In-card access control and monotonic counters for offline payment processing system
US8898088B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Feb 29, 2012 |
| Grant date | Nov 25, 2014 |
| Priority date | — |
| Expiry date | Nov 2, 2032 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04B5/77
- WIPO fieldIT methods for management
- WIPO sectorElectrical engineering
Abstract
Preventing fraud during an offline transaction by encoding a randomly-generated card verification code onto a smart card. The verification code is transmitted to a contactless device during each transaction, wherein it is cross-referenced with the account number to ensure presence of the card. Also, every transaction record is signed by an access key resident on the contactless device and certified by a signing key resident on a remote system. Funds may be deposited onto the card when the contactless device creates a deposit request, signs the request using an access key and transmits it to the remote system, which in turn processes the request and certifies it with a signing key. Funds may be withdrawn when the contactless device creates a withdrawal record and signs it using an access key. The remote system verifies the signatures and certifies the records using a signing key when the records are later transmitted.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.