CN100570649C

CN100570649C - The safety intelligent card system that is used for stored value card

Info

Publication number: CN100570649C
Application number: CNB2003801105354A
Authority: CN
Inventors: 罗尔·帕若丁
Original assignee: Individual
Current assignee: Individual
Priority date: 2003-10-15
Filing date: 2003-10-15
Publication date: 2009-12-16
Anticipated expiration: 2023-10-15
Also published as: CN1947160A; DE60313225D1

Abstract

System comprises a twin-core card (1), and wherein a slice is the chip of fixing (2), is made up of a microprocessor that has protection internal memory able to programme; And a slice is removable chip (3) in addition, mainly comprises a single-use internal memory that is used for cooperating default available credit amount, also has a small-sized hand-held card-reading terminal (6).System also comprises communication device, be used for exterior terminal (12 ', 12 ", 12 " ', 12 " ") the correct record of transaction is engaged in the dialogue; Mutual coupling arrangement is used to connect two chip blocks, to reduce the quantity of the programmable internal memory that exchange needs.The internal memory of the removable chip of single-use comprises: unique sequence number that default credit line, the central bank assign.When inserting handheld terminal for the first time, card is recorded in credit line and unique sequence number in the programmable internal memory by mutual coupling arrangement.

Description

The safety intelligent card system that is used for stored value card

Technical field

The present invention relates to smart card system, comprise allowing the card master when buying commodity, need not to pay any currency and coins, as long as just can finish the electronic fare payment system of payment with a sheet smart card.Be particularly related to a safety intelligent card system as digital wallet.

Background technology

Bank card system has been supported this transaction, but it is subject to large transaction, and it needs directly and the networking of the account of bank.

Many digital wallets (DP) system has designed, and it need preestablish the amount of money of wallet money, and the commodity of purchase or the amount of money of service are not higher than the available amount of money.

Generally speaking, digital wallet all is based on the standard chips card.These chip cards can repeat to read.Do not reclaiming in the stored value card, its digital module comprises a standard memory that shows avail, will deduct corresponding quantity behind each consumer sale, until being anchored to till zero.This digital wallet uses the phonecard just as prepayment telephone expenses.And the structure of reusable stored value card is more complicated, because it comprises a readable and writable memory that has break-even file, for each consumer sale, amount deducted as disposable stored value card correspondingly increases the amount of money according to the number of supplementing with money; These all operations all are to finish under the monitoring of microprocessor according to certain safe class, and the disposable electric wallet does not have.

The management system of disposable stored value card needs a system that obtains and supplement with money and the system that the digital money of monitoring shifts.Therefore, with respect to existing access, need a new system.For example, the wallet administration system needs the process of obtaining that a system controls remote transmission and digital money simultaneously.All electronic purse systems are all supplemented with money by terminal, and safe class is lower than money card.

Among existing electronic purse system, system described in the European patent (patent No. EP 90400280.5) one uses the flexible processing method, the chip card that the user holds in this system comprises a fixing chip and a removable chip that is storing the credit rating of authorizing, and credit rating will reduce when each transaction.This card is installed on the special-purpose terminal.

But because the content of storer can be modified (in fact, it all can be modified) when concluding the business each time, because storer is repeatedly accessed, its security is just relatively poor with respect to disposable card.

In addition, one is used the system of removable chip not controlled by financial center, therefore will cause the risk of uncontrollable deviation on some money by the establishment of digital money.

Summary of the invention

Based on above reason, the object of the present invention is to provide a kind of smart card system that can be applied in the digital wallet and have a stuck-module and a removable modules, in this system, the credit line that revise in the removable modules of central bank control is impossible.

The present invention designs a safety intelligent card system, this system mainly comprises a card, first module in the card is made up of the programmable storage of a microprocessor and a safety, second is freely used module mainly to comprise a ROM (read-only memory), is writing down the default credit line that the user can arrange; ROM (read-only memory) has outside contact jaw, and corresponding, fashionable in card insert like this with corresponding contact jaw in the handheld terminal, storer just can be connected with terminal.

Terminal shows that " communication " indicates and the remote terminal communication is concluded the business with record, and demonstration " connection " represents that first and second module link together, and preparation is deducted in the safe programmable storer according to dealing money.The information that the ROM (read-only memory) of second module stores is except default credit line, and the unique sequence number that also has the central bank to distribute is as the record of bank." credit line and unique sequence number are recorded in the safe programmable storer by transmission " can show when card is inserted into terminal for the first time.

Description of drawings

After the description of reading, can have one to understand clearly to purpose of the present invention, meaning and characteristics about following accompanying drawing:

Fig. 1 is the synoptic diagram that two chip cards of fixed chip and removable chip are equipped with in the present invention.

Fig. 2 be of the present invention on two chip cards the synoptic diagram of removable chip insert structure.

Fig. 3 is the synoptic diagram of another apolegamy form of the two chip cards of the present invention.

Fig. 4 is the synoptic diagram that the two chip cards of the present invention insert handheld terminal.

Fig. 5 is the synoptic diagram of the payment system of handheld terminal of the present invention.

Fig. 6 is the synoptic diagram of trade mode of the present invention.

Embodiment

In the present invention, smart card can also be called the twin-core card, as shown in Figure 1.Card 1 comprises a fixing programmable chip 2 and a removable disposable chip, and this chip can be changed, and the predeterminable amount of money (for example 100 yuan).

In general, removable chip is mounted in the bayonet socket of a special use in the card 1.As shown in Figure 2, chip is led female guiding device 20 ' cooperation insertion bayonet socket of device 20 and card 1 by the hectometre of chip.Collar extension B is slightly narrower than internal orifice A in the slot, and this scale 1 just can utilize the removable chip of self tension force fastening.

As shown in Figure 3, reading of data can be read in the card reader that all match by the contact jaw of this pair chip card.The position of removable chip 3 is symmetrical fully with the position of permanent chip 2 with respect to the center, be like this in above-mentioned reading device, chip card 1 inserted, extract out, rotation and insert again and can both accomplish a chip is read, and then read the another one chip.Therefore, this reading device can replace handheld terminal, realizes the information transmission of chip 2 and chip 3.

In Fig. 4, this pair chip card can be inserted in the handheld terminal that is equipped with screen 9 and keyboard 10, this terminal contains " affirmation " " activation " " approval request " and buttons such as " transferring accounts ", also have communication device 11, can utilize radio frequency, infrared or other are as the communication modes of described long-range connection hereinafter.

Removable chip mainly comprises a ROM (read-only memory), as erasable programmable read-only memory (EPROM) etc., is writing down default credit line and unique sequence code.It is preferably by the central bank's invitation to subscribe that the money product is had monopolization power.Another selection is to store the money that uses the total charge equivalence with the distribution chip by a tame bank, and this also needs to be monitored by the central bank.To a certain extent, in fact this chip is exactly a digital bank book, and it have can direct alienable advantage, although will cut apart and will follow the tracks of to these.It can transmit easily by bank, post office and other authorized location.It is pointed out that each removable chip all is to be carved with or clearly to be printed on chip serial number partly or completely, this registration code also can provide on bar code.

Permanent chip 2 is contained on the card according to iso standard.This chip mainly comprises the programmable storage (ROM of a microprocessor and a cover high safety, EPROM and EPROM), writing down user's identification code, useful data (reward vouchers such as several parameters such as user's overview, classification, cut interest rate access authorization ...).In store trade management software of these storeies and the useful algorithm of a cover, thus best security guaranteed.The algorithm of also in store other functions of realization of described storer, these functions can be mentioned in the back.EEPROM can be divided into several parts, and each part all has special purposes.The visit of each part is all protected by password and/or key.Such as, the visit of storer 5 and management etc. in each transaction.Use the possibility of the storer of a plurality of parts to make different suppliers, as department store, airline etc. register in system and load specialized application software, or are absorbed in " market strategy ", or are absorbed in " data mining ".

When the card 1 that new removable chip is housed injected in the handheld terminal 6 for the first time, the mutual coupling arrangement of assembly inside handheld terminal realized the connection between permanent chip and the removable chip.Then, the microprocessor of permanent chip begins information such as the default amount of money in the ROM (read-only memory) in the removable chip and unique sequence number are transferred to the safe storage of permanent chip by being contained in mutual coupling arrangement in the handheld terminal 6 (not having among the figure to show).

In case after the amount of money number of removable chip had passed in the safe storage of permanent chip, the data of removable chip will disappear, and can not be used by the user again.But, being in safe reason, microprocessor can check in regular turn all that before each transaction removable chip is whether also in the twin-core card.

The electronic section of handheld terminal 6 is at first communicated by letter the chip 2 of twin-core card with chip 3 as described previously like that together, but also will manage the data of exchange between communication mode 11 and external connection device 12 simultaneously.In the time of each transaction, the microprocessor of permanent chip can be controlled at data exchange operation between twin-core card and the external connection device by handheld terminal 6.

Some other functions of handheld terminal have: provide power supply to two chip cards that battery is housed, supporting

chip

2 and 3 read comprise control, purposes such as information and safety.

Described according to Fig. 5, the exchanges data between handheld terminal and the various coupling arrangement.Under the overwhelming majority's situation, employed coupling arrangement is a terminal 12 '.It is equipped with a contactless communicator, with the communicator dialogue of handheld terminal 6.It also is equipped with smart card fetch equipment 16, allows and the contact point swap data.Terminal 12 ' can be installed in retail shop, service supplier, motorbus, parking lot ... Deng local, be used to receive a series of payment record and other data.The data of exchange have following four kinds between handheld terminal 6 and the terminal 12:

(a) be used to exchange the data of control: comprise mutual identification, anti-interference when several handheld terminals transmit together, coding or the like.These data all are to be used for making the exchanges data between handheld terminal 6 and the terminal 12 ' to become more reliable.

(b) data of each dealing money, the described amount of money are the amount of money numbers that is stored in the safe storage of terminal 12 '.

(c) data of support process management and security: monitor gross cash flow, be used to prevent the data of safety of cheating.

(d) commerce and various data: the advertising campaign relevant with some data of user, these data storing are in permanent chip memory.Incentive and regular CLIENT PROGRAM, such as expenditure ratios of some costs, consumption or service etc. all are stored in the memory headroom of a special use of permanent chip, can use to the user under some environment.

Normally, such as in each evening, terminal 12 ' all is connected with central computer system 14, transmits above-mentioned data (b), (c) and possible (d).Above-mentioned these data can be stored in the suitable storer, and can calculate same day payment amount of money and the data of the security that is useful on and control.Then, computer system can be handled data (b) according to certain procedure, with definite terminal account credit rating that the 12 ' same day, aggregate payment was associated, and obtains all control, check and useful data that need when deal with data (c).

When handheld terminal or battery break down, smart card 1 is directly inserted reader device 16, terminal 12 ' intelligent card reader 16 still can keep exchanges data.According to terminal 12 ' another product pattern, the latter may be more light, just as present digital payment terminal.

Second type coupling arrangement 12 " in special terminal, exist, these terminals all are installed in special place, as bank etc.These terminals and difference to some extent before are because they are to be connected to central computer system 14 always.These special terminals 12 " can allow the user carry out the transaction of a plurality of banks.These transaction are up in advance and are kept in the storer of permanent chip 2 by the keyboard 10 of handheld terminal 6.The microprocessor of permanent chip required the user to import a preset password or PIN number before the request of chip 2 memory transaction will be determined in record.Then,, maybe will block 1 and insert terminal 12 by the non-contact transmission that handheld terminal 6 is authorized " reading device 16 ' in contact transmit, the user can send out the transaction (or information request) of writing down in advance.Terminal 12 " can also pass on and transmit useful data to handheld terminal 6, these data all will be kept in the storer of permanent chip 2.

The external communication device of the third type is installed in the PC 12 that is connected to internet, exchange network or other networks " ' among.The permanent chip 2 of smart card is preserved: eprom memory software document and one or more algorithms, these algorithms can be submitted about each clear and definite Trading Authorization number.Some software and algorithm also are kept on remote service merchant's the point of sale 21 of supplier of goods or running on the internet.Following Example can help everybody to go better to understand:

Send auspicious. Mr. Martin plans to buy some commodity on an internet sales website.He gets in touch with this website, allows this website that their the relevant price list of product is offered him.Mr. Martin has selected the commodity that he wants.Then, point of sales station 21 will show the inventory of selected commodity and the price of needs payment.If Mr. Martin agrees that he just can confirm his order so.Website also can be inquired his contact method (name, address etc.) and selected payment mode.

Mr. Martin is inserted into of the present invention pair of chip card in the handheld terminal 6 and goes, and the keyboard input by handheld terminal needs parameter of buying and the amount of money that will pay then.Click " approval request " key at last.

The algorithm that is kept in the eprom memory of permanent chip will will consider following some or all of parameter: name, surname, address, day rise, the amount of money of payment, handle the card number of money.Microprocessor when whether assessment transaction feasible (enough credit lines, minimum age restriction ...), its can be assessed the authorization number of the transaction that will take place at every turn by these algorithms.The sequence number of extensible chip and the authorization number of calculating all will show in the screen 9 of handheld terminal.In case shown these contents, the quantity of transaction will be charged in the safe storage of permanent chip immediately.

Mr. Martin and then will be by his computer 12 " ' keyboard communicate by letter with point of sales station, data presented on the screen is discussed.The computer 21 of point of sales station also has identical algorithm, at this time will assess authorization number and confirm that the buyer sended over the consistance of number just now, and then determine to accept or refuse this order, and pecuniary transaction will be recorded or be rejected.

Similarly program also can 12 " " be used in telephone set.Under this form, the buyer can exchange with synthetic automatic machinery or human operator may by speech recognition.Then,, on the keyboard of audio frequency (DTMF) telephone set, finish affirmation, the affirmation of other key element of mentioning above in addition (being presented at the sequence number and the authorization number of the removable chip in the screen 9 of handheld terminal 6) to transaction according to prompting.

When using new removable chip 3 to pay for the first time, except the number of transaction, the sequence number of chip will automatically be sent to terminal 12 and go, the code that transmits is " new chip no.x activation ", when dealer's terminal data is carried out remote collection, these information also can be retransmitted in the central computer system 14, to realize the monitoring to chip.

In similar situation, when carrying out certain transaction, the credit line that the safe storage of permanent chip has exhausted and obtained from removable chip, so except the amount of money of transaction, the sequence number of the removable chip that has used up also all can be sent to terminal 12 and go, the code that transmits is " chip no.y uses up ", and these information also can be gone as noted earlier being sent in the central computer system 14.

By this method, the supvr just can recognize in real time exactly:

1) the removable chip of all distribution also has chip distribution and that do not have initialization (finally piling up),

2) all distribution of using removable chip of going out,

3) all removable chips that use up.

These all key messages can be monitored distribution exactly, are using, the digital money quantity of piling up and using up.The transmission of the digital money of any mistake all can be found immediately.Therefore, there is the anti-counterfeiting ability in this system.Reading of stolen chip can be ended immediately, because the blacklist of stolen chip serial number has been sent to each terminal (12,12 ' etc.).

Therefore, this system can also allow the central bank know the state of amount of money and/or issuing bank exactly, thereby manages the money that exists in the distribution chip better.

In each transaction, the difference on the program described above is the communication of system and the sequence number of removable chip etc., so just can monitor more accurately, but needs the management more data.

Transaction:

Each transaction of carrying out between handheld terminal and point of sales terminal all can be passed through following three phases:

1. the sales force imports the price that needs payment on keyboard, and this price will be sent to immediately in user's the handheld terminal and go.

2. the user presses handheld terminal " affirmation " key, agrees transaction.

3. then, the safe storage that has read in the permanent chip 2 of removable chip 3 debts the respective transaction amount of money, and dealer's terminal will credit the identical amount of money.

Just as explained above, smart card 1 can be brought in the processing transaction by contact without handheld terminal.Under these situations, the configuration of permanent chip is according to the standard of ISO, therefore supports present most processing transaction reading device, and these devices do not need only need be connected to central computer system 14 through repacking, and it is just passable to download its application program.

Read for contactless

The transaction step different, its process flow diagram as shown in Figure 6:

1) presses handheld terminal 6 " activation " key, handheld terminal is activated.

2) by the microprocessor of permanent chip current removable chip is controlled, and checked whether the sequence number of chip is consistent with the number of repeatable read access to memory.If control is not determined, electronic section then is activated, and will show the information of a mistake in the screen 9.

3) if control is determined, microprocessor can be preserved controlled variable, comprises the time of this control, the date etc., and interim the mandate allows transaction.

If the modes of payments is contactless words:

5) sales force imports the price that needs payment in the keyboard of terminal 12.

6) terminal will be carried out transmission and the exchange of data a with microprocessor, obtains mutual identification.

7) Jiao Yi amount of money number will be sent to the handheld terminal 6 from terminal 12 and go.

8) amount of money can be presented on the screen of handheld terminal 6.

9) if the user does not press " affirmation " key, transaction will be cancelled.As in most cases, if the user presses " affirmation " key, so:

10) microprocessor can be analyzed the feasibility of operation:

-enough credit line or interim acceptable credit ratings,

Interim mandate (the step 3) of-correct transaction

-to being stored in the analysis of the profile parameters in the read-only storage, modification that number of deals is possible or cancellation (discount, minimum age restriction or the like).

11) if step 10 can satisfy, handheld terminal and terminal just can exchange data b, c, d so.If can not satisfy, transaction will be cancelled so.

12) transaction will be carried out according to following program:

-the removable chip of buyer is debted,

-identical number is credited, in the storer of point-of-sale terminal,

-point-of-sale terminal is to the storage of data c and d,

-as required, in permanent chip memory, data d is preserved.

If payment is by the mode of contact is arranged:

5 ') keyboard of sales force by terminal 12 be the amount of money input that will pay,

6 ') client inserts their smart card in the reader device of terminal 12 and go,

7 ') microprocessor will analyze the interim mandate (validity of step 3).If satisfy validity, just carry out according to step 10, otherwise, then Cancel Transaction.

According to the present invention, each transaction will relate to five individuals or group:

-card issuer provides:

Handheld terminal

The card of permanent chip only has been installed

The publisher of-removable chip: the central bank or authorized bank,

The user of-handheld terminal and everyone,

-transaction generation side: be equipped with different coupling arrangements (12 ', 12 ", 12 " ', 12 " ") dealer and supplier

-data aggregation side: one or more banking institution or local financial entity, distribute the credit line of dealer's account every day.

According to its special structural model, two handheld terminals of smart card are housed, can also carry out the pecuniary exchange of small amount, a responsible transmission, another then receives.In order to obtain the exchange of data, to realize the opposing party that transfers accounts from a side, two terminals are all close mutually.If use infrared load mode, two terminals also will be aligned with each other.Such transaction must meet safety standard, anonymous needs and take over party's duty etc., to prevent the generation of deceptive practices.

Suppose that first handheld terminal will change 3 yuan and go to the another one terminal, transmit leg will be imported the number of transferring accounts on the keyboard of its handheld terminal, then by " transmission " key.Near take over party's handheld terminal then is placed on, press " activation " key then.

-first handheld terminal will be taken 3 yuan that are placed in the permanent chip safe storage away, then the amount of money is passed in the safe storage of reception handheld terminal of positive outstanding message with the sequence number of removable chip.

-3 yuan amount of money number will show on take over party's handheld terminal screen, then can deposit in the safe storage of permanent chip of receiving terminal smart card, this special storer will be assigned to receiving terminal from the opposing party's handheld terminal according to described program before.In addition, also simultaneously in being kept at this storer, this sequence number is relevant with transaction to the sequence number of the removable chip of transmit leg handheld terminal.

For reasons of safety, this account transfer can only limited number of time be used (such as 3 to 5 times), and transferring accounts at small amount only.For some handheld terminal, if it obtained money with regard to the transaction by two handheld terminals from other smart card before payment for the first time, be inserted into when carrying out primary payment in the handheld terminal when smart card so, exist this amount of money in the permanent chip at first to be spent.

Read-only storage can be stored those amount of money that turns over from other smart card by handheld terminal, and by more described above record is carried out in transaction.Read-only storage has write down each transaction relevant parameter (sequence number of the removable chip of transmit leg and the amount of money of reception, the Verification Number that also has him, this notes down for the responsibility of fulfiling the take over party), and as long as the also unspent words in the recordable space of read-only storage, operate these parameters for each transaction and all will send in the computer system 14 and go.

Many variations of the present invention have all been considered.Such as removable chip can be represented loan, and permanent chip will write down the loan administration data by the automatic generation in repayments side, and with data are sent when connected mode 12 is connected.

It must be noted that, according to certain variation, if exist available credit degree in the read-only storage to be not enough to finish this payment, but the interim credit rating of the mandate that the amount of money presets in read-only storage is with interior, and microprocessor also still allows this payment to carry out.And interim line of credit is repaid will use for the first time at new removable chip the time automatically.

At last, not hard to imagine, smart card also can have second even the 3rd slot except comprising the slot that removable chip is installed, and be used to add other and comprise special money numerical value, reward voucher, recreation, and the chip of the contents such as parameter in access security place.If so, handheld terminal also must be installed in the corresponding connector.

System described above is exactly a digital wallet towards all targets, and it is fit to all crowds, need or not need bank account, need not to hold bank card when supplementing with money.It can handle all transaction, has the advantage of traditional money (anonymous payment, possible Stored Value etc.), and simultaneously, it also provides advantages such as automatic supervision as the centralized of money and safety branch and flow process to banking institution.

It is exactly to have solved the forgery behavior that another one of the present invention is used.Utilize any way that trusted authentication chip is attached on luxury goods or the expensive commodity (as clock and watch, jewelry etc.), the personnel that sell goods get on chip fall from commodity when selling.

In fact trusted authentication chip is exactly a removable chip, and this chip must be inserted in the slot of smart card 2 when checking in many ways.With similar before, this chip can be according to existing the algorithm in the read-only storage to operate by handheld terminal 6.It comprises two storage areas.First regional in store authentication code and the unique sequence number of commodity.Such as: " luggage: model x, color y, sequence number no.z " etc.A read-write terminal is installed by the dealer of valuables, only when selling, just with the correlation parameter (date of selling, sale personnel name, quantity, guarantee and conditions associated, passable, owner's name in the future) second storage area of one-time write.

The smart card that certificates of recognition is housed is inserted handheld terminal, just can finish authentication the commodity of selling.According to the algorithm that provides in the eprom memory (at least a algorithm), the microprocessor of permanent chip can read the information segment in the chip memory, and checks their consistance.

Claims

1, a kind of smart card security system comprises a card (1) that the twin-core sheet is installed, and first chip (2) mainly comprises a microprocessor and a safe programmable storer that is called fixed chip; Second chip (3) is transportable, mainly comprises a read-only storer, is used for preserving the credit line that the user that sets in advance can arrange; Also comprise a handheld terminal (6) that can insert above-mentioned pair of chip card, this handheld terminal can carry out the communication device (11) of communication with the remote transaction unit, especially and exterior terminal (12 ', 12 ", 12 " ', 12 " ") carry out transaction record; With the interconnector that above-mentioned first chip with second chip can be connected of assembly, deduct the dealing money in the above-mentioned safe programmable storer in handheld terminal (6) the inside;

It is characterized in that the storer that only reads in that said removable chip comprises, it not only preserves the credit line that a user who sets in advance can arrange, also has a unique sequence number of distributing unitedly by the central bank as banker's record, when two chip blocks inserted handheld terminal for the first time, credit line and unique sequence number utilized interconnector to be stored in the safe programmable storer.

2, system according to claim 1, it is characterized in that: after a new movably storer is installed, when carrying out concluding the business the first time, handheld terminal (6) is by communication device (11), with unique sequence number with the code of a section " new chip activation " pass to exterior terminal (12 ', 12 ", 12 " ', 12 " ").

3, system according to claim 2, it is characterized in that: when the credit line on being stored in the safe programmable storer uses up, with the sequence number of removable chip (3) with the code of a section " chip uses up " be transferred to exterior terminal (12 ', 12 ", 12 " ', 12 " ").

4, system according to claim 3 is characterized in that: also comprise central computer system (14), central computer system and described exterior terminal (12 ', 12 ", 12 " ', 12 " ") be connected; After new removable memory had been installed, when carrying out concluding the business the first time, the code of exterior terminal transmission one section " new chip activation " was given central computer system; The code of terminal transmission when the credit amount of money uses up " chip uses up ", these code informations can allow central computer system monitor and managed fund mobile.

5, according to the described system of claim 1 to 4, it is characterized in that: described exterior terminal is a PC that is connected with point of sales station (21) by the internet (12 " '), can allow the user of PC carry out safe transaction with the credit amount of money and above-mentioned point of sale.

6, according to the described system of claim 1 to 4, it is characterized in that: described exterior terminal is a telephone set (12 " " that is connected with point of sales station (21) by switched telephone network), can allow the user carry out safe transaction with the credit amount of money and dealer.

7, system according to claim 1, it is characterized in that: the microprocessor of described permanent chip (2) uses a kind of algorithm to come to be a string the mandates numeral of once transaction definition at least, and utilization defines as the Several Parameters such as sequence number of the buyer's contact number, dealing money, removable chip.

8, system according to claim 7, whether it is characterized in that: the same algorithm that the microprocessor of described marketing system (21) use and described permanent chip (2) uses defines a string mandate numeral, consistent to check the mandate numeral that produces with the card (1) of chip communication.

9, system according to claim 8, it is characterized in that: transaction by PC (12 " ') or phone (12 " when keyboard on ") is confirmed, the sequence number of storer (3) and can on the screen (9) of above-mentioned handheld terminal (6), show movably by the mandate numeral that the microprocessor of permanent chip (2) calculates.

10, according to claim 1 or 7 or 8 or 9 described systems, it is characterized in that: the microprocessor of described permanent storage (2) can check all before any transaction that described removable chip (3) is whether still on two chip cards (1).

11, according to the described system of claim 1 to 4, it is characterized in that: described terminal (12 ', 12 ", 12 " ', 12 " ") comprise a smart card reader equipment (16,16 '), when the handheld terminal Fail Transaction, smart card (1) can connect with this card-reading apparatus, thereby guarantees the carrying out of transaction.

12, system according to claim 11, it is characterized in that: the layout that described removable chip (3) and described permanent chip (2) are centrosymmetric, by inserting, extract, rotate and insert again described smart card reader equipment (16,16 '), to guarantee to read the data that read again behind the chip on another chip

13, system according to claim 1 is characterized in that: described external unit is another handheld terminal, is inserting another chip card; Transaction comprises; at first insert the permanent chip that blocks and lend in the credit amount of money on the safe storage from first handheld terminal; sequence number with the above-mentioned amount of money and removable chip is transferred on second handheld terminal then; in the permanent chip of the second hand-held terminal card, add the equal amount of money then on the protected storage, and write down the sequence number of the removable chip of first card.