Network-supported chip card transaction method
AssigneeSiemens Nixdorf Informationssysteme Aktiengesellschaft
InventorGerhard Wiehler
Life of this patent
Estimating the term…
Abstract
Terminals for the handling of payments are connectable to a plurality of transactors with transmission procedures that are protected against manipulation via an open data network, whereby the transactor is determined from the type of transaction. Chip cards, or smart cards, are used at the terminals for the transactions.
Claims23
A method for executing transactions that are protected by a chip card, comprising the steps of:
- connecting one chip card of a plurality of possible types of chip cards to a terminal;
- determining a code for a transaction procedure according to which the transaction is to be carried out, the code being determined by an operating program in the terminal after the one chip card is connected to the terminal;
- determining a network address of a corresponding transactor of a plurality of transactors from the code of the transaction procedure, said corresponding transactor corresponding to said one chip card;
- setting up a connection from said terminal to the corresponding transactor through a data network by the operating program, said connection being protected by cryptographic methods;
- and
- subsequently implementing the transaction by bi-directional communication between the chip card and the corresponding transactor;
- connecting said corresponding transactor to a host;
- providing a security module in said corresponding transactor;
- and
- providing a secure transaction between said corresponding transactor and said host using said security module.
A method for executing transactions that are protected by a chip card connectable to a terminal that is connected to a data network, comprising the steps of:
- determining a code for a transaction procedure according to which the transaction is to be carried out, the code being determined by an operating program in the terminal after the chip card is connected to the terminal;
- determining a network address of a transactor from the code of the transaction procedure, setting up a connection to the transactor by the operating program, said connection being protected by cryptographic methods;
- subsequently implementing the transaction by communication between the chip card and the transactor;
- transmitting a program module with the connection from the transactor to the terminal;
- and
- executing the program module at the terminal;
- depositing the program modules in the terminal in a buffer memory;
- using the program modules deposited in the buffer memory instead of a renewed transmission of the program modules;
- checking whether a program module in the buffer memory is current by an inquiry at the transactor before a use of the program module in the buffer memory;
- transmitting a current version of the program module if warranted;
- and
- using a protocol selected from the group of protocols consisting of HTTP and HTTPS for the step of checking whether the program module is current.
A method for executing transactions that are protected by a chip card connectable to a terminal that is connected to a data network, comprising the steps of:
- determining a code for a transaction procedure according to which the transaction is to be carried out, the code being determined by an operating program in the terminal after the chip card is connected to the terminal;
- determining a network address of a transactor from the code of the transaction procedure, setting up a connection to the transactor by the operating program, said connection being protected by cryptographic methods;
- subsequently implementing the transaction by communication between the chip card and the transactor;
- using protected keys of at least one directly connected security module both for protection of the connection with the terminal as well as for protection of the transactions with the chip card by the transactor;
- wherein the terminal employs protected keys of a directly connected security module for protection of the connection with the transactor;
- transmitting a key from the transactor into the directly connected security module with the connection, said key serving for the protected execution of at least a part of a transaction with the chip card;
- depositing the keys in the terminal in a buffer memory;
- using the keys deposited in the buffer memory instead of a renewed transmission of the keys;
- checking whether a key in the buffer memory is current by an inquiry at the transactor before a use of the key in the buffer memory;
- transmitting a current version of the key if warranted;
- and
- using a protocol selected from the group of protocols consisting of HTTP and HTTPS for the step of checking whether the key is current.
An arrangement for execution of transactions that are protected by a chip card connectable to a terminal that is connected to a data network having a means for address formation, comprising:
- a terminal including a means for determining a code for a transaction method to be employed with a connection of the chip card to the terminal, said terminal receiving at least one chip card of a plurality of types of chip cards;
- a plurality of transactors reachable via the data network being addressed from the code based of the means for address formation, said plurality of transactors including a corresponding transactor corresponding to a transaction type of said one chip card;
- a connection means in said terminal for setting up a connection to the corresponding transactor;
- devices with which the connection between the terminal and the corresponding transactor can be secured against manipulations being in the terminal and the corresponding transactor;
- and
- devices in the corresponding transactor that allow transactions including bi-directional communications with the chip card to be executed secured upon mediation of the terminal.
Dependencies are inferred from the claim text.