发明名称 |
ELECTRONIC FUND TRANSFER SYSTEMS |
摘要 |
<p>An electronic funds transfer system (EFT) is described in which retail terminals located in stores are connected through a public switched telecommunication system to card issuing agencies data processing centers. Users of the system are issued with intelligent secure bank cards, which include a microprocessor, ROS and RAM stores. The POS includes a personal key (KP) and an account number (PAN) stored on the card when the issuer issues it to the user. Users also have a personal identity number (PIN) which is stored or remembered separately. A transaction is initiated at a retail terminal when a card is inserted in an EFT module connected to the terminal. A request message including the PAN and a session key (KS) is transmitted to the issuers data processing center. The issuer generates an authentication parameter (TAP) based upon its stored version of KP and PIN and a time variant parameter received from the terminal. The TAP is then returned to the terminal in a response message, and based upon an imputed PIN, partial processing of the input PIN and KP on the card a derived TAP is compared with the received TAP in the terminal. A correct comparison indicating that the entered PIN is valid. The request message includes the PAN encoded under the KS and KS encoded under a cross-domain key. Message authentication codes (MAC) are attached to each message and the correct reception and regeneration of a MAC on a message including a term encoded under KS indicates that the received KS is valid and that the message originated at a valid terminal or card.</p> |
申请公布号 |
GB2146814(A) |
申请公布日期 |
1985.04.24 |
申请号 |
GB19830024916 |
申请日期 |
1983.09.17 |
申请人 |
* INTERNATIONAL BUSINESS MACHINES CORPORATION |
发明人 |
JONATHAN * OSEAS;BRUNO * BRACHTL;CHRISTOPHER J * HOLLOWAY;RICHARD EDWARD * LENNON;STEPHEN MICHAEL * MATYAS;CARL HEINZ-WILHELM * MEYER |
分类号 |
G07F7/12;G06Q20/10;G06Q20/34;G06Q20/40;G07D9/00;G07F7/10;(IPC1-7):H04L9/00 |
主分类号 |
G07F7/12 |
代理机构 |
|
代理人 |
|
主权项 |
|
地址 |
|