Transaction authentication using a centrally generated transaction identifier

US5343529A · kind A · utility

Inventors

• Milton Goldfine · La Cañada Flintridge, US
• Marvin Perlman · San Fernando, US
• Robert Montgomery · Southampton, US

Key dates

• Filing date: Sep 28, 1993
• Grant date: Aug 30, 1994
• Expiry date: Sep 28, 2013

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L2209/56
• WIPO field: IT methods for management
• WIPO sector: Electrical engineering

Abstract

Each access attempt transmitted to an authentication agency causes the agency to produce a request identifier unique to that request. The request identifier is transmitted back to the authentication code generator of the user initiating the access attempt, and to an authentication code generator in the agency. The agency also retrieves a user identifier from a database and sends it to its authentication code generator. Both the user's authentication code generator and the agency's authentication code generator independently combine, through identical or complementary transformations, the user identifier and the request identifier to form a user authentication code and an agency authentication code. The two authentication codes are presented by a comparator, which issues a permit signal only if the comparison indicates a match between the two authentication codes. The permit signal is transmitted to a transaction control device to permit the transaction to proceed. Since the authentication code is unique to each transaction attempt, interception of an authentication code will not permit an unauthorized user to successfully initiate another transaction. As an additional security feat…