Patent US6005942A successfully refreshed from Google Patents.
US6005942A
Expired / Lapsed
US
⏱️ 0.0 years remaining
System and method for a multi-application smart card which can facilitate a post-issuance download of an application onto the smart card
Assignee: GLOBALPLATFORM Inc
•
Filing: 1998-03-24
•
Granted: 1999-12-21
•
Expires: 2018-03-24
Abstract
Abstract A system and method allow card issuers to securely add applications during the lifetime of the card after the card has already been issued (post issuance). Loading of an application and/or objects from an application server via a card acceptance device (and its supporting system infrastructure delivery mechanism) onto a card post issuance is performed in a secure and confidential manner. A smart card includes a card domain application that manages the card. Any number of security domain applications on the card provide security for loaded applications by managing keys; each application is associated with a security domain. Each of the card domain and security domains has a command interface for off-card communication, and an API for internal card use. The card life cycle includes the states of masked, initialized, load secured and blocked. An application life cycle includes the states of not available, loaded, installed, registered, personalized, activated and blocked. An application can block the card.
Inventors
- 👤 Alfred Chan
- 👤 Marc B. Kekicheff
- 👤 Joel M. Weise
- 👤 David C. Wentker
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-28 18:12
CPC Classifications
G; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; G06; G06F; G06F21/00; G06F21/50; G06F21/51; G06F21/52; G06F21/53; G06F21/57; G06F21/572; G06F21/70; G06F21/71; G06F21/74; G06F21/77; G06Q; G06Q20/00; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/355; G06Q20/3552; G06Q20/357; G06Q20/3574; G06Q20/3576; G06F2221/00; G06F2221/21; G06F2221/2105; G06F2221/2113; G06F2221/2149; G06F2221/2153
Claims Analysis
Total Claims: 28
Claim 1
Independent Claim
109 words
A method for loading a smart card application onto a smart card after said smart card has been issued to a cardholder, said method comprising: issuing said smart card to a cardholder, said smart card including a card domain application arranged to manage the post-issuance loading of applications; establishing communication between said smart card and a provider of said smart card application; loading said smart card application onto said smart card under control of said card domain application; and checking a cryptographic signature of said smart card application using said card domain application, whereby said smart card application is loaded onto said smart card post-issuance in a secure manner.
Claim 2
Independent Claim
109 words
A method for loading a smart card application onto a smart card after said smart card has been issued to a cardholder, said method comprising: issuing said smart card to a cardholder, said smart card including a card domain application arranged to manage the post-issuance loading of applications; establishing communication between said smart card and a provider of said smart card application; loading said smart card application onto said smart card under control of said card domain application; and checking a cryptographic signature of said smart card application using said card domain application, whereby said smart card application is loaded onto said smart card post-issuance in a secure manner.
Claim 3
Dependent Claim
113 words
A method as recited in claim 1 further comprising: providing a cryptographic signature key to said card domain application before said smart card application is loaded onto said smart card; signing said smart card application using said cryptographic signature before said smart card application is loaded onto said smart card, said cryptographic signature being calculated using said cryptographic signature key; calculating said cryptographic signature of said smart card application once said smart card application has been loaded onto said smart card, said calculating being performed by said card domain application using said cryptographic signature key provided to said card application, whereby said element of checking may be performed by said card domain application.
Claim 4
Dependent Claim
43 words
A method as recited in claim 1 further comprising: decrypting said smart card application by said card domain application once said smart card application has been loaded, whereby said smart card application is loaded onto said smart card post-issuance in a secure manner.
Claim 5
Dependent Claim
91 words
A method as recited in claim 3 further comprising: providing a cryptographic encryption key to said card domain application before said smart card application is loaded onto said smart card; encrypting said smart card application using said cryptographic encryption key before said smart card application is loaded onto said smart card; and wherein said element of decrypting being performed by said card domain application uses said cryptographic encryption key provided to said card domain application, whereby said smart card application is loaded onto said smart card post-issuance in a secure manner.
Claim 6
Dependent Claim
62 words
A method as recited in claim 1 further comprising: loading personalization data for said smart card application onto said smart card under control of said card domain application; and checking a cryptographic signature of said personalization data using said card domain application, whereby said personalization data for said smart card application is loaded onto said smart card post-issuance in a secure manner.
Claim 7
Dependent Claim
39 words
A method as recited in claim 1 wherein said smart card further includes a security domain application arranged to manage the security of post-issuance loading of applications, and said element of checking is performed by said security domain application.
Claim 8
Dependent Claim
27 words
A method as recited in claim 1 wherein details of said element of checking said cryptographic signature are kept confidential from an issuer of said smart card.
Claim 9
Independent Claim
118 words
A method for loading a smart card application onto a smart card after said smart card has been issued to a cardholder, said method comprising: issuing said smart card to a cardholder, said smart card including a card domain application arranged to manage the post-issuance loading of applications and a security domain application arranged to manage the security of post-issuance loading of applications; establishing communication between said smart card and a provider of said smart card application; loading said smart card application onto said smart card; and invoking a cryptographic service of said security domain application to validate said smart card application, whereby said smart card application is loaded onto said smart card post-issuance in a secure manner.
Claim 10
Independent Claim
118 words
A method for loading a smart card application onto a smart card after said smart card has been issued to a cardholder, said method comprising: issuing said smart card to a cardholder, said smart card including a card domain application arranged to manage the post-issuance loading of applications and a security domain application arranged to manage the security of post-issuance loading of applications; establishing communication between said smart card and a provider of said smart card application; loading said smart card application onto said smart card; and invoking a cryptographic service of said security domain application to validate said smart card application, whereby said smart card application is loaded onto said smart card post-issuance in a secure manner.
Claim 11
Dependent Claim
108 words
A method as recited in claim 8 further comprising: providing a cryptographic signature key to said security domain application before said smart card application is loaded onto said smart card; signing said smart card application using a cryptographic signature before said smart card application is loaded onto said smart card, said cryptographic signature being calculated using said cryptographic signature key; calculating said cryptographic signature of said smart card application once said smart card application has been loaded onto said smart card, said calculating being performed by said security domain application using said cryptographic signature key provided to said security domain application, whereby said smart card application is validated.
Claim 12
Dependent Claim
34 words
A method as recited in claim 8 further comprising: decrypting said smart card application by said security domain application once said smart card application has been loaded, whereby said smart card application is validated.
Claim 13
Dependent Claim
76 words
A method as recited in claim 10 further comprising: providing a cryptographic encryption key to said security domain application before said smart card application is loaded onto said smart card; encrypting said smart card application using said cryptographic encrypt ion key before said smart card application is loaded onto said smart card; and wherein said element of decrypting being performed by said security domain application uses said cryptographic encryption key provided to said card domain application.
Claim 14
Dependent Claim
56 words
A method as recited in claim 8 further comprising: loading personalization data for said smart card application onto said smart card; and invoking a cryptographic service of said security domain application to validate said personalization data, whereby said personalization data for said smart card application is loaded onto said smart card post-issuance in a secure manner.
Claim 15
Dependent Claim
27 words
A method as recited in claim 8 wherein details of said element of invoking a cryptographic service are kept confidential from an issuer of said smart card.
Claim 16
Dependent Claim
21 words
A method as recited in claim 8 wherein said cryptographic service provides encryption, decryption, MACing, hashing or a digital signature technique.
Claim 17
Dependent Claim
119 words
A smart card arranged to load an application onto said smart card after said smart card has been issued to a cardholder, said smart card comprising: a card domain application arranged to manage loading of said application onto said smart card; and a security domain application arranged to manage the security of post-issuance loading of applications, said security domain application including a cryptographic key associated with said application, a cryptographic service for validating said application after said application has been loaded post-issuance, said cryptographic service using said cryptographic key, and a key management function associated with said cryptographic key, whereby said application may be loaded onto said smart card post-issuance in a secure manner using said security domain application.
Claim 18
Dependent Claim
119 words
A smart card arranged to load an application onto said smart card after said smart card has been issued to a cardholder, said smart card comprising: a card domain application arranged to manage loading of said application onto said smart card; and a security domain application arranged to manage the security of post-issuance loading of applications, said security domain application including a cryptographic key associated with said application, a cryptographic service for validating said application after said application has been loaded post-issuance, said cryptographic service using said cryptographic key, and a key management function associated with said cryptographic key, whereby said application may be loaded onto said smart card post-issuance in a secure manner using said security domain application.
Claim 19
Dependent Claim
41 words
A smart card as recited in claim 15 wherein said cryptographic key is an encryption key and wherein said cryptographic service is decryption, whereby said security domain application may decrypt said application after loading of said application onto said smart card.
Claim 20
Dependent Claim
46 words
A smart card as recited in claim 15 wherein said cryptographic key is a signature key and wherein said cryptographic service calculates a digital signature, whereby said security domain application may check a signature of said application after loading of said application onto said smart card.
Claim 21
Dependent Claim
20 words
A smart card as recited in claim 15 wherein said key management function is loading or updating of a key.
Claim 22
Dependent Claim
24 words
A smart card as recited in claim 15 wherein security aspects of said security domain application are kept confidential from said card domain application.
Claim 23
Dependent Claim
163 words
A smart card arranged to load a plurality of applications onto said smart card after said smart card has been issued to a cardholder, said smart card comprising: a card domain application arranged to manage loading of said applications onto said smart card; a first security domain application arranged to provide security for a first application to be loaded post-issuance, said first security domain application including a first cryptographic key associated with said first application, said first cryptographic key being kept secret from said card domain and from a second security domain application; and said second security domain application arranged to provide security for a second application to be loaded post-issuance, said second security domain application including a second cryptographic key associated with said second application, said second cryptographic key being kept secret from said card domain and from said first security domain application, whereby said first and second applications may be loaded securely post-issuance using said first and second cryptographic keys, respectively.
Claim 24
Dependent Claim
163 words
A smart card arranged to load a plurality of applications onto said smart card after said smart card has been issued to a cardholder, said smart card comprising: a card domain application arranged to manage loading of said applications onto said smart card; a first security domain application arranged to provide security for a first application to be loaded post-issuance, said first security domain application including a first cryptographic key associated with said first application, said first cryptographic key being kept secret from said card domain and from a second security domain application; and said second security domain application arranged to provide security for a second application to be loaded post-issuance, said second security domain application including a second cryptographic key associated with said second application, said second cryptographic key being kept secret from said card domain and from said first security domain application, whereby said first and second applications may be loaded securely post-issuance using said first and second cryptographic keys, respectively.
Claim 25
Dependent Claim
36 words
A smart card as recited in claim 20 wherein said first cryptographic key is an encryption key or a signature key and wherein wherein said second cryptographic key is an encryption key or a signature key.
Claim 26
Dependent Claim
61 words
A smart card as recited in claim 20 further comprising: a cryptographic service included with said first security domain for validating said first application after said first application has been loaded post-issuance, said cryptographic service using said first cryptographic key, the details of said cryptographic service being kept secret from said card domain application and from said second security domain application.
Claim 27
Dependent Claim
21 words
A smart card as recited in claim 20 further comprising: a key management function included with said first security domain application.
Claim 28
Dependent Claim
20 words
A smart card as recited in claim 23 wherein said key management function is loading or updating of a key.
References Cited (Backward Citations)
AT100227B
Cited
EP0193635A1
Cited
US4742215A
Cited
ATE100227T1
Cited
US5332889A
Cited
US5378884A
Cited
US5530232A
Cited
US5583933A
Cited
DE19607363A1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-12-20 | 2003-06-21 | 2003-12-21 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-12-20 | 2007-06-21 | 2007-12-21 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-12-20 | 2011-06-21 | 2011-12-21 | $7700.00 | Window Closed / Lapsed |