DE4205615A1 - Secret PIN number input into electronic system - has card inserted into input carrier that provides storage of number for un-observed reading - Google Patents

Abstract

Protection of electronic data system against access by a mis-used access card, is provided by locating the card in an input unit that protects against observation of the secret PIN number. The input unit (1) has a keyboard (12), display (4) and solar cells (5) form one half of the unit that has a hinged section in which the card (9) is inserted in a sleeve. An inductive loop (10) provides a non-contact way of transferring data between the card and the keyboard. The PIN number is entered through the keyboard and is stored for use. The unit is inserted into the reader of the system. USE/ADVANTAGE - Protects against unauthorised use.

Description

Despite all efforts, electronic data systems against miss To protect common access, it always happens incidents.

In particular, the protection of automatic bank counters and the Entering secret identification data for credit cards greatest importance. Again and again it happens that the input of "Personal Identification Numbers" (PINs) observed and issued is researched to then steal the corresponding card and misused with the observed PIN. The damage caused by this goes to Germany alone Amount of many million DM annually.

The object of the invention is the input of such identifi ornamental numbers (PINs) from an observation in order to to rule out this risk.

According to the invention it is therefore proposed to use a Input device with keyboard the secret identification data (PINs) in an external storage medium so that then when inserting the disk into a reader secret identification data cannot be read in recognizably.  

This makes it possible to go unnoticed anywhere beforehand on the external data carrier these secret "PINs" to enter and save, and thus an observation of the Exclude input.

To later query the "PINs" from the input device too prevent, it is also proposed the secret Identification data only until the external is removed Save data carrier from the input device and / or time limited to delete the entered "PINs". Already at Removing the external data carrier from the recording of the Input device can use the secret "PINs" in the input device be deleted automatically. A temporary storage fulfills the same security function and can also be used with the Deletion of the "PINs" when removing the external data carrier be combined.

The "PINs" entered in the input device can be deleted also automatically when transferring data from the input device to external program providers. Combinations of the Deletion procedures mentioned increase security against unauthorized querying of the "PINs".

It is also recommended that the ge in the external disk stored secret identification data only for a limited time and / or until the data is read out once by a reading device stay saved. This avoids that the stored secret information, e.g. B. theft, such a card can be illegally read and used. especially the double backup, namely temporary storage and a deletion after reading out the data in a reader increase security considerably.  

The method according to the invention is simplified in it, directly the bank card or credit card as external data to use carriers and store the "PINs" on these cards.

In such a case, it is also possible to do more Information, e.g. B. the amount of money to be paid, temporarily in save the cards.

Since also a control of the external data carrier stored data is of great importance proposed by pressing a function key or by Enter a code number stored in the external data carrier Edit data in the input device. That can be in the display or via an interface, e.g. B. on a printer.

Since an inventive, as small and portable as possible device with keyboard, of course, a power supply and a control display requires such an input device little additional effort with additional functions, e.g. B. as Ta calculator, as a clock, as a date display and / or for display a paging and the like.

Since the secret information ("PINs") is only temporarily in the Input device can be saved, such a device can also be used Storage of the chip cards can be used without a data miss need to fear.

Fig. 1 and 2 show schematically an example of an input device according to the Invention. The actual input part ( 1 ) with 30 keys ( 12 ), namely the keypad "0" to "9" and some function keys and a 4-line display ( 4 ) with solar cells ( 5 ) is through a flexible band ( 11 ) with a hinged lid ( 6 ), which has a transparent receptacle ( 7 ) for the chip card ( 9 ), articulated.

The flexible band ( 11 ) contains conductor tracks ( 8 ) which transmit data in the example of a contactless chip card ( 9 ) via an induction loop ( 10 ). Such a chip card with display is described in German patent application P 42 03 748.4. Of course, any other data transmission, for. B. possible via contacts or optoelectronic or capacitive.

In the exemplary embodiment, both the input device ( 1 ) and the chip card receive their operating voltage from solar cells, since the devices can only be operated in the light anyway and the memories usually do not store the data volatile even without voltage (e.g. EEPROM ). It is still recommended to back up the input device with batteries.

., The input device schematically illustrated in Figures 1 and 2, the following functions according to the invention can fulfill:

• 1. Entering and temporarily storing the "PINs" in the chip map
• 1.1 The chip card ( 9 ) is inserted into the transparent holder ( 7 ), a recess ( 13 ) facilitating the insertion and removal of the chip card ( 9 ).
  ( FIGS. 3 to 6 each show the displays of the dis plays ( 2 ) from the chip card and ( 4 ) of the input device ( 1 ).)
• 1.2 The input device ( 1 ) is switched on by pressing the "ON" key ( FIG. 3).
• 1.3 The "PIN" key is pressed to announce to the input device that the incoming input concerns the secret "PINs". The letter "P" appears in the display ( 4 ) ( Fig. 4). In the display ( 2 ) of the chip card, the last booking is still in the first line, e.g. B. SB 241547- 001.00 to read what could mean: S-Bahn ticket on the 24th day at 3 p.m. was debited for a section "47" DM 1.00. The second line of the display ( 2 ) shows the remaining balance of DM 28.90 from August 24, 1991.
• 1.4 With the number keys "0" to "9" the secret "PIN" is now entered, which is not shown on the display ( 4 ) as a number, but e.g. B. as shown in Fig. 5 with 6 "zeros" after the "P". Reading the "PIN" from the display ( 4 ) is impossible.
  Since, according to the invention, the storage of the "PINs" in the input device is limited in time, there is also no risk that the input of the "PINs" will not be deleted accidentally and can subsequently be misused.
• 1.5 As long as "P 000 000" is shown in the display ( 4 ), the secret "PIN" can be transferred to the chip card ( 9 ) by pressing the "ENTER" key. Also in the display ( 2 ) the "PIN" only appears in the form "P 000 000" and cannot be read from the chip card ( Fig. 6).
  In the input device ( 1 ) the memory is deleted after the transfer of the "PIN" and "0" appears in the display ( 4 ), thereby announcing that the device is free for other functions.
  After a certain time (z. B. 10 minutes) the chip card ( 9 ) is not in a reader, z. B. an automatic bank switch and the "PIN" is queried, the "PIN" saved in the chip card ( 9 ) is automatically deleted.
  The same happens according to the invention when the "PIN" is read by a reader. A repeated reading of the "PIN" is excluded.
• 2. Enter and buffer the "PIN" and others Money orders in the chip card
• 2.1 to 2.4 Switch on and "PIN" input as for 1.1 to 1.4.
• 2.5 The buttons "BA" (bank), "CC" (credit card), "CAC" (cash card) and "CASH" (cash payment) allow a selection of different card functions.
  Pressing the "BA" key addresses a "banks" memory area in the chip card, which can also select various bank accounts as a shift register by pressing the "BA" key several times.
  The "CC" key speaks to one or more memory areas "Credit Cards", which can also be switched over by pressing several times, as with the bank accounts.
  Pressed the "CAC" key tells the automatic bank switch that the amount subsequently entered is to be brought to the memory of the "cash card" of the chip card.
  Finally, the "CASH" key tells the "ATM" switch that the amount should be paid out in cash.
  In accordance with the above description, the following should be done:
• 2.5 Press the "CC" key one or more times until the desired credit card number, eg. B. 4406 0000 1234 1234 appears in the display ( 4 ) ( Fig. 7).
• 2.6 Press the "CASH" key if cash payment is required. "CA" appears in the display ( 4 ) ( Fig. 7).
• 2.7 Use the number keys "0" to "9" to select the desired amount. B. Enter DM 150. The display ( 9 ) shows according to FIG. 7.
• 2.8 After checking the display ( 4 ) press the "ENTER" key, and the data entered is temporarily saved in the chip card ( 9 ) and at the same time deleted in the memory of the input device.
  The displays ( 2 ) and ( 4 ) correspond to FIG. 8.
  If a transfer from a bank account to the "CASH-CARD" memory of the chip card ( 9 ) is desired, proceed as follows:
• 2.5 Press the "BA" key one or more times until the bank code number and account number appear in the display ( 4 ): z. B. BA 692 800 5810 176 ( Fig. 9).
• 2.6 Press the "CAC" key, i. H. Credit on the "CASH- CARD ".  
• 2.7 Use the number keys "0" to "9" to select the desired amount. B. Enter DM 150. The display ( 4 ) shows according to FIG. 9.
• 2.8 If the "ENTER" key is pressed after checking the display ( 4 ), the information and data displayed are temporarily stored in the chip card ( 9 ) and deleted in the memory of the input device ( 1 ) (see FIG. 10) .
  The chip card can now be inserted into a reader, which checks the "PIN" and all other key data and, if the information is correct, makes the desired bookings.

Fig. 1 and Fig. 2 show on the keypad with, for example, 30 keys ( 12 ) also other function keys in addition to the otherwise usual calculator keys.

The "EDIT" button calls z. B. the stored data of the chip card from the "CASH-CARD" memory and shows the corresponding bookings. Since only a few lines can be read on the display ( 4 ), the arrow keys "↑" and "↓" can be used to "scroll" the data up or down.

Another example is a function key "DATE" that calls up the date and possibly the time.

These examples of multiple functions can be arbitrarily according to be Existing models are expanded: address and tele Telephone numbers, notes and alarm signals can be combined according to the invention be kidneyed. Also phone calls or other functions are included  Integrable input device. So it is easily possible to over an interface z. B. connect a printer to the ge print out stored data.

The example described is in no way restrictive to to understand.

All known methods for data backup and encryption can be used according to the invention. Likewise the numerous variants for data entry and transmission.

Claims (10)

1. The method and device in particular for entering ge identification data in electronic data systems, characterized in that the secret identification data are entered into an input device with a keyboard and are stored in an external data carrier that can be used in a recording of the input device, and later when Inserting the data carrier into a reader, the secret identification data is read into the reader. 2. The method and device according to claim 1, characterized characterized that the identification data in the input device only until the external data is removed carrier from the recording of the input device and / or can be saved for a limited time. 3. The method and device according to claim 1 or 2, because characterized by that the secret Identification data automatically upon transfer to the external data carrier in the input device can be deleted.   4. The method and device according to claim 1, 2 or 3, because characterized in that the in the ex tern data carrier stored secret identification data only limited in time and / or only up to one time Reading the data remains stored by a reader. 5. The method and device according to claim 4, characterized characterized that on the external disk an ad, e.g. B. on a display, which is reveals whether secret identification data is stored without making the data recognizable. 6. Procedure and setup according to one or more of the above standing claims, characterized net that the external data carrier a rechargeable chip Card is what other general data of the chip Card stored contains, so that later after insertion the chip card in the reader secret and general data removed and other data from the reader of the chip Card can be fed. 7. The method and device according to claim 6, characterized characterized that the rechargeable chip card other data, e.g. B. amounts of money are posted whose Height previously entered in the input device and the a Chip-Kar bank account or credit card account ten owner in a known manner. 8. Procedure and setup according to one or more of the above standing claims, characterized net that the input device is in the external disk stored data by pressing a function key and / or edited by entering a code number.   9. Procedure and setup according to one or more of the above standing claims, characterized net that the input device using the function conditional components, such as keyboard, display and power supply with other functions, e.g. B. as a calculator, Clock, date display and / or paging and the like Is provided. 10. Method and setup according to one or more of the above standing claims, characterized net that the inclusion of the input device for storage of the external data carrier is formed.