Patent EA-004422-B1 (EA)
Title: Method and system for embedded synchronous random disposable code identification
Inventor: KEECH WINSTON DONALD
IPC: G06Q20/00
Filed: 2001-09-07
Abstract: 1. A coded identification system, the system comprising an electronic computer, a specific electronic communications device that is operable to be in communication with the electronic computer, and at least one electronic communications device that is operable to be communication with the electronic computer, wherein the electronic computer includes data relating to the specific electronic communications device, including a permanent identification code, a mask code and an identification code enabling electronic communication between the electronic computer and the specific electronic communications device, and wherein the permanent identification code is input to the at least one electronic communications device and transmitted to the electronic computer, the electronic computer generates a pseudo-random string and transmits this to the specific electronic communications device, the mask code is applied to the pseudo-random string so as to generate a volatile identification code in accordance with predetermined rules, the volatile identification code is transmitted back to the electronic computer by the specific electronic communications device or the at least one electronic communications device, the electronic computer checks the volatile identification code transmitted thereto against a volatile identification code obtained by applying the mask code to the pseudo-random string in accordance with the predetermined rules, and in which a positive identification is made when the volatile identification codes are found to match by the electronic computer; wherein: i) the pseudo-random string comprises a first linear array of characters, each character having a given numerical position in the first array (first, second, third etc.); ii) the mask code comprises a second linear array of numbers, each number having a given numerical position in the second array (first, second, third etc.); and iii) the predetermined rules for applying the mask code to the pseudo-random string so as to generate the volatile identification code are sequentially to select numerical positions in the first array on the basis of the numbers in the second array, taken in positional order, and to return the characters thereby selected from the first array in sequence so as to form a third linear array, this third linear array forming the volatile identification code. 2. A system as claimed in claim 1, wherein the specific electronic communications device and the at least one electronic communications device are the same device. 3. A system as claimed in claim 1, wherein the specific electronic communications device and the at least one electronic communications device are separate devices. 4. A system as claimed in any preceding claim, wherein the specific communications device is a mobile telephone, a pager or a personal digital assistant. 5. A system as claimed in claim 3 or claim 4 depending from claim 3, wherein the at least one electronic communications device is an EFTPOS terminal or the like. 6. A system as claimed in any preceding claim, wherein the permanent identification code is supplied in the form of a card bearing human- and/or machine-readable indicia. 7. A method for identifying a specific electronic communications device or user thereof to an electronic computer having stored therein data relating to the specific electronic communications device or user thereof, including a permanent identification code, a mask code and an identification code enabling communication between the electronic computer and the specific electronic communications device, wherein the permanent identification code is input to at least one electronic communications device and transmitted thereby to the electronic computer, the electronic computer associates the permanent identification code with the identification code enabling communication therebetween and the specific electronic communications device and generates a pseudo-random string before transmitting this to the specific electronic communications device, the mask code is applied to the pseudo-random string in accordance with predetermined rules so as to generate a volatile identification code, the volatile identification code is input to the specific electronic communications device or the at least one electronic communications device and transmitted to the electronic computer where it is compared with a volatile identification code generated therein by applying the mask code to the pseudo-random string, and a positive identification is made when the volatile identification codes match; wherein: i) the pseudo-random string comprises a first linear array of characters, each character having a given numerical position in the first array (first, second, third etc.); ii) the mask code comprises a second linear array of numbers, each number having a given numerical position in the second array (first, second, third etc.); and iii) the predetermined rules for applying the mask code to the pseudo-random string so as to generate the volatile identification code are sequentially to select numerical positions in the first array on the basis of the numbers in the second array, taken in positional order, and to return the characters thereby selected from the first array in sequence so as to form a third linear array, this third linear array forming the volatile identification code. 8. A method according to claim 7, wherein the pseudo-random string contains at least one character that is representative of some condition of the data relating to the person. 9. A method according to claim 7 or 8, wherein the specific electronic communications device and the at least one electronic communications device are the same device. 10. A method according to claim 7 or 8, wherein the specific electronic communications device and the at least one electronic communications device are separate devices. 11. A method according to claim 9 or 10, wherein the specific communications device is a mobile telephone, a pager or a personal digital assistant. 12. A method according to claim 10 or claim 11 depending from claim 10, wherein the at least one electronic communications device is an EFTPOS terminal or the like. 13. An identity verification secure transaction system comprising: i) a host computer for storing a user code associated with a user, for supplying a pseudo-random security string for a transaction, wherein said host computer determines a one time transaction code by applying said user code to said pseudorandom security string; and ii) at least one electronic device in electronic communication with said host computer for administering said transaction by receiving and displaying said pseudorandom security string and for receiving a user transaction input code, wherein said user transaction input code is determined by applying said user code to said pseudorandom security string displayed on said at least one electronic device and said user transaction input code is sent to said host computer; wherein: iii) said host computer verifies that said user input code matches said one time transaction code, iv) a first linear array of characters, each character having a given numerical position in the first array (first, second, third etc.) v) a user code comprises a second linear array of numbers, each number having a given numerical position in the second array (first, second, third etc.); and vi) a user code is used to said pseudo-random security string to generate a one time transaction code and a user transaction input code sequentially selecting numerical positions in the first array on the basis of the numbers in the second array, taken in positional order, and to return the characters thereby selected from the first array in sequence so as to form a third linear array, this third linear array forming the a one time transaction code and the user transaction input code a user code is used to said pseudo-random security string to form a user transaction input code. 14. The system of claim 13, wherein said at least one electronic device is an Electronic Funds Transfer Point of Sale (EFT/POS) device. 15. The system of claim 13, wherein said at least one electronic device is comprised of an electronic Funds Transfer Point of Sale (EFT/POS) device for administering said transaction and receiving said user transaction input code and a wireless device associated with said user for receiving and displaying said pseudorandom security string. 16. The system of claim 15, where said one time transaction code is received and displayed by said wireless device instead of said pseudo-random security string. 17. The system of claim 13, wherein said at least one electronic device is a wireless device associated with said user. 18. The system of claim 17, wherein said one time transaction code is sent to said wireless device instead of said pseudo-random security string. 19. The system of claim 13, wherein said at least one electronic device is comprised of: i) a user computer, in electronic communication with said host computer, for receiving and displaying said pseudo-random security string and receiving said user transaction input code; and ii) a merchant computer, in electronic communication with said user computer and said host computer, for administering said transaction, wherein one of said at least one electronic device relays said user transaction input code to said host computer for user identity verification. 20. The system of claim 19, wherein said user computer and said merchant computer communicate via the Internet. 21. The system of claim 19 or 20, wherein said one time transaction code is received and displayed by said user computer instead of said pseudo-random security string. 22. The system of claim 13, wherein said at least one electronic device is comprised of: i) a wireless device associated with said user for receiving and displaying said pseudo-random security string ii) a user computer, in electronic communicati