not been interfered with, such as for example if an attempt has been made to replace the units value on the card with a higher value between purchase and insertion of the card into the meter.
  • FIG. 1 is a pictorial view of a prepayment meter accepting a machine readable card
  • Figure 2 is a flow chart showing the operations carried out within the meter
  • Figure 3 is a pictorial view of an assisted sale card dispenser
  • Figure 4 is a flow chart showing the operations carried out within the dispenser of Figure 3;
  • Figure 5 is a pictorial view of a self-service card dispenser
  • Figure 6 is a flow chart showing the operations carried out within the dispenser of Figure 5.
  • Figures 7a, 7b and 7c respectively show a conventional machine readable card, a card in accordance with the invention having an added random number, and a card in accordance with the invention having encrypted data incorporating the random number.
  • a prepayment meter has a housing 10 and front cover 12.
  • the cover 12 has an entry slot 1 to a card reader; a window 16 for an LCD display 17; push buttons 18 for activating the display and causing different items of stored data in the card to be displayed, such as the remaining credit and possibly a random number encrypted into the machine readable data; an LED 20 indicating that consumption of a commodity, e.g. electricity, is taking place; and an optical port 22 including a transmitter 24 and a receiver 26 for non-user communication purposes.
  • a read head 28 reads the data on an inserted card 30, and passes the derived data via a signal conditioning circuit 32 to a decoding circuit 34.
  • the value of credit on the card is passed to a value register 36.
  • Other data is received by a card processing circuit 38 which, from the existing and decoded random number incorporated into the data on the card, generates a new random number which optionally is displayed and fed to a verification circuit 40 for storage.
  • the card is erased and marked. However, the old random number remains marked on the card, so that it cannot be used again.
  • the accepted credit is calculated via a series of circuits 40 to 48 which take into account any standing charge and outstanding debts, as well as the consumption which has taken place, fed in via a decrement unit 50 receiving a pulse input from a meter consumption register. Provision is made at circuits 52 and 54 for different charging rates at different times.
  • the mains supply contactor 56 is controlled by a control circuit 58 dependently on the remaining credit. Once a possible emergency credit is exceeded, the supply contactor 56 opens and a fresh credit card must be inserted before consumption is resumed.
  • FIG. 3 shows an assisted sale card dispenser. It has a keypad 58 for entering the credit bought, an LED display 60, and a card ejector slot 62.
  • Figure 4 shows the operations performed within the dispenser. Data including credit value paid for is entered by the sales person via the keypad 58, and including also the random number on the old card, supplied by the purchaser or possibly read automatically if the card ejector also includes a reader.
  • a calculator circuit 64 calculates from the old random number the same new random number as that which, during use of the old card, has been stored in the purchaser's meter. Credit paid for is added at circuit 65, an area code is added at circuit 66, and all data is encrypted at circuit 68, and marked on a new card 70 at write head 72 controlled by encoding circuit 74 via a signal conditioner 76.
  • Figure 5 shows a self service card dispenser wherein similar references are used to those in Figure 3 for similar parts
  • Figure 6 is a flow chart appertaining to this dispenser wherein similar references are used to those employed in Figure 4 for analogous circuits.
  • the principal difference is the addition of coin entry slots 78 ( Figure 5) leading to a coin feed mechanism 80 ( Figure 6).
  • the purchaser enters the random number from the old card at the keypad 58, and a fresh card marked with the new random number is delivered at ejection slot 62.
  • the meter display essentially has to be one in which the random number on a card is displayed for the user to make note of.
  • the dispenser could be adapted to read the old card for the purpose of calculating the new random number. In this case, it is not even necessry for the user to know the random numbers in use.
  • the dispenser could retain the old card so as to prevent any possibility of attempts at re-use.
  • FIG. 7a there is shown a conventionally marked credit card 82. It is marked with the card value VWV, an area code AAAA and a parity bit P.
  • a card 84 could have a random number NNNNNNNN added in the manner shown in Figure 7b, but for added security all the data is preferably encrypted and encoded on to a card 86 in the manner shown in Figure 7c, where XXXX represents the encrypted code value, YYYY the encrypted area code and ZZZZZZZZ the encrypted random number.

Landscapes

  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Engineering & Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Accounting & Taxation (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Theoretical Computer Science (AREA)
  • Control Of Vending Devices And Auxiliary Devices For Vending Devices (AREA)

Abstract

L'invention se rapporte à des procédés et des appareils de codage par l'intermédiaire desquels des données peuvent être codées sur des cartes pouvant être lues par une machine, ces données se rapportant à un compteur particulier et au nombre d'unités correspondant au prix d'achat de la carte. Les données relatives au compteur comprennent un numéro aléatoire qui est modifié après l'introduction de chaque carte achetée, la nouvelle valeur représentant une condition nécessaire à la fourniture d'une carte ultérieure, de sorte que les cartes ne peuvent pas être reproduites et utilisées de manière frauduleuse. Un appareil de distribution de cartes est décrit, lequel peut recevoir un paiement par pièces de monnaie, billets ou cartes de crédit, et, selon un agencement, un dispositif d'introduction de données tel qu'un clavier numérique est prévu afin que le client puisse y introduire un numéro aléatoire. Selon une variante, le numéro aléatoire est codé sur la carte par le compteur et lu sur la carte par l'appareil de distribution. Les données sur la carte sont de préférence chiffrées, et un algorithme de chiffrement qui varie avec les modifications du numéro aléatoire peut être utilisé.
PCT/GB1993/000858 1992-05-07 1993-04-23 Codage de cartes pouvant etre lues par une machine et systemes proteges WO1993022743A1 (fr)

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
GB929209847A GB9209847D0 (en) 1992-05-07 1992-05-07 Encoding of machine readable cards and secure systems
GB9209847.4 1992-05-07
GB9300099.0 1993-01-05
GB939300099A GB9300099D0 (en) 1992-05-07 1993-01-05 Encoding of machine readable cards and secure systems

Publications (1)

Publication Number Publication Date
WO1993022743A1 true WO1993022743A1 (fr) 1993-11-11

Family

ID=26300840

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/GB1993/000858 WO1993022743A1 (fr) 1992-05-07 1993-04-23 Codage de cartes pouvant etre lues par une machine et systemes proteges

Country Status (1)

Country Link
WO (1) WO1993022743A1 (fr)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO1997010575A1 (fr) * 1995-09-14 1997-03-20 Francisco Mathieu Dispositif de controle pour la fourniture tarifee et prepayee d'energie et/ou d'eau
WO1997039430A1 (fr) * 1996-04-12 1997-10-23 Lg (Uk) Limited Systemes de compteurs
EP0715235A3 (fr) * 1994-12-02 1998-03-25 Miele & Cie. GmbH & Co. Appareil ménager avec un microprocesseur et une mémoire non-volatile pour le changement de paramètres du processus
EP1166236A1 (fr) * 1999-03-26 2002-01-02 Merlin Gerin S.A. (Proprietary) Limited Prepaiement differe de services utilitaires

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE3411570A1 (de) * 1984-03-29 1985-11-07 Kübler, Monika, 7032 Sindelfingen Selbstgenerierendes zweischluesselsystem fuer datenzugriffssicherung
EP0320489A2 (fr) * 1987-12-07 1989-06-14 Automations- Und Informationssysteme Gesellschaft M.B.H. Méthode pour augmenter la sécurité d'une carte à circuit intégré et carte à circuit intégré pour sa mise en oeuvre
DE3904215A1 (de) * 1988-02-22 1989-08-31 Asea Brown Boveri Verfahren zur identifikation eines benuetzers einer chipkarte
EP0397512A2 (fr) * 1989-05-11 1990-11-14 Material Engineering Technology Laboratory, Inc. Méthode pour empêcher l'utilisation non autorisée/illégale d'un support d'informations du type carte

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE3411570A1 (de) * 1984-03-29 1985-11-07 Kübler, Monika, 7032 Sindelfingen Selbstgenerierendes zweischluesselsystem fuer datenzugriffssicherung
EP0320489A2 (fr) * 1987-12-07 1989-06-14 Automations- Und Informationssysteme Gesellschaft M.B.H. Méthode pour augmenter la sécurité d'une carte à circuit intégré et carte à circuit intégré pour sa mise en oeuvre
DE3904215A1 (de) * 1988-02-22 1989-08-31 Asea Brown Boveri Verfahren zur identifikation eines benuetzers einer chipkarte
EP0397512A2 (fr) * 1989-05-11 1990-11-14 Material Engineering Technology Laboratory, Inc. Méthode pour empêcher l'utilisation non autorisée/illégale d'un support d'informations du type carte

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP0715235A3 (fr) * 1994-12-02 1998-03-25 Miele & Cie. GmbH & Co. Appareil ménager avec un microprocesseur et une mémoire non-volatile pour le changement de paramètres du processus
WO1997010575A1 (fr) * 1995-09-14 1997-03-20 Francisco Mathieu Dispositif de controle pour la fourniture tarifee et prepayee d'energie et/ou d'eau
WO1997039430A1 (fr) * 1996-04-12 1997-10-23 Lg (Uk) Limited Systemes de compteurs
EP1166236A1 (fr) * 1999-03-26 2002-01-02 Merlin Gerin S.A. (Proprietary) Limited Prepaiement differe de services utilitaires

Similar Documents

Publication Publication Date Title
US5734150A (en) Electronic funds acceptor for vending machines
US5930363A (en) Card charging systems
US5103392A (en) System for storing history of use of programs including user credit data and having access by the proprietor
US5722526A (en) Dispensing security system for a vending machine
US5181245A (en) Machine incorporating an accounts verification system
US4884212A (en) Apparatus and method for using unique charge cards dispensed from a vending machine
US5478993A (en) Process as safety concept against unauthorized use of a payment instrument in cashless payment at payment sites
CA2152470C (fr) Systeme d'acheminement de cartes de credit protege contre la fraude
US6422459B1 (en) Method and system for off-line loading of stored value cards using a batch-load terminal
US5276312A (en) Wagering system using smartcards for transfer of agent terminal data
US5585787A (en) Programmable credit card
US5520275A (en) Method and device for servicing a terminal
GB2287565A (en) Card charging system
EP0397512A2 (fr) Méthode pour empêcher l'utilisation non autorisée/illégale d'un support d'informations du type carte
EP0680646A1 (fr) Procede et appareil de stockage et de rappel magnetiques d'informations relatives a des transactions par carte de credit
GB2172731A (en) Automatic vending machine
EP0357634B1 (fr) Distributeur automatique commande par carte
GB2215669A (en) Postage meter value card system
CN101286251A (zh) 信息处理方法、电子货币终端设备和电子货币报告设备
WO1993022743A1 (fr) Codage de cartes pouvant etre lues par une machine et systemes proteges
EP0420466B2 (fr) Système distributeur à crédit
EP0545550B1 (fr) Système de fourniture d'eau à prépaiement
US5809485A (en) Method and apparatus for automatically disabling a removable, portable vault of a postage metering
KR0159832B1 (ko) 스마트 카드를 이용한 전기요금 자동 징수방법 및 그 장치
JP2741399B2 (ja) カード処理装置

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): GB PT US

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): AT BE CH DE DK ES FR GB GR IE IT LU MC NL PT SE

DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
121 Ep: the epo has been informed by wipo that ep was designated in this application
122 Ep: pct application non-entry in european phase