US6317832B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Secure multiple application card system and process
Assignee: Multos Ltd
•
Filing: 1998-05-12
•
Granted: 2001-11-13
•
Expires: 2018-05-12
Abstract
Abstract A secure multiple application card system and process is provided having secure loading and deleting capability by use of a Certification Authority and Personalization Bureau. The certification authority maintains the security of the system by requiring IC cards to be injected with its public key and a card identifier for uniquely identifying each card, by providing a personalization data block for each card, and by signing with its private key all applications to be loaded or deleted from the IC card.
Inventors
- 👤 David Barrington Everett
- 👤 Stuart James Miller
- 👤 Anthony David Peacham
- 👤 Ian Stephen Simmons
- 👤 Timothy Philip Richards
- 👤 John Charles Viner
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-07 11:25
CPC Classifications
G; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1016; G06; G06F; G06F21/00; G06F21/50; G06F21/51; G06F21/57; G06F21/70; G06F21/71; G06F21/77; G06K; G06K19/00; G06K19/06; G06K19/067; G06K19/07; G06K19/0719; G06Q; G06Q20/00; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/355; G06Q20/3552; G06Q20/357; G06Q20/3574; G06Q20/3576; G06Q20/35765; G06Q20/38; G06Q20/40; G06Q20/409; G06Q20/4097; G06Q20/40975; G07F7/1008; H; H04; H04L; H04L9/00; H04L9/32; H04L9/3263; G06F2221/00; G06F2221/21; G06F2221/2115; H04L2209/00; H04L2209/56
Claims Analysis
Total Claims: 14
Claim 1
Independent Claim
170 words
A secure multiple application card system comprising: a certification authority for which a public and private key pair are generated; at least one integrated circuit card including at manufacture said public key of said certification authority and a card identifier for uniquely identifying each said card; means for creating at said certification authority a personalization data block for at least one card identifier, means for encrypting said personalization data block and forwarding said encrypted data block to a personalization bureau; means for loading at said personalization bureau said encrypted data block on said card having the card identifier matching said encrypted personalization data block; means for determining based at least on said encrypted personalization data block whether one of said integrated circuit cards is qualified to accept the loading of a specific application; means for authenticating said application for loading onto said card by using said public key of said certification authority; and loading means responsive to said determining and authenticating means for securely loading said application onto said card.
Claim 2
Dependent Claim
170 words
A secure multiple application card system comprising: a certification authority for which a public and private key pair are generated; at least one integrated circuit card including at manufacture said public key of said certification authority and a card identifier for uniquely identifying each said card; means for creating at said certification authority a personalization data block for at least one card identifier, means for encrypting said personalization data block and forwarding said encrypted data block to a personalization bureau; means for loading at said personalization bureau said encrypted data block on said card having the card identifier matching said encrypted personalization data block; means for determining based at least on said encrypted personalization data block whether one of said integrated circuit cards is qualified to accept the loading of a specific application; means for authenticating said application for loading onto said card by using said public key of said certification authority; and loading means responsive to said determining and authenticating means for securely loading said application onto said card.
Claim 3
Dependent Claim
22 words
The system of claim 1 , further comprising personalization means for enabling at least one of said cards at said personalization bureau.
Claim 4
Dependent Claim
33 words
The system of claim 1 wherein said at least one integrated circuit card further comprises memory means for storing an operating system for instructing said determining means, authentication means and said loading means.
Claim 5
Dependent Claim
24 words
The system of claim 2 wherein said at least one integrated circuit card further comprises a card enablement key for facilitating card specific confidentiality.
Claim 6
Dependent Claim
28 words
The system of claim 4 wherein said personalization means comprises means for compiling a list of said card identifiers and means for forwarding said list to said authority.
Claim 7
Dependent Claim
19 words
The system of claim 5 wherein said personalization data block comprises card personalization data and an individual key set.
Claim 8
Dependent Claim
56 words
The system of claim 6 further including means for checking whether said card enablement key has been set, and wherein said means for loading said encrypted data block only loads said block in the event said enablement key has not been set, and wherein said card enablement key is set upon loading said encrypted data block.
Claim 9
Dependent Claim
240 words
A secure multiple application card system comprising: one or more integrated circuit cards each including at manufacture a public key for authenticating the source of any message to it from an authority holding a corresponding secret key, a card enablement key for facilitating card specific confidentiality, a card identifier for uniquely identifying each card, and memory storing an operating system; Personalization means for enabling said card at a personalization bureau, said personalization means including means for compiling a list of said card identifiers and means for forwarding said list to said authority; means for creating at said authority a personalization data block for each card identifier forwarded to said authority, said data block including card personalization data and an individual key set for each of said cards; means for encrypting each of said data blocks and means for forwarding said encrypted data locks to said personalization bureau; means for checking whether said card enablement key has been set and, if not, for matching said card identifiers with said encrypted data blocks, loading said encrypted data block on its matched corresponding card, and setting said enablement key; means for determining whether said card is qualified to accept the loading of a specific application; checking means for authenticating said specific application to be loaded by checking whether said application has been signed by said authority; and means responsive to said determining and checking means for loading said one or more specific applications.
Claim 10
Dependent Claim
240 words
A secure multiple application card system comprising: one or more integrated circuit cards each including at manufacture a public key for authenticating the source of any message to it from an authority holding a corresponding secret key, a card enablement key for facilitating card specific confidentiality, a card identifier for uniquely identifying each card, and memory storing an operating system; Personalization means for enabling said card at a personalization bureau, said personalization means including means for compiling a list of said card identifiers and means for forwarding said list to said authority; means for creating at said authority a personalization data block for each card identifier forwarded to said authority, said data block including card personalization data and an individual key set for each of said cards; means for encrypting each of said data blocks and means for forwarding said encrypted data locks to said personalization bureau; means for checking whether said card enablement key has been set and, if not, for matching said card identifiers with said encrypted data blocks, loading said encrypted data block on its matched corresponding card, and setting said enablement key; means for determining whether said card is qualified to accept the loading of a specific application; checking means for authenticating said specific application to be loaded by checking whether said application has been signed by said authority; and means responsive to said determining and checking means for loading said one or more specific applications.
Claim 11
Independent Claim
118 words
A method for securely loading one or more applications on an integrated circuit card comprising the steps of: transmitting security data including a public key of a certification authority onto an integrated circuit card; creating at said certification authority a personalization data block for said card, encrypting said data block and forwarding said encrypted data block to a personalization bureau; loading said encrypted data block onto said card; determining based at least on said encrypted data block whether said card is qualified to accept the loading of a specific application; authenticating said application for loading onto said card by using, said public key; loading said application in the event said card is qualified and said application is authenticated.
Claim 12
Independent Claim
118 words
A method for securely loading one or more applications on an integrated circuit card comprising the steps of: transmitting security data including a public key of a certification authority onto an integrated circuit card; creating at said certification authority a personalization data block for said card, encrypting said data block and forwarding said encrypted data block to a personalization bureau; loading said encrypted data block onto said card; determining based at least on said encrypted data block whether said card is qualified to accept the loading of a specific application; authenticating said application for loading onto said card by using, said public key; loading said application in the event said card is qualified and said application is authenticated.
Claim 13
Independent Claim
100 words
A method for securely deleting one or more applications from an integrated circuit card comprising the steps of: transmitting security data including a public key of a certification authority onto an integrated circuit card; creating at said certification authority a personalization data block for said card, encrypting said data block and forwarding said encrypted data block to a personalization bureau; loading said encrypted data block onto said card; determining based at least on said encrypted data block whether said card is qualified to accept the deleting of a specific application; deleting said application in the event said card is qualified.
Claim 14
Independent Claim
100 words
A method for securely deleting one or more applications from an integrated circuit card comprising the steps of: transmitting security data including a public key of a certification authority onto an integrated circuit card; creating at said certification authority a personalization data block for said card, encrypting said data block and forwarding said encrypted data block to a personalization bureau; loading said encrypted data block onto said card; determining based at least on said encrypted data block whether said card is qualified to accept the deleting of a specific application; deleting said application in the event said card is qualified.
References Cited (Backward Citations)
FR2536928A1
Cited
EP0152024A2
Cited
EP0157303A2
Cited
EP0190733A2
Cited
EP0218176A2
Cited
WO1987007062A1
Cited
US4882474A
Cited
US4901276A
Cited
EP0261030A2
Cited
EP0275510A2
Cited
US5162989A
Cited
US4949257A
Cited
WO1988009019A1
Cited
EP0292248A2
Cited
JPS6481084A
Cited
EP0325506A1
Cited
US5014312A
Cited
EP0328289A2
Cited
EP0354793A2
Cited
WO1990005960A1
Cited
WO1991001538A1
Cited
EP0451936A1
Cited
EP0466969A1
Cited
US5293577A
Cited
EP0475837A1
Cited
WO1992013322A1
Cited
EP0537756A2
Cited
EP0540095A1
Cited
US5452431A
Cited
EP0547741A1
Cited
FR2687816A1
Cited
EP0559205A1
Cited
WO1993020538A1
Cited
WO1993021612A1
Cited
EP0588339A2
Cited
EP0594493A1
Cited
US5588146A
Cited
US5682027A
Cited
US5378884A
Cited
US5581708A
Cited
EP0636998A1
Cited
EP0647902A1
Cited
GB2284689A
Cited
EP0666550A1
Cited
WO1995022810A1
Cited
US5796831A
Cited
EP0707290A1
Cited
US5825875A
Cited
WO1996019771A1
Cited
WO1996028795A1
Cited
WO1996038825A1
Cited
EP0751460A2
Cited
US6038551A
Cited
US5889941A
Cited
US5841870A
Cited
US6005942A
Cited
WO1998043212A1
Cited
WO1999010824A1
Cited
WO1999016031A2
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2004-11-12 | 2005-05-14 | 2005-11-13 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2008-11-12 | 2009-05-14 | 2009-11-13 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2012-11-12 | 2013-05-14 | 2013-11-13 | $7700.00 | Window Closed / Lapsed |