| 摘要 |
<p>A system for identifying an individual holder (person) of an unalterable charge card-like device (CARD) at a utilization terminal (U/I Terminal) wherein a unique user entered key (asserted key KA) is handled in a highly secure manner. The holder of the CARD causes same to be placed in a data coupling mode with the U/I Terminal. At this point, the person enters asserted key (KA) via a keyboard (101, 201) associated with said system. A random word is generated by at least one random word generator (107, 106) located in said CARD and this random word is encrypted utilizing the asserted key KA entered by the holder at the keyboard and also encrypted under a true key KT stored (1045) in said CARD. The random word encrypted under the asserted key KA is stored (208) in said U/I Terminal and the random word encrypted under the true key KT is stored (108) in the CARD. The U/I Terminal then causes the encrypted word stored in the CARD to be transferred to the U/I Terminal (209) and the two encrypted words are compared (217) for identity. If the comparison is true, the holder of the card has entered the correct asserted key KA into the system, and his identity is presumend to be true. …<??>According to a first embodiment of the invention, the keyboard (201) is actually located in the U/I Terminal, sacrificing some security for the person's asserted key KA. …<??>According to a further embodiment of the system, the CARD is inserted into a personal portable transaction terminal (XATR) which is then inserted into the U/I Terminal. Said XATR in the possession of the holder of the CARD contains a keyboard (101) for entering the individual's asserted key KA. Additional means (109, 209) are provided when the two encrypted random words are to be transferred between the U/I Terminal and the CARD for comparison so that the transfer occurs simultaneously in bit serial mode and in the opposite order of bit significance, and whereby any attempt to subvert the data flow path within the XATR will be impossible.</p> |
