EP0795844A1
Expired / Lapsed
EP
⏱️ 0.0 years remaining
Method of securely modifying data on a smart card
Assignee: Koninklijke KPN NV
•
Filing: 1996-03-11
•
Granted: —
•
Expires: 2016-03-11
Abstract
Abstract The invention pertains to a method of securely transferring data, such as program data, to a smart card. In order to be applicable in non-secure environments, the method of the invention involves a one-way authentication mechanism, comprising the use of a series of interrelated authentication values (R0, R1, R2, ...). Further security is achieved by using commands (INIT, TRAN) which are provided with an authentication code (MAC0, MAC1, ...). In order to transfer data only to selected cards, the card may accept transfer commands only if a card profile (CP) matches a distribution profile (DP).
Inventors
- 👤 Michel Marco Paul Drupsteen
- 👤 Frank Muller
Bibliographic Details
Application Number
—
Jurisdiction
EP
Data Source
google_patents
Last Synchronized
2026-10-30 00:23
CPC Classifications
G; G06; G06K; G06K19/00; G06K19/06; G06K19/067; G06K19/07; G06K19/0723; G06K19/0725; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; G06Q; G06Q20/00; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/355; G06Q20/3552; G07F7/0806; G07F7/0813; G07F7/082; H; H04; H04L; H04L63/00; H04L63/08; H04L63/0869; H04L9/00; H04L9/32; H04L9/3271
Claims Analysis
Total Claims: 11
Claim 1
Independent Claim
143 words
Method of securely modifying data in a smart card (1), the method comprising the steps of: - producing an initiation command (INIT) comprising a first authentication value (R0) and producing a first authentication code (MAC0) based on the command and the first value (R0), - producing at least one transfer command (TRAN) comprising data (DATA) to be transferred and producing a subsequent authentication code (MAC1, MAC2, ...) based on both the command (TRAN) and a subsequent authentication value (R1, R2, ...) derived from the first value (R0), - transferring the commands and their authentication codes thus produced to the smart card (1), - authenticating the commands in the smart card (1) by checking the authentication codes (MAC0, MAC1, ...) and checking the subsequent authentication values (R1, ...) derived from the first value (R0), and - storing the transferred data (DATA) in the card.
Claim 2
Dependent Claim
18 words
Method according to claim 1, wherein the initiation command (INIT) further comprises the number of transfer commands (N).
Claim 3
Dependent Claim
27 words
Method according to claim 1 or 2, wherein the initiation command (INIT) is arranged to prohibit the card (1) from accepting commands other than transfer commands (TRAN).
Claim 4
Dependent Claim
19 words
Method according to any of the preceding claims, wherein each transfer command (TRAN) further comprises a sequence number (SN).
Claim 5
Dependent Claim
19 words
Method according to any of the preceding claims, wherein the transfer data (DATA) comprise a card command (e.g. UPDATE).
Claim 6
Dependent Claim
19 words
Method according to claim 5, wherein a card command (e.g. UPDATE) is directly executed upon transfer to the card.
Claim 7
Dependent Claim
31 words
Method according to claim 5 or 6, wherein a card command is a protected command according to the TE9-standard, the value needed for protecting the command corresponding with the authentication value.
Claim 8
Dependent Claim
23 words
Method according to any of the preceding claims, wherein the authentication codes (MAC1, MAC2, ...) are generated according to the ANSI X9.19 standard.
Claim 9
Dependent Claim
26 words
Method according to any of the preceding claims, wherein deriving the subsequent values (R1, R2, ...) involves the use of a secret key (K S ).
Claim 10
Dependent Claim
45 words
Method according to any of the preceding claims, wherein the initiation command (INIT) comprises a distribution profile (DP) and the card comprises a card profile (CP), and wherein the initiation command is only executed if the distribution profile (DP) and the card profile (CP) match.
Claim 11
Dependent Claim
28 words
Method according to any of the preceding claims, wherein the initiation command (INIT) puts the card in a transfer state in which only transfer commands (TRAN) are executed.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
Maintenance schedule is calculated for granted US utility patents.