CA2321229C - Locking and unlocking an application in a smart card - Google Patents
Locking and unlocking an application in a smart card Download PDFInfo
- Publication number
- CA2321229C CA2321229C CA002321229A CA2321229A CA2321229C CA 2321229 C CA2321229 C CA 2321229C CA 002321229 A CA002321229 A CA 002321229A CA 2321229 A CA2321229 A CA 2321229A CA 2321229 C CA2321229 C CA 2321229C
- Authority
- CA
- Canada
- Prior art keywords
- smart card
- password
- application
- card
- identifying information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
- 238000000034 method Methods 0.000 claims description 44
- 230000006870 function Effects 0.000 claims description 16
- 238000010586 diagram Methods 0.000 description 15
- 238000013478 data encryption standard Methods 0.000 description 8
- 230000004044 response Effects 0.000 description 7
- 238000007796 conventional method Methods 0.000 description 5
- 239000004065 semiconductor Substances 0.000 description 3
- 238000012986 modification Methods 0.000 description 2
- 230000004048 modification Effects 0.000 description 2
- 230000008520 organization Effects 0.000 description 2
- 230000008569 process Effects 0.000 description 2
- 238000013459 approach Methods 0.000 description 1
- 238000013475 authorization Methods 0.000 description 1
- 238000004891 communication Methods 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 230000000977 initiatory effect Effects 0.000 description 1
- 238000003780 insertion Methods 0.000 description 1
- 230000037431 insertion Effects 0.000 description 1
- 230000014759 maintenance of location Effects 0.000 description 1
- 230000007246 mechanism Effects 0.000 description 1
- 239000002184 metal Substances 0.000 description 1
Classifications
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
- G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
- G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
- G07F7/1008—Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
- G06Q20/341—Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
- G06Q20/409—Device specific authentication in transaction processing
- G06Q20/4097—Device specific authentication in transaction processing using mutual authentication between devices and transaction partners
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
- G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
- G07F7/0873—Details of the card reader
- G07F7/088—Details of the card reader the card reader being part of the point of sale [POS] terminal or electronic cash register [ECR] itself
- G07F7/0886—Details of the card reader the card reader being part of the point of sale [POS] terminal or electronic cash register [ECR] itself the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
Abstract
Locking and unlocking an application in a smart card (1208) allows for automatic authenticity of a lock or unlock command without the need for a personal identification number (PIN). The smart card (1208) is locked and unlocked by using a smart card device (1200, 1200a, 1200b) that need not have a keypad. The smart card device is a dedicated reader and locking/unlocking device, or can be a bank terminal, PC, telephone, etc. The smart card (1208) is inserted into the smart card device (1200, 1200a, 1200b). A lock command is sent from the device to the smart card. An application on the smart card is locked. The smart card (1208) sends identifying information, such as a password (PWD) and a card identification number (CID), to the device (1200) which is stored in a cache (506). The identifying information allows automatic authentication for unlocking of the card at a later time. The locked application cannot be used until it is unlocked. To unlock, the smart card (1208) is inserted into the device (1200) and an unlock button (1204) is pressed. The smart card device reads the card identification number of the card and determines if the corresponding password for that card is present in the cache of the device.
If so, an unlock command is issued to the smart card along with the password.
If the password received by the smart card matches the password of the smart card then the smart card is unlocked.
If so, an unlock command is issued to the smart card along with the password.
If the password received by the smart card matches the password of the smart card then the smart card is unlocked.
Description
LOCKING AND UNLOCKING AN APPLICATION IN A SMART CARD
FIELD OF THE IIWENTION
The present invention relates generally to smart card transactions, more particularly, to a system and method for locking and unlocking an application in a smart card.
BACKGROUND OF THE INVENTION
A smart card is typically a credit card-sized plastic card that includes a semiconductor chip capable of holding data supporting multiple applications. One popular such application is the holding of the digital equivalent of cash directly, instead of pointing to an account or providing credits. Accordingly, smart cards with such an application are also sometimes referred to as stored-value cards. When a card of this kind is used to make a purchase, the digital equivalent of cash is transferred to the merchant's "cash register" and then to a financial institution.
Stored-value cards are either replenishable (value can be reloaded onto the card using a terminal) or non-replenishable (the card is decremented in value foi each transaction and thrown away when all its value is gone).
Physically, a smart card often resembles a traditional "credit" card having one or more semiconductor devices attached to a module embedded in the card, providing contacts to the outside world. The card can interface with a point-of sale terminal, an ATM, or a card reader integrated into a telephone, a computer, a vending machine, or any other appliance. A micro-controller semiconductor device embedded in a "processor" smart card allows the card to undertake a range of computational operations, protected storage, encryption and decision making. Such a micro-controller typically includes a microprocessor, memory, and other functional hardware elements. Various types of cards are described in "The Advanced Card Report: Smart Card Primer", Kenneth R. Ayer and Joseph F. Schuler, The Schuler Consultancy, 1993.
WO 99/45507 PC'IYUS99I04986 One example of a smart card implemented as a processor card is illustrated in FIG. 1. Of course, a smart card may be implemented in many ways, and need not necessarily include a microprocessor or other features. The smart card may be programmed with various types of functionality, including applications such as stored-value; credit/debit;
loyalty programs, etc.
For the purpose of this disclosure, card 5 is programmed with at Ieast one application such as stored value application, and may be referred to as "stored-value" card S.
Stored-value card 5 has an embedded micro-controller 10 that includes a microprocessor 12, random access memory (R.AM) 14, read-only memory {ROM) 16, non-volatile memory 18, an encryption module 22, and a card reader interface 24. Other features of the micro-controller may be present but are not shown, such as a clock, a random number generator, interrupt control, control logic, a charge pump, power connections, and interface contacts that allow the card to communicate with the outside world.
suitable central rocessing unit for executing co -'ands and Microprocessor 12 is any P
controlling the device. RAM 14 serves as storage for calculated results and as stack memory.
ROM 16 stores the operating system, fixed data, standard routines, and look up tables. Non-volatile memory 18 (such as EPROM or EEPROM) serves to store information that must not be lost when the card is disconnected from a power source but that must also be alterable to accommodate data specific to individual cards or any changes possible over the _card lifetime.
This information might include a card identification number, a personal identification number, authorization levels, cash balances, credit limits, etc. Encryption module 22 is an optional hardware module used for performing a variety of encryption algorithms. Card reader interface 24 includes the software and hardware necessary for communication with the outside world. A
wide variety of interfaces are possible. By way of example, interface 24 may provide a contact interface, a close-coupled interface, a remote-coupled interface, or a variety of other interfaces.
With a contact interface, signals from the micro-controller are routed to a number of metal contacts on the outside of the card which come in physical contact with similar contacts of a card reader device.
A smart card can include multiple applications, including, for example, applications such as credit, debit, stored value, telephone, or loyalty. Given such a multi-application smart card, a problem could arise when the smart card is given to a service provider for a single transaction.
FIELD OF THE IIWENTION
The present invention relates generally to smart card transactions, more particularly, to a system and method for locking and unlocking an application in a smart card.
BACKGROUND OF THE INVENTION
A smart card is typically a credit card-sized plastic card that includes a semiconductor chip capable of holding data supporting multiple applications. One popular such application is the holding of the digital equivalent of cash directly, instead of pointing to an account or providing credits. Accordingly, smart cards with such an application are also sometimes referred to as stored-value cards. When a card of this kind is used to make a purchase, the digital equivalent of cash is transferred to the merchant's "cash register" and then to a financial institution.
Stored-value cards are either replenishable (value can be reloaded onto the card using a terminal) or non-replenishable (the card is decremented in value foi each transaction and thrown away when all its value is gone).
Physically, a smart card often resembles a traditional "credit" card having one or more semiconductor devices attached to a module embedded in the card, providing contacts to the outside world. The card can interface with a point-of sale terminal, an ATM, or a card reader integrated into a telephone, a computer, a vending machine, or any other appliance. A micro-controller semiconductor device embedded in a "processor" smart card allows the card to undertake a range of computational operations, protected storage, encryption and decision making. Such a micro-controller typically includes a microprocessor, memory, and other functional hardware elements. Various types of cards are described in "The Advanced Card Report: Smart Card Primer", Kenneth R. Ayer and Joseph F. Schuler, The Schuler Consultancy, 1993.
WO 99/45507 PC'IYUS99I04986 One example of a smart card implemented as a processor card is illustrated in FIG. 1. Of course, a smart card may be implemented in many ways, and need not necessarily include a microprocessor or other features. The smart card may be programmed with various types of functionality, including applications such as stored-value; credit/debit;
loyalty programs, etc.
For the purpose of this disclosure, card 5 is programmed with at Ieast one application such as stored value application, and may be referred to as "stored-value" card S.
Stored-value card 5 has an embedded micro-controller 10 that includes a microprocessor 12, random access memory (R.AM) 14, read-only memory {ROM) 16, non-volatile memory 18, an encryption module 22, and a card reader interface 24. Other features of the micro-controller may be present but are not shown, such as a clock, a random number generator, interrupt control, control logic, a charge pump, power connections, and interface contacts that allow the card to communicate with the outside world.
suitable central rocessing unit for executing co -'ands and Microprocessor 12 is any P
controlling the device. RAM 14 serves as storage for calculated results and as stack memory.
ROM 16 stores the operating system, fixed data, standard routines, and look up tables. Non-volatile memory 18 (such as EPROM or EEPROM) serves to store information that must not be lost when the card is disconnected from a power source but that must also be alterable to accommodate data specific to individual cards or any changes possible over the _card lifetime.
This information might include a card identification number, a personal identification number, authorization levels, cash balances, credit limits, etc. Encryption module 22 is an optional hardware module used for performing a variety of encryption algorithms. Card reader interface 24 includes the software and hardware necessary for communication with the outside world. A
wide variety of interfaces are possible. By way of example, interface 24 may provide a contact interface, a close-coupled interface, a remote-coupled interface, or a variety of other interfaces.
With a contact interface, signals from the micro-controller are routed to a number of metal contacts on the outside of the card which come in physical contact with similar contacts of a card reader device.
A smart card can include multiple applications, including, for example, applications such as credit, debit, stored value, telephone, or loyalty. Given such a multi-application smart card, a problem could arise when the smart card is given to a service provider for a single transaction.
WO 99/45507 PC'TNS99/04986 For example, the owner of the smart card may give the smart card to a waiter in a restaurant for a credit transaction. However, without a means for locking the other applications, such as the stored value or telephone applications, the waiter has access to all of the applications, such that the waiter could possibly make phone calls or conduct stored value transactions with the smart card during the time it is in his possession.
A solution to this problem includes the use of a device, commonly referred to as an " electronic wallet" , into which a smart card can be inserted and a particular application can be locked such that a particular application cannot be used until it is unlocked.
Some smart card companies, such as Mondex International, currently utilize a wallet which can lock and unlock a smart card. The locking and unlocking mechanism utilizes a personal identification number (PII~ to ensure authenticity of the lock or unlock request. However, many people prefer not to use PINS. It is a nuisance to have to memorize a PIN, particularly if the person already has several PINS memorized. Additionally, a particular PIN can be forgotten or confused with another PIN. Further, the need for a PIN requires that the " electronic wallet" device has at least a numeric key pad to enter the PIN. This is undesirable for some users who do not want to carry a relatively bulky wallet with them.
What is needed is a system and method for automatically ensuring authenticity for locking and unlocking an application in a smart card which does not require the user to memorize a PIN.
Preferably, the system and method may be implemented using a device which does not require the use of a bulky and expensive keypad. The present invention addresses such a need.
SLAY OF THE INVENTION
The present invention provides a system and method for locking and unlocking an application in a smart card. The system and method according to the present invention allows for automatic determination of the authenticity of a lock or unlock command without the need for a personal identification number. The smart card can be locked and unlocked by utilizing a smart card device. The smart card can be inserted into the smart card device to lock at least one application of the smart card such that the locked application cannot be utilized until it is unlocked. During the locking process, the smart card sends identifying information, such as a password and card 11?, to the smart card device to allow automatic authentication for unlocking of the card at a later time. A password is herein meant to include a combination of characters which can include letters, numbers, and various symbols.
To unlock an application in a smart card, the smart card device identifies the card and looks for the password corresponding to this particular card. If the password is found in the smart card device's cache memory, then the password and an "unlock" command are issued from the smart card device to the smart card. When the smart card device receives the password along with the unlock command, it is determined whether the received password matches the actual password for the smart card. If the passwords match, then the application is unlocked.
Accordingly, in one aspect of the present invention there is provided a smart card device for unlocking an application in a smart card able to be inserted in said smart card device, said smart card device comprising:
a card reader arranged to read from and to write to said inserted smart card;
a memory coupled to said card reader, said memory including:
a card identification number corresponding to said smart card, and a password corresponding to said card identification number; and a microprocessor coupled to said card reader, said microprocessor arranged to issue an unlock command along with said password to said smart card when said smart card provides identifying information matching said card identification number, whereby said smart card device is able to unlock said application in said smart card without entry of an unlocking password from a user.
According to another aspect of the present invention there is provided a method of locking an application of a smart card using a smart card device, said method comprising:
receiving said smart card in said smart card device;
sending a lock command intended for said application from said smart card device to said smart card without entry into said smart card device of a locking password by a user, such that said application becomes locked;
receiving identifying information including a password from said smart card;
and storing said received identifying information including said password in a memory of said smart card device, whereby said application of said smart card may not be used until said application is unlocked.
According to yet another aspect of the present invention there is provided a method of unlocking an application of a smart card using a smart card device, said method comprising:
receiving said smart card in said smart card device;
receiving identifying information including a password from said smart card;
searching a memory of said smart card device for said identifying information;
and sending an unlock command intended for said application to said smart card from said smart card device without entry into said smart card device of an unlocking password by a user, whereby said application of said smart card is unlocked and available for use.
According to still yet another aspect of the present invention there is provided a method of unlocking an application of a smart card using a computing device, said method comprising:
receiving said smart card in said computing device;
receiving identifying information from said smart card;
automatically generating a password corresponding to said identifying information of said smart card; and sending an unlock command along with said generated password to said smart card, whereby said password is used by said smart card to verify that said unlock command from said computing device is authorized.
-4a-BRIEF DESCRIPTION OF THE DRAWINGS
The invention, together with further advantages thereof, may best be understood by reference to the following description taken in conjunction with the accompanying drawings in which:
FIG. 1 is a block diagram of an example of a conventional smart card.
FIG. 2 is a block diagram of a conventional wallet.
FIG. 3 is a flow diagram of a conventional method for locking an application in a smart card.
FIG. 4 is a flow diagram of a conventional method for unlocking an application in a smart card.
-4b-WO 99!45507 PC'T/US99/04986 FIGS. SA and SB show examples of a smart card device according to embodiments of the present invention.
. FIG. 6 is a block diagram of a smart card device according to an embodiment of the present invention.
S FIG. 7 is an example of a cache which may be used in conjunction with the smart card device shown in FIG 6.
FIG. 8 is a flow diagram of a method according to an embodiment of the present invention for locking an application in a smart card.
FIG. 9 is a flow diagram of a step of storing information in a cache as described in the method shown in FIG 8.
FIGS. l0A-l OC depict the International Standards Organization format for the command, response, and command header for information conveyed to and from the smart card.
FIGS. 11A-11C are tables illustrating examples of the command, response, and return codes for the lock application command.
FIG. 12 is a flow diagram of a method according to an embodiment of the present invention for unlocking an application in a smart card.
FIGS. 13A-13B show tables describing the command and return codes for the unlock command.
DETAILED DESCRIPTION OF THE INVENTION
. While this invention is described in terms of several preferred embodiments, it is contemplated that alternatives, modifications, permutations and equivalents thereof will become apparent to those skilled in the art upon a reading of the specification and study of the drawings.
A solution to this problem includes the use of a device, commonly referred to as an " electronic wallet" , into which a smart card can be inserted and a particular application can be locked such that a particular application cannot be used until it is unlocked.
Some smart card companies, such as Mondex International, currently utilize a wallet which can lock and unlock a smart card. The locking and unlocking mechanism utilizes a personal identification number (PII~ to ensure authenticity of the lock or unlock request. However, many people prefer not to use PINS. It is a nuisance to have to memorize a PIN, particularly if the person already has several PINS memorized. Additionally, a particular PIN can be forgotten or confused with another PIN. Further, the need for a PIN requires that the " electronic wallet" device has at least a numeric key pad to enter the PIN. This is undesirable for some users who do not want to carry a relatively bulky wallet with them.
What is needed is a system and method for automatically ensuring authenticity for locking and unlocking an application in a smart card which does not require the user to memorize a PIN.
Preferably, the system and method may be implemented using a device which does not require the use of a bulky and expensive keypad. The present invention addresses such a need.
SLAY OF THE INVENTION
The present invention provides a system and method for locking and unlocking an application in a smart card. The system and method according to the present invention allows for automatic determination of the authenticity of a lock or unlock command without the need for a personal identification number. The smart card can be locked and unlocked by utilizing a smart card device. The smart card can be inserted into the smart card device to lock at least one application of the smart card such that the locked application cannot be utilized until it is unlocked. During the locking process, the smart card sends identifying information, such as a password and card 11?, to the smart card device to allow automatic authentication for unlocking of the card at a later time. A password is herein meant to include a combination of characters which can include letters, numbers, and various symbols.
To unlock an application in a smart card, the smart card device identifies the card and looks for the password corresponding to this particular card. If the password is found in the smart card device's cache memory, then the password and an "unlock" command are issued from the smart card device to the smart card. When the smart card device receives the password along with the unlock command, it is determined whether the received password matches the actual password for the smart card. If the passwords match, then the application is unlocked.
Accordingly, in one aspect of the present invention there is provided a smart card device for unlocking an application in a smart card able to be inserted in said smart card device, said smart card device comprising:
a card reader arranged to read from and to write to said inserted smart card;
a memory coupled to said card reader, said memory including:
a card identification number corresponding to said smart card, and a password corresponding to said card identification number; and a microprocessor coupled to said card reader, said microprocessor arranged to issue an unlock command along with said password to said smart card when said smart card provides identifying information matching said card identification number, whereby said smart card device is able to unlock said application in said smart card without entry of an unlocking password from a user.
According to another aspect of the present invention there is provided a method of locking an application of a smart card using a smart card device, said method comprising:
receiving said smart card in said smart card device;
sending a lock command intended for said application from said smart card device to said smart card without entry into said smart card device of a locking password by a user, such that said application becomes locked;
receiving identifying information including a password from said smart card;
and storing said received identifying information including said password in a memory of said smart card device, whereby said application of said smart card may not be used until said application is unlocked.
According to yet another aspect of the present invention there is provided a method of unlocking an application of a smart card using a smart card device, said method comprising:
receiving said smart card in said smart card device;
receiving identifying information including a password from said smart card;
searching a memory of said smart card device for said identifying information;
and sending an unlock command intended for said application to said smart card from said smart card device without entry into said smart card device of an unlocking password by a user, whereby said application of said smart card is unlocked and available for use.
According to still yet another aspect of the present invention there is provided a method of unlocking an application of a smart card using a computing device, said method comprising:
receiving said smart card in said computing device;
receiving identifying information from said smart card;
automatically generating a password corresponding to said identifying information of said smart card; and sending an unlock command along with said generated password to said smart card, whereby said password is used by said smart card to verify that said unlock command from said computing device is authorized.
-4a-BRIEF DESCRIPTION OF THE DRAWINGS
The invention, together with further advantages thereof, may best be understood by reference to the following description taken in conjunction with the accompanying drawings in which:
FIG. 1 is a block diagram of an example of a conventional smart card.
FIG. 2 is a block diagram of a conventional wallet.
FIG. 3 is a flow diagram of a conventional method for locking an application in a smart card.
FIG. 4 is a flow diagram of a conventional method for unlocking an application in a smart card.
-4b-WO 99!45507 PC'T/US99/04986 FIGS. SA and SB show examples of a smart card device according to embodiments of the present invention.
. FIG. 6 is a block diagram of a smart card device according to an embodiment of the present invention.
S FIG. 7 is an example of a cache which may be used in conjunction with the smart card device shown in FIG 6.
FIG. 8 is a flow diagram of a method according to an embodiment of the present invention for locking an application in a smart card.
FIG. 9 is a flow diagram of a step of storing information in a cache as described in the method shown in FIG 8.
FIGS. l0A-l OC depict the International Standards Organization format for the command, response, and command header for information conveyed to and from the smart card.
FIGS. 11A-11C are tables illustrating examples of the command, response, and return codes for the lock application command.
FIG. 12 is a flow diagram of a method according to an embodiment of the present invention for unlocking an application in a smart card.
FIGS. 13A-13B show tables describing the command and return codes for the unlock command.
DETAILED DESCRIPTION OF THE INVENTION
. While this invention is described in terms of several preferred embodiments, it is contemplated that alternatives, modifications, permutations and equivalents thereof will become apparent to those skilled in the art upon a reading of the specification and study of the drawings.
FIG. 2 shows a block diagram of a conventional electronic wallet 210. This example of a conventional wallet includes a display 200, a microprocessor 202, a read only memory (ROM) 204, a card reader 206, and a numeric pad with special function buttons 208.
Typically, a user can insert a smart card into a wallet such as that shown in FIG. 2 and information, such as the amount of value remaining in a stored value application of the card, can be displayed on the display 200. The numeric pad and special function buttons 208 can be used by the user to input a PIN in order to access the information. Numeric pad and special function buttons 208 may also include a "lock" button (not shown) for locking a card. A separate "unlock" button may also be included or it may be the same button as the "lock" button.
FIG. 3 shows a flow diagram of a conventional method for locking an application in a smart card. The smart card is inserted into a device such as an electronic wallet, an automated teller machine (ATM), or an input device to a computer system. In this example, a conventional electronic wallet 210 will be used. A lock button is pressed by the user (step 302) and wallet 210 sends a lock command to the smart card (step 304). The smart card, in response to the lock command, then locks an application in the smart card (step 306).
FIG. 4 shows a flow diagram of a conventional method for unlocking an application in a smart card. The smart card is inserted into an electronic wallet (e.g., wallet 210) (step 400), and an unlock button is then pressed (step 402). The wallet typically prompts the user to enter a PIN
(step 404). The user then enters the PIN (step 406). The wallet sends an unlock command to the smart card wherein the PIN is included in the unlock command (step 408).
The smart card then unlocks an application in step 410 if the PIN sent by the wallet is correct.
One of the problems with these conventional methods of locking and unlocking an application for a smart card as described in FIGS. 3 and 4, is that the user is required to memorize a personal identification number (PIN). Many people find having to memorize a PIN
a nuisance. This nuisance can be further compounded by the need to keep track of a number of different PINS for, e.g., a bank account, a password at work, etc. The user may choose to have a different PIN for every different type of transaction which requires a PIN, or select a single PIN
to apply to ail transactions in his life. However, if the user is required to memorize numerous PINs for numerous activities, then the user also needs to remember which PIN
applies to which transaction. If the user selects a single PIN for all of his transactions, then the user has a higher risk of exposing his PIN. This problem may become even greater if different applications on a single smart card require different PINS.
Accordingly, what is needed is a system and method for locking and unlocking an application in a smart card which does not require the user to memorize a PIN.
Embodiments of the present invention address such a need.
The method and system according to embodiments of the present invention provides a lock/unlock feature of an application in a smart card wherein the transaction is automatically authenticated. Additionally, embodiments of the present invention provide the ability to lock/unlock an application, such as a stored value application (sometimes referred to as a "purse" ), using one of a plurality of smart card devices which can lock/unlock a particular smart card. An application in a particular smart card may also be locked with a first one of a plurality of smart card devices and unlocked with a second one of the plurality of smart card devices. In one embodiment of the present invention, the issuer of the smart card can also unlock an application in a smart card if a smart card device is unable to do so. For example, in one embodiment, the smart card issuer can look up or regenerate the unique password assigned to the particular smart card and have it downloaded to a terminal device, such as the cardholder's personal computer system.
FIGS. SA and SB show examples of two embodiments of smart card devices 1200a and 1200b according to the present invention. Smart card device I200a is shown to be approximately a little larger than the smart card 1208. Smart card device I200a includes a display 1202a, at least one function button 1204, and a card, slot 1206a.
Display 1202a can be used to display card value amounts such as monetary value or credit value, or other information such as the last ten transactions performed by the smart card, or the like.
Special function button 1204 can be a button dedicated for use in issuing a lock command or an unlock command.
Alternatively, special function button 1204 can represent more than one function, for instance button 1204 can be pressed twice for unlock and once for lock. Smart card device 1200a also includes a slot 1206a into which smart card 1208 is inserted. Another possible example is to have smart card device 1200b attached to a key chain 1220. This type of smart card device would still include a display 1202b and an insert slot 1206b. Smart card 1208' can simply be partially inserted into smart card device 1200b and the pressure of the insertion of smart card 1208' against internal contacts (not shown) can initiate functions such as a lock or unlock command.
FIG. 6 is a block diagram of a smart card device according to an embodiment of the present invention. It shows a microprocessor 502 coupled with a display 500, a memory such as a ROM 504, function buttons) 510, a card reader 508, and a cache 506.
Microprocessor 502 can accept input from both function buttons) 510 and card reader 508. It can then access information from ROM 504 and access data from cache 506. Various messages, such as "locked", "unlocked", available balance, and the last few transactions can be displayed on display 500.
FIG. 7 shows an example of cache 506. Cache 506 can be a non-volatile memory such as an EEPROM or a FLASH memory. Preferably, cache 506 can include several passwords associated with several smart cards. Although the cache can contain a single password associated with a single smart card, the retention of several passwords associated with several smart cards allows for the flexibility of utilizing the same smart card device with several different smart cards. Those skilled in the art will recognize that cache 506 may be used to store other information as well. A card identification number (CID) assigned to each smart card uniquely identifies each smart card. Cache 506 can include a list of smart cards used in the most recent transactions. For example, the last ten smart cards utilized with a particular smart card device can be listed under CID, preferably with the most recent transaction listed at the top with the oldest transaction listed at the bottom. Associated with the CID are the passwords (PWD) listed in the same order. Accordingly, the first card ID and its associated password would be listed at the top of the list while the card m of the smart card which was used in the oldest transaction and its password would be listed at the bottom of the list. When the cache is full, then the card ID and its associated password which is listed at the bottom of the list, i.e., the card which was used in the oldest transaction, would be removed. Further details regarding the generation and use of the CID and P~ will be give~ Below.
According to embodiments of the present invention, during personalization or initialization of smart card 1208, the card issuer generates a derived password based on the card number and a master key. This password could be given to the cardholder, but the cardholder will most likely not need to memorize it for normal operation. The password is stored in smart _g_ card 1208 and is preferably not retrievable externally without using smart card device 1200 which can lock or unlock an application in smart card 1208. Upon reading this disclosure, those skilled in the art will recognize that entities other than the "card issuer"
may be responsible for generating the derived password for use in the present invention. For example, an agent of the card issuer may generate the password. For simplicity, however, this specification will continue to refer to the "card issuer" as the entity generating a password.
There are many ways to generate a password for smart card 1208. One example of a method which can be used by the card issuer for generating a password for a card includes the use of Data Encryption Standard (DES) algorithm. The issuer can generate a DES
cryptogram using a DES algorithm and a secret key. The issuer can encipher a unique serial number or identification number of the card and provide a unique binary number for each card. The binary number can be converted to a decimal number and a predetermined number of digits, such as the last six digits, can be used to produce a unique password for the smart card 1208.
To lock an application, the cardholder can place smart card 1208 into smart card device 1200 and request a locking function, for example, by pressing special function lock button 1204.
Once the application is locked, the card can be safely given to another person, such as a waiter in a restaurant. When the card is returned, the cardholder can put smart card 1208 back into smart card device 1200 and press the unlock button, e.g., item 1204, to unlock the application which was previously locked. The smart card device reads the card 117 from the card and uses the card ID to find the matching card ID and associated password in the cache 506 of smart card device. Smart card device 1200 then sends the password to smart card 1208 in an unlock command to unlock the locked application.
If the card holder forgets to bring his own smart card device 1200, he can borrow one from a family member or another trusted party. Any smart card device implemented with features of the present invention can lock any application in any smart card which has also been implemented in accordance with the present invention. Additionally, any smart card device 1200 according to the present invention that has previously locked a specific application in a specific smart card 1208 can unlock that application (within the limit of the cache storage capacity of the smart card device). If a card holder borrows a smart card device 1200 from a friend to lock an application in his smart card, the application can be unlocked with the friend's smart card device or with the cardholder's smart card device. This system and method allows family members or close friends to share smart card devices 1200 if they wish.
Any smart card device 1200 implemented according to the present invention which has the appropriate password for unlocking a given smart card application can unlock the application by sending an unlock command to the card. Normally, this will be done by the same smart card device that was used to lock the application in the smart card. If that smart card device is not available, the application in the smart card can be unlocked via a bank terminal, a PC, a telephone, or virtually any device with the capability to read and write information to a smart card, so long as the device is provided with the functionality described herein (e.g., the ability to generate lock and unlock commands per the present invention).
If required, (after appropriate identification), the password can be obtained from the card issuer after being easily generated by numerous well-known methods, such as Data Encryption Standard (DES), given the card ID. For example, an ATM can be programmed to display " card unlocking" as an option to its list of services. A user can then select the "card unlocking"
service and allow the ATM to read information, including card ID, from the card. If the ATM
already has the required DES key stored in its memory, then the card's password can be generated by the ATM. More likely, however, the ATM will need to contact a host computer which has access to the appropriate DES secret key (e.g., based on the card number and issuer).
The ATM can send the card ID to the host computer which can regenerate the card's password.
Alternatively, the host computer can read the card's password from a database.
The resulting password can be returned to the ATM which can send an unlock command to the card using the password. A similar unlocking transaction can occur using a bank terminal, a PC, a telephone, or virtually any device with the capability to read and write information to a smart card.
FIG. 8 shows a flow diagram of a method according to an embodiment of the present invention for locking an application in a smart card. Smart card 1208 is inserted into smart card device 1200 (step 700), and a card application is selected (step 70I). Once a card application is selected, commands are directed toward the selected application thereafter. A
lock request is indicated (step 702). A lock button or split function button 1204 can be pressed by the cardholder to indicate the lock request. Smart card device 1200 sends a lock command to the smart card (step 704). It is then determined if the application in smart card 1208 is already T
locked (step 706). If it is locked then smart card device 1200 displays a message such as "locked" (step 708). Preferably, smart card device 1200 does not relock an application that has already been locked. Avoiding relocking an application that has already been locked ensures that no unauthorized person can simply relock the application thereby storing the password into his smart card device, then unlocking the application using the password which has just been stored.
If the application is not already locked (step 706) then the application is locked (step 710).
Smart card 1208 sends the card identification (CID) and password (PWD) to smart card device 1200 (step 712). Smart card device 1200 then displays a predetermined message such as "OK"
(step 714) and then smart card device 1200 stores the CID and associated PWD
in its cache 506 (step 716).
FIG. 9 is a flow diagram for a method for storing information in cache 506 of smart card device 1200 as recited in step 716 of FIG. 8. The CID of the particular smart card is searched for in cache 506 of smart card device 1200 (step 800). If smart card device 1200 finds that the particular CID is in the cache (step 802), then that particular CID can be brought to the top of the list of Cms (step 804). The list refers to the CID list shown in FIG. 7.
If the CID is not found in cache 506 (step 802), then it is entered in cache 506, preferably at the top of the CID list (step 806). It is determined if the cache is full (step 808) and if it is not then the process is complete (step 810). If, however, the cache is full then the bottom item on the list is removed (step 812). In this manre~; a relatively small cashe size can be used to store the most recently used C117 information. Those skilled in the art will recognize that other list approaches may also be used.
FIGS. l0A-l OC show the preferred format for the command response and command header used in locking and unlocking a smart card according to the present invention. The preferred format is described in detail by the International Standards Organization (ISO) which defines the specific format for the command. ISO standard 7816-4, "Information Technology -Identification Cards - Integrated Circuit Cards with Contact Part 4".
FIG. l0A shows a currently preferred format for the command used to lock or unlock a card. The format includes a command header (HDR) 800, followed by a data field, followed by a trailer (Le). FIG. lOB shows a currently-preferred format for a response to the command which includes optional data followed by the status (SW 1, SW2). FIG. l OC
shows a currently preferred format of command header 800. The format for command header 800 includes a class byte (CLA) followed by the instruction code (INS). P1 and P2 are in the third and fourth byte positions with P 1 and P2 varying depending on the specific instructions given. After P 1 and P2, is a field indicating the length of command data (Lc).
FIGS. 1 lA-I 1C illustrate examples of the command, the response, and the return codes for performing a locking function according to an embodiment of the present invention. In this example, the preferred format from the above-described ISO standard is used.
FIG. 11A shows an example of a lock command which will be issued by, e.g., a smart card device as shown in FIG. SA or SB. In this example of a lock command, the class field (CLA) has a content value of a hex number " 80" , which in this case indicates that it is not a standard ISO instruction. The instruction is identified as a lock command by a hex number, such as "FF" , and P l and P2 both have "00" which can indicate that no parameters are to be sent. For the response to a lock command shown in FIG. 1 IB, smart card 1208 will generate a message including the CID (5 bytes) and the password (3 bytes). The return codes shown in FIG. 11 C which will be generated by the card will include status word one (SW1) and status word two (SW2) with values of "9000" or "9110" . "9000" indicates a successful lock of the application, while "9110"
indicates that the application is already locked.
FIG. 12 shows a flow diagram of a method according to the present invention for unlocking an application in a smart card 1208. Smart card 1208 is inserted into a smart card device 1200 in step 1000, and a card application is selected (step 1001). Once a card application is selected; commands are then directed to the selected application. An unlock button (or other means for initiating an unlock command) is then pressed (step 1002). The smart card device reads the C117 in step 1004. Smart card device 1200 then determines whether the password associated with the C1D is stored in the cache of the smart card device (step 1006). If the password is not stored in the cache then the smart card device is unable to unlock the smart card application and a message such as "unable to unlock" can be displayed (step 1008).
j If, however, the password is found in the cache of smart card device 1200, then an "unlock" command is issued (step 1010). Smart card device 1200 then determines if the smart card application is akeady unlocked (step 1012). If the card application is already unlocked, ' then an error has occurred and an error message can be displayed to the card holder (step 1014).
If, however, the smart card application has not already been unlocked, then device 1200 determines whether the password sent to the smart card through the "unlock"
command matches the password associated with the smart card (step 1016). If it does not, then an error has occurred and the smart card application is not unlocked (step 1018}. If, however, the password sent from the smart card device to the smart card matches the password associated with the smart card, then the application is unlocked (step 1020).
FIGS. 13A-13B illustrate an example of command and return codes for the unlock function. Again, it is preferable that the command formats set forth by the ISO standards be utilized. Accordingly, the example shown in FIG. 13A for the unlock command includes information related to the class, instruction, the parameters, and the length of data command.
The example of the return codes shown in FIG. 13B include status word one (SW1) and status word two (SW2) including "9000" implying successful operation, "9111" implying that the application has akeady been unlocked, and "9112" implying that the application could not be unlocked because the smart card device either did not have the password or the password was incorrect.
A method and system for locking and unlocking an application in a smart card has been disclosed. Software written according to the present invention may be stored in some form of computer-readable medium, such as in computer memory, on a floppy or hard disk, or on a CD-ROM, transmitted over a network, and/or executed by a processor.
Although the present invention has been described in accordance with the embodiments shown, one of ordinary skill in the art will readily recognize that there could be variations to the embodiments and those variations would be within the spirit and scope of the present invention.
Accordingly, many modifications may be made by one of ordinary skill in the art without departing from the spirit and scope of the appended claims.
Typically, a user can insert a smart card into a wallet such as that shown in FIG. 2 and information, such as the amount of value remaining in a stored value application of the card, can be displayed on the display 200. The numeric pad and special function buttons 208 can be used by the user to input a PIN in order to access the information. Numeric pad and special function buttons 208 may also include a "lock" button (not shown) for locking a card. A separate "unlock" button may also be included or it may be the same button as the "lock" button.
FIG. 3 shows a flow diagram of a conventional method for locking an application in a smart card. The smart card is inserted into a device such as an electronic wallet, an automated teller machine (ATM), or an input device to a computer system. In this example, a conventional electronic wallet 210 will be used. A lock button is pressed by the user (step 302) and wallet 210 sends a lock command to the smart card (step 304). The smart card, in response to the lock command, then locks an application in the smart card (step 306).
FIG. 4 shows a flow diagram of a conventional method for unlocking an application in a smart card. The smart card is inserted into an electronic wallet (e.g., wallet 210) (step 400), and an unlock button is then pressed (step 402). The wallet typically prompts the user to enter a PIN
(step 404). The user then enters the PIN (step 406). The wallet sends an unlock command to the smart card wherein the PIN is included in the unlock command (step 408).
The smart card then unlocks an application in step 410 if the PIN sent by the wallet is correct.
One of the problems with these conventional methods of locking and unlocking an application for a smart card as described in FIGS. 3 and 4, is that the user is required to memorize a personal identification number (PIN). Many people find having to memorize a PIN
a nuisance. This nuisance can be further compounded by the need to keep track of a number of different PINS for, e.g., a bank account, a password at work, etc. The user may choose to have a different PIN for every different type of transaction which requires a PIN, or select a single PIN
to apply to ail transactions in his life. However, if the user is required to memorize numerous PINs for numerous activities, then the user also needs to remember which PIN
applies to which transaction. If the user selects a single PIN for all of his transactions, then the user has a higher risk of exposing his PIN. This problem may become even greater if different applications on a single smart card require different PINS.
Accordingly, what is needed is a system and method for locking and unlocking an application in a smart card which does not require the user to memorize a PIN.
Embodiments of the present invention address such a need.
The method and system according to embodiments of the present invention provides a lock/unlock feature of an application in a smart card wherein the transaction is automatically authenticated. Additionally, embodiments of the present invention provide the ability to lock/unlock an application, such as a stored value application (sometimes referred to as a "purse" ), using one of a plurality of smart card devices which can lock/unlock a particular smart card. An application in a particular smart card may also be locked with a first one of a plurality of smart card devices and unlocked with a second one of the plurality of smart card devices. In one embodiment of the present invention, the issuer of the smart card can also unlock an application in a smart card if a smart card device is unable to do so. For example, in one embodiment, the smart card issuer can look up or regenerate the unique password assigned to the particular smart card and have it downloaded to a terminal device, such as the cardholder's personal computer system.
FIGS. SA and SB show examples of two embodiments of smart card devices 1200a and 1200b according to the present invention. Smart card device I200a is shown to be approximately a little larger than the smart card 1208. Smart card device I200a includes a display 1202a, at least one function button 1204, and a card, slot 1206a.
Display 1202a can be used to display card value amounts such as monetary value or credit value, or other information such as the last ten transactions performed by the smart card, or the like.
Special function button 1204 can be a button dedicated for use in issuing a lock command or an unlock command.
Alternatively, special function button 1204 can represent more than one function, for instance button 1204 can be pressed twice for unlock and once for lock. Smart card device 1200a also includes a slot 1206a into which smart card 1208 is inserted. Another possible example is to have smart card device 1200b attached to a key chain 1220. This type of smart card device would still include a display 1202b and an insert slot 1206b. Smart card 1208' can simply be partially inserted into smart card device 1200b and the pressure of the insertion of smart card 1208' against internal contacts (not shown) can initiate functions such as a lock or unlock command.
FIG. 6 is a block diagram of a smart card device according to an embodiment of the present invention. It shows a microprocessor 502 coupled with a display 500, a memory such as a ROM 504, function buttons) 510, a card reader 508, and a cache 506.
Microprocessor 502 can accept input from both function buttons) 510 and card reader 508. It can then access information from ROM 504 and access data from cache 506. Various messages, such as "locked", "unlocked", available balance, and the last few transactions can be displayed on display 500.
FIG. 7 shows an example of cache 506. Cache 506 can be a non-volatile memory such as an EEPROM or a FLASH memory. Preferably, cache 506 can include several passwords associated with several smart cards. Although the cache can contain a single password associated with a single smart card, the retention of several passwords associated with several smart cards allows for the flexibility of utilizing the same smart card device with several different smart cards. Those skilled in the art will recognize that cache 506 may be used to store other information as well. A card identification number (CID) assigned to each smart card uniquely identifies each smart card. Cache 506 can include a list of smart cards used in the most recent transactions. For example, the last ten smart cards utilized with a particular smart card device can be listed under CID, preferably with the most recent transaction listed at the top with the oldest transaction listed at the bottom. Associated with the CID are the passwords (PWD) listed in the same order. Accordingly, the first card ID and its associated password would be listed at the top of the list while the card m of the smart card which was used in the oldest transaction and its password would be listed at the bottom of the list. When the cache is full, then the card ID and its associated password which is listed at the bottom of the list, i.e., the card which was used in the oldest transaction, would be removed. Further details regarding the generation and use of the CID and P~ will be give~ Below.
According to embodiments of the present invention, during personalization or initialization of smart card 1208, the card issuer generates a derived password based on the card number and a master key. This password could be given to the cardholder, but the cardholder will most likely not need to memorize it for normal operation. The password is stored in smart _g_ card 1208 and is preferably not retrievable externally without using smart card device 1200 which can lock or unlock an application in smart card 1208. Upon reading this disclosure, those skilled in the art will recognize that entities other than the "card issuer"
may be responsible for generating the derived password for use in the present invention. For example, an agent of the card issuer may generate the password. For simplicity, however, this specification will continue to refer to the "card issuer" as the entity generating a password.
There are many ways to generate a password for smart card 1208. One example of a method which can be used by the card issuer for generating a password for a card includes the use of Data Encryption Standard (DES) algorithm. The issuer can generate a DES
cryptogram using a DES algorithm and a secret key. The issuer can encipher a unique serial number or identification number of the card and provide a unique binary number for each card. The binary number can be converted to a decimal number and a predetermined number of digits, such as the last six digits, can be used to produce a unique password for the smart card 1208.
To lock an application, the cardholder can place smart card 1208 into smart card device 1200 and request a locking function, for example, by pressing special function lock button 1204.
Once the application is locked, the card can be safely given to another person, such as a waiter in a restaurant. When the card is returned, the cardholder can put smart card 1208 back into smart card device 1200 and press the unlock button, e.g., item 1204, to unlock the application which was previously locked. The smart card device reads the card 117 from the card and uses the card ID to find the matching card ID and associated password in the cache 506 of smart card device. Smart card device 1200 then sends the password to smart card 1208 in an unlock command to unlock the locked application.
If the card holder forgets to bring his own smart card device 1200, he can borrow one from a family member or another trusted party. Any smart card device implemented with features of the present invention can lock any application in any smart card which has also been implemented in accordance with the present invention. Additionally, any smart card device 1200 according to the present invention that has previously locked a specific application in a specific smart card 1208 can unlock that application (within the limit of the cache storage capacity of the smart card device). If a card holder borrows a smart card device 1200 from a friend to lock an application in his smart card, the application can be unlocked with the friend's smart card device or with the cardholder's smart card device. This system and method allows family members or close friends to share smart card devices 1200 if they wish.
Any smart card device 1200 implemented according to the present invention which has the appropriate password for unlocking a given smart card application can unlock the application by sending an unlock command to the card. Normally, this will be done by the same smart card device that was used to lock the application in the smart card. If that smart card device is not available, the application in the smart card can be unlocked via a bank terminal, a PC, a telephone, or virtually any device with the capability to read and write information to a smart card, so long as the device is provided with the functionality described herein (e.g., the ability to generate lock and unlock commands per the present invention).
If required, (after appropriate identification), the password can be obtained from the card issuer after being easily generated by numerous well-known methods, such as Data Encryption Standard (DES), given the card ID. For example, an ATM can be programmed to display " card unlocking" as an option to its list of services. A user can then select the "card unlocking"
service and allow the ATM to read information, including card ID, from the card. If the ATM
already has the required DES key stored in its memory, then the card's password can be generated by the ATM. More likely, however, the ATM will need to contact a host computer which has access to the appropriate DES secret key (e.g., based on the card number and issuer).
The ATM can send the card ID to the host computer which can regenerate the card's password.
Alternatively, the host computer can read the card's password from a database.
The resulting password can be returned to the ATM which can send an unlock command to the card using the password. A similar unlocking transaction can occur using a bank terminal, a PC, a telephone, or virtually any device with the capability to read and write information to a smart card.
FIG. 8 shows a flow diagram of a method according to an embodiment of the present invention for locking an application in a smart card. Smart card 1208 is inserted into smart card device 1200 (step 700), and a card application is selected (step 70I). Once a card application is selected, commands are directed toward the selected application thereafter. A
lock request is indicated (step 702). A lock button or split function button 1204 can be pressed by the cardholder to indicate the lock request. Smart card device 1200 sends a lock command to the smart card (step 704). It is then determined if the application in smart card 1208 is already T
locked (step 706). If it is locked then smart card device 1200 displays a message such as "locked" (step 708). Preferably, smart card device 1200 does not relock an application that has already been locked. Avoiding relocking an application that has already been locked ensures that no unauthorized person can simply relock the application thereby storing the password into his smart card device, then unlocking the application using the password which has just been stored.
If the application is not already locked (step 706) then the application is locked (step 710).
Smart card 1208 sends the card identification (CID) and password (PWD) to smart card device 1200 (step 712). Smart card device 1200 then displays a predetermined message such as "OK"
(step 714) and then smart card device 1200 stores the CID and associated PWD
in its cache 506 (step 716).
FIG. 9 is a flow diagram for a method for storing information in cache 506 of smart card device 1200 as recited in step 716 of FIG. 8. The CID of the particular smart card is searched for in cache 506 of smart card device 1200 (step 800). If smart card device 1200 finds that the particular CID is in the cache (step 802), then that particular CID can be brought to the top of the list of Cms (step 804). The list refers to the CID list shown in FIG. 7.
If the CID is not found in cache 506 (step 802), then it is entered in cache 506, preferably at the top of the CID list (step 806). It is determined if the cache is full (step 808) and if it is not then the process is complete (step 810). If, however, the cache is full then the bottom item on the list is removed (step 812). In this manre~; a relatively small cashe size can be used to store the most recently used C117 information. Those skilled in the art will recognize that other list approaches may also be used.
FIGS. l0A-l OC show the preferred format for the command response and command header used in locking and unlocking a smart card according to the present invention. The preferred format is described in detail by the International Standards Organization (ISO) which defines the specific format for the command. ISO standard 7816-4, "Information Technology -Identification Cards - Integrated Circuit Cards with Contact Part 4".
FIG. l0A shows a currently preferred format for the command used to lock or unlock a card. The format includes a command header (HDR) 800, followed by a data field, followed by a trailer (Le). FIG. lOB shows a currently-preferred format for a response to the command which includes optional data followed by the status (SW 1, SW2). FIG. l OC
shows a currently preferred format of command header 800. The format for command header 800 includes a class byte (CLA) followed by the instruction code (INS). P1 and P2 are in the third and fourth byte positions with P 1 and P2 varying depending on the specific instructions given. After P 1 and P2, is a field indicating the length of command data (Lc).
FIGS. 1 lA-I 1C illustrate examples of the command, the response, and the return codes for performing a locking function according to an embodiment of the present invention. In this example, the preferred format from the above-described ISO standard is used.
FIG. 11A shows an example of a lock command which will be issued by, e.g., a smart card device as shown in FIG. SA or SB. In this example of a lock command, the class field (CLA) has a content value of a hex number " 80" , which in this case indicates that it is not a standard ISO instruction. The instruction is identified as a lock command by a hex number, such as "FF" , and P l and P2 both have "00" which can indicate that no parameters are to be sent. For the response to a lock command shown in FIG. 1 IB, smart card 1208 will generate a message including the CID (5 bytes) and the password (3 bytes). The return codes shown in FIG. 11 C which will be generated by the card will include status word one (SW1) and status word two (SW2) with values of "9000" or "9110" . "9000" indicates a successful lock of the application, while "9110"
indicates that the application is already locked.
FIG. 12 shows a flow diagram of a method according to the present invention for unlocking an application in a smart card 1208. Smart card 1208 is inserted into a smart card device 1200 in step 1000, and a card application is selected (step 1001). Once a card application is selected; commands are then directed to the selected application. An unlock button (or other means for initiating an unlock command) is then pressed (step 1002). The smart card device reads the C117 in step 1004. Smart card device 1200 then determines whether the password associated with the C1D is stored in the cache of the smart card device (step 1006). If the password is not stored in the cache then the smart card device is unable to unlock the smart card application and a message such as "unable to unlock" can be displayed (step 1008).
j If, however, the password is found in the cache of smart card device 1200, then an "unlock" command is issued (step 1010). Smart card device 1200 then determines if the smart card application is akeady unlocked (step 1012). If the card application is already unlocked, ' then an error has occurred and an error message can be displayed to the card holder (step 1014).
If, however, the smart card application has not already been unlocked, then device 1200 determines whether the password sent to the smart card through the "unlock"
command matches the password associated with the smart card (step 1016). If it does not, then an error has occurred and the smart card application is not unlocked (step 1018}. If, however, the password sent from the smart card device to the smart card matches the password associated with the smart card, then the application is unlocked (step 1020).
FIGS. 13A-13B illustrate an example of command and return codes for the unlock function. Again, it is preferable that the command formats set forth by the ISO standards be utilized. Accordingly, the example shown in FIG. 13A for the unlock command includes information related to the class, instruction, the parameters, and the length of data command.
The example of the return codes shown in FIG. 13B include status word one (SW1) and status word two (SW2) including "9000" implying successful operation, "9111" implying that the application has akeady been unlocked, and "9112" implying that the application could not be unlocked because the smart card device either did not have the password or the password was incorrect.
A method and system for locking and unlocking an application in a smart card has been disclosed. Software written according to the present invention may be stored in some form of computer-readable medium, such as in computer memory, on a floppy or hard disk, or on a CD-ROM, transmitted over a network, and/or executed by a processor.
Although the present invention has been described in accordance with the embodiments shown, one of ordinary skill in the art will readily recognize that there could be variations to the embodiments and those variations would be within the spirit and scope of the present invention.
Accordingly, many modifications may be made by one of ordinary skill in the art without departing from the spirit and scope of the appended claims.
Claims (18)
1. ~A smart card device for unlocking an application in a smart card able to be inserted in said smart card device, said smart card device comprising:
a card reader arranged to read from and to write to said inserted smart card;
a memory coupled to said card reader, said memory including:
a card identification number corresponding to said smart card, and a password corresponding to said card identification number; and a microprocessor coupled to said card reader, said microprocessor arranged to issue an unlock command along with said password to said smart card when said smart card provides identifying information matching said card identification number, whereby said smart card device is able to unlock said application in said smart card without entry of an unlocking password from a user.
a card reader arranged to read from and to write to said inserted smart card;
a memory coupled to said card reader, said memory including:
a card identification number corresponding to said smart card, and a password corresponding to said card identification number; and a microprocessor coupled to said card reader, said microprocessor arranged to issue an unlock command along with said password to said smart card when said smart card provides identifying information matching said card identification number, whereby said smart card device is able to unlock said application in said smart card without entry of an unlocking password from a user.
2. ~A smart card device as recited in claim 1 further comprising:
a function button arranged to issue an unlock request to said microprocessor when activated.
a function button arranged to issue an unlock request to said microprocessor when activated.
3. ~A smart card device as recited in claim 1 further comprising:
a display for indicating a status of said smart card.
a display for indicating a status of said smart card.
4. ~A smart card device as recited in claim 1 wherein said memory is a cache arranged to hold a plurality of card identification numbers and a corresponding plurality of passwords, whereby said smart card device may be used to unlock a plurality of applications.
5. ~A smart card device as recited in claim 4 wherein said microprocessor is further arranged to delete an oldest pair of corresponding card identification number and password when said cache is full.
6. ~A method of locking an application of a smart card using a smart card device, said method comprising:~~
receiving said smart card in said smart card device;
sending a lock command intended for said application from said smart card device to said smart card without entry into said smart card device of a locking password by a user, such that said application becomes locked;
receiving identifying information including a password from said smart card;
and storing said received identifying information including said password in a memory of said smart card device, whereby said application of said smart card may not be used until said application is unlocked.
receiving said smart card in said smart card device;
sending a lock command intended for said application from said smart card device to said smart card without entry into said smart card device of a locking password by a user, such that said application becomes locked;
receiving identifying information including a password from said smart card;
and storing said received identifying information including said password in a memory of said smart card device, whereby said application of said smart card may not be used until said application is unlocked.
7. A method as recited in claim 6 wherein said identifying information includes a card identification number, whereby said card identification number may be used to find said password in said memory of said smart card device.
8. A method as recited in claim 6 further comprising:
receiving into said smart card device an unlock request without entry into said smart card device of an unlocking password by said user; and sending said identifying information including said password from said memory of said smart card device to said smart card along with an unlock command, whereby said application of said smart card becomes unlocked and is available for use.
receiving into said smart card device an unlock request without entry into said smart card device of an unlocking password by said user; and sending said identifying information including said password from said memory of said smart card device to said smart card along with an unlock command, whereby said application of said smart card becomes unlocked and is available for use.
9. A method as recited in claim 6 wherein said memory is implemented as a stack and wherein said element of storing includes:
determining whether said memory is full; and wherein when it is determined that said memory is full, deleting other identifying information related to an oldest transaction of said smart card device.
determining whether said memory is full; and wherein when it is determined that said memory is full, deleting other identifying information related to an oldest transaction of said smart card device.
10. A method as recited in claim 6 further comprising:
determining whether said application of said smart card has already been locked; and wherein when it is determined that said application is already locked, said identifying information is not stored in said memory of said smart card device, whereby unauthorized unlocking is inhibited.
determining whether said application of said smart card has already been locked; and wherein when it is determined that said application is already locked, said identifying information is not stored in said memory of said smart card device, whereby unauthorized unlocking is inhibited.
11. A method of unlocking an application of a smart card using a smart card device, said method comprising:
receiving said smart card in said smart card device;
receiving identifying information including a password from said smart card;
searching a memory of said smart card device for said identifying information;
and sending an unlock command intended for said application to said smart card from said smart card device without entry into said smart card device of an unlocking password by a user, whereby said application of said smart card is unlocked and available for use.
receiving said smart card in said smart card device;
receiving identifying information including a password from said smart card;
searching a memory of said smart card device for said identifying information;
and sending an unlock command intended for said application to said smart card from said smart card device without entry into said smart card device of an unlocking password by a user, whereby said application of said smart card is unlocked and available for use.
12. A method as recited in claim 11 wherein said identifying information includes a card identification number, said method further comprising:
identifying said password in said memory of said smart card device that corresponds to said card identification number; and sending said password to said smart card, whereby said smart card password is used by said smart card to verify that said unlock command from said smart card device is authorized.
identifying said password in said memory of said smart card device that corresponds to said card identification number; and sending said password to said smart card, whereby said smart card password is used by said smart card to verify that said unlock command from said smart card device is authorized.
13. A method as recited in claim 11 wherein said memory is implemented as a cache and wherein said method further comprises:
matching said identifying information with a password in said cache; and sending said password to said smart card along with said unlock command, whereby said password is used by said smart card to verify that said unlock command from said smart card device is authorized.
matching said identifying information with a password in said cache; and sending said password to said smart card along with said unlock command, whereby said password is used by said smart card to verify that said unlock command from said smart card device is authorized.
14. A method of unlocking an application of a smart card using a computing device, said method comprising:
receiving said smart card in said computing device;
receiving identifying information from said smart card;
automatically generating a password corresponding to said identifying information of said smart card; and sending an unlock command along with said generated password to said smart card, whereby said password is used by said smart card to verify that said unlock command from said computing device is authorized.
receiving said smart card in said computing device;
receiving identifying information from said smart card;
automatically generating a password corresponding to said identifying information of said smart card; and sending an unlock command along with said generated password to said smart card, whereby said password is used by said smart card to verify that said unlock command from said computing device is authorized.
15. A method as recited in claim 14 wherein said computing device is a bank terminal, a personal computer, a telephone, or an automated teller machine.
16. A method as recited in claim 14 wherein said password is generated by referencing a memory of said computing device using said identifying information.
17. A method as recited in claim 14 wherein said identifying information includes a card identification number, and said element of automatically generating includes:
using a cryptographic technique to generate said password based upon said card identification number, whereby said password need not be stored by said computing device.
using a cryptographic technique to generate said password based upon said card identification number, whereby said password need not be stored by said computing device.
18. A method as recited in any one of claims 14 to 17 further comprising:
displaying one of a locked and unlocked status message.
displaying one of a locked and unlocked status message.
Applications Claiming Priority (3)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| US09/035,647 | 1998-03-05 | ||
| US09/035,647 US6179205B1 (en) | 1998-03-05 | 1998-03-05 | System and method for locking and unlocking and application in a smart card |
| PCT/US1999/004986 WO1999045507A1 (en) | 1998-03-05 | 1999-03-05 | A system and method for locking and unlocking an application in a smart card |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CA2321229A1 CA2321229A1 (en) | 1999-09-10 |
| CA2321229C true CA2321229C (en) | 2005-08-16 |
Family
ID=21883947
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CA002321229A Expired - Fee Related CA2321229C (en) | 1998-03-05 | 1999-03-05 | Locking and unlocking an application in a smart card |
Country Status (7)
| Country | Link |
|---|---|
| US (2) | US6179205B1 (en) |
| EP (1) | EP1060459B1 (en) |
| AT (1) | ATE254322T1 (en) |
| AU (1) | AU764621B2 (en) |
| CA (1) | CA2321229C (en) |
| DE (1) | DE69912749T2 (en) |
| WO (1) | WO1999045507A1 (en) |
Families Citing this family (170)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US6179205B1 (en) * | 1998-03-05 | 2001-01-30 | Visa International Service Association | System and method for locking and unlocking and application in a smart card |
| JP2000113119A (en) * | 1998-09-30 | 2000-04-21 | Fujitsu Ltd | Ic card processor |
| GB9824420D0 (en) * | 1998-11-07 | 1998-12-30 | Ncr Int Inc | Smart card and method of operating the smart card |
| US6032136A (en) * | 1998-11-17 | 2000-02-29 | First Usa Bank, N.A. | Customer activated multi-value (CAM) card |
| DE19902722A1 (en) * | 1999-01-25 | 2000-07-27 | Giesecke & Devrient Gmbh | Method for exchanging at least one secret initial value between a processing station and a chip card |
| JP3283848B2 (en) * | 1999-04-20 | 2002-05-20 | エヌイーシーモバイリング株式会社 | Mobile radio communication device and communication permission method |
| DE19921524C2 (en) * | 1999-05-10 | 2003-08-28 | Giesecke & Devrient Gmbh | Device for protecting the initial use of a processor chip card |
| US7239226B2 (en) * | 2001-07-10 | 2007-07-03 | American Express Travel Related Services Company, Inc. | System and method for payment using radio frequency identification in contact and contactless transactions |
| US7889052B2 (en) * | 2001-07-10 | 2011-02-15 | Xatra Fund Mx, Llc | Authorizing payment subsequent to RF transactions |
| US7837116B2 (en) | 1999-09-07 | 2010-11-23 | American Express Travel Related Services Company, Inc. | Transaction card |
| US7263558B1 (en) | 1999-09-15 | 2007-08-28 | Narus, Inc. | Method and apparatus for providing additional information in response to an application server request |
| DE10048939B4 (en) * | 1999-12-11 | 2010-08-19 | International Business Machines Corp. | Conditional suppression of verification of a cardholder |
| GB2357602A (en) * | 1999-12-22 | 2001-06-27 | Nokia Mobile Phones Ltd | Memory controller for a memory array comprising different memory types |
| US8543423B2 (en) | 2002-07-16 | 2013-09-24 | American Express Travel Related Services Company, Inc. | Method and apparatus for enrolling with multiple transaction environments |
| US8429041B2 (en) * | 2003-05-09 | 2013-04-23 | American Express Travel Related Services Company, Inc. | Systems and methods for managing account information lifecycles |
| US7172112B2 (en) | 2000-01-21 | 2007-02-06 | American Express Travel Related Services Company, Inc. | Public/private dual card system and method |
| WO2001067355A2 (en) | 2000-03-07 | 2001-09-13 | American Express Travel Related Services Company, Inc. | System for facilitating a transaction |
| JP3368886B2 (en) * | 2000-03-22 | 2003-01-20 | 日本電気株式会社 | Mobile terminal device |
| FR2812419B1 (en) * | 2000-07-31 | 2003-01-17 | Cit Alcatel | METHOD FOR SECURING ACCESS TO A MICROPROCESSOR USER CARD |
| JP4489915B2 (en) * | 2000-07-31 | 2010-06-23 | 大日本印刷株式会社 | Portable information processing device with password verification function |
| US6824064B2 (en) * | 2000-12-06 | 2004-11-30 | Mobile-Mind, Inc. | Concurrent communication with multiple applications on a smart card |
| US20020096569A1 (en) * | 2001-01-25 | 2002-07-25 | Zine-Eddine Boutaghou | Data card including a magnetic strip having a textured surface or interface |
| GB0106082D0 (en) * | 2001-03-13 | 2001-05-02 | Mat & Separations Tech Int Ltd | Method and equipment for removing volatile compounds from air |
| US7299980B2 (en) | 2001-05-15 | 2007-11-27 | Inadam Corporation | Computer readable universal authorization card system and method for using same |
| US8403228B2 (en) | 2001-05-15 | 2013-03-26 | Inadam Corporation | Computer readable universal authorization card system and method for using same |
| US7810735B2 (en) | 2001-05-15 | 2010-10-12 | Inadam Corporation | Computer readable universal authorization card system and method for using same |
| US7650314B1 (en) | 2001-05-25 | 2010-01-19 | American Express Travel Related Services Company, Inc. | System and method for securing a recurrent billing transaction |
| JP4240851B2 (en) * | 2001-06-27 | 2009-03-18 | ソニー株式会社 | PIN code identification device and PIN code identification method |
| JP2003016398A (en) * | 2001-06-27 | 2003-01-17 | Sony Corp | Portable terminal machine |
| US20040233037A1 (en) * | 2001-07-10 | 2004-11-25 | American Express Travel Related Services Company, Inc. | Method and system for iris scan recognition biometrics on a fob |
| US8548927B2 (en) * | 2001-07-10 | 2013-10-01 | Xatra Fund Mx, Llc | Biometric registration for facilitating an RF transaction |
| US7668750B2 (en) | 2001-07-10 | 2010-02-23 | David S Bonalle | Securing RF transactions using a transactions counter |
| US7827106B2 (en) | 2001-07-10 | 2010-11-02 | American Express Travel Related Services Company, Inc. | System and method for manufacturing a punch-out RFID transaction device |
| US8001054B1 (en) | 2001-07-10 | 2011-08-16 | American Express Travel Related Services Company, Inc. | System and method for generating an unpredictable number using a seeded algorithm |
| US7996324B2 (en) | 2001-07-10 | 2011-08-09 | American Express Travel Related Services Company, Inc. | Systems and methods for managing multiple accounts on a RF transaction device using secondary identification indicia |
| US8960535B2 (en) | 2001-07-10 | 2015-02-24 | Iii Holdings 1, Llc | Method and system for resource management and evaluation |
| US8284025B2 (en) | 2001-07-10 | 2012-10-09 | Xatra Fund Mx, Llc | Method and system for auditory recognition biometrics on a FOB |
| US20040236699A1 (en) * | 2001-07-10 | 2004-11-25 | American Express Travel Related Services Company, Inc. | Method and system for hand geometry recognition biometrics on a fob |
| US7925535B2 (en) | 2001-07-10 | 2011-04-12 | American Express Travel Related Services Company, Inc. | System and method for securing RF transactions using a radio frequency identification device including a random number generator |
| US7805378B2 (en) | 2001-07-10 | 2010-09-28 | American Express Travel Related Servicex Company, Inc. | System and method for encoding information in magnetic stripe format for use in radio frequency identification transactions |
| US7249112B2 (en) | 2002-07-09 | 2007-07-24 | American Express Travel Related Services Company, Inc. | System and method for assigning a funding source for a radio frequency identification device |
| US9024719B1 (en) | 2001-07-10 | 2015-05-05 | Xatra Fund Mx, Llc | RF transaction system and method for storing user personal data |
| US7746215B1 (en) | 2001-07-10 | 2010-06-29 | Fred Bishop | RF transactions using a wireless reader grid |
| US8294552B2 (en) | 2001-07-10 | 2012-10-23 | Xatra Fund Mx, Llc | Facial scan biometrics on a payment device |
| US7303120B2 (en) | 2001-07-10 | 2007-12-04 | American Express Travel Related Services Company, Inc. | System for biometric security using a FOB |
| US7493288B2 (en) | 2001-07-10 | 2009-02-17 | Xatra Fund Mx, Llc | RF payment via a mobile device |
| US8538863B1 (en) | 2001-07-10 | 2013-09-17 | American Express Travel Related Services Company, Inc. | System and method for facilitating a transaction using a revolving use account associated with a primary account |
| US9031880B2 (en) * | 2001-07-10 | 2015-05-12 | Iii Holdings 1, Llc | Systems and methods for non-traditional payment using biometric data |
| US7119659B2 (en) | 2001-07-10 | 2006-10-10 | American Express Travel Related Services Company, Inc. | Systems and methods for providing a RF transaction device for use in a private label transaction |
| US7360689B2 (en) | 2001-07-10 | 2008-04-22 | American Express Travel Related Services Company, Inc. | Method and system for proffering multiple biometrics for use with a FOB |
| US7503480B2 (en) | 2001-07-10 | 2009-03-17 | American Express Travel Related Services Company, Inc. | Method and system for tracking user performance |
| US9454752B2 (en) | 2001-07-10 | 2016-09-27 | Chartoleaux Kg Limited Liability Company | Reload protocol at a transaction processing entity |
| US7705732B2 (en) | 2001-07-10 | 2010-04-27 | Fred Bishop | Authenticating an RF transaction using a transaction counter |
| US8635131B1 (en) | 2001-07-10 | 2014-01-21 | American Express Travel Related Services Company, Inc. | System and method for managing a transaction protocol |
| US7762457B2 (en) | 2001-07-10 | 2010-07-27 | American Express Travel Related Services Company, Inc. | System and method for dynamic fob synchronization and personalization |
| US7162736B2 (en) | 2001-08-20 | 2007-01-09 | Schlumberger Omnes, Inc. | Remote unblocking with a security agent |
| WO2003023560A2 (en) * | 2001-09-06 | 2003-03-20 | Mastercard International Incorporated | Method and device for control by consumers over personal data |
| US20030061192A1 (en) * | 2001-09-24 | 2003-03-27 | Mcgunn Edward J. | Method and system for communicating lock information |
| US20030080852A1 (en) * | 2001-10-31 | 2003-05-01 | International Business Machines Corporation | Secure smart card |
| US20030097582A1 (en) * | 2001-11-19 | 2003-05-22 | Yves Audebert | Method and system for reducing personal security device latency |
| US20030110272A1 (en) * | 2001-12-11 | 2003-06-12 | Du Castel Bertrand | System and method for filtering content |
| US6736435B1 (en) | 2002-01-31 | 2004-05-18 | Phouphanomketh Ditthavong | Ding and dent prevention system |
| US7136490B2 (en) * | 2002-02-21 | 2006-11-14 | International Business Machines Corporation | Electronic password wallet |
| JP3979195B2 (en) * | 2002-06-25 | 2007-09-19 | ソニー株式会社 | Information storage device, memory access control method, and computer program |
| US8010405B1 (en) | 2002-07-26 | 2011-08-30 | Visa Usa Inc. | Multi-application smart card device software solution for smart cardholder reward selection and redemption |
| US7984848B1 (en) * | 2002-08-30 | 2011-07-26 | Browning Lucas T | Cash card system |
| US6820803B1 (en) * | 2002-08-30 | 2004-11-23 | Lucas T. Browning | Cash card system |
| US6805287B2 (en) | 2002-09-12 | 2004-10-19 | American Express Travel Related Services Company, Inc. | System and method for converting a stored value card to a credit card |
| US20040148224A1 (en) * | 2002-09-13 | 2004-07-29 | Visa U.S.A. | Method and apparatus for electronic support and delivery of multiple lottery and sweepstake programs, in substantially off-line environments |
| US8626577B2 (en) | 2002-09-13 | 2014-01-07 | Visa U.S.A | Network centric loyalty system |
| US8015060B2 (en) * | 2002-09-13 | 2011-09-06 | Visa Usa, Inc. | Method and system for managing limited use coupon and coupon prioritization |
| US7121456B2 (en) * | 2002-09-13 | 2006-10-17 | Visa U.S.A. Inc. | Method and system for managing token image replacement |
| US9852437B2 (en) * | 2002-09-13 | 2017-12-26 | Visa U.S.A. Inc. | Opt-in/opt-out in loyalty system |
| FR2845502B1 (en) * | 2002-10-04 | 2005-01-28 | Oberthur Card Syst Sa | MICROCIRCUIT CARD WHOSE PERFORMANCES MAY BE MODIFIED AFTER CUSTOMIZATION. |
| US8065717B2 (en) * | 2002-11-27 | 2011-11-22 | Activcard | Automated security token administrative services |
| DE10303740B4 (en) * | 2003-01-30 | 2006-09-14 | Infineon Technologies Flash Gmbh & Co. Kg | Security memory card and manufacturing process |
| JP3822170B2 (en) * | 2003-01-31 | 2006-09-13 | 株式会社東芝 | IC card usage period setting method, IC card, and IC card case |
| WO2004091170A2 (en) * | 2003-03-31 | 2004-10-21 | Visa U.S.A. Inc. | Method and system for secure authentication |
| US7171192B2 (en) * | 2003-04-04 | 2007-01-30 | Galleria Industrial Company | Portable wireless data device |
| US7827077B2 (en) | 2003-05-02 | 2010-11-02 | Visa U.S.A. Inc. | Method and apparatus for management of electronic receipts on portable devices |
| US7267266B2 (en) * | 2003-07-10 | 2007-09-11 | Rouille David W | Security system |
| US8554610B1 (en) | 2003-08-29 | 2013-10-08 | Visa U.S.A. Inc. | Method and system for providing reward status |
| US7104446B2 (en) | 2003-09-03 | 2006-09-12 | Visa U.S.A., Inc. | Method, system and portable consumer device using wildcard values |
| US7051923B2 (en) * | 2003-09-12 | 2006-05-30 | Visa U.S.A., Inc. | Method and system for providing interactive cardholder rewards image replacement |
| US20050258229A1 (en) * | 2003-09-22 | 2005-11-24 | Matsushita Electric Industrial Co., Ltd. | Secure device and information processing unit |
| US8005763B2 (en) * | 2003-09-30 | 2011-08-23 | Visa U.S.A. Inc. | Method and system for providing a distributed adaptive rules based dynamic pricing system |
| US8407083B2 (en) | 2003-09-30 | 2013-03-26 | Visa U.S.A., Inc. | Method and system for managing reward reversal after posting |
| US20050071226A1 (en) * | 2003-09-30 | 2005-03-31 | Visa U.S.A. Inc. | Method and system for managing dynamic terms and conditions and user interaction |
| US7653602B2 (en) * | 2003-11-06 | 2010-01-26 | Visa U.S.A. Inc. | Centralized electronic commerce card transactions |
| JP4041090B2 (en) * | 2004-04-06 | 2008-01-30 | 本田技研工業株式会社 | Remote locking / unlocking control device for vehicle |
| US7264156B2 (en) * | 2004-04-30 | 2007-09-04 | Hitachi Global Storage Technologies Netherlands Bv | Method of enhancing the data storage security of cash-free transactions in vending machines |
| US7318550B2 (en) | 2004-07-01 | 2008-01-15 | American Express Travel Related Services Company, Inc. | Biometric safeguard method for use with a smartcard |
| DE102005017841B4 (en) * | 2005-04-18 | 2012-11-15 | Skidata Ag | Access control system |
| JP4188340B2 (en) * | 2005-05-10 | 2008-11-26 | ソニー・エリクソン・モバイルコミュニケーションズ株式会社 | Mobile terminal and function restriction method |
| DE102005028066B3 (en) | 2005-06-16 | 2006-12-07 | Deutsche Exide Gmbh | Pole bridge for a battery |
| US20070016940A1 (en) * | 2005-07-08 | 2007-01-18 | Jdi Ventures, Inc. D/B/A Peak Performance Solutions | Identification and password management device |
| US8112637B2 (en) * | 2005-07-12 | 2012-02-07 | Hewlett-Packard Development Company, L.P. | System and method for programming a data storage device with a password |
| KR100659909B1 (en) * | 2005-08-25 | 2006-12-20 | (주)제이브이엠 | Automatic medicine packing system |
| JP4766666B2 (en) * | 2005-08-29 | 2011-09-07 | キヤノン株式会社 | Information processing apparatus, device, information processing system, and program |
| US7383988B2 (en) * | 2005-08-31 | 2008-06-10 | Metavante Corporation | System and method for locking and unlocking a financial account card |
| US7423328B2 (en) * | 2005-10-17 | 2008-09-09 | Northern Lights Semiconductor Corp. | Method for reducing word line current in magnetoresistive random access memory and structure thereof |
| GB2435951A (en) | 2006-02-23 | 2007-09-12 | Barclays Bank Plc | System for PIN servicing |
| US20070228156A1 (en) * | 2006-03-28 | 2007-10-04 | Household Corporation | Interoperability facilitator |
| US7591419B2 (en) * | 2006-03-28 | 2009-09-22 | HSBC Card Services Inc. | User selectable functionality facilitator |
| TWI404836B (en) | 2006-05-19 | 2013-08-11 | Memc Electronic Materials | Controlling agglomerated point defect and oxygen cluster formation induced by the lateral surface of a silicon single crystal during cz growth |
| US7992203B2 (en) | 2006-05-24 | 2011-08-02 | Red Hat, Inc. | Methods and systems for secure shared smartcard access |
| KR100744427B1 (en) * | 2006-06-05 | 2007-08-01 | (주)제이브이엠 | Apparatus for identifying cassette using auto wrapping pill and method thereof |
| US8495380B2 (en) | 2006-06-06 | 2013-07-23 | Red Hat, Inc. | Methods and systems for server-side key generation |
| US8180741B2 (en) | 2006-06-06 | 2012-05-15 | Red Hat, Inc. | Methods and systems for providing data objects on a token |
| US8364952B2 (en) * | 2006-06-06 | 2013-01-29 | Red Hat, Inc. | Methods and system for a key recovery plan |
| US8332637B2 (en) | 2006-06-06 | 2012-12-11 | Red Hat, Inc. | Methods and systems for nonce generation in a token |
| US7822209B2 (en) | 2006-06-06 | 2010-10-26 | Red Hat, Inc. | Methods and systems for key recovery for a token |
| US8098829B2 (en) * | 2006-06-06 | 2012-01-17 | Red Hat, Inc. | Methods and systems for secure key delivery |
| US8707024B2 (en) * | 2006-06-07 | 2014-04-22 | Red Hat, Inc. | Methods and systems for managing identity management security domains |
| US9769158B2 (en) * | 2006-06-07 | 2017-09-19 | Red Hat, Inc. | Guided enrollment and login for token users |
| US8412927B2 (en) | 2006-06-07 | 2013-04-02 | Red Hat, Inc. | Profile framework for token processing system |
| US8099765B2 (en) | 2006-06-07 | 2012-01-17 | Red Hat, Inc. | Methods and systems for remote password reset using an authentication credential managed by a third party |
| US8589695B2 (en) * | 2006-06-07 | 2013-11-19 | Red Hat, Inc. | Methods and systems for entropy collection for server-side key generation |
| KR100807992B1 (en) * | 2006-06-21 | 2008-02-28 | (주)제이브이엠 | Apparatus for identifying of support tray data and method thereof |
| US20080017704A1 (en) * | 2006-07-24 | 2008-01-24 | First Data Corporation | Contactless Electronic Wallet Payment Device |
| US8787566B2 (en) * | 2006-08-23 | 2014-07-22 | Red Hat, Inc. | Strong encryption |
| US8806219B2 (en) | 2006-08-23 | 2014-08-12 | Red Hat, Inc. | Time-based function back-off |
| US8074265B2 (en) * | 2006-08-31 | 2011-12-06 | Red Hat, Inc. | Methods and systems for verifying a location factor associated with a token |
| US9038154B2 (en) * | 2006-08-31 | 2015-05-19 | Red Hat, Inc. | Token Registration |
| US8977844B2 (en) | 2006-08-31 | 2015-03-10 | Red Hat, Inc. | Smartcard formation with authentication keys |
| US8356342B2 (en) * | 2006-08-31 | 2013-01-15 | Red Hat, Inc. | Method and system for issuing a kill sequence for a token |
| CN101141442B (en) * | 2006-09-07 | 2010-10-06 | 普天信息技术研究院 | System and method for implementing memory card function service |
| KR100842177B1 (en) * | 2006-09-20 | 2008-06-30 | (주)제이브이엠 | System for controlling unification of automatic tablet packing apparatus and method thereof |
| KR100708234B1 (en) * | 2006-09-22 | 2007-04-16 | (주)제이브이엠 | Medicine storage cabinet |
| US20080203170A1 (en) * | 2007-02-28 | 2008-08-28 | Visa U.S.A. Inc. | Fraud prevention for transit fare collection |
| US7527208B2 (en) * | 2006-12-04 | 2009-05-05 | Visa U.S.A. Inc. | Bank issued contactless payment card used in transit fare collection |
| US8523069B2 (en) | 2006-09-28 | 2013-09-03 | Visa U.S.A. Inc. | Mobile transit fare payment |
| US8386349B2 (en) * | 2007-02-28 | 2013-02-26 | Visa U.S.A. Inc. | Verification of a portable consumer device in an offline environment |
| US8738485B2 (en) * | 2007-12-28 | 2014-05-27 | Visa U.S.A. Inc. | Contactless prepaid product for transit fare collection |
| US8118223B2 (en) | 2006-09-28 | 2012-02-21 | Visa U.S.A. Inc. | Smart sign mobile transit fare payment |
| US20080208681A1 (en) * | 2006-09-28 | 2008-08-28 | Ayman Hammad | Payment using a mobile device |
| US8346639B2 (en) | 2007-02-28 | 2013-01-01 | Visa U.S.A. Inc. | Authentication of a data card using a transit verification value |
| KR100800290B1 (en) * | 2006-11-01 | 2008-02-01 | (주)제이브이엠 | Cassette device for an automatic medicine packing machine |
| KR100807994B1 (en) * | 2006-11-02 | 2008-02-28 | (주)제이브이엠 | Method and apparatus for vibrating a last hopper of medicine packing machine |
| KR100767599B1 (en) * | 2006-11-13 | 2007-10-17 | (주)제이브이엠 | Method and apparatus for back-up driving medicine packing machine |
| US8693690B2 (en) * | 2006-12-04 | 2014-04-08 | Red Hat, Inc. | Organizing an extensible table for storing cryptographic objects |
| KR100787807B1 (en) | 2006-12-22 | 2007-12-21 | (주)제이브이엠 | Method and apparatus for inspecting a manual distributing tray of medicine packing machine |
| KR100787806B1 (en) * | 2006-12-22 | 2007-12-21 | (주)제이브이엠 | Division packing method and apparatus for medicine packing machine |
| KR100816648B1 (en) * | 2007-01-19 | 2008-03-26 | (주)제이브이엠 | A semi-automatic medicine packing machine |
| US8813243B2 (en) * | 2007-02-02 | 2014-08-19 | Red Hat, Inc. | Reducing a size of a security-related data object stored on a token |
| US8832453B2 (en) * | 2007-02-28 | 2014-09-09 | Red Hat, Inc. | Token recycling |
| US8639940B2 (en) * | 2007-02-28 | 2014-01-28 | Red Hat, Inc. | Methods and systems for assigning roles on a token |
| US9081948B2 (en) * | 2007-03-13 | 2015-07-14 | Red Hat, Inc. | Configurable smartcard |
| FR2915302B1 (en) * | 2007-04-20 | 2009-07-03 | Ingenico Sa | TERMINAL OF PAYMENT, METHOD AND PROGRAM |
| US9374379B1 (en) | 2007-06-26 | 2016-06-21 | Aol Inc. | Application unlock |
| US20090050697A1 (en) * | 2007-08-24 | 2009-02-26 | Collier Sparks | Apparatus for distributed data storage of security identification and security access system and method of use thereof |
| CN101796525A (en) * | 2007-08-28 | 2010-08-04 | 松下电器产业株式会社 | Electronic device, unlocking method, and program |
| US20090112767A1 (en) | 2007-10-25 | 2009-04-30 | Ayman Hammad | Escrow system and method |
| US20100027786A1 (en) * | 2008-02-14 | 2010-02-04 | Patrick Faith | Dynamic encryption authentication |
| PL2263359T3 (en) * | 2008-03-31 | 2015-03-31 | Orange | Method of access and of transferring data related to an application installed on a security module associated with a mobile terminal, associated security module, management server and system |
| US20090327135A1 (en) * | 2008-06-26 | 2009-12-31 | Loc Duc Nguyen | Credit card paired with location identifiable device for point of service fraud detection |
| US8707319B2 (en) * | 2008-06-26 | 2014-04-22 | Visa International Service Association | Resource location verification by comparing and updating resource location with a location of a consumer device after a threshold of location mismatches is exceeded |
| US20100048226A1 (en) * | 2008-08-20 | 2010-02-25 | First Data Corporation | Managing mobile marketing offers |
| US8162208B2 (en) * | 2009-01-23 | 2012-04-24 | HSBC Card Services Inc. | Systems and methods for user identification string generation for selection of a function |
| US8328104B2 (en) * | 2009-03-30 | 2012-12-11 | Condel International Technologies Inc. | Storage device management systems and methods |
| WO2010126994A1 (en) * | 2009-04-28 | 2010-11-04 | Mastercard International Incorporated | Apparatus, method, and computer program product for recovering torn smart payment device transactions |
| US20110145082A1 (en) * | 2009-12-16 | 2011-06-16 | Ayman Hammad | Merchant alerts incorporating receipt data |
| US8429048B2 (en) | 2009-12-28 | 2013-04-23 | Visa International Service Association | System and method for processing payment transaction receipts |
| US20120266220A1 (en) * | 2010-11-17 | 2012-10-18 | Sequent Software Inc. | System and Method for Controlling Access to a Third-Party Application with Passwords Stored in a Secure Element |
| US9317672B2 (en) | 2011-12-14 | 2016-04-19 | Visa International Service Association | Online account access control by mobile device |
| US10496990B2 (en) | 2012-02-22 | 2019-12-03 | Visa International Service Association | Data security system using mobile communications device |
| US8955746B2 (en) | 2012-09-27 | 2015-02-17 | Intel Corporation | Providing a locking technique for electronic displays |
| AU2014285769A1 (en) * | 2013-07-02 | 2016-01-07 | Visa International Service Association | Payment card including user interface for use with payment card acceptance terminal |
| TWI733537B (en) * | 2020-07-27 | 2021-07-11 | 民傑資科股份有限公司 | Memory card locking device |
| US11823512B1 (en) * | 2022-08-30 | 2023-11-21 | Mk Group Jsc | Smart access control system using an electronic card |
Family Cites Families (18)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| FR2539897B1 (en) * | 1983-01-20 | 1988-12-30 | Cii Honeywell Bull | METHOD AND DEVICE FOR ENABLING THE HOLDER OF A PORTABLE OBJECT SUCH AS A CARD, TO BE ACCESSED BY THIS CARD TO AT LEAST ONE SERVICE PROVIDED BY AT LEAST ONE AUTHORIZING ORGANIZATION |
| US4630201A (en) * | 1984-02-14 | 1986-12-16 | International Security Note & Computer Corporation | On-line and off-line transaction security system using a code generated from a transaction parameter and a random number |
| JPH0762862B2 (en) * | 1985-09-17 | 1995-07-05 | カシオ計算機株式会社 | Authentication method in IC card system |
| DE3632294A1 (en) | 1986-09-23 | 1988-04-07 | Siemens Ag | Operating unit for smart cards (chip cards) |
| FR2637710A1 (en) | 1988-10-07 | 1990-04-13 | B Et Dev | Method and device for high-security multifunction electronic control comprising a microchip card |
| US5065155A (en) | 1988-10-28 | 1991-11-12 | Sharp Kabushiki Kaisha | Key-lock system |
| ES2129021T3 (en) | 1990-01-15 | 1999-06-01 | Jonic Utvecklings Ab | SYSTEM OF EXPLOITATION OF INFORMATION SUPPORTS. |
| FI88842C (en) * | 1990-03-22 | 1993-07-12 | Nokia Mobile Phones Ltd | Checking the card connection |
| NL9120015A (en) * | 1990-04-27 | 1993-02-01 | Scandic Int Pty Ltd | Intelligent card validation device and method |
| FR2665279A1 (en) | 1990-07-24 | 1992-01-31 | Aschenbroich Yves | Process for protecting portable cards containing information in memory and device for its implementation |
| IL104422A (en) | 1993-01-18 | 1996-03-31 | Labaton Isaac J | Method and apparatus for magnetically writing on plastic cards |
| JP3571383B2 (en) * | 1994-10-19 | 2004-09-29 | 株式会社日立製作所 | IC card, IC card read / write device and electronic wallet system |
| ES2108622B1 (en) * | 1994-12-30 | 1998-07-01 | Alcatel Standard Electrica | AUTHORIZATION OF SUBSCRIBER IDENTITY IN FIXED CELL PHONE TERMINALS. |
| JPH08272924A (en) * | 1995-03-29 | 1996-10-18 | Mitsubishi Electric Corp | Ic card |
| CA2197930A1 (en) * | 1996-02-29 | 1997-08-29 | Masayuki Ohki | Electronic wallet and method for operating the same |
| TW357298B (en) * | 1996-09-12 | 1999-05-01 | Toshiba Corp | IC card portable terminal |
| US5873100A (en) * | 1996-12-20 | 1999-02-16 | Intel Corporation | Internet browser that includes an enhanced cache for user-controlled document retention |
| US6179205B1 (en) * | 1998-03-05 | 2001-01-30 | Visa International Service Association | System and method for locking and unlocking and application in a smart card |
-
1998
- 1998-03-05 US US09/035,647 patent/US6179205B1/en not_active Expired - Lifetime
-
1999
- 1999-03-05 CA CA002321229A patent/CA2321229C/en not_active Expired - Fee Related
- 1999-03-05 AT AT99911187T patent/ATE254322T1/en not_active IP Right Cessation
- 1999-03-05 AU AU29891/99A patent/AU764621B2/en not_active Ceased
- 1999-03-05 WO PCT/US1999/004986 patent/WO1999045507A1/en active IP Right Grant
- 1999-03-05 DE DE69912749T patent/DE69912749T2/en not_active Expired - Lifetime
- 1999-03-05 EP EP19990911187 patent/EP1060459B1/en not_active Expired - Lifetime
-
2000
- 2000-08-03 US US09/632,367 patent/US6273335B1/en not_active Expired - Lifetime
Also Published As
| Publication number | Publication date |
|---|---|
| WO1999045507A1 (en) | 1999-09-10 |
| US6179205B1 (en) | 2001-01-30 |
| AU2989199A (en) | 1999-09-20 |
| EP1060459A1 (en) | 2000-12-20 |
| CA2321229A1 (en) | 1999-09-10 |
| DE69912749D1 (en) | 2003-12-18 |
| ATE254322T1 (en) | 2003-11-15 |
| AU764621B2 (en) | 2003-08-28 |
| US6273335B1 (en) | 2001-08-14 |
| EP1060459B1 (en) | 2003-11-12 |
| DE69912749T2 (en) | 2004-09-30 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CA2321229C (en) | Locking and unlocking an application in a smart card | |
| US5844218A (en) | Method and system for using an application programmable smart card for financial transactions in multiple countries | |
| AU758710B2 (en) | Card activation at point of distribution | |
| US6289324B1 (en) | System for performing financial transactions using a smart card | |
| Fancher | In your pocket: smartcards | |
| US5036461A (en) | Two-way authentication system between user's smart card and issuer-specific plug-in application modules in multi-issued transaction device | |
| Shelfer et al. | Smart card evolution | |
| KR0147360B1 (en) | Payment or information transfer system using an electronic memory card as wallet | |
| US5892211A (en) | Transaction system comprising a first transportable integrated circuit device, a terminal, and a security device | |
| US4961142A (en) | Multi-issuer transaction device with individual identification verification plug-in application modules for each issuer | |
| AU2002347822B2 (en) | System and method for integrated circuit card data storage | |
| US4630201A (en) | On-line and off-line transaction security system using a code generated from a transaction parameter and a random number | |
| US20090144162A1 (en) | Transaction Security Method and Apparatus | |
| AU2002347822A1 (en) | System and method for integrated circuit card data storage | |
| WO2012037971A1 (en) | Financial transaction method and system having an update mechanism | |
| JPS63136296A (en) | Individual identification card | |
| Read | EFTPOS: electronic funds transfer at point of sale | |
| CA2625235C (en) | System and method for maintaining in the field an activation secure module | |
| EP1426905A1 (en) | Device for the controlled supply of products as well as a programming device and means of payment for use thereof | |
| Schmidt et al. | Is electronic cash possible? | |
| JPS62280965A (en) | Protection system for information in ic card | |
| buys Venus | platform from Motorola | |
| JPH08161447A (en) | Ic card system | |
| JPS62293470A (en) | Certification system for ic card |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| EEER | Examination request | ||
| MKLA | Lapsed |
Effective date: 20160307 |