[go: up one dir, main page]

AR042707A1 - Procedimiento y tarjeta multi - clave para evitar fraudes por internet - Google Patents

Procedimiento y tarjeta multi - clave para evitar fraudes por internet

Info

Publication number
AR042707A1
AR042707A1 ARP040100013A ARP040100013A AR042707A1 AR 042707 A1 AR042707 A1 AR 042707A1 AR P040100013 A ARP040100013 A AR P040100013A AR P040100013 A ARP040100013 A AR P040100013A AR 042707 A1 AR042707 A1 AR 042707A1
Authority
AR
Argentina
Prior art keywords
internet
card
user
procedure
key
Prior art date
Application number
ARP040100013A
Other languages
English (en)
Original Assignee
Salva Calcagno Eduardo Luis
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Salva Calcagno Eduardo Luis filed Critical Salva Calcagno Eduardo Luis
Priority to ARP040100013A priority Critical patent/AR042707A1/es
Priority to US10/584,931 priority patent/US20080040784A1/en
Priority to PCT/US2005/000068 priority patent/WO2005069524A1/en
Publication of AR042707A1 publication Critical patent/AR042707A1/es

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0853Network architectures or network communication protocols for network security for authentication of entities using an additional device, e.g. smartcard, SIM or a different communication terminal
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/02Payment architectures, schemes or protocols involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/30Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/347Passive cards
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/382Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3829Payment protocols; Details thereof insuring higher security of transaction involving key management
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/385Payment protocols; Details thereof using an alias or single-use codes
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/40Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/40Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401Transaction verification
    • G06Q20/4014Identity check for transactions
    • GPHYSICS
    • G06COMPUTING OR CALCULATING; COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00Payment architectures, schemes or protocols
    • G06Q20/38Payment protocols; Details thereof
    • G06Q20/40Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/401Transaction verification
    • G06Q20/4016Transaction verification involving fraud or risk level assessment in transaction processing
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07FCOIN-FREED OR LIKE APPARATUS
    • G07F7/00Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/10Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07FCOIN-FREED OR LIKE APPARATUS
    • G07F7/00Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/10Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
    • G07F7/1008Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07FCOIN-FREED OR LIKE APPARATUS
    • G07F7/00Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/10Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
    • G07F7/1016Devices or methods for securing the PIN and other transaction-data, e.g. by encryption
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07FCOIN-FREED OR LIKE APPARATUS
    • G07F7/00Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/10Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
    • G07F7/1025Identification of user by a PIN code
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07FCOIN-FREED OR LIKE APPARATUS
    • G07F7/00Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/10Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
    • G07F7/1025Identification of user by a PIN code
    • G07F7/1075PIN is checked remotely
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07FCOIN-FREED OR LIKE APPARATUS
    • G07F7/00Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/10Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
    • G07F7/1025Identification of user by a PIN code
    • G07F7/1083Counting of PIN attempts
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/083Network architectures or network communication protocols for network security for authentication of entities using passwords
    • H04L63/0838Network architectures or network communication protocols for network security for authentication of entities using passwords using one-time-passwords
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/08Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0861Network architectures or network communication protocols for network security for authentication of entities using biometrical features, e.g. fingerprint, retina-scan

Landscapes

  • Business, Economics & Management (AREA)
  • Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Accounting & Taxation (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Finance (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Signal Processing (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Control Of Vending Devices And Auxiliary Devices For Vending Devices (AREA)
  • Storage Device Security (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Abstract

Procedimiento de seguridad especialmente disenado para legitimar transacciones y evitar los fraudes por Internet, que se pone en práctica con el uso de una tarjeta Multi-clave que contiene un código de identificación de tarjeta, un NICK del usuario y un número variable de PINS ocultos que sirven para realizar solo una operación, quedando luego de la misma invalidados. El procedimiento contempla la posibilidad de que el usuario use la tarjeta Multi.clave a través de la Web o por medio de una Call Center, en ambos casos a la espera de la autenticación de su identidad por parte de un centro de autorizaciones. Este centro posee una base de datos aislado y no disponible en Internet donde se guardan todos los datos sensibles que deben permanecer a resguardo para evitar cualquier tipo de falsificación. De este modo, tanto el sistema para operar por la Web como el operador del Call Center chequearán la información suministrada por el usuario (código de tarjeta + NICk + PIN) en la base de datos aislada y a continuación autorización o denegarán la operación, de acuerdo con el resultado del proceso de autenticación de identidad.
ARP040100013A 2004-01-05 2004-01-05 Procedimiento y tarjeta multi - clave para evitar fraudes por internet AR042707A1 (es)

Priority Applications (3)

Application Number Priority Date Filing Date Title
ARP040100013A AR042707A1 (es) 2004-01-05 2004-01-05 Procedimiento y tarjeta multi - clave para evitar fraudes por internet
US10/584,931 US20080040784A1 (en) 2004-01-05 2005-01-05 Procedure and Multi-Key Card to Avoid Internet Fraud
PCT/US2005/000068 WO2005069524A1 (en) 2004-01-05 2005-01-05 Procedure and multi-key card to avoid internet fraud

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
ARP040100013A AR042707A1 (es) 2004-01-05 2004-01-05 Procedimiento y tarjeta multi - clave para evitar fraudes por internet

Publications (1)

Publication Number Publication Date
AR042707A1 true AR042707A1 (es) 2005-06-29

Family

ID=39052326

Family Applications (1)

Application Number Title Priority Date Filing Date
ARP040100013A AR042707A1 (es) 2004-01-05 2004-01-05 Procedimiento y tarjeta multi - clave para evitar fraudes por internet

Country Status (3)

Country Link
US (1) US20080040784A1 (es)
AR (1) AR042707A1 (es)
WO (1) WO2005069524A1 (es)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114860557A (zh) * 2022-04-08 2022-08-05 广东联想懂的通信有限公司 用户行为信息生成方法、装置、设备及可读存储介质

Families Citing this family (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2005026993A1 (en) * 2003-09-10 2005-03-24 Agile Software Corporation A system and method for managing item interchange and identification in an extended enterprise
EP1926246A4 (en) * 2005-08-12 2011-03-02 Tendyron Corp METHOD AND DEVICE ENSURING THE SAFETY OF AN ELECTRONIC SIGNATURE DEVICE
US8281145B2 (en) * 2007-12-14 2012-10-02 Mehran Randall Rasti Doing business without SSN, EIN, and charge card numbers
US9558285B2 (en) * 2010-09-14 2017-01-31 Accenture Global Services Limited Treatment controller
US10686781B1 (en) * 2013-12-24 2020-06-16 Affirm Inc. System and method for passwordless logins
CN113077558B (zh) * 2021-02-25 2023-06-30 北京中交国通智能交通系统技术有限公司 一种psam卡双级在线授权认证方法、装置及系统

Family Cites Families (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5251259A (en) * 1992-08-20 1993-10-05 Mosley Ernest D Personal identification system
AU6229000A (en) * 1999-07-26 2001-02-13 Iprivacy Llc Electronic purchase of goods over a communication network including physical delivery while securing private and personal information
WO2001069546A2 (en) * 2000-03-16 2001-09-20 Daniel Thompson Pre-paid purchasing card and method
US7263506B2 (en) * 2000-04-06 2007-08-28 Fair Isaac Corporation Identification and management of fraudulent credit/debit card purchases at merchant ecommerce sites
US20030024988A1 (en) * 2000-04-24 2003-02-06 David Stanard System for providing evidence of payment
AR033954A1 (es) * 2000-09-26 2004-01-21 Duwimax Internat S A Etiqueta autoadhesiva de sello de seguridad para impresiones dactilares y a.d.n.
US20060149675A1 (en) * 2002-06-14 2006-07-06 Masayoshi Kawamoto Card issuing system and card issuing method

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114860557A (zh) * 2022-04-08 2022-08-05 广东联想懂的通信有限公司 用户行为信息生成方法、装置、设备及可读存储介质
CN114860557B (zh) * 2022-04-08 2023-05-26 广东联想懂的通信有限公司 用户行为信息生成方法、装置、设备及可读存储介质

Also Published As

Publication number Publication date
WO2005069524A1 (en) 2005-07-28
US20080040784A1 (en) 2008-02-14

Similar Documents

Publication Publication Date Title
FI77335B (fi) Foerfarande och anordning foer verifiering av personidentifieringsnummer och kontroll av inlagd nummerserie i identifieringsmedia.
US9805364B2 (en) ID authentication
US9898879B2 (en) System and device for authenticating a user
US20080028230A1 (en) Biometric authentication proximity card
US20020138769A1 (en) System and process for conducting authenticated transactions online
ATE360866T1 (de) Leckresistente aktualisierung eines indexierten kryptographischen schlüssels
US20080048024A1 (en) Accommodating multiple users of a secure credit card
BRPI0418951A (pt) método para a retirada de dinheiro em caixas eletrÈnicos sem cartão, por meio de uma ordem de pagamento via sms
BRPI0414616A (pt) método de serviço de certificação seguro
US20070132548A1 (en) Method and apparatus for programming electronic security token
JP2000215172A (ja) 個人認証システム
CN101436935A (zh) 一种采用指纹识别的pin码验证方法
AR042707A1 (es) Procedimiento y tarjeta multi - clave para evitar fraudes por internet
CN106372481A (zh) 一种指纹排列组合密码
ES2359881T3 (es) Procedimiento para la preparación de una tarjeta chip para servicios de firma electrónica.
ES2631002B1 (es) Dispositivo para facilitar transacciones financieras, procedimiento e instalación correspondientes
CN109690596A (zh) 用于卡交易的动态安全码
TWI251146B (en) Regional safety control system and method
CN103632109A (zh) 身份证隐私保护与挂失系统
ES2271531T3 (es) Procedimiento para la comprobacion de la autorizacion de una persona para utilizar un soporte de datos portatil.
CN102457484A (zh) 用户名密码认证加校验码两者集合来验证用户信息的方法
EP2797043B1 (de) Durchführung einer chipkartenfunktion
Struif et al. Smartcards with biometric user verification
Jadhav et al. Proposed e-payment system using biometrics
WO2017036455A2 (de) Vorrichtung und verfahren zum authentifizieren und autorisieren von personen

Legal Events

Date Code Title Description
FG Grant, registration