US7380125B2
Expired / Lapsed
US
⏱️ 0.0 years remaining
Smart card data transaction system and methods for providing high levels of storage and transmission security
Assignee: Kyndryl Inc
•
Filing: 2003-05-22
•
Granted: 2008-05-27
•
Expires: 2023-05-22
Abstract
Abstract A smart card system is disclosed for secure transmission of post issuance data to a embedded chip using a chip relay module, a plurality of hardware security modules, a first communication system having two security layers and a second communication system having four security layers. The first communication system may be considered a server side system and comprises a chip management system, a security server having a first hardware security module, a distribution server having a second hardware security module and a computer system connected by a network. The first communication system has a first security layer and a second security layer. The first security layer comprises mutual authentication that makes each component of the first communication system a trusted node to the others through client mutual authentication. The second security layer comprises system keys for secure communication between the hardware security modules. The second communication system may be considered a client side system and comprises the computer system connected to the distribution server by a network, a PC/SC card reader driver, a Web browser application, and a chip relay module and is for secure communication between the distribution server and the chip of a smart card inserted in the card reader/writer. The second communication system has a third, fourth, fifth and sixth security layer.
Inventors
- 👤 Vincenzo Valentino Di Luoffo
- 👤 Craig William Fellenstein
- 👤 Dylan Maxwell Reilly
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-27 21:19
CPC Classifications
G; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; G06; G06Q; G06Q20/00; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/355; G06Q20/3552; G06Q20/38; G06Q20/40; G06Q20/409; G06Q20/4097
Claims Analysis
Total Claims: 57
Claim 1
Independent Claim
185 words
An apparatus for secure transmission of a post issuance data from a distribution server to a smart card comprising: a smart card inserted in a card reader; a chip embedded in the smart card and electronically connected to the card reader; a computer connected to the card reader and to the distribution server by a network; a chip relay module in a browser in the memory of the computer; wherein the chip relay module establishes a secure session with the distribution server; wherein the post issuance data is transmitted from the distribution server to the smart card in an XML message that has been provided with a code derived from an issuer's master key; wherein the issuer's master key is obtained from a first hardware security module on a security server by a second hardware security module on the distribution server for the purpose of deriving the code; wherein the issuer's master key is identified using a reference in a chipholder profile; and, wherein when identified the issuer's master key is transmitted securely from the first hardware security module to the second hardware security module.
Claim 2
Independent Claim
185 words
An apparatus for secure transmission of a post issuance data from a distribution server to a smart card comprising: a smart card inserted in a card reader; a chip embedded in the smart card and electronically connected to the card reader; a computer connected to the card reader and to the distribution server by a network; a chip relay module in a browser in the memory of the computer; wherein the chip relay module establishes a secure session with the distribution server; wherein the post issuance data is transmitted from the distribution server to the smart card in an XML message that has been provided with a code derived from an issuer's master key; wherein the issuer's master key is obtained from a first hardware security module on a security server by a second hardware security module on the distribution server for the purpose of deriving the code; wherein the issuer's master key is identified using a reference in a chipholder profile; and, wherein when identified the issuer's master key is transmitted securely from the first hardware security module to the second hardware security module.
Claim 3
Dependent Claim
13 words
The apparatus of claim 1 wherein the code is a message authentication code.
Claim 4
Dependent Claim
14 words
The apparatus of claim 1 wherein the code is a message authentication code encrypted.
Claim 5
Dependent Claim
17 words
The apparatus of claim 2 wherein the message authentication code is derived from a first card key.
Claim 6
Dependent Claim
17 words
The apparatus of claim 4 wherein the first card key is derived from the issuer's master key.
Claim 7
Dependent Claim
18 words
The apparatus of claim 3 wherein the message authentication code encrypted is derived from a second card key.
Claim 8
Dependent Claim
17 words
The apparatus of claim 6 wherein the second card key is derived from the issuer's master key.
Claim 9
Dependent Claim
34 words
The apparatus of claim 1 wherein the issuer's master key is obtained from a first hardware security module in a security server and transmitted to a second hardware security module in the distribution server.
Claim 10
Dependent Claim
17 words
The apparatus of claim 8 wherein the issuer's master key is encrypted using a system public key.
Claim 11
Dependent Claim
23 words
The apparatus of claim 9 wherein the issuer's master key is decrypted in the second hardware security module using a system private key.
Claim 12
Dependent Claim
26 words
The apparatus of claim 1 wherein the chip relay module establishes a secure communication between the chip and the distribution server by a second mutual authentication.
Claim 13
Dependent Claim
19 words
The apparatus of claim 1 wherein the chip relay module establishes a session context security using a session key.
Claim 14
Dependent Claim
23 words
The apparatus of claim 1 wherein a data marker is a precondition for a secure transmission between the distribution server and the chip.
Claim 15
Dependent Claim
22 words
The apparatus of claim 1 wherein a flag is a precondition for a secure transmission between the distribution server and the chip.
Claim 16
Dependent Claim
22 words
The apparatus of claim 1 further comprising a secure communication between the distribution server and the browser using a first mutual authentication.
Claim 17
Dependent Claim
15 words
The apparatus of claim 1 further comprising a chip management system connected to the network.
Claim 18
Dependent Claim
17 words
The apparatus of claim 16 wherein the chip management system further comprises a plurality of chipholder files.
Claim 19
Dependent Claim
14 words
The apparatus of claim 17 wherein the chipholder files further comprise a card file.
Claim 20
Dependent Claim
14 words
The apparatus of claim 18 wherein the card file further comprises a reference key.
Claim 21
Dependent Claim
17 words
The apparatus of claim 19 wherein the reference key is used to obtain the issuer's master key.
Claim 22
Dependent Claim
22 words
The apparatus of claim 16 wherein the chip management system and the distribution server share a means for a first mutual authentication.
Claim 23
Dependent Claim
22 words
The apparatus of claim 1 wherein the post issuance data is encrypted for transmission from a security server to the distribution server.
Claim 24
Dependent Claim
23 words
The apparatus of claim 1 wherein the post issuance data is digitally signed for transmission from a security server to the distribution server.
Claim 25
Dependent Claim
25 words
The apparatus of claim 1 wherein the post issuance data is encrypted and digitally signed for transmission from a security server to the distribution server.
Claim 26
Dependent Claim
24 words
The apparatus of claim 1 wherein the post issuance data is bulk data and the bulk data is encrypted using a system symmetric key.
Claim 27
Dependent Claim
26 words
The apparatus of claim 1 wherein the post issuance data is encrypted using a system symmetric key and is further encrypted using a system public key.
Claim 28
Independent Claim
163 words
A method for secure transmission of a post issuance data between a distribution server and a chip comprising: inserting a smart card having a chip into a card reader connected to a computer and a network; and responsive to authentication of the chip at the distribution server, using a chip relay module to establish a secure communication between the chip and the distribution server; wherein the post issuance data is transmitted from the distribution server to the chip in an XML message provided with a code derived from an issuer's master key; wherein the issuer's master key is obtained from a first hardware security module on a security server by a second hardware security module on the distribution server for the purpose of deriving the code; wherein the issuer's master key is identified using a reference in a chipholder profile; and, wherein when identified the issuer's master key is transmitted securely from the first hardware security module to the second hardware security module.
Claim 29
Independent Claim
163 words
A method for secure transmission of a post issuance data between a distribution server and a chip comprising: inserting a smart card having a chip into a card reader connected to a computer and a network; and responsive to authentication of the chip at the distribution server, using a chip relay module to establish a secure communication between the chip and the distribution server; wherein the post issuance data is transmitted from the distribution server to the chip in an XML message provided with a code derived from an issuer's master key; wherein the issuer's master key is obtained from a first hardware security module on a security server by a second hardware security module on the distribution server for the purpose of deriving the code; wherein the issuer's master key is identified using a reference in a chipholder profile; and, wherein when identified the issuer's master key is transmitted securely from the first hardware security module to the second hardware security module.
Claim 30
Dependent Claim
49 words
The method of claim 27 further comprising: generating a set of card keys at a hardware security module of the distribution server; using the card keys to encrypt an XML message containing the post issuance data; and transmitting the post issuance data from the distribution server to the chip.
Claim 31
Independent Claim
194 words
A method for secure transmission of a post issuance data between a distribution server and a chip comprising: configuring a first communication system having a distribution server, a security server, a chip management system and a first security layer; configuring a second communication system having the distribution server and a client card system having a chip relay module; using the chip relay module to establish a third security layer in the second communication system; using a chip identification number to obtain the post issuance data from the chip management system; using a card key to encrypt the post issuance data for transmission from the distribution server to the chip; and wherein the card key is generated from an issuer's master key obtained from the security server; wherein the issuer's master key is obtained from a first hardware security module on the security server by a second hardware security module on the distribution server for the purpose of deriving the card key; wherein when the issuer's master key has been obtained by use of the reference, the issuer's master key is transmitted securely from the first hardware security module to the second hardware security module.
Claim 32
Independent Claim
194 words
A method for secure transmission of a post issuance data between a distribution server and a chip comprising: configuring a first communication system having a distribution server, a security server, a chip management system and a first security layer; configuring a second communication system having the distribution server and a client card system having a chip relay module; using the chip relay module to establish a third security layer in the second communication system; using a chip identification number to obtain the post issuance data from the chip management system; using a card key to encrypt the post issuance data for transmission from the distribution server to the chip; and wherein the card key is generated from an issuer's master key obtained from the security server; wherein the issuer's master key is obtained from a first hardware security module on the security server by a second hardware security module on the distribution server for the purpose of deriving the card key; wherein when the issuer's master key has been obtained by use of the reference, the issuer's master key is transmitted securely from the first hardware security module to the second hardware security module.
Claim 33
Dependent Claim
17 words
The method of claim 29 further comprising: configuring a second security layer in the first communication system.
Claim 34
Dependent Claim
17 words
The method of claim 29 further comprising: configuring a fourth security layer in the second communication system.
Claim 35
Dependent Claim
17 words
The method of claim 29 further comprising: configuring a fifth security layer in the second communication system.
Claim 36
Dependent Claim
17 words
The method of claim 29 further comprising: configuring a sixth security layer in the second communication system.
Claim 37
Dependent Claim
18 words
The method of claim 30 further comprising: using a first system key to establish the second security layer.
Claim 38
Dependent Claim
17 words
The method of claim 31 further comprising: using a session key to establish the fourth security layer.
Claim 39
Dependent Claim
19 words
The method of claim 32 further comprising: using a data marker or flag to establish a fifth security layer.
Claim 40
Dependent Claim
16 words
The method of claim 33 further comprising: using a MAC to establish a sixth security layer.
Claim 41
Dependent Claim
17 words
The method of claim 33 further comprising: using a MAC encrypted to establish a sixth security layer.
Claim 42
Dependent Claim
18 words
The method of claim 34 further comprising: using a second system key to encrypt the post issuance data.
Claim 43
Dependent Claim
26 words
The method of claim 34 further comprising: using a second system key to wrap a post issuance data that has been encrypted using a symmetric key.
Claim 44
Independent Claim
191 words
An apparatus for secure transmission of a post issuance data from a distribution server to a smart card comprising: a first communication system connecting a security server, a distribution server and a chip management system; a second communication system connecting the distribution server and a client card system having a card reader; a chip embedded in the smart card and electronically connected to the card reader; wherein the post issuance data is transmitted from the distribution server to the chip encrypted by a card key; wherein the post issuance data is transmitted from the distribution server to the smart card in an XML message provided with a code derived from an issuer's master key by a second hardware security module; wherein the issuer's master key is obtained from a first hardware security module on a security server by a second hardware security module on the distribution server for the purpose of deriving the code; wherein the issuer's master key is identified using a reference in a chipholder profile; and, wherein when identified the issuer's master key is transmitted securely from the first hardware security module to the second hardware security module.
Claim 45
Independent Claim
191 words
An apparatus for secure transmission of a post issuance data from a distribution server to a smart card comprising: a first communication system connecting a security server, a distribution server and a chip management system; a second communication system connecting the distribution server and a client card system having a card reader; a chip embedded in the smart card and electronically connected to the card reader; wherein the post issuance data is transmitted from the distribution server to the chip encrypted by a card key; wherein the post issuance data is transmitted from the distribution server to the smart card in an XML message provided with a code derived from an issuer's master key by a second hardware security module; wherein the issuer's master key is obtained from a first hardware security module on a security server by a second hardware security module on the distribution server for the purpose of deriving the code; wherein the issuer's master key is identified using a reference in a chipholder profile; and, wherein when identified the issuer's master key is transmitted securely from the first hardware security module to the second hardware security module.
Claim 46
Dependent Claim
15 words
The apparatus of claim 1 wherein the chip has a set of installed card keys.
Claim 47
Dependent Claim
31 words
The apparatus of claim 1 wherein in order to securely transmit the post issuance data from the distribution server to the chip, the post issuance data must be message authentication coded.
Claim 48
Dependent Claim
38 words
The apparatus of claim 43 wherein in order to message authentication code the post issuance data, a set of card keys corresponding to a set of card keys in the chip is generated using an issuer's master key.
Claim 49
Dependent Claim
25 words
The apparatus of claim 44 wherein in order to generate the set of card keys, the issuer's master key is requested from the security server.
Claim 50
Dependent Claim
49 words
The apparatus of claim 45 wherein responsive to a request for the issuer's master key by the distribution server, a first hardware security module in the security server encrypts the issuer's master key using a system encryption key, and transmits the encrypted issuer's master key to the distribution server.
Claim 51
Dependent Claim
34 words
The apparatus of claim 45 wherein responsive to the receipt of the encrypted issuer's master key by the distribution server, a second hardware security module in the distribution server, decrypts the issuer's master key.
Claim 52
Dependent Claim
36 words
The apparatus of claim 47 wherein responsive to decryption of the issuer's master key in the second hardware security module, the hardware security module uses the issuer's master key to generate a set of card keys.
Claim 53
Dependent Claim
26 words
The apparatus of claim 41 wherein post issuance data is encrypted for transmission from the security server to the distribution server using a system public key.
Claim 54
Dependent Claim
26 words
The apparatus of claim 41 wherein post issuance data is encrypted for transmission from the distribution server to the chip using a set of card keys.
Claim 55
Dependent Claim
32 words
The apparatus of claim 41 wherein, when post issuance data is bulk data, the bulk data is first encrypted using a system symmetric key and then encrypted using a system public key.
Claim 56
Dependent Claim
23 words
The apparatus of claim 41 wherein post issuance that has been encrypted is decrypted at the distribution server using a system private key.
Claim 57
Dependent Claim
29 words
The apparatus of claim 41 wherein post issuance data that is bulk data is decrypted at the distribution server using a system private key and a system symmetric key.
References Cited (Backward Citations)
EP0789673A1
Cited
US5920730A
Cited
US6131090A
Cited
US6005942A
Cited
US6367011B1
Cited
US6298336B1
Cited
US6278783B1
Cited
US6412073B1
Cited
WO2000079411A2
Cited
EP1083529A2
Cited
US20010010076A1
Cited
US20020174071A1
Cited
US6981152B2
Cited
US7103575B1
Cited
US20020147907A1
Cited
US20020162021A1
Cited
US20020162023A1
Cited
US20040148429A1
Cited
US20030081791A1
Cited
US7085386B2
Cited
US6612486B2
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2011-05-27 | 2011-11-26 | 2012-05-27 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2015-05-27 | 2015-11-26 | 2016-05-27 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2019-05-27 | 2019-11-26 | 2020-05-27 | $7700.00 | Window Closed / Lapsed |