A value transfer system using integrated circuit cards for exchanging
electronic cash in off-line transactions employs cryptographically secure
message protocols. Cards are loaded each with two schemes from a series
and interaction between cards determines and uses the oldest scheme shared
by the cards, causing one card to switch schemes irrevocably if that
common scheme is its second scheme. In this way, a switch to a new scheme
can migrate through the system.