DEVICE FOR TRANSMITTING AND RECEIVING INFORMATION CONNECTABLE TO AN ELECTRONIC COMPUTER Technical Field
This invention relates to a device for transmitting and receiving information connectable to an electronic computer, comprising read/write means for reading/writing a card, connection means adapted to connect the read/write means to the electronic computer for exchange of information between the card and the electronic computer. More specifically, the present invention relates to a device for "home banking", namely the execution of banking transactions directly from the home. Background Art
Devices connectable to an electronic computer for handling cards, such as bank cards, are known in the art.
Such devices are always in addition to the peripherals normally connected to the computer and are accordingly more complex and more time-consuming to use. Furthermore, being additional devices, they have to be connected to the computer by using either an additional interface or one otherwise used by another device. Disclosure of the Invention
The object of. this invention is to produce a highly integrated device, enabling various functions to be carried out, in particular the function of pointing device or mouse and the bank card reader/writer function, these being the most frequently used and common home banking functions. Disclosure of the Invention
The object of this invention is also to produce a single device with a single interface for exchanging with the electronic computer.
This object is fulfilled by the device for transmitting and receiving information connectable to an electronic computer, characterized by pointing means connected to the read/write means for transmitting position
information to the electronic computer through the connection means.
According to another characteristic, the device comprises in an upper casing portion a cavity for the insertion of cards suitable for enabling the access to various electronic computer functions subject to an authentication code being typed and, in a lower casing portion associated with the upper casing portion, a plurality of keys selectively actuatable for typing of the authentication code.
According to another characteristic of this invention the device also comprises, in the lower casing portion, a display suitable for visualising the operations conducted using the keys referred to above. In accordance with yet another characteristic of the invention, the cavity for insertion of -the "smart card" is sufficiently deep to completely accommodate the smart card, so that only the side edges or alternatively, a central portion, is left protruding; in this way, use of the mouse with the smart card inserted is facilitated, as also is removal of the smart card at the end of the session.
In accordance with a further characteristic, the device according to this invention may also be used as a security device for protecting the electronic computer against use by persons not in possession of an enabled card. Brief Description of Drawings
These and other characteristics of this invention will become clearer from the following description of a preferred embodiment, provided purely by way of an illustrative, non-restrictive example and the accompanying drawings, where:
Fig. 1 is a general view of the device for transmitting and receiving information connectable to an electronic computer;
Fig. 2 is a view from above of the device according to the invention;
Fig. 3 is a view from below of the device of Fig. 1;
Fig. 4 is a lateral cross-sectional view of the device of Fig.3;
Fig. 5 is a block diagram of the device according to a first embodiment of the invention; and
Fig. 6 is a block diagram of the device according to a second embodiment. Modes for Carrying Out the Invention
With reference to Fig. 1, the device 10 according to the present invention, comprises a pointing unit (mouse or mouse circuitry) 11 (Fig.l and Fig.5), adapted to pick up the displacements on a surface, and a card read/write unit (r/w unit) 12, suitable for reading/writing bank cards, for example smart cards (cards) 15, subject to insertion of the said smart cards 15 in a specially arranged slot or cavity
19 of the device 10.
The device 10 is connected, in the preferred embodiment, to a personal computer (PC) 16 by a cable 18, of the type usually provided for the connection of pointing devices to the PC 16. The PC 16 is connected to a telephone line modem
14 suitable for connecting the PC 16 to a banking system for carrying out home banking operations. The mouse 11 comprises a control unit 26, two known type actuation buttons, 24 and 25 respectively, and an optical position detector 23, all of known type.
The mouse 11 also comprises two known type optical sensors,
21 and 22 respectively, connected to the optical position detector 23 for transmitting thereto signals indicating movement of the device 10 on a surface.
The optical position detector 23 is in turn connected, in a known way, to the control unit 26 for sending position information thereto. The actuation buttons 24 and 25 are connected to the control unit 26 and are suitable for transmitting^ commands
of a predetermined type in a known way, upon manual activation.
The r/w unit 12 comprises a logic unit (CPU) 31, a first permanent type memory (ROM) 32, suitable for storing basic programs developed during design of the device 10, a second random access type memory (RAM) 33, suitable for storing variable data coming from the PC 16, the smart card 15 or the mouse 11, as will be described in greater detail below. Both the ROM 32 and the RAM 33 are connected, in a known way, to the CPU 31 by a data and commands channel 41. The r/w unit 12 also comprises a first interface (mouse interface or circuitry interface) 34 connected to the control unit 26 of the mouse 11, a second interface (PC interface) 36, connected to the cable 18 providing connection to the PC 16, and a contact interface 35 suitable to be connected, in a known way, to the smart card 15 upon insertion of the latter-named in the slot 19.
The connections between PC 16 and PC interface 36 and between control unit 26 and mouse interface 34 are made in a known way by way of 6 wires, only 4 of which are actually used; more specifically, a first pair of wires, 61 and 62, transmits, respectively, the power supply voltage and the earth from the PC 16 to the mouse 11 and a second pair of wires, 63 and 64, exchanges the clock and data input/output signals between the PC 16 and the mouse 11, along a data channel (BUS) 39.
Also connected to the known type BUS 39 are the contact interface 35 and the CPU 31 for the exchange of data and commands among the units connected thereto.
The r/w unit 12 also comprises a timing device (clock) 38, suitable for timing the cycles of the CPU 31, and a voltage converter 37, connected to the PC interface 36 and to the contact connector 35 in order to bring electric power from the PC to the smart card 15, adapting the voltage to the voltage required by the smart card 15, for example 12 Volt.
In an optional embodiment, the r/w unit 12 finally also comprises a known type security module or SAM (Security Authentication Module) 42, connected to the BUS 39 and suitable for authenticating, by means of predetermined algorithms, the use of the smart card 15 with the r/w unit 12 and the PC 16, as will be described in greater detail below.
The known type smart card 15 comprises a control unit (CPU card) 51, a first random access type memory (RAM card) 53, a second read-only memory (ROM card) 52, suitable to be programmed by the issuers of the smart card 15 and a third electrically programmable memory (EEPROM card) 54, suitable for storing identification data of the smart card 15 and its owner, as will be described in greater detail below. The ROM card 52, the RAM card 53 and the EEPROM card 54 are connected through a data channel (BUS card) 55 to the CPU card 51.
The smart card 15 also comprises an interface device 57 connected to the BUS card 55 and adapted to come into contact in a known way with the contact interface 35.
The interface device 57 comprises 6 contacts, of which 5 are actually used; in particular, a first and a second contact, 71 and 72 respectively, are used for receiving the power supply voltage and the earth from the r/w unit 12, a third contact 73 for exchanging input and output data, a fourth contact 74 for receiving from the r/w unit 12 the timing or clock signal generated by the clock 38, and a fifth contact 75 for receiving a reset signal upon insertion of the smart card 15 in the r/w unit 12. Operation of the device 10 described up to here is as follows .
Under normal operating conditions, the device 10 acts as an ordinary mouse. In particular, the r/w unit 12 transparently transfers the information, clock signal included, from the PC 16 to the
mouse 11 and vice versa, through the PC interface 36, the
BUS 39 and the mouse interface 34.
Following activation on the PC 16, by way of the device 10 or other devices, a keyboard for instance, of a home banking program, the request to insert the smart card 15 in the device will be displayed on the PC 16.
When the smart card 15 is inserted in the slot 19, the r/w unit 12 transmits a reset signal through the contact 75 to the smart card 15, receiving in response, through the contact 73, an acknowledgement code or ATR (Answer To
Reset) code, stored in the EEPROM card 54.
The ATR code is stored into the RAM 33 and transmitted to the PC 16 to be acknowledged by the home banking program.
At the same time the CPU 31, on the basis of the program stored in the ROM 32, disables all the communications between mouse 11 and PC 16 so that no position signal can reach the PC 16.
Following acknowledgement of the ATR code, the home banking program displays the request to type a password or personal identification number (PIN) which, once keyed in, is transferred by the PC 16 through the r/w unit 12 to the smart card 15.
The CPU card 51 stores in the RAM card 53 the password keyed in and compares it, by means of the program stored in the ROM card 52, with the password stored in the EEPROM card 54.
If the passwords match perfectly, the CPU card 51 sends the
PC 16 an enable message, indicating the operations allowed with the smart card 15 and that the control functions have been completed.
This message is interpreted by the CPU 31 of the r/w unit
12 as a signal suitable for restoring the communications between the mouse 11 and the PC 16.
From now on, the device 10 can be used again as an ordinary mouse for execution of the desired banking transaction or other tasks of the PC 16.
For each banking operation possible, as is the practice in bank card read/write devices, the CPU 31 of the r/w unit 12 sends the PC 16, at the request of the home banking program, the ATR code previously stored in the RAM 33, enabling the operation to be effected.
If the smart card 15 is removed from the device 10, the CPU 31 temporarily suspends all communications between mouse 11 and PC 16, commands the ATR code to be deleted from the RAM 33, sends the PC 16 a predetermined sequence signalling the removal of the smart card 15 and hence the suspension of all banking operations.
Upon completing this sequence of operations, the CPU 31 restores communications between mouse 11 and PC 16 until the next insertion of the smart card 15 in the device 10. In cases where the r/w unit 12 includes the SAM 42, operation of the device 10 is as follows.
Following insertion of the smart card 15 in the r/w unit 12, an acknowledgement code, stored in the EEPROM card 54, is sent by the smart card 15 to the r/w unit 12 to be stored into the RAM 33.
The r/w unit 12, in turn, sends the PC 16 both the acknowledgement code and a message indicating presence of the SAM 42. The home banking program encrypts the acknowledgement code received according to a predetermined algorithm, which takes into account an identification number of the PC 16 that the program is installed on, and sends it to the r/w unit 12 for processing by the SAM 42. The SAM 42, in relation to a predetermined internal algorithm, which is linked with the corresponding algorithm in the home banking program, checks the acknowledgement code received and sends the PC 16 through the BUS 39 a message enabling the user to effect the desired banking operations or other tasks of the PC 16. This technique makes it possible to lock the association of device 10 with the PC 16 so that the device 10 cannot be used to effect home banking operations on any other. PC 16.
Naturally, with each new banking operation, the CPU 31 of the r/w unit 12 sends the PC 16, at the request of the home banking program, the acknowledgement code previously stored in the RAM 33, and the enabling process through the SAM 42 is repeated.
Following each enabling process, the device 10 may be used as an ordinary mouse for performing the desired banking operation or other tasks of the PC 16.
According to a first variant, the device 10 may comprise, connected to the contact interface 35, a manual slide switch to permit forced activation of the r/w unit 12 and of the home banking program, regardless of whether the smart card 15 is inserted in the device 10.
According to another variant, the device 10 may be connected to the PC 16 through infrared ray interfaces or other types, available on the market. Furthermore, the connection to the PC may be made either using a PS/2 connector or through an RS232 COM serial link.
According to another variant, the device 10 may integrate in a single microchip both the mouse circuitry 11 and those of the r/w unit 12, thereby consenting elimination of the control unit 26 from the mouse 11.
In accordance with another variant, the actuation buttons 24 and 25 may be associated with a number pad integrated in the device 10 so that the PIN may be typed by the user directly using the device 10, without any need to use the PC keyboard.
In accordance with a second embodiment the device 10 comprises an upper casing portion 111 (Fig.2, Fig.3 and Fig.4) wherein are accommodated the actuation buttons (buttons) 24 and 25, for the typing of commands to be transmitted to the electronic computer 16, and the cavity 19 suitable for enabling insertion of the card 15. Total depth of the cavity 19, measured from the external profile of the upper casing portion 111, is approximately equal to the length of the card 15 itself, to within a
tolerance range of ± 10 mm for example, so that under the envisaged working condition of the card 15 inserted in the device 10, only the edges of the card 15 protrude from the external profile of the upper casing portion 111, not hampering anyone from taking and using the device 10.
The device 10 also includes a lower casing portion (base) 121 which, accommodated in a cavity thereof, comprises a ball 124 that moves when the device 10 is moved on a support surface, the top of a desk for example, and through this movement, generates the position information or pointing signals by way of the mouse circuitry 11 (Fig.3, Fig.4 and Fig.6) inside the device 10 itself. These signals are transmitted to the electronic computer 16 along the cable 18 and are adapted to be interpreted and managed by the computer 16, in a known way, associating the movement of the device 10 with the movement of a cursor. The base 121 of the device 10 also comprises three support feet (feet) 126 ensuring that the base 121 of the device 10 is kept at a constant distance from the support surface. In accordance with this second embodiment, the base 121 also comprises a keyboard 122 which, in this construction example, is a numeric keypad also including control keys, and a display device 128. The keyboard 122, separate and distinct from the mouse circuitry 11, comprises a control unit (keyboard circuitry) 142 and a plurality of keys 123, connected in a known way to the keyboard circuitry 142 and suitable to be commanded by pressure means; depth of the keys 123 is sufficient to allow the keys to protrude from the surface of the keyboard 122, without touching the support surface that the device 10 is moved on.
The keyboard 122 is adapted to allow the PIN or an authentication code to be keyed in under the working conditions where the card 15 is inserted. The display device 128 comprises a control unit (display circuitry) 148 and a display 129, connected in a Known way
to the display circuitry 148 and suitable for displaying information about the keys 123 typed on the keyboard 122 or control information. The display 129, in the preferred embodiment, is of the liquid crystal type and enables at least 8 characters to be displayed on a line.
The lower casing portion 121 and the upper casing portion 111 are preferably coupled by a snap-fit coupling and are adapted to contain inside, as well as the keyboard circuitry 142, the display circuitry 148, the mouse circuitry 11 and the r/w unit 12.
The r/w unit 12 is connected to the keyboard circuitry 142 and to the display circuitry 148, by 4 wires; in particular the circuitry interface 34 is connected through the wires 61 and 62, respectively, to the PC interface 36 for transmitting the power supply voltage and the earth to the keyboard circuitry 142 and to the display circuitry 148. - The circuitry interface 34 is also connected, through a first pair of wires, 63a and 64a and a second pair of wires, 63b and 64b, respectively, to the keyboard circuitry 142 and to the display circuitry 148, for the exchange of clock and input/output signals with the keyboard 122 and the display device 128. The data channel (BUS) 39 inside the r/w unit 12 is adapted to interconnect the PC interface 36, the contact interface 35, the CPU 31 and the circuitry interface 34 for the exchange of data and commands between the said units that are connected to it.
The r/w unit 12 may also comprise in this second embodiment a security module or SAM (Security Authentication Module) 42, of a known type, connected in a known way to the BUS 39 and adapted to locally authenticate use of the card 15 with the r/w unit 12, by means of predetermined algorithms and keys . Operation of the device 10 in this second embodiment is as follows.
Following activation on the PC 16, by way of the device 10 or other devices, for example a keyboard, of a home banking program for a predetermined banking circuit, the request to insert the card 15 in the device 10 will be displayed on the PC 16.
When the card 15 is inserted in the cavity 19, the r/w unit 12 transmits a reset signal to the card 15, and receives in return a known type acknowledgement code or ATR (Answer To Reset) code, containing for instance information about the banking circuit corresponding to the card 15 inserted.
The ATR code is stored in the RAM 33 and transmitted to the PC 16 for verification of whether the card 15 corresponds to the banking circuit of the home banking program in current use. During this and the subsequent control procedures, the CPU 31, on the basis of the program stored in the ROM 32, disables all the communications between mouse circuitry 11 and PC 16 so that no position signal can reach the PC 16. In cases where the SAM 42 is present, a second, automatic control procedure is activated to verify that the card 15 is authentic and has not been "cloned".
In particular, the PC 16, through the r/w unit 12, orders the card 15 to generate a random number and sends it to the SAM 42. Through an algorithm of its own, an own key and the random number received, the SAM 42 in turn generates a new code, called "security quantity", transmitted to the card 15 which, in turn, generates a second "security quantity" using the same random number, an own algorithm and an own key and compares it with the "security quantity" received. If the two "security quantities" match exactly, the card 15 sends the PC 16 a consent signal, so that the home banking program displays on the PC 16 the request to type a password or personal identification number (PIN) . This typing may be performed simply by lifting the device 10 and keying in the PIN on the keyboard 122 located in the base of the device 10.
The information about each key 123 typed is transmitted by means of the wire 64a, on the BUS 39, to the CPU 31 which stores the information into the RAM 33 and transmits information on the same BUS 39 to the wire 64b providing connection to the display device 128 to have a character displayed on the display 129, for example an "*", for each key pressed.
Upon completion of typing, which may be signalled by way of a consent key 123, the CPU 31 of the r/w unit 12 sends the PC 16 a message indicating that typing has been completed. In answer to this message, the home banking program sends the CPU 31 of the r/w unit 12 a command to proceed to verification of the PIN typed. On receiving this command, the CPU 31 transmits the PIN from the RAM 33 to the card 15, which proceeds with checking of the PIN.
If the code or PIN matches exactly, the card 15 sends the PC 16 an enabling message, by way of the r/w unit 12, indicating that the control operations have been completed and what operations are allowed with the card 15; this message is interpreted by the CPU 31 of the r/w unit 12 as a signal to restore the communications between the mouse circuitry 11 and the PC 16 so that the device 10 can be used as an ordinary mouse, set on the work surface. If the card 15 is removed from the device 10, the CPU 31 temporarily suspends all communications between mouse circuitry 11 and PC 16, commands the ATR code to be deleted from the RAM 33, sends a predetermined sequence to the PC 16 to indicate that the card 15 has been taken out and accordingly that all home banking operations have been suspended.
Upon completion of this sequence of operations, the CPU 31 restores the communications between mouse circuitry 11 and PC 16 so that programs not requiring use of the card 15 may be run . Under normal working conditions, the keyboard 122 is not a hindrance, since it is located in the base 121 of the
device 10, out of reach, and none of the keys 123 can be pressed.
In addition, as the keyboard circuitry 142 is separate and distinct from the mouse circuitry 11, the CPU 31 can selectively control the operation of the actuation buttons 24 and 25 and of the keys 123.
To advantage, the device 10 is held in the same way under all working conditions, both when it has to be used as a mouse and when it has to be used to type the authentication code .
Finally, the keyboard 122 and the display 129 in normal use are protected against external agents such as dust, liquids, etc., because they are located in the base 121 and are screened by the upper casing portion 111. In accordance with embodiments that do not depart from the scope of this invention, the cavity 19, though still being of a depth approximately equal to length of the card, may be built in such a way as to leave a central portion of the card accessible for insertion and removal. The ball 124 may be substituted by any device that must however enable detection of the relative movement of the device 10 on a surface.
The feet 126, in accordance with further variants, may be eliminated and substituted by suitable protrusions made in the base 121 of the device 10, in the vicinity of the outside edges of the device 10.
The keyboard 122 may be substituted by contact keyboards, by capacitive or other type keyboards, including those commanded indirectly using pointed objects. The display 129, in accordance with a further variant, may be of the type adapted to display more lines and characters than specified in the example.
In accordance with another variant, the device 10 according to the invention, may be used to put a lock on use both of the PC 16 and of the mouse circuitry 11.
Suitable programming of the ROM 32 of the r/w unit 12, during the design stage, makes it possible to enable the mouse circuitry 11 for use when in presence of a smart card 15 having a predetermined authorisation code. Using a similar technique, it is also possible to program the PC 16 so that only the presence of the device 10, having a smart card 15 with a predetermined authorisation code, allows the computer to be used.
Finally, in accordance with a further variant, the device 10 may comprise a sound producing unit, for example a buzzer, connected to the CPU 31 of the r/w unit 12, and powered from a battery for acoustically signalling particular working conditions, such as the shutdown of the PC 16 with the card 15 still inserted in the r/w unit 12. Naturally, the description of the preferred embodiment may easily be extended to the use of magnetic bank cards, commonly called "BANCOMAT" cards in Italy, or magnetic cards, as alternatives to the smart cards referred to. Industrial Applicability With the device 10 connected to the PC 16, a smart card reader/writer with the following advantages is made available:
• easy to install - the PC does not need to be opened;
• no desk space required; • easily carried from one PC to another;
• very inexpensive, costing only slightly more than an ordinary mouse, though having more features;
• uses only one PC port, that of the mouse for example, leaving the others free for connections to the telephone network or printers.
These characteristics make this device particularly suitable for those applications that provide remote services through public networks such as the Internet. In particular, this peripheral will be easy for the Home Banking applications for private individuals, families and
small businesses to use, letting these categories use the smart card on their PC to:
• introduce a greater level of security for all the operations conducted from their remote PC connected to their bank, using the smart card as a secure memory for the encryption keys;
• develop new services based on the smart card, such as the electronic portfolio with which electronic cash on a card (electronic portfolio) may be deposited in and/or withdrawn from one's current account.
This invention, with its characteristics of being easy to install, space saving and transportable, means that any PC may be made suitable for Home Banking operations on the Internet in absolute security. This invention, the innovative aspect of which is that of integrating two known devices such as the mouse and a smart card reader/writer into one, will give a considerable boost to the spread of the Home Banking and Electronic Cash services. The utility of these two services, struggling to take off today, is that they allow users to conduct operations from home and to go around without cash. The spread of these services is limited today by security for Home Banking and the lack of a significant proportion of shops equipped to accept Electronic Portfolio type payments. With this invention each PC will be able to work with absolute safety on the Internet and each PC will be able to become a dispenser of electronic cash on a user' s Home Banking card. This will increase the number of users having the electronic portfolio and thus represent the incentive shopkeepers need to equip themselves for this form of payment.
Changes may be made to the dimensions, shapes, materials, components, circuit elements, connections and contacts, and also to the details of the circuitry, the construction illustrated and the method of operation, without exiting from the scope of the invention.