Patent US5544246A successfully refreshed from Google Patents.
US5544246A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Smartcard adapted for a plurality of service providers and for remote installation of same
Assignee: Nokia of America Corp
•
Filing: 1993-09-17
•
Granted: 1996-08-06
•
Expires: 2013-09-17
Abstract
Abstract A smartcard that allows different Service Providers to coexist on the smartcard with none of the Service Providers, nor the owner of the smartcard, having access to the files created for, or by, each of the resident Service Providers. The operating system of the smartcard includes a root directory that is owned by the smartcard's issuer/owner, and each Service Provider is a "user" that is installed by the issuer/owner. Each such user is provided with a subdirectory of the root directory, and within the subdirectory the user creates files and subdirectories with files, as the user deems necessary. The operating system prevents all users of the smartcard, including the smartcard's issuer/owner and the smartcard's holder, from accessing any files that are owned by any other user, when that user chooses to prevent such access. This power to exclude is effected through a password file that is owned by the user and which cannot be altered by any other user, including the smartcard's issuer/owner. Optionally, the smartcard's issuer/owner is given the power to erase all files of a given user. Connection is effected with a protocol which authenticates all parties to the connection. Thus, in a connection between the smartcard and a user, the smartcard determines whether the user should be granted access, and the user determines whether the smartcard is a valid smartcard. Authentication of the possessor of the smartcard may also be effected.
Inventors
- 👤 Richard Mandelbaum
- 👤 Stephen A. Sherman
- 👤 Diane R. Wetherington
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-30 10:21
CPC Classifications
G; G06; G06Q; G06Q20/00; G06Q20/30; G06Q20/34; G06Q20/341; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/60; G06F21/62; G06F21/6218; G06Q20/355; G06Q20/3555; G06Q20/357; G06Q20/3576; G06Q20/36; G06Q20/367; G06Q20/38; G06Q20/388; G06Q20/40; G06Q20/409; G06Q20/4097; G06Q20/40975; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; H; H04; H04L; H04L63/00; H04L63/08; H04L63/083; H04L63/0853; H04L63/0869
Claims Analysis
Total Claims: 13
Claim 1
Independent Claim
228 words
A multiple-application smartcard in connection with which there is a party that is an issuer/owner of the smartcard, a party that is a holder of the smartcard, and a service provider that accesses the smartcard, the smartcard comprising: a microprocessor, a memory coupled to the microprocessor, a plurality of files in said memory which combine to form an operating system for the microprocessor, which operating system includes a tree-like file structure; a plurality of executable files executed in said microprocessor, forming part of the tree-like structure and each having file characteristics that are controlled solely by said issuer/owner, which files are executable in the sense that, when referenced, they access at least one other file in said memory; a first password file in said memory that is accessible only to said issuer/owner, which contains data and which is accessed by said issuer/owner prior to said issuer/owner gaining access to said plurality of executable files; a second password file that is accessible only to said holder, which contains data and which is accessed by said holder prior to said holder gaining access to files in said plurality of executable files; and a third password file that is accessible only to said service provider, which contains data and which is accessed by said service provider prior to said service provider gaining access to files in said plurality of executable files.
Claim 2
Dependent Claim
228 words
A multiple-application smartcard in connection with which there is a party that is an issuer/owner of the smartcard, a party that is a holder of the smartcard, and a service provider that accesses the smartcard, the smartcard comprising: a microprocessor, a memory coupled to the microprocessor, a plurality of files in said memory which combine to form an operating system for the microprocessor, which operating system includes a tree-like file structure; a plurality of executable files executed in said microprocessor, forming part of the tree-like structure and each having file characteristics that are controlled solely by said issuer/owner, which files are executable in the sense that, when referenced, they access at least one other file in said memory; a first password file in said memory that is accessible only to said issuer/owner, which contains data and which is accessed by said issuer/owner prior to said issuer/owner gaining access to said plurality of executable files; a second password file that is accessible only to said holder, which contains data and which is accessed by said holder prior to said holder gaining access to files in said plurality of executable files; and a third password file that is accessible only to said service provider, which contains data and which is accessed by said service provider prior to said service provider gaining access to files in said plurality of executable files.
Claim 3
Dependent Claim
248 words
In connection with a smartcard issued by a first party, where the smartcard includes an operating system having a tree-like file structure that begins with a directory-file with attributes that are controlled solely by said party, a plurality of files, forming part of the tree-like structure and each having file attributes that are controlled solely by said first party, which files are executable files in the sense that, when referenced, they access, or access and alter, data in a file in said memory, and a password file that is accessible only to said first party and is used to confirm identity of said first party before granting access by said first party to said executable files, a method for installing in said smartcard a second party interaction means to allow a second party access to at least some of said files, the method comprising the steps of: establishing communication between the smartcard and said first party; executing a log-in protocol between the smartcard and said first party, employing the data contained in said password file; communicating to said first party a request for installation of a said second party interaction means on said smartcard; said first party establishing a user password file in said smartcard, with said user password file arranged to form part of said tree-like structure; said first party inserting data into said user password file; and said first party changing file attributes of said user password file to make it accessible to said second party.
Claim 4
Dependent Claim
248 words
In connection with a smartcard issued by a first party, where the smartcard includes an operating system having a tree-like file structure that begins with a directory-file with attributes that are controlled solely by said party, a plurality of files, forming part of the tree-like structure and each having file attributes that are controlled solely by said first party, which files are executable files in the sense that, when referenced, they access, or access and alter, data in a file in said memory, and a password file that is accessible only to said first party and is used to confirm identity of said first party before granting access by said first party to said executable files, a method for installing in said smartcard a second party interaction means to allow a second party access to at least some of said files, the method comprising the steps of: establishing communication between the smartcard and said first party; executing a log-in protocol between the smartcard and said first party, employing the data contained in said password file; communicating to said first party a request for installation of a said second party interaction means on said smartcard; said first party establishing a user password file in said smartcard, with said user password file arranged to form part of said tree-like structure; said first party inserting data into said user password file; and said first party changing file attributes of said user password file to make it accessible to said second party.
Claim 5
Dependent Claim
23 words
The method of claim 2 further comprising a step of informing said second party of the data stored in the user password file.
Claim 6
Dependent Claim
47 words
The method of claim 2 further comprising a step, executed by said first party following said step of communicating to said first party a request for installation of confirming with said second party that the request for installation of said second party interaction means should be fulfilled.
Claim 7
Dependent Claim
13 words
The method of claim 2 wherein said communication is employing a telecommunication network.
Claim 8
Independent Claim
69 words
A method for a party to communicate with a personal information device comprising the steps of: establishing communication between said party and said personal information device; the personal information device authenticating the party through a first challenge-response communication; the party authenticating the personal information device through a second challenge-response communication; and a holder of the personal information device being authenticated to the personal information device through a challenge-response communication.
Claim 9
Independent Claim
69 words
A method for a party to communicate with a personal information device comprising the steps of: establishing communication between said party and said personal information device; the personal information device authenticating the party through a first challenge-response communication; the party authenticating the personal information device through a second challenge-response communication; and a holder of the personal information device being authenticated to the personal information device through a challenge-response communication.
Claim 10
Independent Claim
221 words
A method for a party to communicate with a personal information device comprising the steps of: the personal information device authenticating the party through a first challenge-response communication; and the party authenticating the personal information device through a second challenge-response communication; where the step of the personal information device authenticating the party comprises the steps of: the personal information device sending a challenge sequence that includes ID information and a first data string; the party encrypting the first data string and sending the encrypted string to the personal information device, where the key used to encrypt the first data string is based on the ID information sent by the personal information device; and the step of the party authenticating the personal information device comprises the steps of: the party sending a challenge sequence that includes a second data string; the personal information device encrypting the second data string and sending the encrypted second data string to the party, where the encryption key used for encrypting the second data string is pre-stored in the personal information device; and the party confirming the authenticity of the personal information device by virtue of the encryption key used to encrypt the second data string; and the party authenticating the personal information device by virtue of the encryption key used to encrypt the second data string.
Claim 11
Independent Claim
221 words
A method for a party to communicate with a personal information device comprising the steps of: the personal information device authenticating the party through a first challenge-response communication; and the party authenticating the personal information device through a second challenge-response communication; where the step of the personal information device authenticating the party comprises the steps of: the personal information device sending a challenge sequence that includes ID information and a first data string; the party encrypting the first data string and sending the encrypted string to the personal information device, where the key used to encrypt the first data string is based on the ID information sent by the personal information device; and the step of the party authenticating the personal information device comprises the steps of: the party sending a challenge sequence that includes a second data string; the personal information device encrypting the second data string and sending the encrypted second data string to the party, where the encryption key used for encrypting the second data string is pre-stored in the personal information device; and the party confirming the authenticity of the personal information device by virtue of the encryption key used to encrypt the second data string; and the party authenticating the personal information device by virtue of the encryption key used to encrypt the second data string.
Claim 12
Dependent Claim
16 words
The method of claim 7 where the first and the second data strings comprise random sequences.
Claim 13
Dependent Claim
16 words
The method of claim 7 where the first and the second encryption keys are the same.
References Cited (Backward Citations)
US4443027A
Cited
US4734568A
Cited
US4797542A
Cited
US4742215A
Cited
US4816654A
Cited
US4816653A
Cited
US4877947A
Cited
US4928001A
Cited
US4910773A
Cited
US5267315A
Cited
US5225664A
Cited
US5036461A
Cited
US5288978A
Cited
US5148479A
Cited
US5317637A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1999-08-06 | 2000-02-05 | 2000-08-06 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2003-08-06 | 2004-02-05 | 2004-08-06 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2007-08-06 | 2008-02-05 | 2008-08-06 | $7700.00 | Window Closed / Lapsed |