FR2814577A1 - Encryption/identification message transfer process having two systems with public/secret whole numbers exchanging data using random drawn numbers/mathematical functions and reciprocal mathematics procedures. - Google Patents

Abstract

The encryption message transfer process has two systems sharing a public whole number and a secret whole number. The transfer functions are of hardly reversible type. To transfer an encrypted message a number of data exchanges occur between the two users drawing random number and using mathematical functions, exchanging messages using a reciprocal mathematics procedure. The encryption message transfer method between two media sharing a secret number and hardly reversible functions. Where the first medium exchanges messages with the second, the first medium draws a random number and sends a mathematical function of the number. In response the second medium draws a random number and sends a mathematical function of the number to the first user. The first user calculates the reciprocal prime and sends it back to the second user. The second user calculates the reciprocal of the prime, and calculates the message. Thus the message has been exchanged confidentially without the transfer of a secret word.

Description

<Desc / Clms Page number 1>

Technical field: The concept of the electronic wallet as imagined in the mid-1970s consists of storing money in digital form in an electronic medium, preferably secure and that this money can be exchanged from person to person with the same facility as the and that this money can be exchanged from person to person if not more P sque the electronic roll does not currency (cash, banknotes, coins) if not more since the electronic money does not involve any exchange problem.

particuliers, notamment : les banques qui veulent imposer leur intermédiaire dans les échanges de monnaie électronique et engranger des commissions au passage, instaurant une dualité entre commerçants (récepteurs de monnaie) et consommateurs-payeurs - les services secrets, fiscaux et les services de lutte contre la criminalité qui veulent connaître l'origine des fonds afin de lutter contre le blanchiment d'argent sale ou l'évasion fiscale Néanmoins, ces considérations politiques ne doivent pas influer sur un système technique tel que l'argent électronique qui n'est qu'un outil. So that the technical characteristics of electronic money must be as close as possible to the properties of cash, in particular: the non-traceability of electronic money, one cannot know in oneself from whom comes such amount of money put back in cash or go up to the previous owners of the sum (money has no smell) - the ease of transfer which is done from hand to hand, without limitation, without discrimination, without intermediary dz neutrality of money) These 2 simple concepts have been more or less misguided and have changed due to interests

individuals, in particular: banks which want to impose their intermediary in the exchange of electronic money and earn commissions on the way, establishing a duality between traders (money receivers) and consumer payers - the secret services, tax and anti-counter services Crime who want to know the origin of funds in order to fight against money laundering or tax evasion Nevertheless, these political considerations must not influence a technical system such as electronic money which is only a tool.

Throughout the rest of this document, we will mean by electronic money}} the original concept of non-traceable and neutral electronic money.

To meet the technical requirement of non-traceability, the electronic wallet system must be sufficiently secure because security must be based entirely on the reliability of the system and on the legislative arsenal to suppress counterfeiting or the creation of false change. Indeed, due to the non-traceability of this currency, it is illusory to go back to the beneficiary counterfeiters.

From a practical point of view, suppressing and prosecuting counterfeiters is in any case illusory in the case of automated distributors of goods or money, indeed, the transactions leave no trace.

Repression also does not make it possible to repair the prejudice of the victims.

The reliability of the envisaged electronic money system is based on the use of

<Desc / Clms Page number 2>

composants électroniques sûrs tels que la carte à microprocesseurs, couplé à des procédés cryptographiques d'identification avancés tels que vus plus loin dans ce document.

secure electronic components such as a microprocessor card, coupled with advanced cryptographic identification methods as seen later in this document.

To support the requirement of neutrality, the system will have to support the exchanges of carrier to carrier in a secure way, that will have to materialize by a finished product holding in the hand of a carrier being able to him alone to ensure transfers from carrier to carrier.

However, insofar as each holder is deemed to have an electronic wallet, and since the support for electronic money will very often be a microprocessor card in credit card format, the holders must have a box supplying the chip, reading it and a connector for the exchanges with the chip of the other carrier being in the case containing the chip card of the other carrier.

The main characteristic that this box must have is to be able to connect to the same box or to a homologous box (having common characteristics) so that the transaction can be carried out.

The box is independent of the identification protocol between the 2 chips. in this way, if the chip evolves to increase security, the system will continue to operate without modification of the housing. Indeed, a system will convert according to the messages sent by the chip into a message intended for the outside or into a message intended to be sent to the other chip.

STATE OF THE PRIOR ART: There are autonomous chip reader boxes but they are not connected to the outside.

There are also chip readers that can be connected to a microcomputer, but all dialogue with the chip must be managed by software on this computer. this software does not manage the dialogue with 2 chips. And it is this software which directs the exchanges, it will have to depend on the application, the software does not dialogue with 2 chips at the same time. And the systems are not reciprocal.

There is no symmetrical housing to ensure such a card-to-card transaction.

The hash functions are nothing new, but they have never been integrated into an electronic wallet payment system.

Disclosure of the invention: Box (Fig 1-element 1) comprising a slot (Fig 1-element 2) into which a microprocessor card can be inserted in a vacuum (Fig 1 - element 6) inside the box .

alimentée par une plusieurs piles (Fig 1-élément 4) se trouvant dans un compartiment à pile fermé par un couvercle (Fig 1-élément 5). The chip's microprocessor is read by a card reader-coupler (Fig 1-element 7)

powered by several batteries (Fig 1-element 4) located in a battery compartment closed by a cover (Fig 1-element 5).

The card reader-coupler (Fig 1-element 7) will be connected to a distribution and transformation circuit (Fig 1-element 8) of the messages between the chip and the external connector (Fig 1

<Desc / Clms Page number 3>

- élément 3). Le connecteur extérieur permet de connecter le boîtier à un boîtier homologue et d'opérer des dialogues entre les 2 puces des cartes à puce insérées.

- element 3). The external connector makes it possible to connect the box to a homologous box and to operate dialogs between the 2 chips of the inserted smart cards.

Another circuit (Fig 1-element 9) inside the housing will serve as an interface between the keyboard (Fig 1-element 10) on the face of the housing and the display (Fig 1-element 11) According to a variant, the device can be provided with a calculator integrated into the box using the keyboard (Fig 1-element 10) and the display (Fig 1-element 11) According to another variant, the device presented will be mainly used as an electronic wallet, it may receive one or more currencies. As people are familiar with counting the value of things in a single currency, you need to have a currency conversion system to make the system the most convenient to use, that is, fast, efficient, avoiding risk errors.

This requirement has increased with the introduction of the euro, which forces users to express the value of things in a currency other than the one they are used to.

For this reason, the integration of a currency converter in an electronic purse box makes it possible to solve the problems of currency conversion for the users.

According to this variant, the device can be provided with a currency converter integrated into the box using the keyboard (Fig 1-element 10) and the display (Fig 1-element 11) According to another variant, in the system envisaged, the electronic money is stored on a microprocessor card called an electronic purse. This microprocessor card, most often small, can be read by a small box as described above.

When 2 of its boxes are connected to each other, electronic money can be transferred from one microprocessor card to another.

However. to transfer money from an electronic wallet holder, you need 2 boxes, for example, each microprocessor card holder acting as an electronic wallet has its own.

The connectors of each must be able to plug into each other, but the connection sockets used frequently are not symmetrical: a male connector very often connects to a female connector.

So to be able to connect 2 electronic wallet reading boxes to each other, these connectors must be interconnectable. For this, very often, 2 connectors will be necessary to connect the boxes to each other (a male, a female) or to simultaneously connect the box to a microcomputer and to another box.

According to this variant, the reader unit described is characterized by the presence of two connectors (Figure 2, elements 3 and 12).

According to another variant, when the 2 connectors are complementary, one may, the other

<Desc / Clms Page number 4>

femelle, les 2 boîtiers peuvent se connecter entre eux et permettre ainsi l'échange monétaire. Selon une autre variante, il est envisagé un système pour lequel l'argent électronique est stocké sur une carte à microprocesseur appelé porte monnaie électronique. Cette carte à microprocesseur, le plus souvent de petite taille pourra être lue par le petit boîtier décrit précédemment.

female, the 2 boxes can connect to each other and thus allow monetary exchange. According to another variant, a system is envisaged for which the electronic money is stored on a microprocessor card called an electronic purse. This microprocessor card, most often small, can be read by the small box described above.

When 2 of its boxes are connected to each other, electronic money can be transferred from one microprocessor card to another.

However, to transfer money from an electronic wallet holder, you need 2 boxes, for example, each holder has his own. However, the case, although small in one of the embodiments provided, remains bulky and of a size greater than the microprocessor card inserted therein, people used to walk only with cards of small sizes.

In these conditions, to avoid that the holder of an electronic purse is forced to walk around with his case while he will only use it occasionally during a purchase. Some people have to use electronic wallets more often. Thus traders are led to receive more payments than they make. To avoid that consumers are forced to have a box to use their electronic wallet, the merchant can be equipped with a box equipped with 2 slots that can insert the microprocessor card of the customer and that of the merchant.

More generally, this box can be acquired by any heavy user of the electronic purse.

According to this variant, the housing includes two slots for inserting microprocessor cards (Figure 3, elements 2 and 13).

According to other variants, the connector can be either a 9-pin serial socket, or a 9-pin female serial socket, or a connector of the Universal Serial Bus (USB) type. Indeed, this type of serial socket is frequently used to connect a memory card reader to a computer because personal computers have a serial port and because the read / write card with asynchronous microprocessor at 9600 baud can be done easily at using the computer's serial output.

By providing the housing with a female, male or USB serial socket, the connection to a microcomputer can be made using a standard cable. In another variant, the connection between 2 boxes as described above can cause problems. due to the necessary proximity of the boxes, it may be necessary to make remote exchanges to reduce the cabling or preserve the security of one of the protagonists of the exchange of electronic money.

<Desc / Clms Page number 5>

En effet, du fait de sa petite taille, un voleur pourrait subtiliser le boîtier lecteur de portemonnaie électronique et la carte à microprocesseur qui va avec.

Indeed, because of its small size, a thief could steal the electronic wallet reader box and the microprocessor card that goes with it.

To speed up exchanges between boxes and avoid the problems of false contact, wear, adapter or non-interoperability between connectors, one of the connectors can be based on a device for the capture and emission of electromagnetic radiation.

According to another variant, in order to identify in a secure manner the legitimate owner of a property as precious as an electronic purse as envisaged in the system described, it is possible to integrate on the memory card reader unit a fingerprint sensor.

Fingerprint detectors exist, but for miniaturization and power supply problems, it is easier to integrate it into the card reader unit than directly on the microprocessor card.

In addition, this reduces the costs of the microprocessor card since only sensitive readers (such as at merchants) are to be equipped with this device as a priority. Some people may be more sensitive than others to security, for example because their wallets are more stocked, and are not content with a simple 4-digit secret code that prying eyes can spy on to lock their wallets (or even no code at all) but may require a more key safe.

In this variant, the microprocessor card reader unit includes a fingerprint detector (Fig 4, element 14) sending the characteristics of the fingerprint to a circuit (Fig 4, element 15) transcoding these characteristics into information recognized by the microprocessor card chip to identify the owner and activate owner rights on the microprocessor card chip.

Description of Figure 4: Element 1: Housing element 2: a slot in which a microprocessor card can be inserted in the vacuum (element 6) element 3 and 12: external connector allows the housing to be connected to the same housing and d '' operate dialogs between the 2 chips of the inserted smart cards. element 4: one or more supply batteries element 5: battery compartment closed by a cover element 6: empty in which a microprocessor card is inserted element 7: reader-coupler of microprocessor card element 8: distribution circuit and transformation of messages between the chip and the external connector element 9: circuit inside the case will serve as interface between the keyboard (element 10) on the

<Desc / Clms Page number 6>

face du boîtier et l'affichage (élément 11) élément 10: clavier sur la face du boîtier élément l11: affichage du boîtier élément 12: autre connecteur extérieur

élément 13 éventuelle fente supplémentaire pour insérer une carte à microprocesseur élément 14: dispositif de reconnaissance de caractéristiques d'empreinte digitale élément 15: circuit de transformation de caractéristiques d'empreinte digitale en information reconnaissable pour la puce de la carte à microprocesseur.

face of the housing and the display (element 11) element 10: keyboard on the face of the housing element l11: display of the housing element 12: other external connector

element 13 possible additional slot for inserting a microprocessor card element 14: device for recognizing fingerprint characteristics element 15: circuit for transforming fingerprint characteristics into recognizable information for the chip of the microprocessor card.

According to another variant, a device for calculating a signature using a hash function of a message can be integrated into the housing.

Indeed, electronic wallet systems have been designed to exchange money represented in electronic form.

The problem is that the payment is only part of the commercial transaction which comprises several stages, typically: choice of product or service discussion and information on prices, conditions of execution of the product, after sales service bargaining of prices - signature of a contract after consent of the parties first payment for the supply of goods or performance of the service, possible subsequent payments - guarantee. after-sales service In the case of distance transactions (such as on the Internet or by correspondence), the different stages of this commercial transaction process can be particularly divided in time and space.

As can be seen, payment is only a small part of the service and is not the main one. It is the merchant's main problem to be paid, but for the consumer to trust, he must be able to have a record of the transaction, the amount and the terms of the contract.

Payment must of course be irrevocable, but the consideration must be clearly indicated to the consumer.

In the case of distance selling, the parties, in particular consumers, have no proof of the content of the purchases made or the terms of this purchase, sometimes the amount of payment taken from the bank account (for example payment by bank card ) was not

<Desc / Clms Page number 7>

celui convenu lors de la transaction.

the one agreed during the transaction.

Consequently, proof of the signing of the contract and of the elements making it up must be presented.

In French civil law, proof can be established by presumption, testimony or signature. The signature being understood to be the handwritten signature or the electronic signature according to certain technical conditions making it possible to ensure the reliability of the system.

Other countries integrate electronic signature as an admissible method of proof of contracts.

The object of the present invention is to examine an electronic means of establishing this proof in electronic form and to integrate it or not into the electronic payment system in order to give a global response.

To this end, the exchange between the 2 electronic purses may not be satisfied with the amount and the currency but with the characteristics of the transaction, such as the description of goods and services, the delivery time, the clauses of the contract, etc ...

As this information can be long and clutter the memory of a microprocessor card whose memory is often quite limited in size, only an identifier characteristic of the contract can be stored so as not to clutter the memory of this card.

For example, this identifier can be obtained using a hash function such as SHA-1 or MD5.

Indeed a hash function is a function very difficult to reverse for which it is very difficult to find collisions (SHA-I is preferable on MD5 in the current state because there are currently risks of collision on MD5). The result of this function is reproducible, which allows any third party to verify the calculation of this function.

 Since the calculation of the hash function is not secret, it can be integrated on the microprocessor of the smart card or by a circuit in the housing, the housing calculating the result of the hash function from the information entered on the keyboard. or received from the other electronic wallet case.

For enforceability purposes, it is advisable to store the entire contract and the identifier, for example with an independent third party during a transaction on the Internet, in particular to establish the date or precedence of the transaction because the date of the boxes being offline, it can be modified and is not certain.

Optionally, the box can store the entire transaction contract if it has sufficient memory in addition to the microprocessor card.

According to a final variant of the device, it is particularly advantageous to integrate into the housing a device printing a ticket.

<Desc / Clms Page number 8>

Indeed, in order to have a written record of a transaction, of an operation made using an electronic box, or in order to more easily consult the balance or the history of operations carried out on a microprocessor card , the user must have a content printing system.

This can be done either by installing a printer in the case or by connecting the case to a printer or by connecting the case to a computer that has a printer.

The printer is practically suitable in the case of using the device housing + microprocessor card as a signature system in order to print the contract, the identifier of the electronic signature using a hash function, the amount and currency of the payment, the identities of the contracting parties, the date and time of signature of the transaction.

Indication of how the invention is capable of industrial application: The invention is particularly suitable for reading and processing microprocessor cards serving as electronic purses.

In one of the embodiments of the invention presented is embodied by a box allowing the amount and the characteristic of the transaction to be entered. The transaction is done by connection with a homologous box reading a homologous microprocessor card.

The box can be manufactured with components currently available.

The connector may be reversible in one of the embodiments of the invention. The box can be manufactured and used for exchanging money between electronic purses contained in a microprocessor card.

The case can be manufactured for use in electronic money reading and money exchange applications using electronic purses.

There are already contactless connections for other applications than that of exchanges between such boxes, standard components exist on the market. Electromagnetic radiation exchange couplers can therefore be integrated into one end of the housing to serve as connectors for electronic purse card reader units. Fingerprint detectors exist on the market, but for problems of miniaturization and d power supply, it is easier to integrate it into the card reader box than directly on the microprocessor card.

In addition, this reduces the costs of the microprocessor card since only sensitive readers (such as at merchants) are to be equipped as a priority.

The device is particularly suitable for an electronic wallet reader and for creating an electronic signature

Claims (6)

 1) Memory card reader connectable to another counterpart characterized by a box (Fig 1-element 1) comprising a slot (Fig 1-element 2) into which a microprocessor card can be inserted in a vacuum (Fig 1- item 6) inside the housing. This card microprocessor is read by a card reader-coupler (Fig 1-element 7) powered by one or more batteries (Fig 1-element 4) located in a battery compartment closed by a cover (Fig 1-element 5). The microprocessor card reader-coupler (Fig 1-element 7) is connected to a distribution and transformation circuit (Fig 1-element 8) of the messages between the microprocessor and the external connector (Fig 1-element 3). The external connector makes it possible to connect the box to another homologous box and to operate dialogs between the 2 microprocessors of the inserted smart cards. Another circuit (Fig 1-element 9) inside the housing will serve as an interface between the keyboard (Fig 1-element 10) on the face of the housing and the display (Fig 1-element 11) 2) Device according to claim 1 characterized in that it comprises a calculator displaying on the display (Fig 1-element 11) the results of the calculations entered on the keyboard (Fig 1-element 10) 3) Device according to claim 1 or 2 characterized in that it includes a currency converter displaying on the display (Fig 1-element 11) the equivalent in a currency of an amount expressed in another currency. This amount and these 2 currencies being entered using the keyboard (Fig 1-element 10) and the display (Fig 1-element 11) 4) Device according to claim 1, 2 or 3 characterized by the presence not of '' a connector with a homologous box but two connectors making it possible to connect to a homologous box (Figure 2, elements 3 and 12). 5) Device according to claim 4 characterized in that the 2 connectors are complementary and can be plugged in mutually, one being male and the other female. 6) Device according to one of claims 1 to 5 characterized by a housing comprising two slots for inserting memory cards (Figure 3, elements 2 and 13) 7) Device according to claims 1,2, 3, 4 or 6 for which one connector is a 9-pin female serial socket. 8) Device according to claims 1, 2, 3, 4,6 or 7 for which a connector is a male 9-pin serial socket. <Desc / Clms Page number 10>

 9) Device according to claims 1, 2, 3, 4, 6, 7 or 8 for which a connector is a contactless device by electromagnetic radiation 10) Device according to any one of claims 1 to 9 for which a connector is a Universal Serial Bus (USB) port II) Device according to any one of Claims 1 to 10, characterized in that it includes a fingerprint detector (Fig 4, item 14) embedded in the housing (Fig 4, item 1 ) allowing the identification of the owner of the microprocessor card by sending the characteristics of the fingerprint to a circuit (Fig 4, element 15) transcoding these characteristics into information recognized by the chip of the microprocessor card and activating rights of the owner on the microprocessor of the microprocessor card. 12) Device according to any one of claims 1 to 11 characterized in that the housing is provided with a device calculating a signature using a hash function of a message 13) Device according to any one of claims 1 to 12 characterized in that the housing is provided with a device printing a ticket.