Importance

Loading Importance Indicators...

Abstract

A transaction system and method of conducting a transaction between in integrated circuit (IC) card and a transaction terminal which includes a security module comprises establishing communication between the terminal and the IC card. Separate session keys are generated in the IC card using data stored in the IC card and a code associated with the particular IC card and the security module using data stored in the security module, and the code associated with the particular IC card. The session key generated by the IC card is used to encrypt data using an encryption algorithm to obtain a first result and the session key generated by the security module is used to encrypt the same data using the same encryption algorithm to obtain a second result. The first and second results are compared to enable the terminal to conduct the transaction only if the comparison establishes that the first result and the second result are identical. In one embodiment, the invention further comprises generating a transaction signature by the IC card using transaction data and data stored in the IC card, generating a transaction signature by the security module using transaction data and data stored in the security module and storing the transaction signatures generated by the IC card and the security module for creating an audit trail for the transaction.

Loading the Abstract Image...

First Claim