Process and apparatus for improving the security of authentication procedures using a new “Super PIN”
AssigneeDavis Campbell Engineering LLC
InventorSteven Benjamin Davis
Life of this patent
Estimating the term…
Abstract
Method and apparatus for a provider to verify a client's secret identifier includes structure and steps for the client to scramble his/her predetermined secret identifier in a random way with random data. The scrambled data is transmitted to the provider, and the provider determines whether the client's secret identifier is present in the received scrambled data. Preferably, the provider rejects a transaction if the random data in the received scrambled data is substantially the same as random data received in a previous transaction corresponding to said client.
Claims54
A method for a provider to verify a client's secret identifier, comprising the steps of:
- the client scrambles his/her predetermined secret identifier in a one-time, true random way with random data, to produce scrambled data comprising randomly interleaved (i) said secret identifier and (ii) said one-time, true random data;
- the scrambled data is transmitted to the provider;
- and
- the provider determines whether the client's secret identifier is present in the received scrambled data, wherein the provider rejects a transaction if the random data in the received scrambled data is substantially the same as random data received in a previous transaction corresponding to said client.
A method for a provider to verify a client's secret identifier received in scrambled data which includes the secret identifier randomly interleaved with one-time, true random data, comprising the steps of:
- determining whether the client's secret identifier is present in the received scrambled data, which includes the secret identifier randomly interleaved with the one-time, true random data;
- comparing the one-time, true random data in the received scrambled data with previously received random data corresponding to said client;
- and
- authorizing a transaction if the one-time, true random data in the received scrambled data is substantially different from said previously received random data.
Apparatus for a provider to verify a client's secret identifier, comprising:
- means for the client to scramble his/her predetermined secret identifier in a one-time, true random way with one-time, true random data, the scrambled data consisting of randomly interleaved (i) random data and (ii) the secret identifier;
- a transmitter which transmits the scrambled data to the provider;
- and
- a provider processor which is used to determine whether the client's secret identifier is present in the received scrambled data, wherein the provider processor rejects a transaction if the random data in the received scrambled data is substantially the same as random data received in a previous transaction corresponding to said client.
A process for a consumer to submit secure verification information, comprising the steps of:
- obtaining a secret identifier from a provider, said secret identifier being unique to said consumer;
- randomly interleaving, in a one-time truly random way, the consumer's secret identifier with a plurality of randomly selected alphanumeric characters;
- and
- submitting the combined randomly interleaved secret identifier and plurality of randomly selected alphanumeric characters to the provider over a computer network.
A method of transacting a charge card purchase, comprising the steps of:
- providing a user with a transaction form;
- receiving from the user a credit card number and a super identifier, the super identifier comprising (i) a secret identifier unique to the user and (ii) a plurality of randomly chosen alphanumeric characters, selected in a one-time true random way, the super identifier comprising the randomly chosen alphanumeric characters randomly interleaved, in a one-time true random way, with the secret identifier;
- comparing the received super identifier with a plurality of previously received super identifiers;
- and
- accepting the credit card transaction if the received super identifier is not substantially identical to previously received super identifiers.
A method of carrying out a secure financial transaction, comprising the steps of:
- receiving from a user (i) a request for a transaction and (ii) a super PIN which comprises a PIN randomly interleaved, in a one-time true random way, with a plurality of alphanumeric characters randomly chosen, in a one-time true random way, by a user;
- and
- accepting the request if the received super PIN is substantially different from a previously received super PIN.
Apparatus for a consumer to submit secure verification information including a secret identifier obtained from a provider, said a secret identifier being unique to said consumer, said apparatus comprising:
- means for randomly interleaving, in a one-time true random way, the consumer's secret identifier with a plurality of alphanumeric characters;
- and
- means for submitting the randomly interleaved identifier to the provider, said means for submitting being coupled to a computer network.
Apparatus for transacting a charge card transaction, comprising:
- means for receiving from the user a credit card number and a super identifier, the super identifier comprising (i) a secret identifier unique to the user and (ii) a plurality of randomly chosen alphanumeric characters, said super identifier comprising the plurality of randomly chosen alphanumeric characters randomly interleaved, in a one-time true random way, with said secret identifier, wherein said means for receiving is coupled to a computer network;
- means for comparing the received super identifier with a plurality of previously received super identifiers;
- and
- means for accepting the credit card transaction if the received super identifier is not substantially identical to previously received super identifiers.
Apparatus for carrying out a secure financial transaction, comprising:
- means for receiving from a user (i) a request for a transaction and (ii) a super PIN which comprises a PIN randomly interleaved, in a one-time true random way, with a plurality of alphanumeric characters randomly chosen by a user;
- and
- means for accepting the request if the received super PIN is substantially dissimilar to a previously received super PIN, wherein the means fore accepting rejects a transaction if the random data in the received data is substantially the same as random data received in a previous transaction corresponding to said user.
Dependencies are inferred from the claim text.