Patent ID: 6616035
Filing Date: 2003-09-09
Classification: G06Q,G07F

Abstract:
A method of identification and authentication of a holder of a mobile electronic transaction device in an electronic transaction process between a transaction service provider and a transaction terminal in communication via a computer network, said mobile transaction device comprising transceiver means for transmitting information to and receiving information from said transaction terminal, data input means, data processing means, data storage means having information stored therein including an externally accessible device identity, a non-retrievable reference user identification, and including a non-retrievable secret key to be processed by said processing means and used in communication with the service provider by said transceiver means over said network via the transaction terminal for validating a transaction, and means supplying electric energy to the device, said method comprising the following steps:transmitting the device identity to the transaction terminal; transmitting a challenge transaction identifier to the device; said holder entering a user identification input using said input means; said processing means determining an authenticity of said identification input by comparison with said reference user identification; and only on said identification input being determined as authentic: said processing means performing a cryptographic transformation of the transaction identifier using said secret key; and transmitting a response result of said cryptographic transformation to the service provider via said transaction terminal for validating said transaction.