Patent · US Expired

Card reader module with pin decryption

US6736313B1 · kind B1 · utility

43Cited by
36References
32Claims
0Family size

Assignee

Inventor

Key dates

Filing dateMay 9, 2000
Grant dateMay 18, 2004
Priority date
Expiry dateMay 9, 2020

Classification

  • Technology area (CPC G)Physics
  • CPC primaryG07F7/1025
  • WIPO fieldControl
  • WIPO sectorInstruments

Abstract

A card reader module includes capabilities for receiving and decrypting an encrypted user PIN to facilitate off-line transaction authorization. In an off-line transaction, a transaction processing system need not communicate with an outside authorization network to obtain transaction authorization. Off-line transaction authorization is particularly relevant when a customer uses a secure payment device, such as a smart card. With a smart card, the transaction processing system, in cooperation with the smart card, compares a user-entered PIN, input through a keypad, with a user PIN stored on the smart card. If the input PIN matches the stored PIN, the transaction processing system authorizes the customer's transaction. Rather than including the keypad, the card reader module receives the PIN in encrypted format directly or indirectly from a separate keypad. To minimized fraud, the separate keypad encrypts the PIN before it is sent to the card reader module. The card reader module decrypts received PIN information for comparison to card-stored PIN information. Based on the comparison, the card reader module provides authorization information to other elements in the transaction proces…

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.