Michael P O'Malley

US Patent:

55771211, Nov 19, 1996

Filed:

Jun 9, 1994

Appl. No.:

8/255612

Inventors:

Terry L. Davis - Scottsdale AZ
James A. Hart - Radnor PA
Vincent A. Imperia - Tempe AZ
Michael Love - Wilmington DE
Michael F. O'Malley - Glenside PA
James F. Russell - Hockessin DE
John W. Sears - Peoria AZ
Philip H. Trice - Phoenix AZ

Assignee:

Electronic Payment Services, Inc. - Wilmington DE

International Classification:

H04L 900

US Classification:

380 24

Abstract:

A transaction system and method of conducting a transaction between in integrated circuit (IC) card and a transaction terminal which includes a security module comprises establishing communication between the terminal and the IC card. Separate session keys are generated in the IC card using data stored in the IC card and a code associated with the particular IC card and the security module using data stored in the security module, and the code associated with the particular IC card. The session key generated by the IC card is used to encrypt data using an encryption algorithm to obtain a first result and the session key generated by the security module is used to encrypt the same data using the same encryption algorithm to obtain a second result. The first and second results are compared to enable the terminal to conduct the transaction only if the comparison establishes that the first result and the second result are identical. In one embodiment, the invention further comprises generating a transaction signature by the IC card using transaction data and data stored in the IC card, generating a transaction signature by the security module using transaction data and data stored in the security module and storing the transaction signatures generated by the IC card and the security module for creating an audit trail for the transaction.

US Patent:

55598870, Sep 24, 1996

Filed:

Sep 30, 1994

Appl. No.:

8/316308

Inventors:

Terry L. Davis - Scottsdale AZ
James A. Hart - Radnor PA
Michael F. O'Malley - Glenside PA
James F. Russell - Hockessin DE
John W. Sears - Peoria AZ
Philip H. Trice - Phoenix AZ

Assignee:

Electronic Payment Service - Wilmington DE

International Classification:

H04K 100

US Classification:

380 24

Abstract:

A first transfer device receives a first transaction signal from a second transfer device and provides a first certification signal. The second transfer device receives the first certification signal and encrypts it to provide a first encrypted signal. The first transfer device receives the first encrypted signal and encrypts the first certification signal to provide a second encrypted signal. A transaction is verified in accordance with the first and second encrypted signals and stored value is transferred between the first and second transfer devices in accordance with the verifying. A third transfer device, separate from the first and second transfer devices, receives a second transfer signal from a selected one of the first and second transfer devices and provides a second certification signal. The selected transfer device receives the second certification signal and encrypts it to provide a third encrypted signal. The third transfer device receives the third encrypted signal and encrypts the second certification signal to produce a fourth encrypted signal.

US Patent:

58922113, Apr 6, 1999

Filed:

May 1, 1997

Appl. No.:

8/848940

Inventors:

Terry L. Davis - Scottsdale AZ
James A. Hart - Radnor PA
Vincent A. Imperia - Tempe AZ
Michael Love - Wilmington DE
Michael F. O'Malley - Glenside PA
James F. Russell - Hockessin DE
John W. Sears - Peoria AZ
Philip H. Trice - Phoenix AZ

Assignee:

Electronic Payment Services, Inc. - Wilmington DE

International Classification:

G06F 1530
G06K 500

US Classification:

235380

Abstract:

A transaction system having a first transportable integrated circuit (IC) device, a terminal, and a security device is disclosed. The first IC device includes a processor, memory, data stored in the memory, and an operating program stored in the memory. The terminal includes a reader/writer device, a processor, memory, and an operating program stored in the memory. The reader/writer device establishes communication with the first IC device whereby the processor of the first IC device is in communication with the terminal processor. The security device includes a processor, memory, data stored in the memory and an operating program stored in the memory. The security device communicates with the terminal so that the processor of the security device communicates with the terminal processor. Upon establishing communication with the first IC device, the terminal processor initiates and controls a series of operations by the security device processor utilizing the data and the operating program stored in the security device memory and data received from the first IC device for verification by the security device of the validity of the first IC device.