Patent EP0334616A2 successfully refreshed from Google Patents.
EP0334616A2
Expired / Lapsed
EP
⏱️ 0.0 years remaining
Method and system for personal identification
Assignee: Polaroid Corp polaroid Corporation silvio M
•
Filing: 1989-03-21
•
Granted: —
•
Expires: 2009-03-21
Abstract
Abstract The method and system of the invention utilizes a private key of a public-key cryptosystem key pair to encrypt a non-secret password into a digital signature. The password and the digital signature are then encoded and stored on a magnetic stripe or other memory device of the card. To effect a transaction, the digital signature on a received card must be shown to have been generated from the password on the received card. The password preferably includes a digitized photograph of the authorized cardholder which is capable of being displayed at the transaction terminal. This enables the operator of the terminal to verify the identity of the cardholder by visual inspection.
Inventors
- 👤 Frank Thomson Leighton
- 👤 Silvio Micali
Bibliographic Details
Application Number
—
Jurisdiction
EP
Data Source
google_patents
Last Synchronized
2026-10-30 03:17
CPC Classifications
G; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G06; G06Q; G06Q20/00; G06Q20/30; G06Q20/34; G06Q20/347; G06Q20/38; G06Q20/40; G06Q20/401; G06Q20/4012; G06Q20/4014; G06Q20/40145; G07C; G07C9/00; G07C9/20; G07C9/22; G07C9/25; G07C9/253; G07F7/0806; G07F7/0813; G07F7/1016; G07F7/1025; G07F7/1058; G07F7/1066
Claims Analysis
Total Claims: 31
Claim 1
Independent Claim
237 words
A method for enabling an authorized user of a personal identification card to effect a transaction using a transaction terminal, comprising the steps of: generating a password having a portion thereof which is non-secret; mapping the password using a predetermined function "F" to generate a mapped password; digitally signing the mapped password with a private key of a public-key cryptosystem pair to generate a signature corresponding to the mapped password; encoding the password and the signature to generate an encoded password/ signature; storing the encoded password/signature on the personal identification card; receiving the personal identification card at the transaction terminal; decoding the encoded password/signature on the received personal identification card to generate a received password and a received signature; mapping the received password with the predetermined function "F" to generate a mapped password "Q R " for the received personal identification card; digitally verifying, using the public key "M" of the public-key cryptosystem pair, whether the received signature can be generated from the mapped password for the received personal identification card; if the received signature can be generated from the mapped password using the public key, generating an indication that the received signature is valid; generating a representation from the received password; and displaying the representation and the indication on a display of the transaction terminal to enable an operator thereof to verify that the user is authorized to effect a transaction using the personal identification card.
Claim 2
Independent Claim
237 words
A method for enabling an authorized user of a personal identification card to effect a transaction using a transaction terminal, comprising the steps of: generating a password having a portion thereof which is non-secret; mapping the password using a predetermined function "F" to generate a mapped password; digitally signing the mapped password with a private key of a public-key cryptosystem pair to generate a signature corresponding to the mapped password; encoding the password and the signature to generate an encoded password/ signature; storing the encoded password/signature on the personal identification card; receiving the personal identification card at the transaction terminal; decoding the encoded password/signature on the received personal identification card to generate a received password and a received signature; mapping the received password with the predetermined function "F" to generate a mapped password "Q R " for the received personal identification card; digitally verifying, using the public key "M" of the public-key cryptosystem pair, whether the received signature can be generated from the mapped password for the received personal identification card; if the received signature can be generated from the mapped password using the public key, generating an indication that the received signature is valid; generating a representation from the received password; and displaying the representation and the indication on a display of the transaction terminal to enable an operator thereof to verify that the user is authorized to effect a transaction using the personal identification card.
Claim 3
Dependent Claim
38 words
The method for enabling an authorized user of a personal identification card to effect a transaction as described in Claim 1 wherein the password includes data representing a pictorial representation of a physical characteristic of the authorized user.
Claim 4
Dependent Claim
36 words
The method for enabling an authorized user of a personal identification card to effect a transaction as described in Claim 1 wherein the password includes data representing one or more personal facts about the authorized user.
Claim 5
Dependent Claim
37 words
The method for enabling an authorized user of a personal identification card to effect a transaction as described in Claim 1 wherein the password includes one or more codewords, each of the codewords authorizing a specific transaction.
Claim 6
Dependent Claim
63 words
The method for enabling an authorized user of a personal identification card to effect a transaction as described in Claim 1 wherein the password includes data representing a pictorial representation of a physical characteristic of the authorized user, data representing one or more personal facts about the authorized user, and at least one codeword authorizing a specific transaction using the personal identification card.
Claim 7
Dependent Claim
30 words
The method for enabling an authorized user of a personal identification card to effect a transaction as described in Claim 1 wherein the predetermined function "F" is an identity function.
Claim 8
Dependent Claim
35 words
The method for enabling an authorized user of a personal identification card to effect a transaction as described in Claim 1 wherein the predetermined function "F" is a hashing function based on a DES scheme.
Claim 9
Dependent Claim
39 words
The method for enabling an authorized user of a personal identification card to effect a transaction as described in Claim 1 wherein the encoding step includes the step of: encoding the password and the signature with an error-correcting code.
Claim 10
Dependent Claim
45 words
The method for enabling an authorized user of a personal identification card to effect a transaction as described in Claim 1 wherein the decoding step includes the step of: correcting errors in the received password and in the received signature decoded from the encoded password/signature.
Claim 11
Dependent Claim
115 words
The method for enabling an authorized user of a personal identification card to effect a transaction as described in Claim 1 wherein the digital signing step includes the steps of: multiplying the mapped password "Q" by each of the factors ±1 mod M and ±2 mod M; determining which of the four values ±Q mod M and ±2Q mod M is a quadratic residue modulo M, where "M" equals "P₁·P₂" and P₁ and P₂ are secret prime numbers which are preselected such that only one of the four values ± mod M and ±2Q mod M is a quadratic residue modulo "M"; and computing the square root of the quadratic residue to generate the signature.
Claim 12
Dependent Claim
103 words
The method for enabling an authorized user of a personal identification card to effect a transaction as described in Claim 10 wherein the digitally verifying step includes the steps of: multiplying the mapped password "Q R " from the received personal identification card by each of the factors ±1 mod M and ±2 mod M; squaring modulo "M" the received signature to generate a value "X"; determining whether "X" equals either ±Q R mod M or ±2Q R mod M; and if "X" equals either ±Q R mod M or ±2Q R mod M, generating the indication that the received signature is valid.
Claim 13
Independent Claim
137 words
A method for issuing a personal identification card for an authorized user of the personal identification card, comprising the steps of: generating a pictorial representation of a physical characteristic of the authorized user; processing the pictorial representation to generate a password; mapping the password with a predetermined one-way function to generate a mapped password"Q" having a length substantially less than the length of the password; digitally signing the mapped password "Q" with a private key (P₁,P₂) of a first public-key cryptosystem pair to generate a first signature, where P₁ and P₂ are secret prime numbers and the first public-key cryptosystem pair includes a public key "M" which is equal to P₁·P₂; encoding the password and the first signature with an error-correcting code to generate an encoded password/signature; and storing the encoded password/signature on the personal identification card.
Claim 14
Independent Claim
137 words
A method for issuing a personal identification card for an authorized user of the personal identification card, comprising the steps of: generating a pictorial representation of a physical characteristic of the authorized user; processing the pictorial representation to generate a password; mapping the password with a predetermined one-way function to generate a mapped password"Q" having a length substantially less than the length of the password; digitally signing the mapped password "Q" with a private key (P₁,P₂) of a first public-key cryptosystem pair to generate a first signature, where P₁ and P₂ are secret prime numbers and the first public-key cryptosystem pair includes a public key "M" which is equal to P₁·P₂; encoding the password and the first signature with an error-correcting code to generate an encoded password/signature; and storing the encoded password/signature on the personal identification card.
Claim 15
Dependent Claim
51 words
The method for issuing a personal identification card as described in Claim 12 further including the steps of digitally signing the mapped password with a private key of a second public-key cryptosystem pair to generate a second signature; and encoding the second signature along with the password and the first signature.
Claim 16
Dependent Claim
34 words
The method for issuing a personal identification card as described in Claim 12 further including the step of: augmenting the password to include data representing one or more personal facts about the authorized user.
Claim 17
Dependent Claim
40 words
The method for issuing a personal identification card as described in Claim 12 further including the step of: augmenting the password to include one or more codewords, each of said codewords authorizing a specific transaction using the personal identification card.
Claim 18
Dependent Claim
32 words
The method for issuing a personal identification card as described in Claim 15 wherein the personal identification card is a passport and each of the cryptosystem pairs corresponds to a different country.
Claim 19
Dependent Claim
106 words
The method for issuing a personal identification card as described in Claim 12 wherein the digital signing step includes the steps of: multiplying the mapped password "Q" by each of the predetermined factors ±1 mod M and ±2 mod M; determining which of the values ±Q mod M and ±2Q mod M is a quadratic residue modulo "M", where the secret prime numbers P₁ and P₂ which are preselected such that only one of the four values ±Q mod M and ±2Q mod M is a quadratic residue modulo "M"; and computing the square root of the quadratic residue modulo "M" to generate the first signature.
Claim 20
Dependent Claim
30 words
The method for issuing a personal identification card as described in Claim 12 further including the step of: encrypting the password with a predetermined function prior to the mapping step.
Claim 21
Independent Claim
193 words
A system for issuing authorized personal identification cards and for presenting unauthorized use thereof; comprising: issuing terminal means for issuing a plurality of personal identification cards, each of said cards having stored therein a password with a portion thereof representing a non-secret characteristic of an authorized user of the card, each of said cards also having stored therein a signature derived from the password using a private key of a public-key cryptosystem pair; and transaction terminal means including at least one transaction terminal for receiving a personal identification card offered to effect a transaction using the transaction terminal, the personal identification card having a received password and a received signature, wherein the transaction terminal comprises means, using the public key of the public-key cryptosystem pair, for verifying that the received signature can be generated from the received password, means for generating a representation from the received password, and means for displaying the representation and an indication of whether the received signature can be generated from the received password to enable an operator of the transaction terminal to verify that the user of the offered personal identification card is authorized to effect a transaction.
Claim 22
Independent Claim
193 words
A system for issuing authorized personal identification cards and for presenting unauthorized use thereof; comprising: issuing terminal means for issuing a plurality of personal identification cards, each of said cards having stored therein a password with a portion thereof representing a non-secret characteristic of an authorized user of the card, each of said cards also having stored therein a signature derived from the password using a private key of a public-key cryptosystem pair; and transaction terminal means including at least one transaction terminal for receiving a personal identification card offered to effect a transaction using the transaction terminal, the personal identification card having a received password and a received signature, wherein the transaction terminal comprises means, using the public key of the public-key cryptosystem pair, for verifying that the received signature can be generated from the received password, means for generating a representation from the received password, and means for displaying the representation and an indication of whether the received signature can be generated from the received password to enable an operator of the transaction terminal to verify that the user of the offered personal identification card is authorized to effect a transaction.
Claim 23
Dependent Claim
45 words
The system as described in Claim 19 wherein the issuing terminal means includes at least one issuing terminal for one or more independent issuers of authorized personal identification cards, each of the independent issuers having a distinctive public-key cryptosystem pair unknown to the other issuers.
Claim 24
Independent Claim
141 words
A system for allowing authorized users of personal identification cards to effect transactions via at least one transaction terminal comprising a plurality of said cards each having stored therein a signature wich is the digital sign of a password associated with the respective user, the signature stored in each of said cards having been derived with the same private key of a public-key cryptosystem pair; and at least one transaction terminal having means for controlling (1) the retrieval of the password and the signature stored in an inserted card, (2) the digital verification of the retrieved signature with the use of the public key of the public-key cryptosystem pair, (3) the generation of a pictorial representation from the retrieved password, and (4) the effecting of a transaction only if the retrieved signature is verified and the pictorial representation matches the user.
Claim 25
Independent Claim
141 words
A system for allowing authorized users of personal identification cards to effect transactions via at least one transaction terminal comprising a plurality of said cards each having stored therein a signature wich is the digital sign of a password associated with the respective user, the signature stored in each of said cards having been derived with the same private key of a public-key cryptosystem pair; and at least one transaction terminal having means for controlling (1) the retrieval of the password and the signature stored in an inserted card, (2) the digital verification of the retrieved signature with the use of the public key of the public-key cryptosystem pair, (3) the generation of a pictorial representation from the retrieved password, and (4) the effecting of a transaction only if the retrieved signature is verified and the pictorial representation matches the user.
Claim 26
Dependent Claim
94 words
A terminal for initializing personal identification cards to be used with at least one transaction terminal, each card having a memory therein, comprising means for assigning a password having a portion thereof which is non-secret to a user whose card is to be initialized, means for deriving a digital signature from at least a portion of the assigned password, the signature for each user being derived with use of the same private key of a public-key cryptosystem pair, and means for controlling the storing in a user card of the respective derived digital signature.
Claim 27
Dependent Claim
94 words
A terminal for initializing personal identification cards to be used with at least one transaction terminal, each card having a memory therein, comprising means for assigning a password having a portion thereof which is non-secret to a user whose card is to be initialized, means for deriving a digital signature from at least a portion of the assigned password, the signature for each user being derived with use of the same private key of a public-key cryptosystem pair, and means for controlling the storing in a user card of the respective derived digital signature.
Claim 28
Dependent Claim
71 words
A personal identification card, for use in effecting transactions via at least one transaction terminal, comprising a body portion, a memory within said body portion for storing a signature, said signature being the digital sign of a password having at least a portion thereof being non-secret and being associated with the respective card user, said signature having been derived from the password with the private key of a public-key cryptosystem pair.
Claim 29
Dependent Claim
71 words
A personal identification card, for use in effecting transactions via at least one transaction terminal, comprising a body portion, a memory within said body portion for storing a signature, said signature being the digital sign of a password having at least a portion thereof being non-secret and being associated with the respective card user, said signature having been derived from the password with the private key of a public-key cryptosystem pair.
Claim 30
Independent Claim
198 words
A method for personal identification, comprising the steps of: generating a password having a portion thereof which is non-secret; mapping the password using a predetermined function "F" to generate a mapped password; digitally signing the mapped password with a private key of a public-key cryptosystem pair to generate a signature corresponding to the mapped password; encoding the password and the signature to generate an encoded password/ signature; transmitting the encoded password/signature over a communications channel; receiving the encoded password/signature at a transaction terminal; decoding the received encoded password/signature to generate a received password and a received signature; mapping the received password with the predetermined function "F" to generate a mapped password "Q R "; digitally verifying, using the public key "M" of the public-key cryptosystem pair, whether the received signature can be generated from the mapped password; if the received signature can be generated from the mapped password using the public key, generating an indication that the received signature is valid; generating a representation from the received password; and displaying the representation and the indication on a display of the transaction terminal to enable an operator thereof to verify that the user is authorized to effect a transaction.
Claim 31
Independent Claim
198 words
A method for personal identification, comprising the steps of: generating a password having a portion thereof which is non-secret; mapping the password using a predetermined function "F" to generate a mapped password; digitally signing the mapped password with a private key of a public-key cryptosystem pair to generate a signature corresponding to the mapped password; encoding the password and the signature to generate an encoded password/ signature; transmitting the encoded password/signature over a communications channel; receiving the encoded password/signature at a transaction terminal; decoding the received encoded password/signature to generate a received password and a received signature; mapping the received password with the predetermined function "F" to generate a mapped password "Q R "; digitally verifying, using the public key "M" of the public-key cryptosystem pair, whether the received signature can be generated from the mapped password; if the received signature can be generated from the mapped password using the public key, generating an indication that the received signature is valid; generating a representation from the received password; and displaying the representation and the indication on a display of the transaction terminal to enable an operator thereof to verify that the user is authorized to effect a transaction.
References Cited (Backward Citations)
No citation records indexed.
USPTO Annuity & Maintenance Windows
Maintenance schedule is calculated for granted US utility patents.