Cryptographic architecture for use with a high security personal identification system

摘要

A Cryptographic Architecture for improving the security of Cash-Issuing or similar Terminal Systems when it is necessary to operate Off-Host. Each Terminal is connected to a central Controller which is in turn connected to a central Host. The Master cryptographic key for use in the personal identification mechanism provided in the system is stored in the Controller rather than the terminal. Means are provided whereby said Controller performs customer identification operations when the Host is not available to do so. Only data input at the Terminal is utilized in transmission between the Terminal and the Controller whereby the master system key is never exposed at either the Terminal or the communication link. Additionally, a Terminal status message is utilized with each transaction to prevent a "stale" message from being used to bypass the security procedures by means of eavesdropping or the like.