Method and means for combining and managing personal verification and message authentication encrytions for network transmission

Apparatus for securing transaction data between two locations in response to a user's message and personal identification number, the apparatus comprising:

• means for generating a sequence number associated with a user's transaction;
• means for generating a random number;
• first encryption means at one location for encrypting according to a first logical combination of the user's message and the sequence number applied thereto with the personal identification number received from the user for producing a message authentication code therefrom having a plural number of digit sectors;
• means at said one location for producing a first session key;
• second encryption means coupled to receive the random number and a selected sector of the message identification code for encrypting the same with the first session key according to a second logical combination thereof to produce a first encoded output;
• third encryption means coupled to receive the personal identification number from the user for encrypting the same with the first session key according to a third logical combination thereof to produce a second encoded output;
• means for transmitting the first and second encoded outputs and message and sequence number from the one location to the next location;
• means at the next location for producing the first session key;
• first decryption means at the next location coupled to receive the transmitted first encoded output and the first session key for decrypting in accordance with said second logical combination to provide the random number and the message authentication code;
• second decryption means at the next location coupled to receive the transmitted second encoded output and the first session key for decrypting in accordance with the third logical combination thereof to produce the user's personal identification number;
• first encrpytion means at the next location coupled to receive the transmitted message and sequence number for encoding the same according to said first logical combination with the decrypted personal identification number to produce a message authentication code having a plural number of digit sectors;
• comparison means at the next location coupled to receive the corresponding selected sectors of the decrypted message authentication code and of the encrypted message authentication code for producing an output indication of the parity thereof;
• and
• means at the next location responsive to said output indication for operating upon the received message in response to favorable comparison.