Secure transaction system and method utilized therein

Claim 2

In a system wherein a party has a personal identification number from which first coded authentication information is generated, the first coded authentication information being derivable from a predetermined secret number and a predetermined non-secret number which have been previously stored in a storage means, a method for authenticating the party comprising the steps of: receiving the personal identification number from the party, the personal identification number being unrecoverable in the system; generating second coded authentication information by using the received personal identification number, the step of generating the second coded authentication information comprises the steps of coding the received personal identification number to generate a coded personal identification number and coding an arbitrary number using the coded personal identification number to generate a first coded arbitrary number; retrieving the secret and non-secret numbers from the storage means; generating third coded authentication information by using the retrieved secret and non-secret numbers; comparing the second coded authentication information and the third coded authentication information; authenticating the party if the second coded authentication information corresponds to the third coded authentication information; and generating at a first site an anti-duplication variable authentication number (ADVAN) by coding at least a transmission date and time with the first coded authentication information, and further including the step of transmitting the ADVAN, the first coded arbitrary number and the arbitrary number from a first site to a second site over an unsecured communication medium.

Claim 3

The method of claim 1, further comprising the steps of: deriving at the second site the first coded authentication information from the retrieved secret and non-secret numbers; uncoding the ADVAN at the second site using the derived first coded authentication information to regenerate the transmission date and time; and further authenticating the party if the regenerated transmission date and time correspond to a reception date and time.

Claim 4

In a transaction system wherein a party has a first personal identification number (PIN1) and an official has a second personal identification number (PIN2), a method for enrolling the party and issuing the party a credential, and then authenticating the party and the credential in a subsequent transaction, the method of enrolling and issuing comprising the steps of: coding information associated with the party with information associated with the official to generate a joint code; storing the joint code in a first storage means, the joint code being retrievable from the first storage means only by a party who can provide the PIN1; storing the joint code in a second storage means, the joint code being retrievable from the second storage means only by a party who can provide the PIN2; coding information relevant to the credential with the joint code to generate a first variable authentication number (VAN1); recording the VAN1 on the credential; issuing the credential to the party; and the method of authenticating the party and the credential in a subsequent transaction comprising the steps of: receiving the PIN1 from the party to be authenticated; accessing the first storage means with the PIN1 to locate and retrieve the joint code; coding information relevant to the credential with the retrieved joint code to generate a second variable authentication number (VAN2); comparing the VAN2 to the VAN1; and authenticating the party and the credential if the VAN2 corresponds to the VAN1.

Claim 5

In a transaction system wherein a party has a first personal identification number (PIN1) and an official has a second personal identification number (PIN2), a method for enrolling the party and issuing the party a credential, and then authenticating the party and the credential in a subsequent transaction, the method of enrolling and issuing comprising the steps of: coding information associated with the party with information associated with the official to generate a joint code; storing the joint code in a first storage means, the joint code being retrievable from the first storage means only by a party who can provide the PIN1; storing the joint code in a second storage means, the joint code being retrievable from the second storage means only by a party who can provide the PIN2; coding information relevant to the credential with the joint code to generate a first variable authentication number (VAN1); recording the VAN1 on the credential; issuing the credential to the party; and the method of authenticating the party and the credential in a subsequent transaction comprising the steps of: receiving the PIN1 from the party to be authenticated; accessing the first storage means with the PIN1 to locate and retrieve the joint code; coding information relevant to the credential with the retrieved joint code to generate a second variable authentication number (VAN2); comparing the VAN2 to the VAN1; and authenticating the party and the credential if the VAN2 corresponds to the VAN1.

Claim 6

The method of claim 3, further comprising the steps of: retrieving the joint code from the second storage means; regenerating the joint code by coding information associated with the party with information associated with the official; comparing the retrieved joint code with the regenerated joint code; and authenticating the official if the retrieved joint code corresponds to the regenerated joint code.

Claim 7

The method of claim 3, further comprising the steps of: retrieving the joint code from the first storage means; retrieving the joint code from the second storage means; comparing the retrieved joint codes; and authenticating the official if the retrieved joint codes correspond.

Claim 8

The method of claim 3 wherein the joint code is revised or erased from the second storage means after the VAN1 is recorded on the credential.

Claim 9

A transaction system for enrolling a party, wherein the party has a first personal identification number (PIN) and the system has an official, the system comprising: means for coding information associated with the party with information associated with the official to generate a joint code, the joint code being subsequently associable with a transaction; a storage means being accessible only to a party with knowledge of the first PIN; means for storing the joint code in the storage means, such that if no party exists with knowledge of the first PIN, the joint code cannot be accessed from the storage means and, therefore, cannot be associated with a transaction; means for coding information relevant to the transaction with the joint code for generating a variable authentication number (VAN); means for recording the VAN on a credential associated with the transaction; and means for issuing the credential.

Claim 10

A transaction system for enrolling a party, wherein the party has a first personal identification number (PIN) and the system has an official, the system comprising: means for coding information associated with the party with information associated with the official to generate a joint code, the joint code being subsequently associable with a transaction; a storage means being accessible only to a party with knowledge of the first PIN; means for storing the joint code in the storage means, such that if no party exists with knowledge of the first PIN, the joint code cannot be accessed from the storage means and, therefore, cannot be associated with a transaction; means for coding information relevant to the transaction with the joint code for generating a variable authentication number (VAN); means for recording the VAN on a credential associated with the transaction; and means for issuing the credential.

Claim 11

A transaction system for enrolling a party, wherein the party has a first personal identification number (PIN) and the system has an official, the system comprising: means for coding information associated with the party with information associated with the official to generate a joint code, the joint code being subsequently associable with a transaction; a storage means being accessible only to a party with knowledge of the first PIN; and means for storing the joint code in the storage means, such that if no party exists with knowledge of the first PIN, the joint code cannot be accessed from the storage means and, therefore, cannot be associated with a transaction; means for storing the joint code in a second storage means accessible only to a party having knowledge of the second PIN; means for receiving the second PIN from the official; means for accessing the second storage means using at least the received second PIN for retrieving the joint code; means for coding information relevant to the transaction using the joint code for generating a variable authentication number (VAN); means for recording the VAN on a credential associated with the transaction; and means for issuing the credential such that a party without knowledge of the second PIN cannot access the second storage means or the joint code stored therein and, therefore, cannot legitimately issue the credential.

Claim 12

A transaction system for enrolling a party, wherein the party has a first personal identification number (PIN) and the system has an official, the system comprising: means for coding information associated with the party with information associated with the official to generate a joint code, the joint code being subsequently associable with a transaction; a storage means being accessible only to a party with knowledge of the first PIN; and means for storing the joint code in the storage means, such that if no party exists with knowledge of the first PIN, the joint code cannot be accessed from the storage means and, therefore, cannot be associated with a transaction; means for storing the joint code in a second storage means accessible only to a party having knowledge of the second PIN; means for receiving the second PIN from the official; means for accessing the second storage means using at least the received second PIN for retrieving the joint code; means for coding information relevant to the transaction using the joint code for generating a variable authentication number (VAN); means for recording the VAN on a credential associated with the transaction; and means for issuing the credential such that a party without knowledge of the second PIN cannot access the second storage means or the joint code stored therein and, therefore, cannot legitimately issue the credential.

Claim 13

A transaction system according to claim 7 further including: means for storing in the storage means the information associated with the party and the information associated with the official that are used to generate the joint code.

Claim 14

In a system wherein a party has a personal identification number from which first coded authentication information is generated, the first coded authentication information being derivable from a predetermined secret number and a predetermined non-secret number which have been previously stored in a storage means, a method for authenticating the party and a transaction comprising the steps of: receiving at a first site a personal identification number from the party, the personal identification number being unrecoverable in the system; generating second coded authentication information using the received personal identification number; generating a first anti-duplication variable authentication number (ADVAN1) by coding at least a transmission date and time, and other transaction information using the second coded authentication information, the transmission date and time being unique and non-predetermined; transmitting at least the first anti-duplication variable authentication number (ADVAN1) and the transmission date and time from the first site to a second site; receiving at the second site at least the first anti-duplication variable authentication number (ADVAN1) and the transmission date and time; retrieving at the second site the secret and non-secret numbers from the storage means; generating third coded authentication information using the retrieved secret and non-secret numbers; uncoding the first anti-duplication variable number (ADVAN1) using the third coded authentication information to recover at least the transmission date and time and the other transaction information, comparing at least the transmission date and time recovered from the first anti-duplication variable authentication number (ADVAN1) with at least the transmission date and time received at the second site; and authenticating the party and the transaction if at least the transmission date and time recovered from the first anti-duplication variable authentication number (ADVAN1) corresponds to the transmission date and time received at the second site.

Claim 15

In a system wherein a party has a personal identification number from which first coded authentication information is generated, the first coded authentication information being derivable from a predetermined secret number and a predetermined non-secret number which have been previously stored in a storage means, a method for authenticating the party and a transaction comprising the steps of: receiving at a first site a personal identification number from the party, the personal identification number being unrecoverable in the system; generating second coded authentication information using the received personal identification number; generating a first anti-duplication variable authentication number (ADVAN1) by coding at least a transmission date and time, and other transaction information using the second coded authentication information, the transmission date and time being unique and non-predetermined; transmitting at least the first anti-duplication variable authentication number (ADVAN1) and the transmission date and time from the first site to a second site; receiving at the second site at least the first anti-duplication variable authentication number (ADVAN1) and the transmission date and time; retrieving at the second site the secret and non-secret numbers from the storage means; generating third coded authentication information using the retrieved secret and non-secret numbers; uncoding the first anti-duplication variable number (ADVAN1) using the third coded authentication information to recover at least the transmission date and time and the other transaction information, comparing at least the transmission date and time recovered from the first anti-duplication variable authentication number (ADVAN1) with at least the transmission date and time received at the second site; and authenticating the party and the transaction if at least the transmission date and time recovered from the first anti-duplication variable authentication number (ADVAN1) corresponds to the transmission date and time received at the second site.

Claim 16

The method of claim 10 comprising the additional steps of: coding the first transmission date and time received at the second site and the other transaction information recovered by uncoding the first anti-duplication variable authentication number (ADVAN1) using the third coded authentication information to generate a second anti-duplication variable authentication number (ADVAN2); comparing the first anti-duplication variable authentication number (ADVAN1) with the second anti-duplication variable authentication number (ADVAN2); and authenticating the party and the transaction if the first anti-duplication variable authentication number (ADVAN1) corresponds to the second anti-duplication variable authentication number (ADVAN2).

Claim 17

In a system wherein a party has a personal identification number from which first coded authentication information is generated, the first coded authentication information being derivable from a predetermined secret number and a predetermined non-secret number which have been previously stored in a storage means, a method for authenticating the party and a transaction comprising the steps of: receiving at a first site a personal identification number from the party, the personal identification number being unrecoverable in the system; generating second coded authentication information using the received personal identification number; generating an anti-duplication variable authentication number (ADVAN) by coding at least a first transmission date and time, and other transaction information using the second coded authentication information, the first transmission date and time being unique and non-predetermined; transmitting at least the anti-duplication variable authentication number (ADVAN) from the first site to a second site; receiving at the second site at least the anti-duplication variable authentication number (ADVAN); retrieving at the second site the secret and non-secret numbers from the storage means; generating third coded authentication information using the retrieved secret and non-secret numbers; uncoding the anti-duplication variable authentication number (ADVAN) received at the second site using the third coded authentication information to recover at least the first transmission date and time; comparing at least the first transmission date and time recovered from the anti-duplication variable authentication number (ADVAN) with at least a second date and time of receiving the anti-duplication variable authentication number (ADVAN); and authenticating the party and the transaction if at least the first transmission date and time recovered from the anti-duplication variable authentication number (ADVAN) compares favorably to the second date and time of receiving the anti-duplication variable authentication number (ADVAN).

Claim 18

In a system wherein a party has a personal identification number from which first coded authentication information is generated, the first coded authentication information being derivable from a predetermined secret number and a predetermined non-secret number which have been previously stored in a storage means, a method for authenticating the party and a transaction comprising the steps of: receiving at a first site a personal identification number from the party, the personal identification number being unrecoverable in the system; generating second coded authentication information using the received personal identification number; generating an anti-duplication variable authentication number (ADVAN) by coding at least a first transmission date and time, and other transaction information using the second coded authentication information, the first transmission date and time being unique and non-predetermined; transmitting at least the anti-duplication variable authentication number (ADVAN) from the first site to a second site; receiving at the second site at least the anti-duplication variable authentication number (ADVAN); retrieving at the second site the secret and non-secret numbers from the storage means; generating third coded authentication information using the retrieved secret and non-secret numbers; uncoding the anti-duplication variable authentication number (ADVAN) received at the second site using the third coded authentication information to recover at least the first transmission date and time; comparing at least the first transmission date and time recovered from the anti-duplication variable authentication number (ADVAN) with at least a second date and time of receiving the anti-duplication variable authentication number (ADVAN); and authenticating the party and the transaction if at least the first transmission date and time recovered from the anti-duplication variable authentication number (ADVAN) compares favorably to the second date and time of receiving the anti-duplication variable authentication number (ADVAN).

Claim 21

The method of claim 13, wherein the third information received from at least one of the parties comprises identification information associated with at least one of the parties.

Claim 22

The method of claim 13 wherein the second party is an agent, or an agency, or an official of an agency, or an authority, or an administrator, or an entity entrusted with issuing a credential.

Claim 25

The method of claim 16 comprising the additional step of; storing at least a portion of the information stored in the credential, and at least a portion of the information used to derive the VAN in at least one storage means associated with at least one of the parties.

Claim 26

The method of claim 16 wherein the fourth information associated with one of the parties is stored in the storage means associated with at least one of the parties and comprises a secret number.

Claim 27

The method of claim 16 wherein the third information associated with one of the parties comprises a coded number derived in conjunction with the PIN of that party.

Claim 28

The method of claim 16 wherein the fourth information associated with one of the parties comprises a coded number derived in conjunction with the PIN of that party.

Claim 29

The method of claim 16 wherein a first joint key is generated and stored in at least one storage means associated with the at least one of the parties, the method comprising the steps of; coding the third information associated with one of the parties, and the fourth information associated with the other party to generate the first joint key; and storing the first joint key in at least one storage means associated with the at least one of the parties.

Claim 30

The method of claim 16 wherein the second party is an agent, or an agency, or an official of an agency, or an authority, or an administrator, or an entity entrusted with issuing a credential.