US 5,689,564 A · Personal access management system

Abstract

A multi-component system for linking a user to a product or service provider includes a user processing device, a storage device, and a provider device. The storage device stores provider-specific application software, user-specific data, and a file management program. The storage device and the processing device are coupled to each other to form a user device which communicates with the provider device. Under direction of the file management program, the processing device carries out a recognition methodology which determines whether the processing device and the storage device are authorized to operate with each other. This aspect of the system makes it possible to render the storage device operable only with a specific user processing device, referred to as the principal processing device. This, in turn, reduces the possibility of fraud since the storage device cannot be used without the principal processing device. Once it is determined that the processing and storage devices am authorized to interact with each other, the processing device executes the provider-specific application software to exchange information with the provider device. Together, the user and provider devices implement unique recognition and comprehension methodologies to ensure that the parties are authorized to communicate with each other and to ensure that the information exchanged cannot be understood by third parties. Overall, the system provides a highly secure mechanism for transferring information from one party to another.

Claims103

Dependent claims

In a sending device having a set of parameters stored therein including a device file name which uniquely identifies the sending device to a receiving device and a set of identification information, a method for exchanging information with the receiving device, comprising the steps of:

generating a message;
retrieving said device file name and said set of identification information;
deriving a first key code from said parameters;
encrypting said identification information and said message using said first key code as an encryption key to derive a set of encrypted identification information and an encrypted
sending said device file name, said encrypted identification information, and said encrypted message to the receiving device, wherein said device file name is sent to the receiving device in unencrypted form.

2 more elements

In sending device having a set of parameters stored therein including a device file name which uniquely identifies the sending, device to a receiving device and a set of identification information, a method for exchanging information with the receiving device, comprising the steps of:

generating a message;
retrieving said device file name and said set of identification information;
deriving a first key code from said parameters;
processing said identification information using said first key code to derive a set of processed identification information;
sending said device file name, said processed identification information, and said message to the receiving device;
receiving a set of processed confirmation information from the receiving device;
deriving a second key code different from said first key code;
and
processing said processed confirmation information using said second key code to derive a set of de-processed confirmation information.

6 more elements

In a sending device having a set of parameters stored therein including a device file name which uniquely identifies the sending device to a receiving device, a set of identification information, a current user key code (CUKC), and a current provider key code (CPKC), a method for exchanging information with the receiving device, comprising the steps of:

generating a message;
generating a future user key code (FUKC);
deriving a current session key code (CSKC) using said CUKC and said CPKC;
processing said identification information using said CSKC to derive a set of processed identification information;
sending said device file name, said processed identification information, said message, and said FUKC to the receiving device;
receiving a set of processed confirmation information from the receiving device;
deriving a second key code using said FUKC and said CPKC;
and
processing said processed confirmation information using said second key code to derive a set of de-processed confirmation information.

6 more elements

A storage device for operating with a processing device having a communications interface, said storage device comprising:

a storage unit for storing a set of parameters including a device file name which uniquely identifies said storage device to a receiving device and a set of identification information;
means for causing the processing device to generate a message;
means for causing the processing device to derive a first key code from said parameters;
means for causing the processing device to process said identification information using said first key code to derive a set of processed identification information;
means for causing the processing device to send said device file name, said processed identification information, and said message to the receiving device via the communications interface;
means for causing the processing device to receive a set of processed confirmation information from the receiving device via the communications interface;
means for causing the processing device to derive a second key code different from said first key code;
and
means for causing the processing device to process said processed confirmation information using said second key code to derive a set of de-processed confirmation information.

6 more elements