WO2000060551A1 - Verfahren zur ableitung von identifikationsnummern - Google Patents
Verfahren zur ableitung von identifikationsnummern Download PDFInfo
- Publication number
- WO2000060551A1 WO2000060551A1 PCT/EP2000/002481 EP0002481W WO0060551A1 WO 2000060551 A1 WO2000060551 A1 WO 2000060551A1 EP 0002481 W EP0002481 W EP 0002481W WO 0060551 A1 WO0060551 A1 WO 0060551A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- digits
- decimal
- pin
- digit
- generated
- Prior art date
Links
Classifications
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
- G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
- G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
- G07F7/1008—Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
- G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
- G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
- G07F7/1025—Identification of user by a PIN code
Definitions
- the invention relates to a method for deriving a person identification number (PIN), consisting of a number N decimal digits, for using cash cards and other security-requiring devices from a binary number with L digits, in particular a person-specific binary code.
- PIN person identification number
- the user often has to authorize himself using a four-digit number (PIN) known only to him.
- PIN four-digit number
- the PINs may only contain decimal digits so that they can be entered using numeric keyboards. Furthermore, they should not start with a zero. With four digits, this results in a range of 9000 different PINs. Theoretically, the lowest possible probability of guessing a PIN is 1/9000.
- the object of the present invention is to provide a method which keeps the probability as low as possible that a PIN can be guessed.
- the invention is based on the finding that if the PINs are generated in such a way that they are statistically evenly distributed over the range of numbers available, the probability of guessing a PIN is minimal. The following example explains this.
- Personal data of the user can be used with a secret key with the help of a
- a binary code can be generated.
- DES triple DES algorithm
- a 64-digit binary code is generated from a customer's data with the help of a bank-specific key.
- the PIN can be generated from a section of 16 digits of this binary code in the following way, for example:
- nl is chosen so that 2 nl is close to a multiple of 9.
- the preceding n-digit part of the binary number is interpreted as a decimal number.
- the integer remainder in a division by 9 is determined. This remainder is the first digit of the PIN.
- n2 bits are split off.
- the number n2 is chosen so that 2 n is close to a multiple of 10.
- the resulting number is interpreted as a decimal number.
- Number range from 1 to 2 13 8192.
- the numbers 0, 1, 2 and 3 appear in the generated PINs with a probability of 820/8192 and the remaining numbers with a probability of 819/8192.
- the method according to the invention prevents the 1 from occurring excessively frequently in the first digit of the PIN.
- n3 is a natural number.
- a total of 12 bits of the customer-specific binary code are used to generate the PIN.
- 3 bits of this binary number are interpreted as decimal digits between 1 and 8. The PINs generated are distributed evenly.
- Another possibility for generating PINs that are absolutely equally distributed within the respective numerical range is that the binary number for forming the PIN is converted completely into a quimal number in a manner known per se and that such a correction value is added to the resulting decimal number if necessary, that the first digit of the decimal number is not equal to zero, the digits of the result forming the digits of the PIN.
- the length L of the binary number is 13, that the decimal number generated has four digits and that a fixed value greater than 999 and less than 1807 is added to the decimal number, or that the length L of the binary number 16 is that the decimal number generated has five digits and that a fixed value greater than 9999 and less than 34465 is added to the decimal number.
- the set of numbers 0 to 8191 is divided into n5 subsets Ml, ..., Mn5 and that the decimal number generated, if it is an element of the set Mi, is fixed predetermined value di is added, where 999 ⁇ dl ⁇ d2 ⁇ ... ⁇ dn5 ⁇ 1809 and where n5 is a natural number.
- the set of numbers 0 to 65535 is divided into n5 subsets Ml, ..., Mn5 and that the decimal number generated, if it is an element of the set Mi, is fixed predefined value di is added, where 9999 ⁇ dl ⁇ d2 ⁇ ... ⁇ dn5 ⁇ 34465 and where n5 is a natural number.
- Another proposed embodiment of the invention is that the following steps are carried out to create the first digit of the PIN:
- a pseudo-random number is generated from the binary number (B) of length L, which consists of up to 36 hexadecimal digits,
- each hexadecimal digit of this number is converted with a different one of the 36 possible mathematical representations of hexadecimal digits into the digits 1 to 9 into a digit from the digits from 1 to 9,
- Probability of occurrence of the respective digit of the PIN is linked to one another by a mathematical operation to form a non-zero decimal digit, which represents the first digit of the PIN, and that the following steps are carried out for the second and each subsequent digit of the PIN to be generated:
- a pseudo-random number is generated from the binary number (B) of length L, which consists of up to 210 hexadecimal digits,
- each hexadecimal digit of this number is converted into a decimal digit with a different one of the 210 possible mathematical representations of hexadecimal digits into decimal digits,
- the first digit of the PIN is formed by linking the up to 36 digits with the group operation of any mathematical group of order 9 and that the second and the following digits of the PIN are formed by the up to 210 digits can be combined with the group operation of any mathematical group of order 10.
- a hexadecimal number is formed from N groups each 4 bits long. This should now be converted into a decimal digit.
- a possible mapping is the formation of the remainder when dividing by 10: (0 -> 0, 1 -> 1, 2 -> 2, 3 -> 3, 4 -> 4, 5 -> 5, 6 -> 6, 7 -> 7, 8 -> 8, 9 -> 9, A -> 0, B -> 1, C -> 2, D -> 3, E -> 4, F -> 5).
- the digits 0 to 5 occur with a frequency of 1/8 and the digits from 6 to 9 with a frequency of 1/16.
- the probability of occurrence of each decimal digit generated in this way is close to 1/10.
- This group Z n also has ten elements and is therefore suitable for linking the numbers to one
- the group of symmetry maps of a regular pentagon is used to link up to 210 digits, each of the ten symmetry maps of this group being assigned a different decimal number.
- the figure 0 is assigned the numbers 0, the four rotations around the center of the pentagon the numbers 1 to 4 and the five reflections around the five axes of symmetry of the pentagon the numbers 5 to 9. If two symmetry maps are carried out one after the other, a symmetry map is created again.
- the following multiplication table can be set up with these assignments:
- the 210 digits are combined into a single digit by successively reading the next result in the table with the result of the last operation as a row indicator and with the next digit as a column indicator until all digits have been taken into account.
- the last result is the digit of the PIN you are looking for.
- 1 is a diagram for generating a customer-specific binary code
- FIG. 3 shows a diagram for generating a PIN by digit-by-digit conversion into decimal numbers
- FIG. 4 shows a diagram for generating a PIN by digit-by-digit conversion with module formation
- FIG. 5 shows a diagram for generating a PIN by reducing hexadecimal numbers with the aid of mathematical groups.
- FIG. 1 shows a flowchart for converting personal data De of a customer using a secret key K into a binary number B of L bit length.
- the binary number B is part of the 64-bit encryption result that was generated from the customer data De using the DES algorithm. If the length of the binary number B is 13 and the number of digits of the PIN to be generated is 4, the PIN can be generated, as shown in FIG. 2, by interpreting the binary number B as a decimal number D and in addition a constant C is added. The constant should be chosen so that the PIN has no leading zeros. In this way, 8192 different PINs can be generated, which are distributed absolutely evenly over the respective number range.
- FIG. 3 shows how a binary number of length 13 can be converted into a PIN by converting a number of bits of the binary number into a decimal number for each digit of the PIN to be generated and adding a constant C to the resulting number D, to avoid leading zeros of the PIN.
- 7777 different PINs can be generated, which are distributed absolutely evenly over the respective number range.
- FIG. 4 Another possibility for generating approximately equally distributed PINs from a binary number B is shown in FIG. 4.
- the binary number B has 52 digits.
- the binary number B is divided into four parts, which have the same length in the example. Each of these parts is interpreted as a decimal number.
- the first digit of the PIN is the remainder of a division of the first decimal number by 9.
- the following digits of the PIN are each the remainder of the division of the following decimal numbers by 10. In this way 9000 different PINs can be generated, which are distributed absolutely evenly .
- a sequence of 210 hexadecimal digits is generated from the personal data De of a customer, as shown in FIG. 5, with the aid of a secret key and a random number generator, in which, for example, an encryption result of the DES algorithm from FIG. 1 is in turn encrypted with the algorithm will and so on.
- the resulting 14 64-digit binary codes are converted into 14 hexadecimal numbers Hi with 16 digits each.
- Each of the 210 hexadecimal digits is therefore converted into a decimal digit di with another of these figures.
- these are made using the group operation F linked to any ten-element mathematical group in succession; the last result is the digit you are looking for.
- the previously uneven statistical distribution of the 210 decimal digits is thus evened out.
- the entire process is carried out again for each of the digits Z2 to Z4 of the PIN.
- 36 hexadecimal digits are generated for the first digit of the PIN, which are mapped with a different one of the 36 possible representations of the hexadecimal digits in the set of digits 1 to 9 in a digit between 1 and 9.
- the 36 decimal digits are linked with the group operation of any mathematical group of order 9 to the first digit of the PIN. It can be used to generate 9000 different PINs, which are distributed approximately evenly. When 10 5 PINs were generated, the maximum irregularities were approximately 1.5 percent, which does not significantly increase the likelihood that a PIN will be guessed by chance compared to the theoretical minimum value. The process therefore works very reliably.
Landscapes
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Calculators And Similar Devices (AREA)
- Management, Administration, Business Operations System, And Electronic Commerce (AREA)
- Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
- Holo Graphy (AREA)
- Vending Machines For Individual Products (AREA)
- Control Of Vending Devices And Auxiliary Devices For Vending Devices (AREA)
- Complex Calculations (AREA)
Abstract
Description
Claims
Priority Applications (6)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US09/937,923 US6991176B1 (en) | 1999-03-30 | 2000-03-21 | Method for generating identification numbers |
AU45389/00A AU4538900A (en) | 1999-03-30 | 2000-03-21 | Method of deriving an identification number |
DE50011069T DE50011069D1 (de) | 1999-03-30 | 2000-03-21 | Verfahren zur ableitung von identifikationsnummern |
JP2000609968A JP2002541518A (ja) | 1999-03-30 | 2000-03-21 | 識別番号を導出する方法 |
AT00926744T ATE303638T1 (de) | 1999-03-30 | 2000-03-21 | Verfahren zur ableitung von identifikationsnummern |
EP00926744A EP1177536B9 (de) | 1999-03-30 | 2000-03-21 | Verfahren zur ableitung von identifikationsnummern |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
DE19914407A DE19914407A1 (de) | 1999-03-30 | 1999-03-30 | Verfahren zur Ableitung von Identifikationsnummern |
DE19914407.9 | 1999-03-30 |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2000060551A1 true WO2000060551A1 (de) | 2000-10-12 |
Family
ID=7902944
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/EP2000/002481 WO2000060551A1 (de) | 1999-03-30 | 2000-03-21 | Verfahren zur ableitung von identifikationsnummern |
Country Status (7)
Country | Link |
---|---|
US (1) | US6991176B1 (de) |
EP (1) | EP1177536B9 (de) |
JP (1) | JP2002541518A (de) |
AT (1) | ATE303638T1 (de) |
AU (1) | AU4538900A (de) |
DE (2) | DE19914407A1 (de) |
WO (1) | WO2000060551A1 (de) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP1240571A2 (de) * | 1999-11-22 | 2002-09-18 | Ascom Hasler Mailing Systems, Inc. | Erzeugung und verwaltung von kundenidentifikationsnummern |
Families Citing this family (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP2003108297A (ja) * | 2001-09-28 | 2003-04-11 | Canon Inc | 情報提供装置、情報処理方法、制御プログラム及び記憶媒体 |
US20080126262A1 (en) * | 2006-11-29 | 2008-05-29 | Colin Brady | System and Method for Secure Transactions |
KR20100016579A (ko) * | 2007-04-05 | 2010-02-12 | 인터내셔널 비지네스 머신즈 코포레이션 | 크리덴셜 배포를 위한 시스템 및 방법 |
US9513870B2 (en) | 2014-04-22 | 2016-12-06 | Dialog Semiconductor (Uk) Limited | Modulo9 and modulo7 operation on unsigned binary numbers |
Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US3846622A (en) * | 1972-09-29 | 1974-11-05 | Mosler Safe Co | Access control apparatus |
US4605820A (en) * | 1983-11-10 | 1986-08-12 | Visa U.S.A. Inc. | Key management system for on-line communication |
FR2577704A1 (fr) * | 1985-02-18 | 1986-08-22 | Systemes Sud | Procede et machine pour la verification de cheques bancaires ou postaux |
EP0798891A2 (de) * | 1996-03-29 | 1997-10-01 | Mitsubishi Denki Kabushiki Kaisha | Ausweisszahlausgabegerät und Ausweisszahlüberprüfungsgerät |
Family Cites Families (21)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DE2108223A1 (de) * | 1971-02-20 | 1972-08-24 | Nsm Apparatebau Gmbh Kg | Verfahren zur Umwandlung der Verteilung einer Zufallsgröße in eine andere Verteilung |
US3906447A (en) * | 1973-01-31 | 1975-09-16 | Paul A Crafton | Security system for lock and key protected secured areas |
US4376279A (en) * | 1981-01-28 | 1983-03-08 | Trans-Cryption, Inc. | Personal identification system |
US4614861A (en) * | 1984-11-15 | 1986-09-30 | Intellicard International, Inc. | Unitary, self-contained card verification and validation system and method |
US4635054A (en) * | 1985-07-10 | 1987-01-06 | Light Signatures, Inc. | Operator interactive device verification system |
JPS62203070U (de) * | 1986-06-17 | 1987-12-24 | ||
DE3927270C2 (de) * | 1989-08-18 | 1996-07-11 | Deutsche Telekom Ag | Verfahren zum Personalisieren von Chipkarten |
FR2662877B1 (fr) * | 1990-05-29 | 1992-08-21 | France Etat | Installation telephonique pour le chargement a distance de donnees d'abonnement telephonique d'une station autonome. |
JP3129490B2 (ja) * | 1991-11-11 | 2001-01-29 | 美和ロック株式会社 | 電気錠の登録暗証コード検索装置 |
US5363449A (en) * | 1993-03-11 | 1994-11-08 | Tandem Computers Incorporated | Personal identification encryptor and method |
US5778071A (en) * | 1994-07-12 | 1998-07-07 | Information Resource Engineering, Inc. | Pocket encrypting and authenticating communications device |
JPH0851421A (ja) * | 1994-08-08 | 1996-02-20 | Matsushita Electric Ind Co Ltd | ビット攪拌器 |
US6324558B1 (en) * | 1995-02-14 | 2001-11-27 | Scott A. Wilber | Random number generator and generation method |
US5706218A (en) * | 1996-05-15 | 1998-01-06 | Intel Corporation | Random number generator |
US6104811A (en) * | 1996-08-16 | 2000-08-15 | Telcordia Technologies, Inc. | Cryptographically secure pseudo-random bit generator for fast and secure encryption |
JPH10177472A (ja) * | 1996-12-18 | 1998-06-30 | Meteoola Syst Kk | 乱数列の発生方法 |
US5781458A (en) * | 1997-03-05 | 1998-07-14 | Transcrypt International, Inc. | Method and apparatus for generating truly random numbers |
US5971272A (en) * | 1997-08-19 | 1999-10-26 | At&T Corp. | Secured personal identification number |
US6643374B1 (en) * | 1999-03-31 | 2003-11-04 | Intel Corporation | Duty cycle corrector for a random number generator |
EP1240571A4 (de) * | 1999-11-22 | 2004-08-18 | Ascom Hasler Mailing Sys Inc | Erzeugung und verwaltung von kundenidentifikationsnummern |
US6691301B2 (en) * | 2001-01-29 | 2004-02-10 | Celoxica Ltd. | System, method and article of manufacture for signal constructs in a programming language capable of programming hardware architectures |
-
1999
- 1999-03-30 DE DE19914407A patent/DE19914407A1/de not_active Withdrawn
-
2000
- 2000-03-21 AU AU45389/00A patent/AU4538900A/en not_active Abandoned
- 2000-03-21 DE DE50011069T patent/DE50011069D1/de not_active Expired - Lifetime
- 2000-03-21 AT AT00926744T patent/ATE303638T1/de active
- 2000-03-21 JP JP2000609968A patent/JP2002541518A/ja active Pending
- 2000-03-21 WO PCT/EP2000/002481 patent/WO2000060551A1/de active IP Right Grant
- 2000-03-21 US US09/937,923 patent/US6991176B1/en not_active Expired - Lifetime
- 2000-03-21 EP EP00926744A patent/EP1177536B9/de not_active Expired - Lifetime
Patent Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US3846622A (en) * | 1972-09-29 | 1974-11-05 | Mosler Safe Co | Access control apparatus |
US4605820A (en) * | 1983-11-10 | 1986-08-12 | Visa U.S.A. Inc. | Key management system for on-line communication |
FR2577704A1 (fr) * | 1985-02-18 | 1986-08-22 | Systemes Sud | Procede et machine pour la verification de cheques bancaires ou postaux |
EP0798891A2 (de) * | 1996-03-29 | 1997-10-01 | Mitsubishi Denki Kabushiki Kaisha | Ausweisszahlausgabegerät und Ausweisszahlüberprüfungsgerät |
Cited By (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP1240571A2 (de) * | 1999-11-22 | 2002-09-18 | Ascom Hasler Mailing Systems, Inc. | Erzeugung und verwaltung von kundenidentifikationsnummern |
EP1240571A4 (de) * | 1999-11-22 | 2004-08-18 | Ascom Hasler Mailing Sys Inc | Erzeugung und verwaltung von kundenidentifikationsnummern |
US7716491B2 (en) | 1999-11-22 | 2010-05-11 | Neopost Technologies | Generation and management of customer pin's |
Also Published As
Publication number | Publication date |
---|---|
EP1177536B9 (de) | 2006-05-24 |
EP1177536B1 (de) | 2005-08-31 |
JP2002541518A (ja) | 2002-12-03 |
DE19914407A1 (de) | 2000-10-05 |
AU4538900A (en) | 2000-10-23 |
DE50011069D1 (de) | 2005-10-06 |
ATE303638T1 (de) | 2005-09-15 |
EP1177536A1 (de) | 2002-02-06 |
US6991176B1 (en) | 2006-01-31 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
DE69424729T2 (de) | Verfahren zur Verifizierung von Unterschriften in einem Kommunikationssystem | |
EP0010195B1 (de) | Vorrichtung zur Adressumwandlung in einer Datenverarbeitungsanlage | |
DE69515461T2 (de) | Simplifiziertes strichkodedekodierverfahren | |
EP3707854B1 (de) | Verfahren zum verknuepfen eines ersten datenblocks mit einem zweiten datenblock, verfahren zum ueberpruefen der integritaet einer blockchain-struktur, vorrichtung und computerprogrammprodukt | |
DE102013205544A1 (de) | Vorrichtung und Verfahren zur Verarbeitung von Daten | |
DE19758079A1 (de) | Verfahren und Vorrichtung zur Galoisfeld-Multiplikation | |
DE69932740T2 (de) | Verfahren und vorrichtung zur kryptographischen datenverarbeitung | |
DE69027377T2 (de) | Verfahren zur Ausarbeitung einer unregelmässigen Vertauschung von mittels Verschlüsselung geschützten Daten | |
DE69029539T2 (de) | Verfahren und Gerät mit Block-Kode-kodierter Fehlerkorrektur | |
DE69729685T2 (de) | Verfahren zur Verdeckung eines Geheimcodes in einer Rechnerbeglaubigungsvorrichtung | |
DE102014207296A1 (de) | Vorrichtung und Verfahren zur Verarbeitung von Daten | |
WO2000060551A1 (de) | Verfahren zur ableitung von identifikationsnummern | |
DE60004409T2 (de) | Schaltung und Verfahren zur Zufallszahlerzeugung | |
DE3836789A1 (de) | Vorrichtung zur erzeugung von helligkeitsstufen auf einem anzeigeschirm | |
EP2835931B1 (de) | Verfahren zur Verschlüsselung von Zeichenketten | |
DE19811593C1 (de) | Matrixgesteuerte Hashfunktion | |
EP1067482A1 (de) | Druckbild | |
DE3789376T2 (de) | Verfahren zur Fehlererkennung und -korrektur in einem digitalen Rechner. | |
DE1917841A1 (de) | Anordnung zur Bildung quasizufaelliger Ziffernfolgen | |
WO2002019065A2 (de) | Verfahren und vorrichtung zum durchführen einer modularen exponentiation in einem kryptographischen prozessor | |
EP1506473A2 (de) | Aussp hungsgesch tzte modulare inversion | |
DE1524156A1 (de) | Elektronische Recheneinrichtung | |
DE60300974T2 (de) | Codekontrolle für virtuell vorausbezahlte Karte | |
WO2010124735A1 (de) | System zum herstellen eines durch einen verifikationscode geschützten gegenstands, verfahren zur herstellung eines entsprechenden gegenstands, verfahren zum verifizieren der echtheit eines gegenstands | |
DE1962765C3 (de) | Einrichtung zum Umsetzen einer von einer Kreditkarte oder dergleichen abgelesenen Kartenzahl in eine Prüf zahl |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AK | Designated states |
Kind code of ref document: A1 Designated state(s): AU CA JP US |
|
AL | Designated countries for regional patents |
Kind code of ref document: A1 Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2000926744 Country of ref document: EP |
|
DFPE | Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101) | ||
121 | Ep: the epo has been informed by wipo that ep was designated in this application | ||
ENP | Entry into the national phase |
Ref country code: JP Ref document number: 2000 609968 Kind code of ref document: A Format of ref document f/p: F |
|
WWE | Wipo information: entry into national phase |
Ref document number: 09937923 Country of ref document: US |
|
WWP | Wipo information: published in national office |
Ref document number: 2000926744 Country of ref document: EP |
|
WWG | Wipo information: grant in national office |
Ref document number: 2000926744 Country of ref document: EP |