Patent ReferencesMethod and apparatus for secure message transmission for use in electronic funds transfer systems Method and apparatus for securing data transmissions Protection system for intelligent cards Cryptographic application for interbank verification Two-tiered communication security employing asymmetric session keys Method for certifying the origin of at least one item of information stored in the memory of a first electronic device and transmitted to a second electronic device, and system for carrying out the method Portable electronic transaction device and system therefor Method and apparatus for protecting stored and transmitted data from compromise or interception User authorization verification apparatus for computer systems including a central device and a plurality of pocket sized remote units Method and system for providing system security in a remote terminal environment InventorsAssigneeApplicationNo. 052257 filed on 05/20/1987US Classes:705/67, Including authentication380/29, NBS/DES algorithm705/72, Verifying PIN713/170Authentication of an entity and a messageExaminersPrimary: Buczinski, Stephen C.Assistant: Gregory, Bernarr E. Attorney, Agent or FirmForeign Patent References
International ClassH04K 001/00Foreign Application Priority Data1986-05-22 GBAbstractIn order to improve the security of message transmission from a terminal apparatus in an electronic banking or other data communications system a check-sum or MAC is computed from the data within the message in dependence upon a cryptographic key. This MAC is issued as a "challenge" to the user who is also equipped with a separate portable token for computing a "response" in dependence upon a second cryptographic key which is unique to his token. This "response" is then entered into the terminal and appended to the message as its authentication code before transmission. A recipient of the message and authentication code equipped with the same cryptographic keys can therefore check both the contents of the message and the correct identity of the sender by computing an expected authentication code from the received message and comparing it with the code received. | |