Patent EA-003949-B1 (EA)
Title: A method for the accomplishment secure transaction for electronic bankbook
IPC: G07F7/10
Filed: 1999-08-23
Abstract: 1. A method for implementing secure transaction for electronic deposit (purse), comprising: combining a grey lock mark into a electronic deposit (purse), and making the grey lock mark as one of attribute parameters of the electronic deposit (purse); while setting a grey lock mark on a IC card to lock grey the IC card, recording a first locking card source by the IC card simultaneously; while debiting, judging the locking card source, and merging debit operation and unlocking grey operation into one step operation on a IC card, after a successful debiting, resetting the grey lock mark to unlock grey the IC card automatically. 2. The method according to claim 1, further comprising: storing an encryption key, implementing debit and compulsorily unlock grey, in a computer to make supplementary debit and compulsorily unlocking grey operation for an locked grey IC card on an on-line card terminal with on-line mode. 3. The method according to claim 1, further comprising: inserting a IC card to a card terminal; authenticating both the IC card and the card terminal mutually; locking grey the IC card by the card terminal; consumption; after ending consumption transaction, debiting from an electronic deposit (purse) on the IC card and unlocking grey the IC card by the card terminal. 4. The method according to claim 3, wherein said locking grey the IC card comprises: creating an first authentication code by the IC card according to the first locking card source and transferring necessary parameters of creating the first locking card source to the card terminal simultaneously; with same mechanism as the IC card creating a second locking card source by the card terminal, and with the second locking card source creating a second authentication code and sending the second authentication code to the IC card by card terminal; comparing by the IC card whether the first authentication code and the second authentication code are identical, if it is, locking grey the IC card and sending back a grey lock characterized code, created with the first locking card source and corresponding data, to the card terminal; wherein said debiting from an electronic deposit (purse) on the IC card and unlocking grey the IC card by the card terminal comprises: creating a third authentication code by the card terminal according to the second locking card source and necessary parameters for debiting, and sending the third authentication code and corresponding parameters together to the IC card; creating a fourth authentication code by the IC card with the first locking card source, corresponding parameters and same mechanism; comparing by the IC card whether the third authentication code and the fourth authentication code are identical, if it is, debiting from an electronic deposit on the IC card and resetting the grey lock mark simultaneously after debiting successfully. 5. The method according to claim 4, further comprising: storing the third authentication code needed for debiting, amount of money of an escape card and the grey lock characterized code together as part of a grey record, and sending up to central computer by the card terminal; for an IC card with an incomplete ending transaction and without debiting and unlocking last time, authenticating the grey lock characterized code by card terminal next time, which has kept the said grey record, to confirm that the first locking card source of the IC card is same as the second locking card source for calculating the third authentication code in said grey record; after passing this confirmation, executing debit and unlocking grey operation. 6. The method according to claim 1, wherein said first locking card source is a procedure encryption key (SESPK), correlating with at least a pseudo random number (ICC) created temporarily by the IC card. 7. The method according to claim 6, wherein said procedure encryption key (SESPK) = 3DES (DPK, DATA), where DPK is consumption encryption key of electronic deposit (purse), getting from consumption main encryption key (MPK) based on discrete the application sequence number of the IC card; and DATA is a specific parameter including a temporarily made pseudo random number (ICC) of said IC card, a transaction sequence number of electronic deposit (purse) (CTC), last two bytes of card terminal transaction sequence number (TTC). 8. The method according to claim 6 or 7, wherein when locking grey the IC card, comprising: sending a card terminal transaction sequence number (TTC) from the card terminal to the IC card; getting a pseudo random number (ICC) and an electronic deposit (purse) transaction sequence number (CTC) of the IC card; creating a first procedure encryption key (SESPK) by the IC card and recording corresponding parameters of this creating and also creating and recording a grey lock characterized code of this time at the same time; sending the pseudo random number (ICC), the electronic deposit (purse) transaction sequence number (CTC) from the IC card to the card terminal, which keeping a consumption main encryption key (MPK) in a security authentication module (PSAM); deriving the electronic deposit (purse) DPK on the IC card with a application sequence number of the IC card by the security authentication module (PSAM); and, creating a second procedure encryption key (SESPK) by the card terminal using the pseudo random number (ICC), the electronic deposit (purse) transaction sequence number (CTC), the card terminal transaction sequence number (TTC) and same mechanism as the IC card. when debiting, comprising: calculating a first authentication code by the card terminal with the second procedure encryption key (SESPK), debit amount, operation date and time etc., and sending the first authentication code, the second procedure encryption key (SESPK), debit amount, operation date and time etc., to the IC card; calculating a second authentication code by the IC card with the first procedure encryption key (SESPK), same data and algorithm; comparing by the IC card whether the first authentication code and the second authentication code are identical, if it is, then debiting and unlocking, if it is not, then without doing debiting and unlocking, but incrementing a internal error counter and returning an error code; locking the IC card application internally to prevent malice trial, when the internal error counter at a certain number. 9. The method according to claim 1, wherein when merging a grey lock mark into a electronic deposit to form a special refueling electronic deposit, except conventional functions: read balance, load, unload, consumption/withdrawal, changing limit of overdraw account etc. adding functions: refueling transaction, local unlocking grey transaction and on-line unlocking grey transaction. 10. The method according to claim 9, wherein except conventional state of the refueling electronic deposit (purse): idle, load, consumption/withdrawal, unload, updating, also existing state of pre-refueling, grey lock and unlocked grey; except conventional command, adding command of INITIALIZE FOR REFUEL, LOCK FOR REFUEL, DEBIT FOR REFUEL, INITIALIZE FOR UNLOCK, DEBIT FOR UNLOCK and GET GREY STATUS in the command set, the INITIALIZE FOR REFUEL command used for refueling consumption transaction initialization, the LOCK FOR REFUEL command used for making grey lock to refueling electronic deposit (purse), the DEBIT FOR REFUEL command used for local refueling consumption and unlocking grey simultaneously, the INITIALIZE FOR UNLOCK command used for on-line unlocking and consumption transaction initialization, the DEBIT FOR UNLOCK command used for on-line unlocking grey transaction and supplementary debiting refueling consumption simultaneously, the GET GREY STATUS command used for reading grey lock state and launching local unlocking grey transaction.