Authentication method for IC cards
An authentication method between a first IC card and a second IC card interconnected through a terminal includes transmitting an identification number from the second IC card to the first IC card for deriving and storing a key in the first IC card. An authentication number is generated and stored in the first IC card, and is transmitted to the second IC card. The authentication number is encrypted inside the second IC card, and is transmitted to the first IC card. The encrypted authentication number is decrypted through the derived key, and is compared with the authentication number. The second IC card is authorized if the encrypted authentication number in the first IC card is equal to the authentication number. At least one of the transmissions includes an identification and/or authentication number to authorize the first IC card from the second IC card. The identification and/or authentication numbers include a reverse authentication number.
1. A method of authentication between a first IC card and a second IC card, the method comprising:
transmitting an identification number from the second IC card to the first IC card for deriving a key in the first IC card;
generating and storing a random number in the first IC card and transmitting the random number to the second IC card;
encrypting the random number in the second IC card and transmitting the encrypted random number to the first IC card;
decrypting the encrypted random number in the first IC card using the key and comparing it with the stored random number to thereby authenticate the second IC card; and
including at least one number to authorize the first IC card in at least one of the transmitting steps associated with authenticating the second IC card.
2. A method according to claim 1 , wherein the number to authorize the first IC card comprises a second random number.
3. A method according to claim 2 , wherein the second random number is included with the transmitting of the identification number.
4. A method according to claim 1 , wherein the number to authorize the first IC card comprises an encrypted second random number.
5. A method according to claim 4 , wherein the encrypted second random number is included with the transmitting of the random number.
6. A method according to claim 2 , wherein the second random number is generated and stored in the second IC card.
7. A method according to claim 2 , further comprising deriving at least one second key in the second IC card to encrypt the identification number and the second random number.
8. A method according to claim 2 , wherein the second random number is included with the transmitting of the encrypted random number.
9. A method according to claim 2 , further comprising deriving at least one third key in the first IC card to encrypt the random and the second random number.
10. A method according to claim 1 , further comprising storing at least one encryption algorithm in the first IC card and the second IC card.
11. A method according to claim 1 , further comprising storing at least one decryption algorithm in the first IC card and the second IC card.
12. A method according to claim 1 , wherein the first and second IC cards are interconnected through a terminal.
13. A method of authentication between a first IC card and a second IC card interconnected through a terminal, the method comprising:
transmitting an identification number from the second IC card to the first IC card for deriving a key in the first IC card;
generating and storing a random number in the first IC card and transmitting the random number to the second IC card;
encrypting the random number in an encrypted random number in the second IC card and transmitting the encrypted random number to the first IC card;
decrypting the encrypted random number in the first IC card using the key and comparing it with the stored random number to thereby authenticate the second IC card; and
including a second random number to authorize the first IC card in at least one of the transmitting steps associated with authenticating the second IC card.
14. A method according to claim 13 , further comprising storing at least one encryption algorithm in the first IC card and the second IC card.
15. A method according to claim 13 , further comprising storing at least one decryption algorithm in the first IC card and the second IC card.
16. A method according to claim 13 , wherein the second random number is generated and stored in the second IC card.
17. A method according to claim 13 , wherein the second random number is included with the transmitting of the identification number.
18. A method according to claim 13 , wherein the second random number is included with the transmitting of the encrypted random number.
19. A method according to claim 13 , further comprising deriving at least one second key in the second IC card to encrypt the identification number and the second random number.
20. A method according to claim 13 , further comprising deriving at least one third key in the first IC card to encrypt the random number and the second random number.
21. A smart card system comprising:
a first IC card, a second IC, and a terminal temporarily coupling said first and second IC cards;
said second IC card transmitting an identification number to said first IC card for deriving a key in the first IC card;
said first IC card generating and storing a random number and transmitting the random number to the second IC card;
said second IC card encrypting the random number in an encrypted random number and transmitting the encrypted random number to the first IC card;
said first IC card decrypting the encrypted random number using the key and comparing it with the stored random number to thereby authenticate the second IC card; and
at least one of said first IC card and second IC card transmitting at least one number to authorize said first IC card during at least one of the transmitting an identification number, transmitting the random number, and transmitting the encrypted random number.
22. A smart card system according to claim 21 , wherein the second random number is included with the transmitting of at least one of the identification number and encrypted random number.