Browse Prior Art Database

Phone Card Fraud-Reduction Method

IP.com Disclosure Number: IPCOM000115070D
Original Publication Date: 1995-Mar-01
Included in the Prior Art Database: 2005-Mar-30
Document File: 2 page(s) / 47K

Publishing Venue

IBM

Related People

Lynch, LE: AUTHOR [+2]

Abstract

A method to reduce phone card fraud perpetrated by theft of PINs is disclosed. In response to a prompt by the telephone, a caller enters his PIN in a particular order, selected from several alternatives by the system, that disguises the actual PIN. The phone system reorders the disguised PIN prior to verification, and if the PIN is valid for the card, the call proceeds. Since the communications between the phone system and the caller is private, and the particular alternative the phone system chooses is variable by call, and is not not known to a potential thief, the PIN is protected.

This text was extracted from an ASCII text file.
This is the abbreviated version, containing approximately 64% of the total text.

Phone Card Fraud-Reduction Method

      A method to reduce phone card fraud perpetrated by theft of
PINs is disclosed.  In response to a prompt by the telephone, a
caller enters his PIN in a particular order, selected from several
alternatives by the system, that disguises the actual PIN.  The phone
system reorders the disguised PIN prior to verification, and if the
PIN is valid for the card, the call proceeds.  Since the
communications between the phone system and the caller is private,
and the particular alternative the phone system chooses is variable
by call, and is not not known to a potential thief, the PIN is
protected.

      When placing a call, if the card number can be seen when it's
being entered, it can be stolen.  By making some part of the data
which the user must enter variable from call to call, and selecting
the variability from several alternatives, and keeping the particular
alternative chosen private, theft of the PIN is denied or made
significantly more difficult.

      Example: The calling card number is 914-555-1086-1234.  When a
customer initiates a call, let the system (or operator) ask that the
user add a simple but randomly chosen number to the PIN prior to its
entry.  Suppose the system chose "1001;" in this case, the customer
would enter "914-555-1086-2235." An observer who does not hear the
randomly chosen number that the computer has selected cannot deduce
the PIN of 1234.  Hence, the observation of 2235 as the PIN will no...