DE10000995A1 - Controlling data exchange in contactless chip card system involves performing data exchange between chip card, read/recording device only if authorization device is activated - Google Patents

Abstract

The method involves providing a connection between the chip card (2) and the read/recording device (3) if the chip card comes within communications range of the read/recording device, activating an access authorization arrangement (13) for data exchanges and performing a data exchange between the chip card and the read/recording device only if the authorization device is activated. An Independent claim is also included for a data exchange control system.

Description

FIELD OF THE INVENTION

The present invention relates to a contactless Smart card system for performing data exchange, such as with the help of electromagnetic waves, and in particular on a system and method for controlling data exchange between the contactless chip card and a read / open drawing device to be used by the owner of the card Control the exchange of sensitive data.

PRINCIPLES OF THE INVENTION

Examples of the use of contactless chip cards are Factory automation, physical access to a building, Payment for a transport system, identification or Transfer of a digital signature. With regard Payment is opposed to contactless smart cards Credit cards or cash when paying Services very convenient since the user of a contactless Chip card, if he wants to access a service, only must go through a reader / recorder to use the to pay or debit electronic credit, the is stored in the chip card (direct debit card).

However, there is a connection with the use of a contactless Chip card a possible risk that without knowledge and Access authorization by the owner of the contactless  Chip card charged the card or a digital signature from the chip card is transmitted.

The block diagram in Fig. 1 shows schematically the structure of a known contactless chip card of the type of the present invention. A contactless chip card system 1 comprises a contactless chip card 2 (hereinafter simply referred to as chip card or card) and a reading / recording device 3 .

The known chip card 2 comprises an antenna 12 for receiving / transmitting data from and to the reading / recording device 3 by means of electromagnetic waves, which are indicated by the reference symbol "C", a receiving circuit 10 for demodulating a signal from the antenna 12 has been received, and an I / O control circuit 9 for serial / parallel conversion of the receive and transmit signals.

In order to carry out read / record operations on data, such as receiving and sending data as well as the various data processing operations, the chip card 2 comprises a central unit 7 , a fixed memory 6 for storing a control program or the like for operating the central unit 7 , as will be described later a random access memory 5 for storing volatile data, such as the result of a data processing, and a bus 8 (data and control bus) for connecting the central unit 7 , read-only memory 6 , random access memory 5 and I / O Control circuit 9 .

An oscillator (not shown) generates an internal clock signal for the chip card 2 and a battery (not shown) provides current. The line labeled "T" is a trigger signal line for moving the chip card 2 from its idle state to its operating state, in that a trigger signal is transmitted directly from the receiving circuit 10 to the central unit 7 .

In principle, the reading / recording device 3 has the same structure as the chip card 2 . In general, a reader / recorder comprises an antenna 39 for receiving / transmitting data from and to the chip card 2 by means of electromagnetic waves indicated by "C", a receiving circuit 37 for demodulating one received by the antenna 39 Signals, a transmission circuit 38 for modulating a signal to be transmitted via the antenna 39 , and an I / O control circuit 36 for effecting serial / parallel conversion of the received signal and the signal to be transmitted.

Like the contactless smart card 2 , the reader / writer 3 generally includes a central processing unit 33 for performing read / record operations on data such as receiving and sending data, as well as various data processing operations, a read-only memory (ROM) 32 for storage a control program or the like for operating the central unit 33 , a random access memory (RAM) 34 for temporarily storing data and, in addition to the known chip card 2, an electrically erasable programmable read-only memory (EEPROM) 31 for temporarily non-volatile storage of processing results and a bus 35 (Data and control bus) for connecting the CPU 33 , the read-only memory 32 , the random access memory 34 , the I / O control circuit 36 and the electrically erasable programmable read-only memory 31 . The reader / recorder 3 , like the chip card 2, comprises a power supply and a clock generator (not shown).

In the following, it is assumed that the contactless chip card 2 and the reader / recorder 3 are both powered by their respective battery or other power supply (not shown) and that a clock signal acts. When the contactless IC card 2 comes into a transmission area around the reader / recorder 3 , it is activated by an electromagnetic signal from the reader / recorder 3 , and the receiving circuit 10 of the contactless chip card 2 generates a trigger signal which is sent via the trigger signal line "T" acts on the central unit 7 , whereby it puts the chip card out of its idle state into its operating state. Depending on the following transmission signal "C", the credit stored in the contactless chip card (direct debit card) is charged for a service, the contactless chip card 2 transmitting an identification code, an access code, a digital signature or the like.

Since such data transmission takes place without the Owner of the contactless chip card also just a note there is a need to be willing to use to increase contactless chip cards.

SUMMARY OF THE INVENTION

The present invention relates in particular to a contactless chip card system and a method of operation of a contactless chip card system that the owner of the contactless chip card allows data exchange between control his chip card and a reader / recorder.  

More particularly, the invention relates to checking whether the smart card (or one related to the smart card Bank account), an identification code, a digital one Signature is transferred, and relates to control the transmission of other sensitive data. To the Controlling data exchange includes the invention contactless chip card an access authorization means for Data exchange that is activated by the owner of the chip card must be done before or during a data exchange from sensitive data between the chip card and a read / open drawing device. Otherwise the chip card transmits no sensitive data. Preferably the read / up gives drawing device to the owner of the card an audible or visible hint to indicate that a transaction takes place and / or has been completed.

In a first embodiment of the invention this activates Access authorization means for data exchange Data exchange for debiting a chip card, for sending one Identification codes, for sending a digital signature, an access code or the like from the chip card to the Reading / recording device.

In a further embodiment of the invention, this allows Access authorization means for data exchange that the Data exchange only within a predetermined period of time its activation or for as long as the Card owner the access authorization means is activated.

The means of access authorization for data exchange can be a Sensor or an electrical switch on or in the chip card by the owner of the chip card (by hand) is activated. Accordingly, the owner of the  Chip card the transfer of sensitive data between its chip card and a reader / recorder control, since the owner is actively granting access to Data exchange granted.

The sensor can be a sensor that gives an electrical signal generated by the temperature of the sensor, from which to the Sensor applied pressure or the like depends.

If as a means of access for data exchange Quartz crystal is used, its oscillation frequency change if a finger is placed on it, what by a suitable electronic circuit in a contactless Chip card is analyzed according to the invention.

In a further embodiment of the invention, a Piezo resistor pressure sensor used its electrical Resistance changes when a finger is placed on it.

A capacitor that changes its electrical capacity when a finger placed on it can also be used. To increase sensitivity, the capacitor can be part of a resonant circuit that depends on its frequency changes from the temperature of the capacitor.

If necessary to analyze the sensor signal, a analog signal generated by the sensor by an in the Chip card embedded analog / digital converter in a digital Signal converted. To compare the converted digital Signal from the sensor with a predetermined electrical signal or code, the chip card according to the invention comprises a Comparator. In one embodiment of the invention, the Comparison made by the central unit of the chip card.  

All electronic components of the chip card are preferably possibly with the exception of the antenna, in a single chip integrated, the means of access authorization for Data exchange attached to its top and in the Chip card embedded in a way that the Access authorization means by the owner of the card from the surface of the chip card can be activated.

In a further embodiment of the invention there is Access authorization means for data exchange from one electrical switch that switches a trigger signal to the Card from its idle state to its operating state move if by the owner of the card the switch has been activated. If necessary, the chip card can also be used Include timer circuitry to allow data exchange between the chip card and a reader / recorder within one predetermined time after the switch or a feeler, as already mentioned, by the owner of the Card have been activated. Otherwise or in addition must the switch or sensor by the owner of the card be activated during a transaction or the like takes place so that the card remains operational and the Transaction is allowed.

In a further embodiment of the invention is the switch or sensors inside or near one Access authorization area of the chip card arranged. On such access area can be from an opening or a notch in the chip card, an irregular edge the chip card or another suitable part of the chip card that allows the owner of the card to enter the area to feel without taking a look at the smart card have to. In one embodiment of the invention, a  Capacitor with two or more separate electrodes Access authorization means for data exchange and is near or arranged within the access authorization area. If the capacitor is part of an oscillating circuit, its Frequency changes when a finger touches the capacitor through a detection circuit of the chip in the card Access authorization by the owner of the chip card easily be recognized.

BRIEF DESCRIPTION OF THE DRAWINGS

For a better understanding of the present invention and for further details and advantages thereof will now be referred to the following detailed description in connection with the associated drawings, the same numbers and Letters show the same or similar components and in which

Fig. 1 shows the structure of a known contactless smart card system to which the present invention can be applied;

Fig. 2 is a contactless IC card system according to a first embodiment of the invention;

Fig. 3 is a contactless IC card system according to a second embodiment of the invention;

Fig. 4 shows a first embodiment of an access authorization means for data exchange of the embodiment of the contactless chip card system shown in Fig. 3; and

FIG. 5 shows a second embodiment of an access authorization means for data exchange of the embodiment of the contactless chip card system shown in FIG. 3.

The structure of the contactless chip card system in FIG. 2 according to the invention is fundamentally identical to that shown in FIG. 1, except that the contactless chip card 2 comprises a switch 13 . Instead of directly connecting the receiving circuit 10 to the central unit 7 via a trigger signal line T, as shown in FIG. 1, an input of the switch 13 is connected to the receiving circuit 10 of the contactless chip card 2 via the trigger signal line T. An output of the switch 13 of the contactless chip card 2 is connected to the central unit 7 via a second trigger signal line T '. As already described in connection with FIG. 1, the contactless chip card 2 receives a trigger signal from the reading / recording device 3 via the trigger signal line T in order to put the chip card out of its idle state into its operating state. In contrast to the prior art shown in FIG. 1, the trigger signal must pass through the switch 13 in order to be able to reach the central unit 7 and to put the chip card 2 in FIG. 2 from its idle state into its operating state. In order to allow the user of a chip card 2 to control whether his chip card 2 may be charged by the reader / recorder 3 , the owner must activate the switch 13 before the contactless chip card 2 exchanges sensitive data, such as a charge signal, which A bank account number, an identification code, a digital signature or the like, which are required for electronic payment or identification.

The embodiment of the contactless chip card system shown in FIG. 3 differs from the known contactless chip card system shown in FIG. 1 in that the contactless chip card 2 in FIG. 3 comprises a sensor 14 . The sensor 14 is connected to the connection bus 8 and, like the switch shown in FIG. 2, has to be activated manually before or during data exchange of sensitive data. In order to activate the switch 13 and likewise the sensor 14 of the contactless chip card 2 in FIGS. 2 and 3 , a finger of the owner of the chip card 2 must be on the switch 13 of the contactless chip card 2 in FIG. 2 or on the sensor 14 of the contactless chip card 2 are placed in FIG. 3 before an exchange of sensitive data with the reading / recording device 3 can take place. In order to analyze whether the sensor 14 has been activated by the owner of the chip card 2 in FIG. 3, the central unit 7 regularly determines the state of the sensor 14 . If an electrical parameter of the sensor, such as its electrical resistance, changes due to the touch of the sensor 14 , the digital signal of an analog / digital converter (not shown) changes, and the change of the via the bus 8 to the central unit 7 transmitted digital signal is analyzed by the central unit. In the embodiment of the smart card 2 in Fig. 3 the central unit 7 compares with the aid of a comparator (not shown) of the central unit 7, the digital representation of the data transmitted to the CPU 7 via the bus 8 sensor signal with a predetermined digital reference value. The reference value for comparison in order to recognize whether the sensor 14 has been activated is stored in an electrically erasable programmable read-only memory (not shown), which is also implemented in the chip card 2 shown in FIG. 3. If the sensor signal 14 is regarded as a sensor signal for the fact that the sensor has been activated, then the central processing unit 7 , the comparator (not shown) and / or a threshold circuit (not shown) cause the chip card 2 or 2 shown in FIG are realized in the central unit 7 that the central unit 7 deactivates a locking means (not shown) of the chip card 2 in FIG. 3, which then enables the exchange of sensitive data between the contactless chip card 2 and the reading / recording device 3 .

It goes without saying that any suitable sensor or switch can be used if its output signal can be analyzed by the central unit 7 or another means, such as a comparator or a threshold circuit of the chip card 2 .

In the preferred embodiment of the chip card 2 in FIG. 3, the sensor 14 is a capacitor of a resonant circuit (not shown) with sufficient sensitivity, on which a finger is placed by the owner of the chip card 2 in order to be able to exchange data between the chip card and a reading / recording device.

In the embodiment shown in FIG. 3, the chip card 2 comprises only a single chip in which the random access memory 5 , the fixed memory 6 , the central unit 7 , the sensor 14 or an oscillating circuit (not shown) with its corresponding capacitor (not shown), the I / O control circuit 9 , the receiving circuit 10 , the transmission circuit 11 , the bus 8 and the trigger signal line T are realized. In the embodiment shown in FIG. 3, the antenna 12 is separated from the individual chip and arranged on or in the chip card 2 , but is connected to the chip via the signal lines shown in FIG. 3. The capacitor (not shown) for access authorization can be formed by two or more (separate) contact points of a contact field which is arranged on a chip of known contact chip cards which comprise electrical contacts in order to communicate with a reading / recording device. If the known contact field for contacting contact chip cards is used as a capacitor for the contactless chip card according to the invention, a chip card can be generated both with an access authorization means for data exchange and with an identification input means for entering a PIN-like identification code in that in a single chip is embedded in the card, which comprises only a single means (the contact points of the known contact field) for access authorization or identification purposes. In addition, by means of these measures according to the invention, a chip card can be realized which comprises only a single chip, which enables the card to be used for contactless operation as well as for operation using electrical contacts both in a contactless chip card system and in a contact chip card system allowed.

The embodiment of the invention shown in FIG. 4 differs from the embodiment shown in FIG. 3 in that the contactless chip card 2 comprises a separate capacitor 15 which changes its capacity when a finger touches it. Furthermore, the capacitor 15 forms part of an oscillating circuit 19 which changes its frequency when a finger touches the capacitor 15 . Furthermore, in contrast to the embodiment shown in FIG. 3, the oscillating circuit 19 is connected directly to the central unit 7 , instead of being connected via the bus 8 , as shown in FIG. 3.

In addition, the contactless chip card shown in FIG. 4 differs from chip card 2 in FIG. 3 in that it comprises an opening 18 near an edge of the chip card. Two physically separate electrodes 16 and 17 are arranged around the opening 18 , and each of the electrodes is connected to the resonant circuit 19 via a wiring level. Through the opening 18 , the owner of the chip card 2 shown in FIG. 4 can easily feel the location of the access authorization area, which is formed by the opening 18 and adjacent electrodes 16 and 17 , with his fingers, even when it is dark or when the owner the chip card 2 wants to give access authorization for data exchange while the chip card 2 of FIG. 4 is in its pocket.

FIG. 5 shows a further embodiment, which differs from the embodiment shown in FIG. 4 in that the access authorization area is formed by a notch 23 on an edge of the contactless chip card 2 . Two separate electrodes 21 and 22 of the capacitor 20 are arranged near the notch 23 .

In a further embodiment, the access authorization means for data exchange of each of the contactless chip cards 2 shown in FIGS. 2, 3, 4 and 5 is also an identification input means for identifying the user of the card. A digital representation of a rhythm or Morse-like code is therefore stored in the electrically erasable programmable read-only memory (not shown) of the chip cards 2 shown in FIGS. 2, 3, 4 and 5, which is generated by a comparator (not shown) of the card or is compared by the central unit 7 of the chip card 2 with a rhythm or Morse-like activation of the sensor or switch for access authorization for the exchange of sensitive data. If the result of the comparison shows that the code entered matches the code stored in the electrically erasable programmable read-only memory (not shown) or the like, a timer (not shown) in the chip card is activated to make the card operational. If the access authorization means for data exchange is additionally activated within the time period in which the chip card is ready for operation after the previous identification process, sensitive data can be exchanged. Furthermore, the chip cards 2 in FIGS. 3 to 5 comprise a second timer (not shown) which allows data exchange between the chip cards 2 and a reader / recorder 3 within a second period of time after the access authorization means for data exchange are activated by the owner of the card has been. Otherwise, instead of a second clock, the user must keep the access authorization means activated (pressed) while allowing a transaction or other exchange of sensitive data to take place. Through this two-stage process, only the owner of the chip card can put his chip card into operation, and he has full control over the exchange of sensitive data of his chip card with a reader / recorder, since he also prior to any communication of sensitive data, such as regarding Transaction, an identification, a digital signature or the like that must activate the access authorization means for data exchange.

Claims (17)

1. Control method for data exchange for a contactless chip card system ( 1 ), the system comprising a contactless chip card ( 2 ) and a reading / recording device ( 3 ), the control method comprising the following steps:

• 1. Providing a connection between the chip card ( 2 ) and the reading / recording device ( 3 ) when the chip card ( 2 ) on the reading / recording device ( 3 ) comes into a communication area;
  • - Activating an access authorization means for data exchange ( 13 ; 14 ) and
  • - Carrying out a data exchange of sensitive data between the chip card ( 2 ) and the reading / recording device ( 3 ) (only) when the access authorization means for data exchange ( 13 ; 14 ) has been activated.

2. The method according to claim 1, wherein the access authorization means for data exchange ( 13 ; 14 ) allows the data exchange to take place (only) within a predetermined period of time after its activation or during the duration of its activation. 3. The method according to claim 1, wherein the access authorization means for data exchange ( 13 ; 14 ) is activated by a user of the chip card by hand. 4. The method according to claim 1, wherein the access authorization means for data exchange consists of a sensor ( 13 ; 14 ) which generates an electrical signal which depends on whether a finger touches the sensor or not. 5. The method according to claim 4, wherein the sensor from a Capacitor exists that changes its electrical capacity, when a finger touches the feeler. 6. The method according to claim 1, wherein the chip card ( 2 ) comprises a comparator ( 7 ) which compares the electrical signal with a predetermined electrical signal. 7. The method of claim 1, wherein

• 1. the reader / recorder ( 3 ) generates a trigger signal (T);
• 2. the trigger signal (T) is transmitted to the chip card ( 2 );
• 3. the access authorization means for data exchange ( 13 ) is activated by hand and forwards the trigger signal (T) to an activation circuit of the chip card;
  and
  the forwarded trigger signal (T ') puts the chip card out of its idle state into a state in which data is being exchanged.

8. Data exchange control system comprising a contactless chip card ( 2 ) and a reader / recorder ( 3 ), in which

• 1. the chip card ( 2 ) comprises an access authorization means for data exchange ( 13 ; 14 );
• 2. the system activates a data exchange between the chip card ( 2 ) and the reading / recording device ( 3 ) within a communication area of the reading / recording device ( 3 ); and
• 3. includes means so that a data exchange of sensitive data between the chip card ( 2 ) and the reading / recording device ( 3 ) (only) takes place after the activation of the access authorization means for data exchange ( 13 ; 14 ).

9. System according to claim 8, wherein the access authorization means for data exchange ( 13 ; 14 ) allows that the data exchange (only) takes place within a predetermined period after its activation or during the duration of its activation. 10. System according to claim 8, wherein the access authorization means for data exchange ( 13 ; 14 ) is activated by the user of the chip card by hand. 11. The system of claim 8, wherein the Access authorization means for data exchange a sensor that gives an electrical signal generated, which depends on whether the sensor of one Finger is touched or not. 12. The system of claim 8, wherein the Access authorization means for data exchange Capacitor is its electrical capacity  changes when the capacitor touches a finger. 13. The system of claim 8, wherein the chip card ( 2 ) comprises a comparator that compares the digital representation of an electrical parameter of the access authorization means for data exchange ( 13 ; 14 ) with a reference value and the system exchanges data between the chip card ( 2 ) and the Reading / recording device ( 3 ) depending on the result of the comparison either blocked or allowed. 14. The system of claim 8, wherein a single integrated circuit is embedded in the chip card, which has the access authorization means for data exchange, a central unit ( 7 ), a fixed memory ( 6 ), a random access memory ( 5 ) and a connection bus ( 8 ) includes. 15. System according to claim 8, wherein the chip card ( 2 ) comprises an access authorization area. 16. The system of claim 15, wherein the access authorization area is a notch, in the vicinity of which the access authorization means for data exchange ( 13 ; 14 ) is embedded in the chip card ( 2 ). 17. The system according to claim 8, wherein the access authorization means for data exchange ( 13 ; 14 ) is a capacitor with two or more separate electrodes which are arranged near the access authorization area.