WO1992004694A1

WO1992004694A1 - Process and device for secure remote data transmission

Info

Publication number: WO1992004694A1
Application number: PCT/DE1991/000673
Authority: WO
Inventors: Hans Schreiber
Original assignee: Hans Schreiber
Priority date: 1990-09-01
Filing date: 1991-08-24
Publication date: 1992-03-19
Also published as: DE4027735A1

Abstract

The invention relates to a process and device for secure remote data transmission, preferably for cashless payment transactions, in which an information substrate is provided via a read/write unit with recallable information in addition to fixed storage recognition authorising the user so that the information substrate is suitable for data transmission or payment transactions and is protected against misuse by bearing an individual code and in that the information substrate responds via remote data transmission systems to at least one other information substrate or at least one read/write unit or can be contacted and read out by a read/write unit via its interface, whereby for money transfer an additional code secures the process and the bank-to-bank booking process and in all makes bank errors virtually impossible in money transfers, while in pure on-line operation fully preventing fraudulent operations by 'uncovered' information substrates, nowadays the equivalent of uncovered cheques. Furthermore, timers of preferably portable read/write units make possible the limited-time storage of programmed PINs for the authorisation of received information substrates.

Description

Method and device for secure remote data transmission

The invention relates to a method and device for secure remote data transmission with a focus on cashless money transactions.

Long-distance data transmission networks are known, e.g. B. the normal telephone line, Telex, Datex, ISDN and the like. The task of these networks is to communicate using the simplex, half-duplex or duplex method. So z. B. lately especially the fax system around itself, in which texts or graphical representations are transmitted over the telephone line via appropriate transceivers.

From these points of view, it is obvious that information which is subject to a certain degree of confidentiality or which can be transmitted in a standardized manner for a wide range of applications can also be accessed remotely.

One option for storing confidential information is provided by chip cards, the contents of which can only be accessed via at least one so-called PIN number (personal identification number).

Such microprocessor or semiconductor chip cards have been in circulation for a long time and z. B. used in the Deutsche Bundespost telecommunications process and in other areas of application. In contrast, access to ATMs is currently still implemented via a magnetic stripe card, in which the secret number (PIN number) of the account holder and thus of the card holder must be entered on an input device for legitimation. However, the security factors that can be used to prevent misuse are limited in the known prior art.

With the aid of a microprocessor or semiconductor chip card or a similar information carrier, it is possible to transmit information discretely to the corresponding receivers by telephone or via digitally operating telecommunication networks and / or to communicate with them in half or duplex communication.

The present invention is therefore based on the object of creating a method and device which enables such discrete information transmission and can be used in particular cases for cashless money transactions, the security risk against misuse being minimized. Further areas of application are, for example, hotel room reservations, search messages and the like.

These objects are achieved by a method according to claim 1, which is followed by further method features according to claims 2 to 25.

The device for carrying out the method is described in accordance with claim 26, with particularly preferred embodiment features of the device being presented in subclaims 27 to 37.

It is provided here that an information carrier is provided with information in addition to the fixed memory recognition by means of a read / write unit, which legitimizes the user that the information carrier for data communication and / or recording or for Payment transactions are suitable and protected against misuse by providing them with a calculable and constantly changing inrii vi Hπqi rode, and that the information carrier communicates via data transmission networks at least with another information carrier or at least one read / write unit or directly from a read / write unit is contacted and read via its interface.

It is thus possible that the information carrier e.g. via telephone line with integrated information carrier, read / write unit and modem, its information is passed on to the receiver and that the telephone network on the receiver side also activates a modem with a downstream read / write unit and the information about the compatible interfaces of the receiver read / write unit and the Recipient information carrier dubbed on this.

The information content extends over payment transactions, bookings, reservations, search reports, etc., whereby higher-level central data processing systems are preferably addressed via long-distance transmission networks by means of special information carriers.

The comparison of the identity of the read-only memory PIN number, with at least the read-only memory being part of the information carrier, with the read-in PIN number releases the latter for use, as a result of which a random generator number entered by a random code generator or a number already coded or the like is encoded or converted with at least one further random generator number or the like, and wherein the Information carrier forwards a modified, ie newly calculated, coding with the information to be transmitted and that after the code has been forwarded, it is re-encoded for subsequent use.

In the case of telephone communication, a read / write unit feeds the information carrier information to a modem, a further modem being coupled on the receiver side to at least one further read / write unit which processes or makes the information visible, or in whole or in part, encrypts or on another information carrier transmits unencrypted. To protect against misuse, the transmitter information carrier is preferably provided with an additional coding, e.g. B. from at least one random number generator number with subsequent arithmetic coding by means of a read / write unit or the like, but the coding for reading or using the information carrier of the read / write unit can also be entered and transmitted by the information carrier.

In the case of payment transactions via telephone line or the like, a programmed cash balance is debited from a resource account via a code number or a code transmission and stored on at least one read / write memory of the information carrier, with access to the read / write memory only when the current codes on-line to the bank is possible and that a special account of the bank is preferably assigned to each read / write memory with credit so that only the maximum amount of this account can be tapped in the event of misuse. In payment transactions using information carriers, the debiting process is preferably carried out online to the bank and the remaining credit of the respective read / write memory is then updated by the bank with a new code.

The information carrier establishes the on-1-in-connection during payment transactions via its program and its interface, whereby preferably a code calculated by means of a read / write unit is transmitted and, at the bank's own account, it is ultimately checked for legitimation by identical computing steps.

After a specified number of uses of the information carrier as a means of payment off-line, its calculated code is overwritten on-line by the corresponding bank at least with a new random generator code before further use, whereupon the read / write memory credit and thus the special account are increased.

Preferably, it is provided that / write memory of an information carrier the stored there credit is wholly or partially transmitted with coding via telephone line or the like, a further information carrier or a read / write unit with a memory unit, and charged so that at least one write ^'.

It is further provided that even when using the information carrier as a means of payment off-line, coding by converting the old code, preferably using a read / write unit, must be carried out before use. In this way, cashless payment transactions can be carried out online working devices carry out a pre-authentication with time-limited random code identification of the information carrier, off-line devices being addressed via a network with an interposed data processing system in such a way that they legitimize the purchase of the random code from the on-line devices and preferably one Bills that have been debited from the information carrier until the final transfer from bank to bank. In the case of department stores or the like in particular, this results in a high degree of security and saves time for the customer in the debiting process. Combined on-1 in / off-line devices are particularly useful at petrol stations, for example.

Before an amount credited to the information carrier is used as a means of payment, this is credited on-line to the recipient bank using the transmitted code of the drawn bank, which only debits the special account of the drawn bank, and in a subsequent step the transfer to a special account can be made. the own random generator coding and the reading into the corresponding read / write memory of the information carrier are carried out. An additional security against misuse is achieved in that, before the actual rebooking, the recipient bank requests the relevant bank to establish the connection of its own accord over the long-distance transmission network and to carry out the booking process after legitimation.

The transfer from the special account to the regular operating resources account is preferably carried out by means of information carrier programming. It is also provided that the reference bank, the recipient bank, the debited credit, the card number or the like is made visible and can be acknowledged by means of a display or the like of the read / write units and / or printer.

When other types of information are exchanged, the information content is made visible in whole or in part, unencrypted or encrypted and, if necessary, half or duplex communication is made possible by means of the read / write units.

This will usually be necessary for hotel reservations or the like.

In this case, the information carrier preferably establishes the on-1 connection via its program, parts of its memory content and its interface, a code preferably being transmitted and the recipient being checked for legitimation.

The verification of the legitimation by means of PIN number confirmation and the coding of the information carrier is carried out via a preferably portable read / write unit, with the information carrier being / being assigned with at least one random generator code in the on-1-in method.

If the card is lost, a higher-level PIN number is used to transfer the special account (s) back to the equipment account. The device for carrying out the method provides that, in addition to a microprocessor or semiconductor chip, an information carrier is provided with at least one read-write memory via a BUS system, said chip being suitable for receiving information and / or cash bookings via the interface of the chip and that the chip can be programmed via read / write units and its storage unit (s) can be modified, whereby long-distance transmission networks such as the telephone network are used, the peripheral devices of which are suitable for recording information carriers and are equipped with a modem for the telephone, while digitally operating networks are for a modem waive and a special coding and a data processing system are used to transfer money in cashless money transactions. When using the information carrier in monetary transactions over the telephone network, the telephones are provided with modems and read / write units, the interface of which is compatible with the information carrier interface and which can be used for exact information carrier reception and information transmission.

At the same time, it is provided that these write / read units, like the portable devices, are equipped with an alphanumeric keyboard, display or the like and also have a printer, and that the microprocessor or semiconductor chip contains an arithmetic unit.

When using other transmission networks that work digitally, the peripheral devices are provided with write / read units and are suitable for recording information carriers and are compatible with the information carrier interface. In practice, they are equipped like the devices working for analog operation. Since, in a broader sense, cashless money transactions can also be regarded as information transfer, it is therefore possible with the present invention to transfer, for example, cash credits from information carriers to information carriers via telephone line or other long-distance transmission networks.

In the specific case, in a preferred embodiment, a money credit is provided on the card by means of a telephone connection to the addressed bank with the aid of a chip card legitimized by confirmation of the PIN number and its code released thereby, at least one random generator code being reported back by the bank overwrites the old code and the amount provided is credited to a special account of the information carrier owner.

This ensures that the transferred amount of money remains on the one hand with the account owner and bears interest until it is finally used, and on the other hand can only be debited in connection with the random number code or the code calculated from it to protect against misuse.

Such a debiting process can take place in the on-line process after direct and preferably time-limited PIN number confirmation directly via a write-read / read unit, the remaining credit then remaining in the information carrier memory with a new random generator code being overwritten, on the other hand it is conceivable that amounts of money with the appropriate code are transferred to another information carrier via telephone line, being used to protect against misuse whose use as a means of payment of the recipient, the transferred money must be credited to his own account, and the actual booking process is carried out beforehand by the source bank to the recipient bank using the dubbed code.

An increased level of security is achieved with the present invention in that the cash deposits debited to corresponding storage units of the information carrier are credited by the bank to at least one special account which is only accessible via the transmitted code, which is converted and thus recoded after the booking process has been completed.

In the off-line process, it is necessary on the part of the bank to leave the previously valid code valid for a defined period of time until debiting, so that a code overwritten in the on-line process nevertheless does not impede the previously made payment process. This procedure is made possible in that the bank or the like uses its data processing system and with knowledge of the coding rule to pre-calculate and list the codes calculated and thus legalized by the user. For the sake of clarity, however, it is expedient to create a new legitimation list using a code transferred using the on-1 ine method, i. H. the bank requests an online step after x off-1 ine bookings.

In addition to a power supply, the write / read units of the peripheral devices used are preferably provided with an alpha-numeric keyboard and a display or the like, an information carrier holder and with at least one microprocessor with arithmetic unit and memory units, the Interface is compatible with that of the information carrier. A necessary BUS system needs no further mention.

Write-Z readers for cashless payment transactions are conceivable as off-line or on-1 ine devices. Their combination via a network with a data processing system is particularly useful. Time savings for the customer and increased security for a commercial enterprise or the like results if, for example, a customer can legitimize his chip card online in a department store, preferably a random number or the like from the on-1 ine device is validly read on the chip card for a limited time. During the on-line query, the customer can make his choice, with his chip card being debited off-line in the case of cashless payment transactions, provided that his or her random number in the memory of the off-1 ine device via the data processing system and the network Proof of legitimation is listed. A display and a printout make the booking process transparent for the customer. Of course, other hedging procedures are conceivable on this or a similar basis.

The information carrier is preferably designed as a microprocessor or semiconductor chip card which, in addition to its own power supply with a BUS system, has an arithmetic logic unit and memory units, a clock generator and a timer or the like for the purpose of time-limited legitimation, with the possibility of independently coding read random generator codes. Usually, however, the coding is carried out using separate write / read units, in order not to oversize the chip and to simplify the chip card. Portable read / write units are basically equipped with the same elements as those of the peripheral devices, whereby it should be emphasized that the comparable arithmetic units perform the same operation, and the portable read / write units preferably use at least one timer for the time-limited legitimation of the information carrier via the read PIN code and the associated function keys.

The fact that a microprocessor or semiconductor chip can be designed as a logic memory chip is assumed, the description of elements such as drivers or the like, which are as hardware-specific as accumulators as computer memory, is omitted below.

With reference to the accompanying drawings, which show particular embodiments of the invention, this will now be explained in more detail.

FIG. 1 shows the chip card 1 on which the method and the device are based

FIG. 2 shows the corresponding portable write / read unit 2.

Figures 3 u. 4 shows an exemplary embodiment of the invention in a schematic illustration with a chip card and portable write / read unit when transferring money to one's own chip card.

Figure 5 shows an embodiment of the invention in a schematic representation, wherein the money transfer from card to card is described. FIG. 6 shows the schematic structure in the communication between transmitter and receiver with the interposition of the respective banks.

FIG. 7 shows the schematic structure of a system for cashless payment transactions.

FIG. 1 shows the information carrier on which the method according to the invention is based in the form of a chip card 1. The chip 17 is connected to the memories 22 to 31 by means of a data bus system 21, all units being provided with a power supply 32. The chip card 1 has an interface 33 for communication with the write / read unit. In the memory 22 there is the PIN number, which is followed by the write / read memory 23. The memories 24 and 25 are also designed as read / write memories, while the memory 26 is a read-only memory or programmable read-only memory. The memory 27 is designed as a read / write memory or read-only memory or programmable read-only memory and the memories 28 to 30 as a read / write memory. Memory 31 contains owner-specific data as a fixed memory.

FIG. 2 shows the portable write / read reader 2. It has a chip 19, a corresponding interface 40 and an arithmetic unit 41, which are connected by means of a data bus system 42 to a display 43, a timer 44, a keyboard 16 with a special keypad 45 and are coupled to a power supply 46. It should be emphasized that the portable write / read unit 2 can be used as a computer by means of the keyboard 16 and the special keyboard 45.

In the special keypad 45 there is a reference key 47 for the timer and a so-called "clear key" 48. In addition to the functions "on", "off" and the respective arithmetic operations, a confirmation or "enter key" 49 is also provided. In addition, a "second func. Key" not described here can be arranged.

Using the following exemplary embodiments according to FIG. 3 u. 4, the transfer of money to one's own chip card 1 is now explained.

The chip card 1 is first programmed via the preferably portable write / read unit 2 by inserting the chip card 1 (arrow direction 51). For this purpose, the write / read reader 2 has a card holder 15. After the PIN number has been entered via the keyboard 16 of the write / read reader 2, it is transferred to the write / read reader 23 and is checked for legitimation by means of the memory 22, in which the permanent memory PIN number is located, via the data bus 21 and the interfaces 33 and 40 is eg from the memory 24 the random number 1 or the code

In the arithmetic unit 41 in the write ZLeseg erätes ^~ 2 g -eholt,

This is also done with one of the values "Code III" from memory 26 (read-only memory or programmable read-only memory). The coding is now carried out. For example, the random number g or the code I from memory 24 is multiplied by the code III_. The coding stands out as

Code I x Code 111 = X. n 2 1

from.

X, is reduced to e.g. B. 6 digits for code I, 1 n + 1

This code I is transferred to the memory 25, n + 1

As a result, the program command created via the keyboard 16 is released by reading it into the memory 28. The instructed credit 1 remains unchanged in the memory 29. Additional bank information can be entered into the memory 30 via the keypad 16.

The memory 23 is cleared and the card is removed. The timer 44 is programmed and activated, for example, with the button 47. As a result, the PIN number is held for a defined time.

The timer is emptied by means of the clear key 48 and, after the introduction of the chip card 1 into the write / read reader 2, the memories 25, 28 and 30 are emptied and the contents of the memory 25 are rewritten into the memory 24.

After bank communication, e.g. B. the debit via the data processing system 14a ¹ , the memory content of the memory 25 is emptied and memory 24 is provided with a new bank code I, the credit 1 from the memory 29 is increased to the credit 2, the memory 30 is read / write unit 2a emptied, while the memory 31, as a fixed memory, has owner-specific data which also control the process. Figure 5 shows an embodiment of the transfer from card to card.

The chip card 1 is in turn inserted into the portable write / read device 2. By entering the PIN number in the write-read memory 23, the authentication is carried out and via the data bus 21 and

Interfaces 33Z40 are converted from memory 24 e.g. the code I in + fetched into arithmetic unit 41. Code III is taken from memory 26. The coding is carried out: Code

I _{n +} x Code III3 X 2 is reduced to 6 digits, for example, and is shown as Code In + 2.

Code I r. is transferred to the memory 25. Then n + 2 the random generator number 2 or the code IV is transferred to the arithmetic unit 41. m

By entering the recipient data via the keyboard 16 and transferring, for example, the booking amount, the account number and the bank code into the arithmetic and logic unit 41 after programming and transferring it to the memory 28, the coding is carried out, for example: (code I _ x booking amount x account number x BLZ) + ZGN „[or code IV ~ = X ₃ . After reducing the product to, for example, 8 digits and possibly reducing the total to 8 digits for 8-digit ZGN ₂ or Code IV, Code II results.

Code II is transferred to memory 28

After card communication, the memory content from memory 25 is overwritten in memory 24, the credit from memory 29 is debited, and memories 28 and 30 are emptied. If timer 44 is programmed and activated with key 47, with which the PIN number is held for a defined time, card communication can take place at a later time.

After entering the transmitter chip card 1 into the write / read reader 2a and selecting the recipient, the chip card 1 is read in via its write / read reader 2a. As a result, the credit 2 is reduced by rebooking in accordance with the program command and memory 30 and memory 28 are emptied. The memory 27 for the code IV can be designed as a read-only memory or a programmable read-only memory, or is activated in an online step with its own bank as a write-read / read memory, the code IV being a random number generator m + 1 in the memory 27 is reread.

The recipient now selects his bank and transfers the command to transfer the received credit to his operating account.

The recipient bank's call back request is now made to the creditor bank. After the connection has been established, the creditor bank transfers the command: Posting amount to bank code, code II.

The debtor bank has already calculated and listed codes I (1 to p), whereby a new list is started after each online step by transferring a new ZGN (code I). The old lists are deleted after a defined time. The debtor bank encodes all existing codes I in all lists with the rule recorded above and thus receives the list of codes II. If the creditor's transferred code II matches one of the calculated codes II, the transfer takes place. FIG. 6 again shows a schematic exemplary embodiment of the data transfer in addition to the device according to the invention with the involvement of the banks.

First of all, it should be noted that the method according to the invention and the associated device are subject to two possible variants, on the one hand the chip card 1 being designed such that it carries out the computing operations or on the other hand the required computing operations are carried out by a write / read unit 2.

If the chip card 1 itself carries out the arithmetic operations, then, in addition to the microprocessor 17, it preferably requires programmable read-only memories and further write-read / write memories, a power supply, a clock generator and, if appropriate, time-legitimating units, an interface and an arithmetic unit and bus system.

In addition to a power supply, the associated write-Z reader unit 2 then requires the chip, write-Z reader units, a keypad, a display or the like, a card holder and an interface and a BUS system.

In the second variant, in which the write / read unit 2 carries out the arithmetic operation, it additionally has an arithmetic unit and memory units, it being possible for at least the arithmetic unit to be dispensed with in the chip card.

The write / read units 2Z2a themselves are preferably connected to the telephone 1 or the like in stationary on-line operation, but can also be operated separately in a stationary manner and in this form also for off-line Suitable application, with an additional storage unit such as floppy disk or the like takes over the time-shifted data transfer.

Portable write / read units 2 are mainly used for discrete PIN number confirmation and are suitable for legitimizing the information carrier for a defined period of time with a corresponding key, for which an integrated timer or the like is suitable.

The exemplary embodiment below describes a variant in which the write / read unit 2 carries out the write / compute operation.

The transmitter S is in possession of a chip card 1 which, in addition to a fixed memory identification (PIN number), has a memory for bank-specific information and a memory for the coding. The aforementioned memories have the reference numerals 22-31.

The chip card 1 is shown enlarged here and is inserted into the card holder 15 of the portable write-Z reader unit 2, via the preferably alphanumeric keypad 16, the user now first enters the PIN number. The integrated chip (19) confirms the legitimation.

The chip 19 then activates the arithmetic unit 20 and the coding is carried out as previously described. After inserting the programmed chip card 1 into the receptacle 15a of the write-read / read unit 2a, the connection to one's own bank or to one's own account 10 is established via the modem 3 and the data network 9 when the data processing system 14 passes through.

It should be noted here that although the off-line direct communication with the recipient and thus the rebooking from card to card is possible, a booking process from special account 11 can only be carried out from bank to bank (see above), which procedure is therefore part of the security system of the present invention. In online operation, memory 24 of chip card 1 is overwritten by random generator 13.

At the recipient "E", the amount instructed passes through the account 10, with which payment information, sender identification, etc. are transmitted. Only after the actual booking process from bank to bank can the recipient "E" transfer the amount instructed to his bank account for use as a means of payment to a special account, his own PIN number being used, and a new code I being transmitted by his bank becomes. This means that the transfer routes and bookings can be traced at any time.

To protect against misuse, the sender code is further coded by recipient-specific data. It is conceivable that, for example, the code number 61696 is multiplied by the amount debited, the account number and the bank code of the recipient and the number sequence then on z. B. eight digits is reduced. A subsequent addition of a further 8-digit code number (Code IV) and a possibly necessary reduction to 8 digits results in Code II. It is important to note that during the reduction, for example, all zero digits are converted to any value from 1 to 9 . Since the relevant bank can calculate the normal coding in advance, it is multiplied by all calculated codes I that are still up-to-date with the recipient data (the debit amount, account number x bank code) and the subsequent digit reduction or addition as described if the lawful use of

Recipient information carrier identify the code and legitimize the process.

It is therefore always ensured that the cash deposits debited on the corresponding memory units of the chip card are credited by the bank to at least one special account which is only accessible via the special coding (code I / I I) described.

Figure 7 shows the schematic structure of a system for cashless payment transactions.

The Off-1 ine devices 2a with their information carrier receptacle 15a are connected via the interfaces 52 to the network 54, which is shown here under construction, and via the interface 52 to the data processing system. The on-line devices 2a are here also coupled in a tree structure to the data processing system via the interface 55, the interface 56 representing the transition from the network 54 to the on-line devices 2a. While with the Off-1 ine devices the on-1-in devices show the random number generator 57 and the timer 58 as a special feature.

The present invention provides a method and a device with which it is possible to store confidential information which, on the one hand, is only accessible with legitimation information and, on the other hand, also enables a payment process or the like with instruction and identification information, which is also comprehensible , but identifies the creditor bank and the creditor account as mandatory data information, so that even if the data network is misused, the payment instruction cannot be derived from an unauthorized account. This also completely eliminates bank errors.

Claims

Expectations

1. A method for secure remote data transmission, characterized in that an information carrier by means of a write / read unit with information in addition to

Read-only memory identification (PIN number) is provided, which legitimizes the user that the information carrier is suitable for data transmission and recording or recording or for payment transactions and that it is protected against misuse by being coded and that the information carrier via data transmission networks with at least communicated with another information carrier or at least one write / read unit or is contacted and read directly by a write / read unit via its interface.

2. The method according to claim 1 to 9, characterized in that the information content extends over payment transactions, bookings, reservations, search messages and similar communications.

3. The method according to claim 1 and at least one of the preceding claims, characterized in that the comparison of the identity of the read-only memory PIN number with the PIN number entered in a read-write read-only memory, at least the read-only memory being part of the information carrier, for this Releases use, making one of one Random code generator entered random number or already coded number (code I) or the like is encoded or converted with at least one further random number or the like, and wherein the information carrier a changed, ie for example newly calculated coding (code I ¹ ) with the forwards the information to be transmitted and that after the code (code I ¹ ) has been forwarded, it is re-encoded for the following use (code I ").

4. The method according to claim 1 and at least one of the preceding claims, characterized in that in the case of telephone communication a write / read unit supplies the information carrier information to a modem, the modem being coupled to at least one further write / read unit on the receiver side which processes the information or makes it visible or transmits it in whole or in part, in encrypted or unencrypted form to another information carrier, and the transmitter information carrier can preferably be used to protect against misuse only by transferring a code (code I).

5. The method according to claim 1 and at least one of claims 1 to 4, characterized in that in the case of payment transactions via telephone line or the like via a code (code I) a cash balance is debited from the operating resource account and on at least one read-write memory of the information carrier is stored, access to the write-read-only memory being possible only by transmitting the current code (code I) online to the bank and that preferably a special account of the bank is assigned to each write-read-only memory with credit, so that in the event of misuse only the maximum amount of this account can be tapped.

6. The method according to claim 1 and at least one of the preceding claims, characterized in that in the payment transactions by means of information, the debiting process is preferably carried out on-line to the bank and the remaining credit of the write-read memory is then updated with a new coding (code I), in which the old code I is overwritten with a new random generator code.

7. The method according to claim 1, characterized in that the information carrier in payment transactions via its program, parts of its memory content and its interface establishes the on-1 ine connection, preferably a calculated code (code I) transmitted and ultimately at one's own bank is checked for legitimation.

8. The method according to claim 1 and at least one of the preceding claims, characterized in that after a fixed number of uses of

Information carrier as a means of payment off-line a further use, at least one new random generator code (code I) is read in online by the corresponding bank and thus the old code I has to be overwritten, whereupon the write-read / write memory credit and thus the special account are increased.

9. The method according to claim 1 and at least one of the preceding claims, characterized in that the credit stored in at least one write-read memory of an information carrier entirely or partially with the respective current code (code I) via telephone line or the like, another information carrier or a write -Z reading unit with memory unit is transferred and thus debited.

10. The method according to claim 1 and at least one of the preceding claims, characterized in that before the use of an amount credited to an information carrier as a means of payment of this On¬ line and using the transmitted identifier of the related bank of the recipient bank must be credited, with which the actual The bank's special account is debited and, in a subsequent step, your own transfer to a special account, your own coding (code I) and the amount debited are read into the corresponding write / read memory of the recipient information carrier.

11. The method according to claim 1 and at least one of the preceding claims, characterized in that, for enhanced security, a code I stored on the information carrier from its memory I enters the arithmetic unit of the preferably portable write / read unit and is further encoded with data of the receiver and that the code II determined in this way after it has been read into the memory II and after the information carrier has been removed from the write / read unit with the booking amount and other information is transmitted to the receiver information carrier by remote transmission network, which frees the memory II, while previously the code I used for coding is additionally was coded according to the usual procedure and enters the memory I which has become free as a new code I for further coding.

12. The method according to claim 1 and at least one of the preceding claims ^' , characterized in that the related bank or the like calculates the corresponding codes I in advance from the random generator numbers and with a debiting process by a recipient or creditor bank all current and listed codes I with preferably encodes the recipient's data and compares the code II dubbed for debiting with identity to one of these coded codes II and legitimizes the booking process with identity.

13. The method according to claim 1 and at least one of the preceding claims, characterized in that the related bank deletes corresponding code lists (codes I) after a defined period of time, while the lists of code II are deleted immediately after authentication.

14. The method according to claim 1 and at least one of the preceding claims, characterized in that for further increased security via the information carrier of the recipient, whose bank requests the transferring bank to call back, so that the transfer to the authorized creditor account is inevitable on-line .

15. The method according to claim 1 and at least one of the preceding claims, characterized in that on-line use of an information carrier is prevented in the case of a fixed number of incorrect entries.

16. The method according to claim 1 and at least one of the preceding claims, characterized in that a new random number (code I) is read in the on-line process with the bank or the like, the information carrier, which ine until the next On-1 Step dominates the coding.

17. The method according to claim 1 and at least one of the preceding claims, characterized in that the coding (code I and II) and programming of the information carrier is carried out via a preferably portable write / read reader, the arithmetic unit of the coding (code I and II). of the information carrier, with the determined code (code IZII) being available for secure data transmission if the information carrier is legitimized by confirming the PIN number.

18. The method according to claim 1 and at least one of the preceding claims, characterized in that the portable write / read reader by means of at least one integrated and selectable timer stores the corresponding programmed PIN number for a limited time and thus the respective

Information carrier legitimized for use when it is entered.

19. The method according to claim 1 and at least one of the preceding claims, characterized in that the coding (code IZII) of the information carrier via a preferably integrated in its microprocessor arithmetic unit and is provided for secure data transmission.

20. The method according to claim 1 to 19, characterized in that by means of a display or the like of the Z read / write units and Z or printer, the related bank, the recipient bank, the debited credit, the card number or the like or in the case of information transmission of any other type of information content entirely or partially, unencrypted or encrypted is made visible and acknowledgeable.

21. The method according to claim 1 and at least one of the preceding claims, characterized in that in the event of loss of the information carrier or repeated incorrect use by a higher-level PIN number in banking, the Z special account accounts are posted back to the operating resource account.

22. The method according to claim 1 and at least one of the preceding claims, characterized in that a code IV carries out a specific coding (code II) during the transfer from bank to bank.

23. The method according to claim 1 and at least one of the preceding claims, characterized in that the write / read unit can be used as a computer. - 3'i -

24. The method according to claim 1 and at least one of the preceding claims, characterized in that the information carrier of a write-Z-reading unit is entered for cashless payment transactions, the on-line or off-line debits the information carrier and until the amount is credited to the recipient bank cached.

25. The method according to claim 1 and at least one of the preceding claims, characterized in that for saving time and security in cashless payment transactions via a separate write / read unit, the on-1 ine connection for the corresponding information carrier and that this with a random generator code Write Z read unit is provided on a special write Z read memory for the subsequent off-1 ine payment transactions, the payment transactions being secured in that the off-1 ine devices transfer the random generator code only with prior online authorization of the information carrier receive and save a network between on-line and off-1 ine devices with an intermediate data processing system and thereby release a purchase, the stored random generator codes being deleted after a defined time.

26. Device for carrying out the method according to claim 1 and at least one of the preceding claims, characterized in that that an information carrier (1) is provided in addition to a microprocessor or semiconductor chip (17) with at least one read-write memory (22-31), which is suitable for receiving information and cash bookings, and which is via the interface of the chip (17) programmable by means of preferably portable write / read units (devices) (2) and their storage unit (s) e.g. B. can be changed via arithmetic units, whereby long-distance transmission networks (9) such as the telephone network are used, the peripheral devices (2a) of which are suitable for recording information carriers as well as the portable write / read units (2), and that in the telephone (12) a modem (3rd ) is provided, while digitally operating networks dispense with a modem and a random code generator (13) and a data processing system (14a ¹ ) are suitable for money transfer in cashless money transactions.

27. The apparatus according to claim 26, characterized in that when using the information carrier (1) in monetary transactions over the telephone network (9) telephones (12) with modems (3) and write-Zreading units (2a) are provided, whose interface with the information carrier Interface, are compatible and are suitable for the exact information carrier recording (15a) and information transmission.

28. The device according to claim 26 and at least one of the preceding claims, characterized in that that when using other transmission networks that work digitally, the peripheral devices are provided with write / read units and are suitable for information carrier recording and are compatible with the information carrier interface.

29. The device according to claim 26 and at least one of the preceding claims, characterized in that the information carrier (1) is designed as a microprocessor or semiconductor chip card with optionally integrated arithmetic unit and at least one read-write memory.

30. The device according to claim 26 and at least one of the preceding claims, characterized in that the preferably portable write / read units (2) are suitable for information carrier recording (15), with a preferably alphanu eric keyboard (16) and a display or the like and a microprocessor or semiconductor chip (19) with an integrated arithmetic unit (41), a power supply (46) and a BUS system (42) for coding, the interface of the chip (19) being that of the information carrier (1) is compatible.

31. The device according to claim 26 and at least one of the preceding claims, characterized in that the preferably portable write / read units (2) with at least one integrated and each by means Keyboard (16) separately selectable and time-programmable timers (44) are provided, the write-read / read units (2) with their storage units being suitable for holding at least one programmed PIN number until the associated information carrier (1) is used, and preferably programming can be canceled using a clear key (48).

32. Apparatus according to claim 26 and at least one of the preceding claims, characterized in that the write-read / read units of the peripheral devices (12) in addition to the information carrier receptacle (15a) with a preferably alphanumeric keyboard (16a), display (18a) or the like and one Microprocessor or semiconductor chip are preferably provided with an integrated arithmetic unit for coding.

33. Device according to claim 26 and at least one of the preceding claims, characterized in that the preferred write / read unit (2) as well as the write / read units (2a) of the peripheral devices

(12) is equipped with features of a computer.

34. Device according to claim 26 and at least one of the preceding claims, characterized in that the write / read unit for off-line operation (2a ¹ ) an information carrier receptacle (15a ¹ ), preferably a microprocessor or semiconductor chip with an interface to the information carrier, at least one Data storage, a display and Zoder printer and a further interface (52) to a network (54) of a data processing system (14a ¹ ).

35. Apparatus according to claim 26 and at least one of the preceding claims, characterized in that the write / read units for online operation (2a ¹ ') an information carrier recording (15a ^{1 1} ) »a preferably microprocessor or semiconductor chip with an interface to Information carriers, a modem in the telephone network, a random code generator (57), a timer (58) and another interface (56) to the network (54) of the data processing system.

36. Apparatus according to claim 26 and at least one of the preceding claims, characterized in that the write / read units for on-line and for off-line operation are integrated in one device and preferably have an interface to a data processing system.

37. Apparatus according to claim 26 and at least one of the preceding claims, characterized in that for hotel reservations, for querying vacant hotel rooms or the like, central data processing systems are equipped with modems for telephone traffic or with connections to other long-distance transmission networks, the information carriers (1) having a corresponding programmed chip and special memory elements are provided.