Abstract: There is provided a system and method for conducting a monetary transaction among a Point-Of-Purchase (“POP”) device (102), a mobile device (104) and a certifying authority (108). The POP device (102) may provide goods and/or services. A short-range wireless link (110) is established between the POP device (102) and the mobile device (104), and a long-range wireless link (112) is established between the mobile device and the certifying authority (108). The POP device (102) provides its identity and prices for its goods/services to the mobile device (104). After a particular good/service is selected, the mobile device (104) provides its identity and certain information, namely the POP device's identity and the price for the selected good/service, to the certifying authority (108). The POP device (102) then receives the certain information back from the certifying authority (108) via the mobile device (104) as well as an associated digital signature generated by the certifying authority.

Abstract: Smart card personalization includes a personalization preparation process prior to the personalization session at the personalization bureau. The personalization preparation process derives the derived card keys for a single or for multiple applications. The preparation process also generates issuer and card public key pairs and certificates. Master keys are used in conjunction with the personalization preparation process rather than utilizing the master keys during the remainder of the personalization process at the personalization bureau. Because the personalization preparation process does not require highly specialized, expensive machinery, it is straightforward for an issuer to derive the card keys at the issuer's location. Once the personalization preparation process is complete, the derived card keys are stored in an output file merged with other card personalization data.

Abstract: A method for using a smart card to gain access through an access device upon payment of a value (V) is performed by first operatively coupling the card to the access device. The access device reads a first and a second set of data from the card, and performs a first authentication process on the first set of data. Access is permitted if the first authentication process meets a required condition. Access is denied otherwise. If access is permitted, the second set of data is stored in the access device for further processing, including a second authentication process which operates on the first and second sets of data.

Abstract: A method for using a smart card to gain access through an access device upon payment of a value (V) is performed by first operatively coupling the card to the access device. The access device reads a first and a second set of data from the card, and performs a first authentication process on the first set of data. Access is permitted if the first authentication process meets a required condition. Access is denied otherwise. If access is permitted, the second set of data is stored in the access device for further processing, including a second authentication process which operates on the first and second sets of data.