AT509510A2 - CHIP CARD WITH CONDITIONAL APPLICATION VISIBILITY - Google Patents

Description

·! ·· ** · t · ** * 9 «« · · · ·

Chip card with conditional application visibility. '*** · • #

The invention relates to a chip card with different access rights, ··· 5 according to the preamble of the patent claim 1. * ·· '·

The technology in question makes it possible to define different access rights depending on the interface via which the card is addressed. For example, it would be possible for a file to be unreadable 10 in the contactless case and already in the contact-based case.

A concrete reference can be found in the (pre-) standard CEN / TS 15480.2: 2007 on page 15 footnote b "the patent situation has still to be clarified." This is the answer of the SELECT command, which specifies the access rights of the selected 15 File returns. There, for example, also returned which access rights apply in the contactless case and which in the contact-type case.

For tagging the tag 'A1' is used,

There is a need to provide smart cards with 20 different access rights depending on their application.

For example, when a smart card performs contact-based data transfer, a different amount of data, data type, or data transfer should occur than comparatively when a smart card performs a wireless data transfer.

The usable for the user memory of a smart card is usually organized in a so-called file system. For example, the file system may contain a number of objects, such as applications (ADF), dedicated files 30 (DF), elementary files (EF), and internal secret files (ISF) for storing

Keys included. ISO 7816-4 is a common standard describing such objects. Applications can be identified and selected via a name (application identifier, AID) and / or a number (file identifier, FID). All other objects are identified and selectable by at least one number (File-Identifier, ···· FID or Key-Identifier, KID). Application identifiers · * ·· can be internationally standardized. ISO 7816-5 is a common standard for. * "'

Application Identifier. .1 ♦ ·

Applications and other objects can be selected ("selected") * ·· '* by means of a special * ** • 5 card command and specification of the AID, FID or KID, for example by means of the "SELECT" command standardized in IS07816-4. , The selection of the objects is usually necessary to use them below, such as to read out, describe or use for a cryptographic operation. The SELECT command returns as a response whether the object could be successfully selected or an error message stating that the object with this identifier was not found.

To use applications or other objects, i. Therefore, the identifier must be known, or a number of possible 15 common identifiers must be tried out. The testing of all possible application identifiers is practically impossible due to the possible length with reasonable effort.

Smart cards can contain so-called directories. These directories can either be file objects themselves or directory data can be queried by 20 special commands. The directories contain the application and / or file identifications as well as further information, such as type, purpose of the application or object. The directories therefore provide additional information and / or are used to find applications or file objects more quickly / easily. 25 A common standard in which directories are standardized is ISO 7816-15.

The data transfer between smart card and reader can be done using different interfaces and transmission protocols. Common smart card protocols are described in ISO 7816-3 and 7816-12 for contact-based communication and ISO 14443 and ISO 15693 for contactless communication. Suitable interfaces include, for example, contact-based or contactless interfaces. 3

It may be that certain objects or applications of the card are only for. * ···. • certain types of communication are determined, i. for example, a, ** ** • ·

Application for the creation of signatures only for contacts. ** • · ·

Communication, while a ticketing application is intended only for the contactless case ". This can have different reasons. It may be * * ** «security reasons (such as a signature application),

Speed reasons (a particular interface or protocol achieves better performance), privacy reasons (the presence of a particular object or application should not be disclosed in specific environments), functional reasons (an application will only work correctly using a particular transmission protocol), or have other reasons. Here one is faced with the problem that certain applications or objects should be used only with certain interfaces or transmission protocols. So far the user had to "know" here. which applications are suitable for which interfaces or transmission protocols.

One idea is to make the selectability (selectability) of the applications or data objects dependent on the used transmission protocol or interface. Advantages: Only those applications and data objects that are suitable or approved for the interface or the transmission protocol are available. It can thus prevent malfunctions, applications can be found faster, certain data objects can be "hidden" in certain environments for security reasons and malfunctions due to incorrect transmission protocols and interfaces can be prevented.

Another idea is to dynamically design the contents of the directories depending on the transmission protocol or interface used. Benefits: Because the directories are smaller in size, they can be transferred and searched faster. Malfunctions due to incorrect transmission protocols and interfaces can be prevented. f ··· ♦ * ♦ t 4 ···· ~ ··· «• * • · ··· ·

Another idea is to make the contents of the directories controllable dynamically in. ··· · ·. • ·

Depending on the transmission protocol or the interface used. *] &Quot; before or during the reading of the directory, a parameter is used, which indicates whether the entire directory is to be output, or whether; **. • The directory should contain only those applications and objects that are suitable for the selected transmission protocol (s). Here, too, only the data required in each case are made available, therefore the transfer of the and the searches in the directories are accelerated. Another idea is to increase the selectability of applications and data objects and the contents of the directories of environmental conditions such as e.g. applied voltage, the available energy (in contactless operation: field strength), the frequency, temperature or humidity depending. Again, only the appropriate applications and data objects for the particular environment 15 are visible, i. E. it can thus prevent malfunctions, applications can be found faster, certain data objects can be "hidden" in certain environments for security reasons and malfunctions due to incorrect transmission protocols and interfaces can be prevented. If such a chip card were used, for example, as a SiM in card, which usually operates in voltage class C (see ISO 7816-3), then only those applications and data objects are visible which are useful for mobile phones. Another application is when applications require a different amount of energy to work properly. For example, an application that performs cryptographic computations (e.g., DES, AES, RSA, or ECC) using a co-processor requires significantly more power than other applications. Especially in the case of contactless operation, where the available energy depends strongly on the card terminal, the antenna used, the distance between card and card reader, and field location of the card, this feature is very useful for selecting only those applications or to be displayed in the directories that are also usable under the given environmental conditions and thus to help prevent malfunctions and malfunctions, and the information required for the transfer of the directories and the search for applications *.

Minimize time. Furthermore, the dependence on temperature. ···· could be used, for example, for certain safety-critical applications in,] "*

For safety reasons, deactivate temperature limits or • *

Access applications for ski lifts especially only in wintry; ·· 5 ambient conditions, to make the access application for swimming pools visible only in summer ambient conditions.

Another property of applications and file objects are their access rights. These are properties that can be defined under which conditions the objects may be used (e.g., described or read). Whether the access rights are met is usually checked the moment the object is to be used, i. it must have already been selected before. Again, the question arises of the limitation / control of access rights depending on the used 15 interface or environmental conditions.

Another idea is therefore to make these access rights of applications and objects interface and / or protocol-dependent and / or environment-dependent. In principle, the same advantages arise here as in the techniques described above, the associated applications and objects can be selected here, but the access rights (write, read, key usage) are adapted. Thus, for example, the security can be increased by limiting the creation of signatures by means of a signature application to the contact interface, or by linking 25 specific data objects to a suitable interface or protocol.

Claims (6)

1. Chip card, characterized in that the selectability of '; * individual applications and objects of the used * communication interface or the communication protocol is dependent, with the selectivity for each application and for each object, each interface and each protocol can be determined separately. 2. Chip card according to claim 1, characterized in that the smart card contains directories or directory functions whose content depends dynamically on the used transmission protocol or the interface used. 3. Chip card according to claims 1 and 2, characterized in that the returned content of the directories can be controlled dynamically, so depending on a given parameter, the entire directory or the respectively used interface or the used transmission protocol associated objects are included in the directory , 4. Chip card according to claim 3, characterized in that the transferred parameter identifies one or more concrete interfaces or transfer protocols, so that the transferred to the interface and / or transfer protocols are included in the returned directory. 5. Chip card according to one or more of claims 1-4, characterized in that the selectability of applications and data objects and the contents of the directories of environmental conditions such. applied voltage, the available energy, the field strength, the frequency, temperature or humidity are dependent. 6. chip card, characterized in that the access rights of the individual applications and objects of the communication interface used and / or the communication protocol and / or, * the environmental conditions (eg applied voltage, the available ^ standing energy, field strength, frequency, temperature or • air humidity), whereby the access rights for each combination * of application or object and interface or protocol can be specified separately *.