EP0644513A2
Expired / Lapsed
EP
⏱️ 0.0 years remaining
A smartcard adapted for a plurality of service providers and for remote installation of same.
Assignee: AT&T Inc
•
Filing: 1994-09-07
•
Granted: —
•
Expires: 2014-09-07
Abstract
Abstract A smartcard that allows different Service Providers to coexist on the smartcard with none of the Service Providers, nor the owner of the smartcard, having access to the files created for, or by, each of the resident Service Providers. The operating system of the smartcard includes a root directory that is owned by the smartcard's issuer/owner, and each Service Provider is a "user" that is installed by the issuer/owner. Each such user is provided with a subdirectory of the root directory, and within the subdirectory the user creates files and subdirectories with files, as the user deems necessary. The operating system prevents all users of the smartcard, including the smartcard's issuer/owner and the smartcard's holder, from accessing any files that are owned by any other user, when that user chooses to prevent such access. This power to exclude is effected through a password file that is owned by the user and which cannot be altered by any other user, including the smartcard's issuer/owner. Optionally, the smartcard's issuer/owner is given the power to erase all files of a given user. Connection is effected with a protocol which authenticates all parties to the connection. Thus, in a connection between the smartcard and a user, the smartcard determines whether the user should be granted access, and the user determines whether the smartcard is a valid smartcard. Authentication of the possessor of the smartcard may also be effected.
Inventors
- 👤 Richard Mandelbaum
- 👤 Stephen Andrew Sherman
- 👤 Diane R. Wetherington
Bibliographic Details
Application Number
—
Jurisdiction
EP
Data Source
google_patents
Last Synchronized
2026-10-30 04:56
CPC Classifications
G; G06; G06Q; G06Q20/00; G06Q20/30; G06Q20/34; G06Q20/341; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/60; G06F21/62; G06F21/6218; G06Q20/355; G06Q20/3555; G06Q20/357; G06Q20/3576; G06Q20/36; G06Q20/367; G06Q20/38; G06Q20/388; G06Q20/40; G06Q20/409; G06Q20/4097; G06Q20/40975; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; H; H04; H04L; H04L63/00; H04L63/08; H04L63/083; H04L63/0853; H04L63/0869
Claims Analysis
Total Claims: 17
Claim 1
Independent Claim
181 words
A multiple-application smartcard including a processor and memory in connection with which there is an issuer/owner, a holder and a service provider, comprising: an operating system that includes a tree-like file structure that begins with a file having characteristics that are controlled solely by said issuer/owner; a plurality of files, forming part of the tree-like structure and each having file characteristics that are controlled solely by said issuer/owner, which files are executable files, in the sense that, when referenced, they operate on permissible data in said memory; a password file that is accessible only to said issuer/owner, which contains data and which is accessed by said issuer/owner prior to said issuer/owner gaining access to said executable files; a password file that is accessible only to said holder, which contains data and which is accessed by said holder prior to said holder gaining access to said executable files; an a password file that is accessible only to said service provider, which contains data and which is accessed by said service provider prior to said service provider gaining access to said executable files.
Claim 2
Dependent Claim
181 words
A multiple-application smartcard including a processor and memory in connection with which there is an issuer/owner, a holder and a service provider, comprising: an operating system that includes a tree-like file structure that begins with a file having characteristics that are controlled solely by said issuer/owner; a plurality of files, forming part of the tree-like structure and each having file characteristics that are controlled solely by said issuer/owner, which files are executable files, in the sense that, when referenced, they operate on permissible data in said memory; a password file that is accessible only to said issuer/owner, which contains data and which is accessed by said issuer/owner prior to said issuer/owner gaining access to said executable files; a password file that is accessible only to said holder, which contains data and which is accessed by said holder prior to said holder gaining access to said executable files; an a password file that is accessible only to said service provider, which contains data and which is accessed by said service provider prior to said service provider gaining access to said executable files.
Claim 3
Dependent Claim
95 words
A smartcard adapted for communicating with a party and including a processor comprising: a memory arranged into a plurality of information storage and retrieval user entity logical zones, with at least two of said logical zones including sub-zones that encompass a memory segment that contains access control data, and control means, for allowing access by said party to a selected one of said user logical zones, including its associated sub-zone, only when said party deliver to said smartcard information related to the access control data contained in said selected one of said user logical zones.
Claim 4
Dependent Claim
95 words
A smartcard adapted for communicating with a party and including a processor comprising: a memory arranged into a plurality of information storage and retrieval user entity logical zones, with at least two of said logical zones including sub-zones that encompass a memory segment that contains access control data, and control means, for allowing access by said party to a selected one of said user logical zones, including its associated sub-zone, only when said party deliver to said smartcard information related to the access control data contained in said selected one of said user logical zones.
Claim 5
Dependent Claim
224 words
In connection with a smartcard issued by a first party, where the smartcard includes an operating system having a tree-like file structure that begins with a directory-file with attributes that are controlled solely by said party, a plurality of files, forming part of the tree-like structure and each having file attributes that are controlled solely by said first party, which files are executable files, in the sense that, when referenced, they operate on permissible data in said memory, and a password file that is accessible only said first party gaining access to said executable file, a method for installing capability for a second party to provide service to a holder of the smartcard, comprising the steps of: said holder assisting in establishing communication between the smartcard and said first party; executing a log-in protocol between the smartcard and said first party, employing the data contained in said password file; communicating to said first party a request for installation of a service capability on said smartcard for said second party; said first party establishing a user password file in said smartcard, with said user password file arranged to form part of said tree-like structure; said first party inserting data into said user password file; and said first party changing file attributes of said user password file to make it accessible only to said second party.
Claim 6
Dependent Claim
224 words
In connection with a smartcard issued by a first party, where the smartcard includes an operating system having a tree-like file structure that begins with a directory-file with attributes that are controlled solely by said party, a plurality of files, forming part of the tree-like structure and each having file attributes that are controlled solely by said first party, which files are executable files, in the sense that, when referenced, they operate on permissible data in said memory, and a password file that is accessible only said first party gaining access to said executable file, a method for installing capability for a second party to provide service to a holder of the smartcard, comprising the steps of: said holder assisting in establishing communication between the smartcard and said first party; executing a log-in protocol between the smartcard and said first party, employing the data contained in said password file; communicating to said first party a request for installation of a service capability on said smartcard for said second party; said first party establishing a user password file in said smartcard, with said user password file arranged to form part of said tree-like structure; said first party inserting data into said user password file; and said first party changing file attributes of said user password file to make it accessible only to said second party.
Claim 7
Dependent Claim
23 words
The method of claim 3 further comprising a step of informing said second party of the data stored in the user password file.
Claim 8
Dependent Claim
44 words
The method of claim 3 further comprising a step, executed by said first party following said step of communicating to said first party a request for installation , of confirming with said second party that the request for installation of service should be fulfilled.
Claim 9
Dependent Claim
13 words
The method of claim 3 wherein said communication is employing a telecommunication network.
Claim 10
Independent Claim
39 words
A method for a party to communicate with a personal information device comprising the steps of: the personal information device authenticating the party through a challenge-response sequence; and the party authenticating the personal information device through a challenge-response sequence.
Claim 11
Independent Claim
39 words
A method for a party to communicate with a personal information device comprising the steps of: the personal information device authenticating the party through a challenge-response sequence; and the party authenticating the personal information device through a challenge-response sequence.
Claim 12
Dependent Claim
28 words
The method of claim 7 in which the step of the party authenticating the personal information device precedes the step of the personal information device authenticating the party.
Claim 13
Dependent Claim
28 words
The method of claim 7 further comprising a step of a holder of the personal information device being authenticated to the personal information device through a challenge-response sequence.
Claim 14
Dependent Claim
31 words
The method of claim 7 where the step of the personal information device authenticating the party is incomplete when the step of the party authenticating the personal identification device is commenced.
Claim 15
Dependent Claim
183 words
The method of claim 7 where the step of the personal information device authenticating the party comprises the steps of: the personal information device sending a challenge that include ID information and a first data string; the party encrypting the first data string and sending the encrypted string to the personal information device, where the key used to encrypt the first data string is based on the ID information sent by the personal information device; and the step of the party authenticating the personal information device comprises the steps of: the party sending a challenge that includes a second data string; the personal information device encrypting the second data string and sending the encrypted second data string to the party, where the encryption key used for encrypting the second data string is pre-stored in the personal information device; and the party confirming the authenticity of the personal information device by virtue of the encryption key used to encrypt the second data string; and the party authenticating the personal information device by virtue of the encryption key used to encrypt the second data string.
Claim 16
Dependent Claim
16 words
The method of claim 11 where the first and the second data strings comprise random sequences.
Claim 17
Dependent Claim
16 words
The method of claim 11 where the first and the second encryption keys are the same.
References Cited (Backward Citations)
No citation records indexed.
USPTO Annuity & Maintenance Windows
Maintenance schedule is calculated for granted US utility patents.