Back to results
US 10,963,864 B2Granted
Smart card with verification means
AssigneeScramcard Holdings (Hong Kong) Limited
InventorsDavid Ball, Simon Hewitt
Life of this patent
Estimating the term…
Abstract
The present invention is directed to a smartcard that enables a one-time pin code offline security authentication with a card reader. This is achieved by generating a one-time pin code when the user inputs their pin code. The inputted pin code is encrypted and matched with the encrypted user correct pin code. If there is a match the one-time pin code is stored in memory and the transaction can proceed.
Claims20
A system for performing one-time PIN code offline security authentication, the system comprising:
- a smartcard and a card reader;
- wherein
- the smartcard comprises a smartcard memory, a smartcard user interface, a card reader-smartcard communication interface, and a smartcard microprocessor,
- wherein the smartcard memory comprises a one-way encrypted digest of a user PIN code in a record in the smartcard memory accessible to a card reader through the card reader-smartcard communication interface,
- wherein the smartcard user interface comprises code input keys and a display, and
- wherein to perform the one-time PIN code offline security authentication in the system, the smartcard memory further comprises smartcard instructions stored in the smartcard memory, wherein the smartcard instructions, when executed by the smartcard microprocessor, cause the smartcard microprocessor to:
- receive a received input PIN code from the code input keys, display a one-time PIN code on the display in response to receipt of the received input PIN code, generate an encrypted digest of the received input PIN code with an encryption algorithm, compare the encrypted digest of the received input PIN code to the one-way encrypted digest of the user PIN code stored in the smartcard memory and determine, based on this comparison, that the encrypted digest of the received input PIN code matches the one-way encrypted digest of the user PIN code stored in the smartcard memory, and, in response to determining that the encrypted digest of the received input PIN code matches the one-way encrypted digest of the user PIN code stored in the smartcard memory, temporarily store the one-time PIN code in the record in the smartcard memory accessible to the card reader through the card reader-smartcard communication interface, and interface with the card reader through the card reader-smartcard communication interface;
- and wherein
- the card reader comprises a card reader memory, a card reader processor, the card reader-smartcard communication interface, and a card reader user interface,
- wherein to perform the one-time PIN code offline security authentication in the system the card reader memory further comprises card reader instructions stored in the card reader memory, wherein the card reader instructions, when executed by the card reader processor, cause the card reader processor to:
- interface with the smartcard through the card reader-smartcard communication interface, access the record in the smartcard memory accessible to the card reader through the card reader-smartcard communication interface, receive an entered PIN code through the card reader user interface, compare the entered PIN code to the one-time PIN code in the record in the smartcard memory accessible to the card reader through the card reader-smartcard communication interface to determine if the entered PIN code matches the one-time PIN code in the record in the smartcard memory accessible to the card reader through the card reader-smartcard communication interface, determine that the entered PIN code matches the one-time PIN code in the record in the smartcard memory accessible to the card reader through the card reader-smartcard communication interface, and, while the entered PIN code matches the one-time PIN code in the record in the smartcard memory accessible to the card reader through the card reader-smartcard communication interface, authenticate the one-time PIN code in the record in the smartcard memory accessible to the card reader through the card reader-smartcard communication interface.
8 more elements
A method for performing one-time PIN code offline security authentication, the method comprising:
- with a microprocessor of a smartcard,
- receiving a received input PIN code from code input keys of the smartcard,
- displaying a one-time PIN code on a display of the smartcard in response to receipt of the received input PIN code,
- generating an encrypted digest of the received input PIN code with a one-way encryption algorithm, wherein the one-way encryption algorithm is the one way encryption algorithm used to prepare a one-way encrypted digest of a user PIN code and wherein a memory of the smartcard comprises the one-way encrypted digest of the user PIN code,
- determining that the encrypted digest of the received input PIN code matches the one-way encrypted digest of the user PIN code stored in the memory of the smartcard by comparing the encrypted digest of the received input PIN code to the one-way encrypted digest of the user PIN code stored in the memory of the smartcard,
- in response to determining that the encrypted digest of the received input PIN code matches the one-way encrypted digest of the user PIN code stored in the memory of the smartcard, temporarily storing the one-time PIN code in a record in the smartcard memory accessible to a card reader through a card reader-smartcard communication interface, and
- interfacing with the card reader through the card reader-smartcard communication interface;
- and
- with a microprocessor of the card reader,
- interfacing with the smartcard through the card reader-smartcard communication interface,
- accessing the record in the smartcard memory accessible to the card reader through the card reader-smartcard communication interface,
- receiving an entered PIN code through a card reader user interface of the card reader,
- comparing the entered PIN code to the one-time PIN code in the record in the smartcard memory accessible to the card reader through the card reader-smartcard communication interface,
- determining, based on this comparison, that the entered PIN code matches the one-time PIN code in the record in the smartcard memory accessible to the card reader through the card reader-smartcard communication interface, and,
- while the entered PIN code is determined to match the one-time PIN code in the record in the smartcard memory accessible to the card reader through the card reader-smartcard communication interface, authenticating the one-time PIN code in the record in the smartcard memory accessible to the card reader through the card reader-smartcard communication interface.
12 more elements
Dependencies are inferred from the claim text.