AU2010241355B2 - Smart card personalization in a multistation environment - Google Patents
Smart card personalization in a multistation environment Download PDFInfo
- Publication number
- AU2010241355B2 AU2010241355B2 AU2010241355A AU2010241355A AU2010241355B2 AU 2010241355 B2 AU2010241355 B2 AU 2010241355B2 AU 2010241355 A AU2010241355 A AU 2010241355A AU 2010241355 A AU2010241355 A AU 2010241355A AU 2010241355 B2 AU2010241355 B2 AU 2010241355B2
- Authority
- AU
- Australia
- Prior art keywords
- personalization
- card
- server
- programming
- card object
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired
Links
- 238000000034 method Methods 0.000 claims description 40
- 239000000969 carrier Substances 0.000 claims description 34
- 230000004044 response Effects 0.000 claims description 5
- 238000012546 transfer Methods 0.000 claims description 4
- 230000008569 process Effects 0.000 description 18
- 238000007726 management method Methods 0.000 description 14
- 230000006854 communication Effects 0.000 description 8
- 238000004891 communication Methods 0.000 description 7
- 230000006870 function Effects 0.000 description 7
- 238000012545 processing Methods 0.000 description 6
- 238000010586 diagram Methods 0.000 description 5
- 230000008901 benefit Effects 0.000 description 4
- 238000004049 embossing Methods 0.000 description 3
- 238000013500 data storage Methods 0.000 description 2
- 238000011161 development Methods 0.000 description 2
- 230000003287 optical effect Effects 0.000 description 2
- 238000010200 validation analysis Methods 0.000 description 2
- 230000005540 biological transmission Effects 0.000 description 1
- 238000006243 chemical reaction Methods 0.000 description 1
- 238000013523 data management Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 230000000977 initiatory effect Effects 0.000 description 1
- 230000007246 mechanism Effects 0.000 description 1
- 230000008520 organization Effects 0.000 description 1
- 238000004806 packaging method and process Methods 0.000 description 1
- 238000007639 printing Methods 0.000 description 1
- 238000013519 translation Methods 0.000 description 1
Classifications
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07F—COIN-FREED OR LIKE APPARATUS
- G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
- G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
- G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
- G07F7/1008—Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
- G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
- G06Q20/355—Personalisation of cards for use
Landscapes
- Engineering & Computer Science (AREA)
- Business, Economics & Management (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Microelectronics & Electronic Packaging (AREA)
- Computer Networks & Wireless Communication (AREA)
- Accounting & Taxation (AREA)
- Strategic Management (AREA)
- General Business, Economics & Management (AREA)
- Theoretical Computer Science (AREA)
- Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)
- Control Of Vending Devices And Auxiliary Devices For Vending Devices (AREA)
Abstract
A smart card personalization system provides an interface to smart card personalization stations and to external computing or data resources which 5 normally are not available directly to personalization station. A card issuer management system prepares card objects and assigns a unique card object identifier. A smart card personalization server receives the card objects from the card issuer management system. A smart card personalization controller receives the unique card object identifiers and routes the card object identifiers 10 to waiting personalization stations. The personalization stations use the card object identifier to request data and services from the smart card personalization server in order to personalize the smart card. The services provided by the smart card personalization server includes data services, security services and support services. The smart card personalization server 15 supports multiple active personalization station sessions.
Description
AUSTRALIA Patents Act COMPLETE SPECIFICATION (ORIGINAL) Class Int. Class Application Number: Lodged: Complete Specification Lodged: Accepted: Published: Priority Related Art: Name of Applicant: UBIQ Incorporated Actual Inventor(s): Robert Neal Goman, Denis C Burand and Thomas L Younger Address for Service and Correspondence: PHILLIPS ORMONDE FITZPATRICK Patent and Trade Mark Attorneys 367 Collins Street Melbourne 3000 AUSTRALIA Invention Title: SMART CARD PERSONALIZATION INA MULTISTATION ENVIRONMENT Our Ref: 900087 POF Code: 221787/341337 The following statement is a full description of this invention, including the best method of performing it known to applicant(s): -1- 1A Smart Card Personalization in a Multistation Environment The present application is a divisional application from Australian Patent Application No. 2007200855, the entire disclosure of which is incorporated herein by 5 reference. Field of the Invention The present invention relates generally to data storage devices and more specifically to the control of smart card personalization in a multistation environment. 10 Background of the Invention Increasing numbers of organizations which issue transaction cards to their users, customers, or employees require cards tailored to meet the requirements of their particular service or application. These organizations also want the cards to contain data about the cardholder. Existing transaction cards encode such data in a 15 magnetic stripe on the back of the card but the amount of data that can be held by a magnetic stripe is limited. A new type of transaction card embeds a microprocessor computer chip in the plastic of the card to greatly increase the card's data storage capacity. Additionally, sophisticated card applications specific to the card issuer can execute in certain varieties of the chips, and the chip may also contain a type of 20 operating system. Transaction cards with embedded chips are referred to in the industry as portable programmed data carriers, more commonly called "smart cards". The chip in a smart card is generally programmed with initialization and/or personalization data at the same time as the surface of the card is being embossed and/or printed. 25 The initialization data comprises three major types of information: application data, security data, and printed data. The application data is common to all cards for a given card application and includes application program code and variables. The security data prevents fraudulent use of the card and is usually provided in the form of "secure keys". Printed data, such as a logo, bar codes, and various types of numerical 30 information, are placed on the surface of the card. Some or all of the same data can also be embossed on the surface. Optical technology also can be employed to make 1B part or all of the surface of the card into a storage medium with data accessible by an appropriate optical reader. Smart cards are also programmed with information specific to an 5 individual cardholder through a process called "personalization". The 2 personalization information for a smart card is similar to the personalization information currently contained on non-smart cards, such as the cardholder's name, account number, card expiration date, and a photograph. Because of its increased storage capacity, the chip ma smart card can contain additional data beyond the basic information on the standard transaction card 5 including a graphical representation of the individual's signature, data defining the types of service the cardholder is entitled to, and account limits for those services. Current systems from performing smart card initialization andlor personalization include a controller or a personal computer which is connected to a personalization station. All of the smart card programming data required for the 10 personalization process is sent from the controller or personal computer to the personalization station which programs the smart card. An application running on the personalization station controls the programming of the smart card. Many current personalization stations have a limited capacity to hand]e the increasingly sophisticated personalization process as the size and functionality of smart card computer chips increase. Such limitations include the memory, 15 processing capacity, and buffer size of the personalization stations. In addition, personalization stations may require access to external resources which provide security services or access to card data. The external resources, particularly the security services; are expensive infrastructures to repeat for each personalization station. Also, communication between the personalization station and the external resource is limited by the 20 speed of the communication link between them. In addition, the application development environment available on the personalization stations is often unique and lacking in development tools, Therefore, there is a need for a personalization system which at least alleviates the limitations on memory capacity and processing flexibility of current personalization stations. 25 There is also a need for a personalization system which can share external resources between multiple personalization stations. A reference herein to a patent document or other matter which is given as prior art is not to be taken as an admission that that document or matter was known or that the information it contains was part of the common general knowledge as at the priority date of 30 any of the claims. Where the terms "comprise", "comprises", "comprised" or "comprising" are used in this specification (including the claims) they are to be interpreted as specifying the presence of the stated features, integers, steps or components, but not precluding the presence of one or more other features, integers, steps or components, or group thereof. <flname> 3 Summary of the Invention According to one aspect of the present invention there is provided a computerized system for controlling programming of portable programmed data carriers across a plurality of personalization stations, the system comprising: a personalization server interface for 5 acquiring services from one of more resources, transferring card information associated with a card object identifier to one of the personalization stations, and controlling the programming of the portable programmed data carriers; a personalization station interface for requesting and receiving the card information associated with the card object identifier from the personalization server interface and for programming one of the portable programmed data 10 carriers; and a controller interface for providing the card object identifier to the personalization station interface. According to a further aspect of the present invention there is provided a computerized system for controlling programming of portable programmed data carriers across a plurality of personalization stations, the system comprising: means for receiving, by a server, one or more 15 card objects from a card issuer management system, wherein the card objects comprise information for programming the portable programmed data carriers; means for receiving, by a personalization station, from a controller, a unique card object identifier; means for requesting, by the personalization station, from the server, information for programming one of the portable programmed data carriers based on the unique card object identifier; means for 20 receiving, by the server, from the personalization station, a programming request including the unique card object identifier for the portable programmed data carrier being personalized; means for associating, by the server, the unique card object identifier in the programming request with the card object for the portable programmed data carrier being personalized; and means for utilizing, by the server, the card object to control the personalization station as the 25 personalization station programs the portable programmed data carrier. According to a still further aspect of the present invention there is provided a computer-readable medium having computer-executable instructions stored thereon for causing a computer to perform a method of controlling programming of portable programmed data carriers, the method comprising: receiving, by a server, one or more card objects from a 30 card issuer management system, wherein the card objects consist of information for programming the portable programmed data carriers; receiving, by a personalization station, from a controller, a card object identifier; requesting, by the personalization station, from the server, information for programming one of the portable programmed data carriers based on the card object identifier; receiving, by the server, from one of the personalization stations, a <flienamo' 3a programming request including the card object identifier for the portable programmed data carrier being personalized; associating, by the server, the card object identifier in the programming request with the card object for the portable programmed data carrier being personalized; and utilizing, by the server, the card object to control the personalization station 5 as the personalization station programs the portable programmed data carrier. According to a still further aspect of the present invention there is provided a computer readable medium having stored thereon a data structure comprising: a first data field containing data representing a card object containing data and commands for use by a personalization server to control the programming of a portable programmed data carrier by a 10 personalization station; and a second data field containing data representing a unique card object identifier for use by the personalization server to identify the card object represented by the first data field in response to a programming request from the personalization station, wherein the personalization station receives the unique card object identifier from a controller. According to a still further aspect of the present invention there is provided a system 15 for issuing portable programmed data carriers comprising: a plurality of card objects identified by a like plurality of card object identifiers; a plurality of personalization stations for receiving the card object identifiers and for programming the portable programmed data carriers using information contained in the card object identified by the card object identifier, wherein the plurality of personalization stations have at least two personalization station devices of 20 differing type; a plurality of controllers, each one of the plurality of controllers for providing one of the plurality of card object identifiers to one of the plurality of personalization stations; and a personalization server for controlling the programming of a portable programmed data carrier in response to a request from one of the personalization stations, wherein the personalization server translates the card object into commands and data and transfers the 25 commands and data to the personalization stations making the request. According to a still further aspect of the present invention there is provided a method of programming a portable programmed data carrier in a system having a server, a personalization station, and a controller, the method comprising: receiving, by the personalization station, from the controller, a card object identifier; requesting, by the 30 personalization station, from the server, information for programming the portable programmed data carriers; and programming, by the personalization station, the portable programmed data carrier under the control of the server. According to a still further aspect of the present invention there is provided a method of controlling programming of portable programmed data carriers in a system having a server, dow,,., 3b a plurality of personalization stations, and a controller, the method comprising: receiving, by the server, a card object from a card issuer management system, wherein the card object consists of information for programming the portable programmed data carriers; receiving, by the personalization station, from the controller, a card object identifier; requesting, by the 5 personalization station, from the server, information for programming one of the portable programmed data carriers based on the card object identifier; receiving, by the server, from one of the personalization stations, a programming request including the card object identifier for the portable programmed data carrier being personalized; associating, by the server, the card object identifier in the programming request with the card object for the portable 10 programmed data carrier being personalized; and utilizing, by the server, the card object to control the personalization station as the personalization station programs the portable programmed data carrier. The present invention may include a computerized system for controlling programming of portable programmed data carriers across a plurality of personalization 15 stations. The system may include a personalization server interface for acquiring services from one of more resources, transferring card information to one of the personalization stations and controlling the programming of the portable programmed data carrier. The system may also include a personalization station interface for receiving the card information from the personalization server interface and for programming the portable programmed data carrier. 20 Also described is a method of controlling programming of portable programmed data carriers in a system having a plurality of programming stations. The method may include receiving one or more card objects from a card issuer management system. The card objects may include information for programming the portable programmed data carriers. The method may also include receiving a programming request from the programming station and utilizing 25 the card object to control the programming station as the programming station programs the portable programmed data carrier. Also described is a computerized system which includes a means for receiving one or more card objects from a card issuer management system. The computerized system may also include a means for receiving a programming request from the programming station and a 30 means for utilizing the card object to control the programming station as the programming station programs the portable programmed data carrier. The smart card personalization system may use a data structure comprising a data field representing a card object containing information for programming a portable programmed 3c data carrier and an additional data field containing a unique card object identifier for identifying the card object. Therefore, the smart card personalization system may share external resources between multiple personalization stations. Other aspects and advantages of the invention will become 5 apparent by reference to the drawings and by reading the following detailed description. <fdlenameo 4 Brief Description of the Drawings Figure 1 is a block diagram representing an embodiment of a smart card issuing process that incorporates a smart card personalization server of the present invention. 5 Figure 2 is a functional block diagram of input and output connections for the embodiment of the smart personalization server of shown in Figure 1. Figure 3 is a block diagram showing one embodiment of the smart card personalization software of the present invention. 10 Figure 4 is a high level flow chart for one embodiment of software which implements the functions of the smart card personalization server. Description of the Embodiments In the following detailed description of the embodiments, reference is made to the accompanying drawings which form a part hereof, and in which is 15 shown by way of illustration specific embodiments in which the invention may be practiced. These embodiments are described in sufficient detail to enable those skilled in the art to practice the invention, and it is to be understood that other embodiments may be utilized and that structural, logical and electrical changes may be made without departing from the spirit and scope of the present 20 inventions. The following detailed description is, therefore, not to be taken in a limiting sense, and the scope of the present inventions is defined only by the appended claims. The leading digit(s) of reference numbers appearing in the Figures usually corresponds to the Figure number, with the exception that identical 25 components which appear in multiple figures are identified by the same reference numbers. The system of the present invention utilizes a personalization server to control smart card personalization in an environment having a plurality of personalization stations. The personalization server provides an interface to a 30 plurality of card personalization stations and to external computing or data resources which normally are not directly available to the card personalization stations or which are not cost efficient to replicate at each card personalization station.
5 The detailed description of this invention is divided into four sections. The first section provides an overview of one embodiment of a system for issuing smart cards which incorporates a smart card personalization server of the present invention. The second section describes the functional specifications for 5 the software components of the example embodiment of the smart card personalization system. The third section illustrates an example communication sequence between personalization station interface software and personalization server software for a smart card personalization process. The fourth section is a conclusion which includes a summary of the advantages of the present invention. 10 Smart Card Personalization System Overview. Figure 1 illustrates components of a smart card issuing process that incorporates one embodiment of the smart card personalization server of the present invention. The smart card personalization server 100 receives card objects from a card issuer management system 150. A smart card personalization controller 120 receives, from the card 15 issuer management system 150, a card object identifier for each one of the card objects passed to the smart card personalization server 100. The smart card personalization controller 120 routes each one of the card object identifiers to one of a plurality of personalization stations 130. Each personalization station 130 uses the card object identifier to request data and services from the smart 20 card personalization server 100 in order to personalize a smart card 160. The card issuer management system 150 manages the cardholder data and determines the type of card to issue, the card applications to embed in the card, and what personalization equipment to use to issue the card for a particular cardholder. 25 The smart card personalization server 100 is illustrated in Figure 1 as a computer executing personalization server software as further described below. The personalization server software executes under an operating system such as Unix, Windows 950, or Windows NT*, and on industry-standard workstation and/or personal computer hardware. As described below, the smart card 30 personalization server 100 provides an interface to card personalization stations 130 and to external computing or data resources 180. The server 100 controls card printers, embossing devices, and integrated or add-on smart card interface devices collectively represented in Figure 1 as a 6 plurality of personalization stations 130. Personalization stations 130 also represent such devices as large volume card printer/embossers, small volume card printer/embossers, automatic teller machines (ATMs), point of sale terminals, unattended kiosks, personal computers, network computers, and 5 on-line telecommunication devices. The physical connection between the devices and the smart card personalization server 100 varies according to the manufacturer and model of the device. Common industry standard connections include serial RS232, SCSI (Small Computer System Interface), Ethernet, and serial TTL (Transistor-Transistor Logic). In addition, some devices require a 10 proprietary bus connection. The connections between the smart card personalization server 100 and the card management system 150 and the stations 1:30 can also be implemented through standard local area networks, wide area networks, dedicated phone lines, or other remote communication infrastructure used to transfer data. Alternate 15 connections will be apparent to those skilled in the art and are within the scope of the invention. Figure 2 is a block diagram of one embodiment of the smart card personalization system illustrating the logical input and output connections for the smart card personalization server 100. The cardholder data 202 input and 20 maintained by the card issuing organization contains information about each individual cardholder, such as name, account number, card expiration date, and applicable services. The card issuer management system 150 assembles the data necessary for each card personalization job. The data for each job can be stored in a card object data store, such as a database, with each card object 208 25 accessible by a unique card object identifier. A job can be, for example, a logical grouping of similar card objects. The card objects 208 contain, for example but not with limitation, data and commands for magnetic stripe encoding, embossing, printing, packaging and smart card personalization. An example card object is shown below. 30 7 Card Object EMB= "123456789", "Your Name", "1/1/1999" ENC=%B123456789^ Y/NameA0101 1999?; 123456789=0101 1999? PIC=www.photos.com/YourName 5 SCRD=thisunique cardobject identifier The example card object begins with an emboss instruction "EMB" followed by the corresponding cardholder data to be embossed on the card. The second line in the example card object shown above is an encode instruction "ENC" 10 followed by the corresponding data to be corresponding cardholder data to be encoded on the magnetic strip of the card. The third line in the example card object is an instruction to print a picture on the card "PIC" followed by the location of the cardholder's picture. The fourth line in the example card object is smart card portion of the card object "SCRD". The smart card portion of the 15 card object 208 consists of the unique card object identifier. The card issuer management system 150 passes the card object 208 to the smart card personalization server 100. The smart card personalization server 100 expects the personalization data to be in a particular format. Because the card object 208 is in a format defined by the card issuer that often differs from the 20 format(s) expected by the server 100, the card object 208 is translated by the server 100 when necessary. One method of translating the card object is described in U.S. Patent Application serial number 08/755,459 entitled "System and Apparatus for Smart Card Personalization", filed on November 22, 1996. The smart card personalization server 100 provides an interface to 25 external security services 204 and additional data sources 206 as needed to perform a smart card personalization job. The software program for the smart card personalization server 100 can be coupled to the data sources 206 through standard data query commands that provide access to the data stored in the data sources. The communication protocols between the software program for the 30 smart card personalization server 100 and the external security services 204 and the data sources 206 vary depending upon the underlying data management system or security system employed.
8 The smart card personalization server 100 also provides an interface to each one of a plurality of card personalization stations 130. The smart card personalization controller 120 passes a card object identifier to one of the waiting personalization stations 130. The personalization station 130 presents 5 the card object identifier to the server 100 in order to initiate access to the data services, security services or support services needed to complete the smart card personalization. Upon receiving the card object identifier from the personalization station 130, the smart card personalization server 100 translates the card object indicated by the card object identifier. The translation of the card 10 object by the smart card personalization server 100 results in a sequence of commands and/or data which are passed to the personalization station 130. The personalization station 130 passes the commands and data received from the server 100 directly to the smart card 160. An example process demonstrating how the server 100 controls the actual card programming is described below. 15 Personalization Software Specifications. Figure 3 is a block diagram showing one embodiment of the smart card personalization server 100 of Figure 2. The system of the present invention utilizes the personalization server 100 to control smart card personalization in an environment having a plurality of personalization stations 130 coupled to the personalization server 100. The 20 personalization server 100 provides an interface to card personalization stations 130 and to external computing or data resources 204, 206 as shown in Figure 2. An application executing on a card issuer management system 150 prepares a card object 303 and assigns a card object identifier to each object. Information regarding the card objects is archived in a card object database 302 25 until called upon by the personalization server 100 to personalize a smart card. The personalization environment of the present invention comprises two complimentary software components. The first is personalization station interface software 304 which executes in a processor of the personalization station 130. The second is personalization server software 305 executing in a 30 processor in the personalization server 100 which processes the personalization card objects and utilizes both local and external resources. A initialization process 306 initiates a personalization job by initiating the personalization server 100 and optionally sending data, such as embossing or 9 magnetic stripe encoding data, to the personalization station 130. The personalization server software 305 serves multiple card personalization processes 308. Each card personalization process 308 represents a personalization job occurring at one of the personalization stations 130. Each 5 card personalization process 308 is logically linked to one of the personalization stations 130. The personalization station interface software 304 presents the unique card object identifier to the personalization server software 305 to initiate access to services available through the server software 305. The personalization server 10 software 305 obtains all of the necessary job information as well as the data elements to be used in personalization of the smart card. The personalization station interface software 304 performs the card personalization utilizing the services available to it through the personalization server software 305 as required until personalization is complete. At completion of the job, the 15 personalization station interface software 304 is notified by the server software 305 of completion. The services provided by the server software 305 include data services 312, security services 310 and support services 314. The data services 312 perform the acquisition of data for each personalization job and include any 20 commonly available means of accessing data. The data services 312 retrieve data archived in the card object data base 302 on the card issuer management system 150 as well as from additional external data sources as shown in Figure 2. The data can be in the form of files, databases, or data structures for example. The security services 310 interface with a variety of different external 25 sources which provide security functions. The security functions provided by the external sources include any commonly available means of securing information or limiting access to smart card chips until a required security condition is met. An example security function utilizes one or more "secure keys" that are programmed into the chip to prevent fraudulent use of the card. 30 The appropriate secure key data is obtained by the smart card personalization server software 305 from secure key records maintained by the card issuer or an external security source and then transferred to the personalization station interface software 304. The security services 310 also provide security functions 10 that can be used, for example, to ensure the integrity and secrecy of data during the transmission of data to and from the personalization station 130. The support services 314 perform processing tasks that in prior systems were performed by the personalization station 130 or were unable to be 5 performed at all due to the limitations of the personalization stations. The support services 314 include any commonly used functions that can be shared between processes such as data conversions and validations for example. An example support service 314 is year 2000 date validation processing. An additional example of a support service 314 is formatting a ten digit string of 10 numbers representing a telephone number so that the area code is in parentheses. The personalization server software 305 operates on a computer system which includes one or more high speed processors, data communications capability compatible with the target personalization stations, access to external resources such as security or file servers and a multitasking operating system. 15 The smart card personalization processes 308, identified as components of the personalization server software 305, utilize their own virtual memory and share resources as appropriate through threading or other common techniques well known to one skilled in the art. In summary, the personalization server software moves the processing 20 tasks for initialization and personalization of smart cards from the personalization station to the personalization server. The personalization station interface software is responsible for servicing individual commands from the personalization server software. Personalization Software Communication Process. Figure 4 25 illustrates the communication sequence between the personalization station interface software 304 and the personalization server software 305 in order to complete personalization of a smart card. The smart card personalization process begins at stage 402 when the personalization station interface software 304 receives a unique card object identifier from the smart card personalization 30 controller as shown in Figure 2. At stage 404, the personalization station interface software 304 requests the commands and data necessary to personalize the card by passing the card object identifier to the server software 305. Upon receiving the card object identifier, the server software 305 starts a I1 personalization session with the personalization station interface software 304 at stage 406. Based on the card object identifier, the server software 305 retrieves and sends the data and commands unique to the card being personalized to the 5 personalization station interface software 304 at stage 408. The data and commands are retrieved locally from the smart card personalization server or from additional external data sources as shown in Figure 2 including, for example, the card issuer management system 150. In one embodiment, the personalization station interface software 304 is 10 idle at stage 410 until it receives the commands and data from the personalization server software 305. Upon receiving the commands and data, the personalization station interface software 304 passes the commands and data directly to the smart card and returns data and/or status signals to the server software 305 as an acknowledgement at stage 412. An example of the data 15 returned by the personalization station interface software 304 is a serial number unique to the card and a random number. The data in such case can be used as part of a function provided by a security service such as an authentication algorithm. At stage 414, the server software 305 processes the status signals and/or data returned by the personalization station interface software 304. 20 For example, at stage 408 the server software 305 sends a "select" command. The personalization station interface software 304 is idle at stage 410 until it receives the "select" command from the server. At stage 412, the personalization station interface software 304 passes the "select" command on to the smart card and returns a status signal as an acknowledgement to the server 25 software 305. After receiving the acknowledgment at stage 414, the server software 305 sends a "write" command and associated data to the personalization station interface software 304 at stage 408. The personalization station interface software 304 is idle at stage 410 until it receives the "write" command from the server software 305. At stage 412, the personalization station passes the "select" 30 command on to the smart card and returns a status signal as an acknowledgement to the server software 305. The loop from stage 403 to stage 410 to stage 412 to stage 414 continues until the personalization is complete.
12 Upon completion of the personalization of the smart card, the server software 305 sends a "format complete" command to the personalization station interface software 304 at stage 416. The personalization station interface software 304 is idle at stage 418 until it receives the "format complete" 5 command from the server software 305. At stage 420 the personalization station interface software 304 sends an acknowledgement of the "format complete" command to the server software 305 and to the smart card. The personalization process is complete at stage 422 when the server software 305 receives the acknowledgement. 10 Conclusion. In summary, the system of the present invention utilizes a personalization server to control smart card personalization in an environment having a plurality of personalization stations. The personalization server provides an interface to a plurality of card personalization stations and to extemal computing or data resources which normally are not directly available to 15 the card personalization stations or which are not cost efficient to replicate at each card personalization station. The personalization server off-loads the processing of tasks for initialization and personalization of smart cards from the personalization station to the personalization server. The personalization station is responsible for servicing individual commands from the personalization 20 server. An advantage of the present invention is that the personalization server can support multiple active personalization station sessions. An additional advantage is that the programming logic required in the personalization station is reduced to that of managing data transfers. 25 Other mechanisms for control of the smart card personalization process will be apparent to those skilled in the art. It is to be understood that the above description is intended to be illustrative, and not restrictive. Many other embodiments will be apparent to those of skill in the art upon reviewing the above description. The scope of the invention should, therefore, be determined 30 with reference to the appended claims, along with the full scope of equivalents to which such claims are entitled.
Claims (23)
1. A computerized system for controlling programming of portable programmed data carriers across a plurality of personalization stations, the system comprising: 5 a personalization server interface for acquiring services from one of more resources, transferring card information associated with a card object identifier to one of the personalization stations, and controlling the programming of the portable programmed data carriers; a personalization station interface for requesting and receiving the card information 10 associated with the card object identifier from the personalization server interface and for programming one of the portable programmed data carriers; and a controller interface for providing the card object identifier to the personalization station interface. 15
2. The computerized system of claim 1, wherein the services acquired by the personalization server interface are data services.
3. The computerized system of claim 1, wherein the services acquired by the personalization server interface are security services. 20
4. The computerized system of claim 1, wherein the services acquired by the personalization server interface are support services.
5. A computerized system for controlling programming of portable programmed data 25 carriers across a plurality of personalization stations, the system comprising: means for receiving, by a server, one or more card objects from a card issuer management system, wherein the card objects comprise information for programming the portable programmed data carriers; means for receiving, by a personalization station, from a controller, a unique card 30 object identifier; means for requesting, by the personalization station, from the server, information for programming one of the portable programmed data carriers based on the unique card object identifier; <filename> 14 means for receiving, by the server, from the personalization station, a programming request including the unique card object identifier for the portable programmed data carrier being personalized; means for associating, by the server, the unique card object identifier in the 5 programming request with the card object for the portable programmed data carrier being personalized; and means for utilizing, by the server, the card object to control the personalization station as the personalization station programs the portable programmed data carrier. 10
6. The computerized system of claim 5, further comprising means for acquiring security services from a security source.
7. The computerized system of claim 5, further comprising means for acquiring data from a data source. 15
8. The computerized system of claim 7, wherein the data source is the card issuer management system.
9. The computerized system of claim 5, further comprising means for providing support 20 services.
10. A computer-readable medium having computer-executable instructions stored thereon for causing a computer to perform a method of controlling programming of portable programmed data carriers, the method comprising: 25 receiving, by a server, one or more card objects from a card issuer management system, wherein the card objects consist of information for programming the portable programmed data carriers; receiving, by a personalization station, from a controller, a card object identifier; requesting, by the personalization station, from the server, information for 30 programming one of the portable programmed data carriers based on the card object identifier; receiving, by the server, from one of the personalization stations, a programming request including the card object identifier for the portable programmed data carrier being personalized; 15 associating, by the server, the card object identifier in the programming request with the card object for the portable programmed data carrier being personalized; and utilizing, by the server, the card object to control the personalization station as the personalization station programs the portable programmed data carrier. 5
11. The computer-readable medium of claim 10, having further computer-executable instructions for acquiring security services from a security source.
12. The computer-readable medium of claim 10, having further computer-executable 10 instructions for acquiring data from a data source.
13. The computer-readable medium of claim 12, wherein the data source is the card issuer management system. 15
14. The computer-readable medium of claim 10, having further computer-executable instructions for providing support services.
15. A computer readable medium having stored thereon a data structure comprising: a first data field containing data representing a card object containing data and 20 commands for use by a personalization server to control the programming of a portable programmed data carrier by a personalization station; and a second data field containing data representing a unique card object identifier for use by the personalization server to identify the card object represented by the first data field in response to a programming request from the personalization station, wherein the 25 personalization station receives the unique card object identifier from a controller.
16. A system for issuing portable programmed data carriers comprising: a plurality of card objects identified by a like plurality of card object identifiers; a plurality of personalization stations for receiving the card object identifiers and for 30 programming the portable programmed data carriers using information contained in the card object identified by the card object identifier, wherein the plurality of personalization stations have at least two personalization station devices of differing type; a plurality of controllers, each one of the plurality of controllers for providing one of the plurality of card object identifiers to one of the plurality of personalization stations; and IOlanme, 16 a personalization server for controlling the programming of a portable programmed data carrier in response to a request from one of the personalization stations, wherein the personalization server translates the card object into commands and data and transfers the commands and data to the personalization stations making the request. 5
17. The system of claim 16, wherein the personalization server acquire services from one or more resources in response to a request from one of the personalization stations.
18. A method of programming a portable programmed data carrier in a system having a 10 server, a personalization station, and a controller, the method comprising: receiving, by the personalization station, from the controller, a card object identifier; requesting, by the personalization station, from the server, information for programming the portable programmed data carriers; and programming, by the personalization station, the portable programmed data carrier 15 under the control of the server.
19. A method of controlling programming of portable programmed data carriers in a system having a server, a plurality of personalization stations, and a controller, the method comprising: 20 receiving, by the server, a card object from a card issuer management system, wherein the card object consists of information for programming the portable programmed data carriers; receiving, by the personalization station, from the controller, a card object identifier; requesting, by the personalization station, from the server, information for 25 programming one of the portable programmed data carriers based on the card object identifier; receiving, by the server, from one of the personalization stations, a programming request including the card object identifier for the portable programmed data carrier being personalized; associating, by the server, the card object identifier in the programming request with 30 the card object for the portable programmed data carrier being personalized; and utilizing, by the server, the card object to control the personalization station as the personalization station programs the portable programmed data carrier. <filename>~ 17
20. The method of claim 19, further comprising acquiring data by the server from a data source.
21. The method of claim 20, wherein the data source is the card issuer management 5 system.
22. The method of claim 19, further comprising acquiring security services by the server from a security source. 10
23. The method of claim 19, further comprising providing support services by the server.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| AU2010241355A AU2010241355B2 (en) | 1998-05-11 | 2010-11-10 | Smart card personalization in a multistation environment |
Applications Claiming Priority (4)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| US09076022 | 1998-05-11 | ||
| AU2003236380A AU2003236380A1 (en) | 1998-05-11 | 2003-08-20 | Smart card personalization in a multistation environment |
| AU2007200855A AU2007200855A1 (en) | 1998-05-11 | 2007-02-27 | Smart card personalization in a multistation environment |
| AU2010241355A AU2010241355B2 (en) | 1998-05-11 | 2010-11-10 | Smart card personalization in a multistation environment |
Related Parent Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| AU2007200855A Division AU2007200855A1 (en) | 1998-05-11 | 2007-02-27 | Smart card personalization in a multistation environment |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| AU2010241355A1 AU2010241355A1 (en) | 2010-12-02 |
| AU2010241355B2 true AU2010241355B2 (en) | 2011-09-01 |
Family
ID=37909126
Family Applications (2)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| AU2007200855A Abandoned AU2007200855A1 (en) | 1998-05-11 | 2007-02-27 | Smart card personalization in a multistation environment |
| AU2010241355A Expired AU2010241355B2 (en) | 1998-05-11 | 2010-11-10 | Smart card personalization in a multistation environment |
Family Applications Before (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| AU2007200855A Abandoned AU2007200855A1 (en) | 1998-05-11 | 2007-02-27 | Smart card personalization in a multistation environment |
Country Status (1)
| Country | Link |
|---|---|
| AU (2) | AU2007200855A1 (en) |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO1995022810A1 (en) * | 1994-02-17 | 1995-08-24 | Telia Ab | Arrangement and method for a system for administering certificates |
| US5799316A (en) * | 1994-10-07 | 1998-08-25 | Societe d'Etudes et de Realisation de Protection Electronique-Informatiqu e Electronique Securite Maritime-S.E.R.P.E.-I.E.S.M. (S.A.) | Method for the batch customization of cards |
-
2007
- 2007-02-27 AU AU2007200855A patent/AU2007200855A1/en not_active Abandoned
-
2010
- 2010-11-10 AU AU2010241355A patent/AU2010241355B2/en not_active Expired
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| WO1995022810A1 (en) * | 1994-02-17 | 1995-08-24 | Telia Ab | Arrangement and method for a system for administering certificates |
| US5799316A (en) * | 1994-10-07 | 1998-08-25 | Societe d'Etudes et de Realisation de Protection Electronique-Informatiqu e Electronique Securite Maritime-S.E.R.P.E.-I.E.S.M. (S.A.) | Method for the batch customization of cards |
Also Published As
| Publication number | Publication date |
|---|---|
| AU2007200855A1 (en) | 2007-03-22 |
| AU2010241355A1 (en) | 2010-12-02 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US7500601B2 (en) | Smart card personalization in a multistation environment | |
| US6612486B2 (en) | Smart card managing system | |
| CA2251689C (en) | System and apparatus for smart card personalization | |
| CA2330625C (en) | Methods and apparatus for dynamic smartcard synchronization and personalization | |
| AU2010241355B2 (en) | Smart card personalization in a multistation environment | |
| MXPA00011070A (en) | Smart card personalization in a multistation environment | |
| EP1762988A1 (en) | System and apparatus for smart card personalization | |
| KR100508351B1 (en) | System and apparatus for smart card personalization | |
| CN101996456B (en) | Replacement-free host sharing system and method | |
| RU2260849C2 (en) | System and device for personalization of intellectual cards | |
| EP1333408A1 (en) | System and apparatus for smart card personalization |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| FGA | Letters patent sealed or granted (standard patent) | ||
| GD | Licence registered |
Name of requester: DATACARD CORPORATION |
|
| GM | Mortgages registered |
Name of requester: DATACARD CORPORATION |
|
| MK14 | Patent ceased section 143(a) (annual fees not paid) or expired |