DE102007018604A1 - Information processing system for e.g. automated teller machine, has host system with module for generating person identification number for verification process, and finding correlation between number and preset data units - Google Patents

Abstract

The system has a card (100) with a biometric sensor (143) for reading biometrical information obtained from a user, and dynamically producing a person identification number (PIN) using a PIN-generator module (115) when a correlation between the information and a user reference data (140) exists. An issuer system comprises a decoder module for decoding the PIN. A host system includes a module for generating another PIN for a verification process, and finds a correlation between the latter PIN and preset data units. The latter PIN and correlation are stored in the host system. An independent claim is also included for a method for information processing.

Description

The The present invention generally relates to information processing. It relates more particularly to an authentication and verification system, a method for this as well as a card to unauthorized To control access to information processing.

conventional Information processing systems based on cards with magnetic stripes or Fixed Personal Information Numbers (PIN) are prone to serious Security problems. The technical progress has it unauthorized third party allows a number of methods such as spoofing, fishing and skimming u. to develop and to cause billions of dollars in damage through data misuse. Furthermore arise when entering biometric fingerprint data into a terminal the same security issues as entering a PIN in a terminal, so even this procedure is not absolute security allows.

The Card industry has to introduce a chip in the card (EMC) agreed to be fraudulent Prevent or recognize actions. As a result, all ATMs and Point of Sales (POS) devices on the market would have to be replaced, this process is extremely costly. That is why it continues to exist the need for a secure card, a secure system and a process of information processing, security improve transaction data.

Of the The invention is therefore based on the object, a system and a Procedure for a reliable one Authentication and verification of the information available to improve the security of sensitive data that a user on a map with them, and the secure exchange of data between different information processing systems.

The The object is solved by the subject of the claims.

According to one first embodiment A system for authenticating a user is provided. This system has a card containing biometric data of a User can read and generate a PIN if a match between the biometric information and the reference data of the User exists. The card also includes a processor, which is constructed to allow biometric information of the user receive and dynamically generate a PIN if a match between the biometric information and the reference data of the User, which includes the fingerprint data.

The PIN shown on the card will change on the basis of random change Code patterns, one Time value, a concatenation of two numbers and an encryption process generated.

The Information processing system also includes an exhibition system (Issuer system), that works with a host system. The issuer system includes a PIN decoder module to decrypt the PIN. The Issuer system has also about one Authorization module, about a means for communicating between the host system and the authorization module, as well a means of transmission of the authorization result to a terminal.

The Host system of the information processing system has a dynamic PIN Generator Module which is associated with a time module, and a means of checking whether a PIN and a set of predefined data elements match. In particular, the encrypted Verification request sent from the issuer system to a communication server sent to the host system undergoes a verification process, which includes a dynamic PIN generator module.

In another embodiment of the invention, a method is provided wherein a PIN generator module is implemented in the host system and on the card and a set of predefined data items are stored in the host system and on the card. The method further comprises determining biometric information derived from the user by a biometric sensor mounted on the card. If a matching verification result is obtained, the method further comprises the following steps:
It will display a PIN based on the matching verification result, a set of stored data items and a time value, as well as the display of a readable form of the PIN on the card.

Thus, biometric data according to the invention are not transmitted, but remain stored on the card. Only the encrypted PIN will be sent to the issuer system. In addition, the host system performs a verification procedure that uses a host system's dynamic PIN generator module to check a set of predefined data items for equality. The step of calculating an authorization result is based on congruent verification steps and congruent checks for equality Ness.

The System and method of the invention provide a reliable and secure authentication and verification available, with whose help the user does not have to remember a PIN or this in the immediate vicinity writing down the card. In particular, the system according to the invention requires no special adaptation or modifications of existing ones Terminals.

The Input of the dynamically generated PIN according to the invention can be found in the same way be like entering the previous PIN.

The The system and method of the invention can thus be applied to POS systems, ATM systems, verification systems, Member card systems, access control systems and e-commerce systems are applied.

Short description of the drawing

It demonstrate:

1 An example of a simplified, schematic view of a map

2 A simplified block diagram illustrating an information processing system in connection with the present invention;

3 A block diagram detailing the information processing system of the invention for identifying the user and verifying his access authorization, and

4 A flowchart illustrating information processing in authenticating a user and verifying the user.

1 schematically represents the front view of a map 100 dar. A power supply unit 105 For example, a rechargeable battery or solar cell is in the card 100 built-in. Length and width of the card 100 can be customized to fit the dimensions of a standard credit card. A card store 130 stores biometric information data of an authorized user 140 and a set of predefined data elements 135 , The data elements 135 include a set of previously registered secret keys 136 and countervalues 137 wherein the secret keys are random numbers previously loaded into the card and the counterparts are random numbers based on a time module 120 to be generated. The countervalue is also based on the difference between a fixed start time and the current value of the clock of the processor of the card. With the secret key 136 , the equivalent 137 was added, a new data element is generated, which comes with the card number 138 is concatenated, resulting in a double-length key that is registered on the card and connected to only one card number.

Because the card 100 is an independent authentication device, this also contains microprocessors with sufficient processing power to make an image processing of a fingerprint, checking for equality calculated with stored fingerprints and cryptographic calculations.

Other embodiments of the present invention include conventional memory techniques such as magnetic stripes to enable standard communication with ATM and POS. map 100 also has a biometric sensor 143 , The biometric sensor 143 takes the picture of a fingerprint and the associated temperature information true. A store 130 stores registered user reference data 140 in order to compare these with the obtained biometric information in order to conclude equality with the user. The biometric sensor 143 sends a signal to a processor 110 if equality was determined. This activates processor 110 a PIN generator module 115 that works in conjunction with a time module 120 generates a PIN based on a time value and the predefined data elements 135 in the storage means 130 provided. After the unique one-time PIN has been generated, encryption module may 118 encrypt the PIN to prevent access to information stored in the PIN by unauthorized third parties. The display field 125 Displays the generated, dynamic PIN for a short, predefined time so that it can be typed into a terminal.

2 shows a simplified block diagram illustrating an information processing system for authentication and verification of user permissions. The map 200 has a power supply unit 205 and a processor 210 designed to receive biometric information from the fingerprint sensor 243 receives and a PIN generator module 215 enabled for PIN generation when a match between received biometric information and the reference data from the card memory 230 available. The reference data includes the fingerprint of an authorized user. Thus, prior to using the terminal, the user's fingerprint is verified by the sensor mounted on the card. The unique one-time PIN is taken from the card for a predetermined, preferably very short time on a duration Display Panel 225 displayed while the PIN is in the terminal 245 entered and in encrypted form to the issuer system 250 is transmitted. The authorization request is made from the terminal to the issuer system 250 , The PIN decoder module 265 , which is installed on the issuer system, decrypts the PIN including a secret key. After the PIN has been decoded, the issuer system sends a verification request to the host system 275 , The host system 275 receives the verification request via the communication server 280 , After the processor 282 of the host system the dynamic PIN generator module 285 has enabled, the host system generates a set of PINs and checks against a set of predefined data items stored on the host system for verification. In the case of matching the dynamic PIN with the stored information, the result is sent back to the issuer system where the authorization module 260 the result is analyzed and an authorization to the terminal 245 sends.

3 Fig. 14 illustrates in greater detail the block diagram of the information processing system for authenticating a user and verifying the access authorization of a user.

The map 300 The invention has a biometric sensor 343 , a power supply unit such as a rechargeable battery 305 , a store 330 , a set of predefined data elements 335 stores and reference data associated with a user 340 on. The predefined data elements 335 have a set of secret keys 336 and a set of counterparts 337 on. These two element phrases that continue with the number of the card 338 create a double-length key associated with the card and only a reference to a card number 338 has. The linked reference data of the user 340 include biometric features such as a fingerprint. If there is a match between biometric information and a user's reference data, a processor activates 310 (For example, a microprocessor) a dynamic PIN generator module 315 which is able to generate a PIN and also an encryption module 318 that effects an encryption process of the generated unique one-time PIN. To indicate to the user the dynamic one-time PIN, that of the PIN generator module 315 were generated, the card points 300 a display 325 on.

The terminal 345 where the dynamic PIN is to be entered is connected to the issuer system via the standard network. The issuer system has a communication module 355 on, about that with the terminal 345 and the host system 375 is communicated. The issuer system also has a PIN decoder module 365 and an authorization module 360 ,

A host system 375 is connected to the issuer system via the same network. The host system further includes a communication server 380 to receive a verification request. The host system 375 also has a PIN generator module 385 that with a processor 382 is connected, wherein the first PIN generator module 315 the card and the second PIN generator module 385 of the host system generate the PINs synchronously and both the card and the host system share the same secret keys 336 and 398 store for encryption in dynamically generated PINs. In addition, the host system rejects 375 the time module 390 and the database 395 containing a set of predefined data items including the card numbers and the secret key 398 ,

Authentication takes place by checking the fingerprint. The signal obtained may contain both the fingerprint image data and the fingerprint thermal sensor data sent to the microprocessor 310 is forwarded. The processor or microprocessor 310 confirms that the biometric information retrieved by the user is identical to that on the card 340 stored biometric data and allows the one-time PIN generation by the PIN generator module 315 , which is on the map and with the time module 320 connected is. After the PIN is generated, the encryption module encodes 318 the PIN, which includes an encryption of the PIN according to the invention.

In one embodiment, the encryption module 318 use a secret key, where the user and the issuer system use the same key to encrypt and decrypt the PIN. After the dynamic PIN on the map display 325 is displayed, the unique PIN will be in the terminal 345 entered from this to the issuer system 350 to be transferred.

Since the time value of the time module 320 is generated, is only valid for a short, defined time, the PIN should be generated within this predefined time. The synchronization between the time module 320 the map and the time module 390 of the host system takes place automatically. If the PIN numbers do not match after the verification process, a single value before the analysis value and a single value after transmission of the analysis value are checked to match the value actually to be checked value to compare.

Issuer system 350 receives from the user terminal 345 a request to authorize the user's access to the transaction data and to verify the user's PIN. The PIN decoder module 365 that is installed on the issuer system decrypts the unique one-time PIN. After the PIN has been decoded, the issuer system transmits the verification request to the host system 375 , The host system 375 receives the verification request via the communication server 380 , After the processor 382 of the host system, the PIN generator module 385 has activated, it generates a set of PINs and checks this one set against a set of predefined data elements, including the card numbers and the secret key, which are stored on the card for the purpose of the verification process. If the PINs match, the user can be verified as an authorized user. Otherwise the transaction will be rejected. The result will be sent to the issuer system 350 retransfer where the authorization module 360 the result is analyzed and the authorization to the terminal 345 sends.

4 FIG. 12 is a flowchart exemplifying the process of user authentication and the authentication of the PIN entered in the terminal. FIG.

The Process of the invention can be divided into two parts: The Authentication based on the biometric data, and verification based on cryptographic data. The authentication process, which identifies the user's biometric data finds exclusively the card is held, regardless of terminals, so that the reference data of the user such as fingerprints remain on the map. This will link the sensitive data with Systems outside avoided the card.

Of the Verification process involves the generation of a dynamic PIN on the card and in the host system, with the PIN generator module on the map and the PIN generator module on the host system generate the PINs synchronously and both the card as well as the host system the same secret key for encryption in the dynamically generated PINs. This makes the conventional, fixed PIN replaced by the dynamically generated and displayed PIN, the one additional Security element provides, since such a PIN only for the one-time Use available stands.

In process step 400 At the time of issuing the card, two sets of PIN generator modules are implemented, the first dynamic PIN generator module is implemented as part of the processor on the card, and the second dynamic PIN generator module is implemented on the host system. The first PIN generator module mounted on the card is used to generate a unique one-time PIN. The second PIN generator module of the host system is used to check for equality of PINs against stored sets of predefined data elements. Both PIN generator modules generate PINs based on randomly changing code patterns, a time value, the concatenation of two numbers, and an encryption process.

In process step 410 For example, a first set of predefined data items that are independent of biometric information is stored on the card and a second set of predefined data items that are independent of biometric information is stored in the database on the host system. The first set of predefined data elements comprises a set of secret keys and a set of counterparts. These two sets of elements concatenated with the card number create a double-length key associated with the card and connected to only one card. The second set of predefined data items contains card numbers and the secret key that is stored there for purposes of verification.

In process step 420 the processor provides processing means to read biometric information derived from a user and to check whether received biometric information matches the biometric data of the user stored on the card. In one embodiment of the invention, the biometric information reading processing means includes a fingerprint sensor mounted on the card. An authentication process involves comparing for equality of biometric information obtained via a biometric sensor with reference data, more specifically reference data, including fingerprint data (step 425 ). If the compared match (step 425 : YES), the user is authenticated (step 426 ). If the comparison is negative (step 425 : NO), the user is not authenticated and processing stops in step 427 ,

In the process step 430 For example, the PIN generator module mounted on the card generates a PIN when biometric information matches biometric data stored on the card. The PIN is generated in a dynamic way by passing a secret key to a countervalue based on the time module and by concatenating an identification number of the card, is added to an attachment product. The concatenation of these two numbers produces a 16-digit number, which is then encrypted and from which the PIN is calculated.

In process step 440 the PIN is displayed in a readable form on the card. The display duration has a predefined length, preferably a very small time window, to prevent misuse of the PIN if it were accessed by unauthorized third parties. If a new PIN is requested during this defined period, the card should provide a different PIN. This process can be performed sequentially and generate a predefined number of cycles. After the last cycle has been exceeded, the value is returned to the first cycle. This will generate the same first PIN as before.

In process step 450 the PIN is entered into a terminal and transmitted in encrypted form to the issuer system.

In process step 460 The issuer system's PIN decoder module decrypts the PIN, which has a secret key, when the PIN is transmitted with the authorization request. After the PIN has been decrypted, the coded PIN may contain information such as the card number and date and time of pin generation.

In process step 470 The PIN generator module of the host system generates a random PIN and compares it to a stored set of data items such as card number and secret key. step 470 begins at the point where the PIN block verification request from the issuer system arrives at the communication server of the host system. The PIN block is generated either from the PIN and an account number (ISO format 0) or generated from the PIN (ISO format 1). The host system verifies the PIN block received in the transaction request by generating a random PIN based on the input received from the time module in conjunction with the PIN block using the card number. to retrieve data from the database. The host system does not accept the same PIN block more than once. If the same PIN block arrives again, it will be rejected.

In process step 475 the processor of the host system compares the PIN against a set of predefined data items stored in the database connected to the processor. The predefined data items include the card numbers and the secret keys stored there for purposes of verification. If the compared data items match (step 476 : YES), the user is authorized (step 480 ). In this step, an authorization result is created in the issuer system in which the user may be authorized to execute a transaction. However, if the compared PIN and data items do not match (step 476 : NO), the user is not authorized and processing stops in step 485 , Thus, the transaction is rejected. Finally, the authorization or rejection is sent back to the terminal.

Claims (12)

An information processing system comprising a card ( 100 . 200 . 300 ), with which biometric information obtained by a user can be read, and a first personal identification number (PIN) is dynamically read by a first PIN generator module (PIN). 115 . 215 . 315 ) can be generated if a match between the biometric information and reference data ( 140 . 340 ) of the user, a terminal ( 245 . 345 ) for entering the PIN, an issuer system ( 250 . 350 ), comprising a decoding module ( 265 . 365 ), with which the PIN can be decrypted, and an authorization module ( 260 . 360 ), as well as a host system ( 275 . 375 ), comprising a second PIN generator module ( 285 . 385 ), with which a second PIN can be generated for a verification process and a match between the PIN and a set of predetermined data elements ( 396 ) that can be found in the host system ( 275 . 375 ) are stored. Information processing system according to claim 1, characterized in that the card ( 100 . 200 . 300 ) further comprises a biometric sensor ( 143 . 243 . 343 ), with which a user-derived biometric information is readable, a memory ( 130 . 230 . 330 ), which is configured to store user reference data ( 140 . 340 ) and the first PIN of a set of predetermined data elements ( 135 . 335 ) is independent of the biometric information generated when a match between the biometric information and the reference data ( 140 . 340 ), a processor ( 110 . 210 . 310 ) configured to receive the biometric information from the user, the first PIN generator module ( 115 . 215 . 315 ) with a time module ( 120 . 320 ) is operatively connected, an encryption module ( 118 . 318 ) and a display field ( 125 . 225 . 325 ) to show the first PIN. An information processing system according to claim 1 or 2, characterized in that the first and second PINs are based on a time values, a concatenation of predetermined data elements ( 135 . 335 . 396 ) and an application of an encryption method can be generated. Information processing system according to one of claims 1 to 3, characterized in that a first set of predetermined data elements ( 135 . 335 ) and a second set of data elements ( 396 ) stored in the host system continue to hold a secret key ( 136 . 336 ), a random number and a card number. Information processing system according to claim 1, characterized in that the emitter system ( 250 . 350 ) means for communicating between the host system and the authorization module ( 260 . 360 ) of the issuer system ( 250 . 350 ) and means for transmitting the authorization result to the terminal ( 245 . 345 ) having. Information processing system according to claim 1, characterized in that the host system ( 275 . 375 ) continue a communication server 380 to accept a verification request, the second PIN generator module ( 285 . 385 ) with a time module ( 390 ) in operation, and a database ( 395 ) comprising a set of predetermined data elements ( 396 ) having. Information processing system according to one of claims 1 to 6, characterized in that the first PIN generator module and the second PIN generator module synchronously generate the PINs and that the card and the host system each have the same secret key ( 136 . 336 . 398 ) for encryption in the dynamically generated PIN. Information processing system according to one of claims 1 to 7, characterized in that it is used in point-of-sale (POS) systems, ATM systems, verification systems, member cart systems, access control systems and e-commerce systems is applicable. Information processing system according to one of claims 1 to 8, characterized in that the PIN can be changed sequentially is and about is made visible for a predetermined period of time. Method for processing information, comprising the following steps: a) Implementing a PIN generator module in a host system ( 275 . 375 ) and on a map ( 100 . 200 . 300 ); b) stores a set of data elements independent of biometric information on the host system ( 275 . 375 ) and on the map ( 100 . 200 . 300 ); c) reads the biometric information originating from a user through a biometric sensor ( 143 . 243 . 343 ), on the map ( 100 . 200 . 300 ) and verifies whether the obtained biometric information is identical to user reference data ( 140 . 340 ); d) generates a first PIN by a first PIN generator module from a set of predetermined data elements when the biometric information is combined with the user reference data ( 140 . 340 ) and represents a readable form of the PIN; e) enters the displayed PIN into a terminal and transmits the encrypted PIN to an issuer system ( 250 . 350 ); f) decrypts the PIN by a decoding module ( 265 . 365 ) of the issuer system ( 250 . 350 ); g) generates a second PIN with a second PIN generator module from a set of predetermined data elements ( 396 ), which are in the host system ( 275 . 375 ) and compares them with a stored set of predetermined data items, and h) outputs an authorization result based on a congruent match, and transmits the authorization result to the terminal. A method according to claim 10, characterized in that the generation of the first and second PIN on a time value, a concatenation of predetermined data elements ( 135 . 335 . 396 ) and an application of a decryption method. Method according to claim 10 or 11, characterized in that a set of predetermined data elements stored on the card and in the host system continue to contain a secret key ( 136 . 336 ), a random number and a card number ( 138 . 338 ) exhibit.