Abstract:
A method and apparatus to secure online transactions over the phone comprising a smart card transmitting an identification sequence to an IVR server in the form of a modulated signal, a card reader plugged into the telephone line, and an IVR applet demodulating the identification sequence. The card reader is characterized by the absence of processing means.

Description:
CROSS REFERENCE TO RELATED APPLICATIONS  
       [0001]    This application claims the benefit of the following filing date of the provisional patents No. 60/423,399, and Ser. No. 60/423,447 filed on Nov. 4, 2002. 
     
    
     
       TECHNICAL FIELD  
         [0002]    The present invention relates to a method to secure online transactions over the phone, and the apparatus implementing the method.  
         BACKGROUND OF THE INVENTION  
         [0003]    Integrated circuit cards, commonly referred to as smart cards, are widely used in stores to secure electronic payments.  
           [0004]    Smart cards have not been adopted by the online market, although they provide the best security to conduct electronic commerce. The main reasons are the high cost of the card reader and the complexity of the system for most people. Not only a card but also a reader must be provided to the millions of potential end-users who comprise this market base.  
           [0005]    The object of the present invention is to provide an inexpensive and easy to use smart card system to secure online transactions over the phone. The smart card authenticates the user when managing bank accounts, making payments, or eventually voting online, for example.  
         SUMMARY OF THE INVENTION  
         [0006]    The above object has been achieved by a smart card transmitting an identification sequence to an IVR (Interactive Voice Response) server by means of a card reader plugged into the telephone line. The reader is actually a simple and inexpensive connector without processing means. The smart card remains compliant with the ISO 7816 standards and can be used in the existing card readers.  
       
    
    
     BRIEF DESCRIPTION OF THE DRAWINGS  
       [0007]    [0007]FIG. 1 illustrates the method according to the present invention.  
         [0008]    [0008]FIG. 2 is a schematic of the reader powered by the telephone line. 
     
    
     DETAILED DESCRIPTION  
       [0009]    The method, as detailed in FIG. 1, carries out the user authentication over the phone. The apparatus comprises a smart card with a modulation output, a card reader plugged into the telephone line, and an IVR applet. A telephone handset is also plugged on the telephone line to establish the communication with the IVR server. The user inserts his card in the reader and enters his PIN on the telephone keypad.  
         [0010]    When activated in the card reader, the smart card transmits an identification sequence to the IVR in the form of a modulated signal, which is demodulated by the IVR applet. The identification sequence comprises an 8-byte card number and an 8-byte random number valid only once. The card number is unique and identifies the card issuer, application version and user account. The random number is a session key (Ki) which is a function of the previous one (Ki−1) emitted by the card such as: Ki=G(Ki−1), G is a one-way function also known by the authentication server.  
         [0011]    The session key (Ki) is used by the IVR applet to encrypt the PIN entered by the user, using the DES algorithm for instance. The encryption code is transmitted to the authentication server along with the card number, allowing the server to retrieve the previous session key (Ki−1) and the PIN stored in the authentication server database.  
         [0012]    The authentication server deduces from (Ki−1) the session key used by the card, and decrypts the encryption code to retrieve the user PIN. The authentication is valid only if the decrypted PIN and the PIN stored in the database are identical, which means the IVR and the authentication server have used the same session key (Ki) to encrypt the PIN and decrypt the encryption code. If this is the case, the authentication server replaces (Ki−1) by (Ki) in the database. The session key (Ki) cannot be reused, even though the session key (Ki) has not been transmitted to the authentication server.  
         [0013]    In a preferred embodiment, the smart card comprises a secure memory device with a modulation output (Mod) using a FSK (Frequency Shift Keying) modulation, for instance. The modulation frequency is in the range of 300 Hz to 3 kHz compatible with the telephone network. The modulation output (Mod) is activated only when the device is powered by the secondary power pad (Vbb) and the reset input (Rst) is pulled down.  
         [0014]    When the smart card is used in a standard ISO 7816 reader, the secure memory device is powered by the main power pad (Vcc) disabling the modulation output (Mod). The ISO reader provides the clock (Scl) and communicates with the device using a bidirectional terminal (Sda).  
         [0015]    The secure memory device is connected to the ISO contacts as followed:  
                                                       C1 = Vcc   C5 = Gnd           C2 = Rst   C6 = Mod           C3 = Scl   C7 = Sda           C4 = Vbb   C8 = Gnd                      
 
         [0016]    The modulated signal is transmitted to the IVR via a card reader, as detailed in FIG. 2, plugged into the telephone line (Tip/Ring). Only four ISO contacts (C 2 , C 6 , C 4 , and C 8 ) are required to activate the smart card.  
         [0017]    When off-hook, the telephone line provides through the rectifier bridge B 1  approximately a +10 V DC voltage. The Zener diode Z 1  regulates the DC voltage between +3 V and +5 V to power (Vcc) the card and the resistor R 1  limits the current drained from the telephone line. The transistor T 1  and the resistor R 2  realize a voltage/current conversion between the device and the telephone line. When pressed, the switch S 1  pulls down the reset input (Rst) activating the modulation output (Mod).  
         [0018]    The reader could be further integrated into the telephone handset.