Classifications

• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
  • G06K19/00—Record carriers for use with machines and with at least a part designed to carry digital markings
  • G06K19/06—Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code
  • G06K19/067—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components
  • G06K19/07—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components with integrated circuit chips
  • G06K19/077—Constructional details, e.g. mounting of circuits in the carrier
• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07F—COIN-FREED OR LIKE APPARATUS
  • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
  • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
  • G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
  • G07F7/1008—Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
  • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
  • G06Q20/341—Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
  • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
  • G06Q20/355—Personalisation of cards for use
  • G06Q20/3552—Downloading or loading of personalisation data
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
  • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
  • G06Q20/357—Cards having a plurality of specified features
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
  • H04L41/02—Standardisation; Integration
  • H04L41/0246—Exchanging or transporting network management information using the Internet; Embedding network management web servers in network elements; Web-services-based protocols
• • G—PHYSICS
  • G05—CONTROLLING; REGULATING
  • G05B—CONTROL OR REGULATING SYSTEMS IN GENERAL; FUNCTIONAL ELEMENTS OF SUCH SYSTEMS; MONITORING OR TESTING ARRANGEMENTS FOR SUCH SYSTEMS OR ELEMENTS
  • G05B2219/00—Program-control systems
  • G05B2219/30—Nc systems
  • G05B2219/34—Director, elements to supervisory
  • G05B2219/34444—Web control system, with intelligent control components each with web server

Definitions

• the present invention relates to an on-board system having network interface means, and to a method for activating applications located in this on-board system.
• the method according to the invention is more particularly concerned with a user station provided with a "smart" card reader and connected to the Internet.
• the term "user station” must be understood in a general sense.
• the aforementioned station can in particular be constituted by a personal computer operating under various operating systems, such as WINDOWS or UNIX (both being registered trademarks). It can also consist of a workstation, a laptop or a card terminal, called a dedicated terminal.
• network includes any network comprising a set of servers linked together, in particular a planetary network in which information is transported from end to end. These are in particular the Internet network, any network in which data exchanges are carried out according to a protocol of the Internet type, private networks of companies or the like, called “intranet”, and networks extending them to the Internet. exterior, called “extranet”.
• terminal equipped with a smart card reader and connected to an Internet type network.
• a smart card-based application system generally includes the following main elements: - a smart card;
• a communication network namely the Internet network in the preferred application
• FIG. 1A schematically illustrates an example of architecture of this type.
• the terminal for example a personal computer, includes a smart card reader 3. This reader 3 may or may not be physically integrated into the terminal 1.
• the smart card 2 has an integrated circuit 20 including input connections -outlets are flush with the surface of its support to authorize a supply of electrical energy and communications with the terminal 1.
• the latter comprises circuits for accessing a network of RI data transmissions. These circuits depend, in particular, on the nature of the RI network and of the terminal 1.
• it can be a network card for a local type network or a modem to connect to a line dial-up telephone or to a digital integrated services network (“ISDN”), to connect to the Internet, for example via an Internet service provider ("Internet Service Provider" or "ISP", according to English terminology) .
• ISDN digital integrated services network
• ISP Internet Service Provider
• Terminal 1 naturally includes all the circuits and organs necessary for its proper functioning, and which have not been shown for the purpose of simplifying the drawing: central unit, random access memory and fixed memory, mass memory with magnetic disk, floppy drive and / or CédéRom, etc.
• the terminal 1 is also connected to conventional peripherals, integrated or not, such as a display screen 5 and a keyboard 6.
• the terminal l can be put in communication with servers connected to the RI network, of which only one, 4, is illustrated in FIG. 1.
• server is meant any information server capable of processing communication protocols, either to give access to documents, or to give access to machines.
• the access circuits 11 put the terminal 1 in communication with the servers 4 by means of special software 10, called browser.
• browser is meant any means offering the following functions:
• This browser function corresponds to that referred to by the English term "browser”.
• An SGML page contains presentation attributes, and links to other SGML documents, or "hyper-links" to the outside world, that is to say also URIs (from the English Unified Resource Identifier, or Universal resource identifier).
• the SGML language comprises in a manner known per se several dialects, including HTML, XML, and WML.
• the browser provides access to various applications distributed over the entire RI network, generally in a "client-server” mode.
• communications on networks are carried out in accordance with protocols meeting standards comprising several software layers. superimposed.
• communications are carried out according to protocols specific to this type of communications, which will be detailed below, but which also include several software layers.
• the communication protocol is chosen according to the application more particularly targeted: interrogation of "WEB” pages, file transfers, electronic mail (e-mel, or “e-mail” according to Anglo-Saxon terminology), forums or “news”, etc.
• FIG. 1B The logical architecture of the system comprising a terminal, a smart card reader and the smart card, is shown diagrammatically in FIG. 1B. It is described by the ISO 7816 standard, which itself comprises several sub-assemblies: - ISO 7816-1 and 7816-2, with regard to the dimensions and marking of the cards;
• FIG. 1B on the terminal side 1, only the layers meeting the ISO 7816-3 standard, referenced 101, and the "APDU” order manager (ISO 7816-4 standard), referenced 201 have been represented.
• the layers corresponding to ISO 7816-3 are referenced 200 and the "ADPU” order manager (ISO 7816-4 standard) is referenced 201.
• the applications are referenced A ⁇ , ... , A ⁇ , ..., A n ; n being the maximum number of applications present on the smart card 2.
• This game typically presents writing orders and reading orders.
• the format of the orders is known by the Anglo-Saxon abbreviation of "APDU” (for "Application Protocol Data Unit”). It is defined by the aforementioned ISO 7816-4 standard.
• a command “APDU” is noted “APD ⁇ r .co-7--7iand” and a response “APDU” is noted “APDU.response”.
• a ⁇ application is, for example, in the form of a piece of software, known as an "applet”, in the "JAVA” language (registered trademark), which will be called “cardlet” below.
• the selection of a particular "cardlet” A ⁇ is obtained using an "APDU” of the selection type ("SELECT"). Once this choice has been made, the "APDUs" which follow it are routed to this "cardlet”.
• a new "APDU SELECT" has the effect of abandoning the current application and choosing another one.
• the “APDU” manager software sub-assembly 201 makes it possible to choose a particular application A in the smart card 2, to store the application thus chosen, and to transmit and / or receive “APDUs” to and from this application.
• a smart card-based application system as illustrated by the architecture of FIG. 1B, the latter can be assigned various functions.
• card 3 cannot communicate directly with commercial browsers, except to modify the code of these.
• Current smart cards which moreover comply with the standards recalled above, have a hardware and software configuration which also does not allow direct communication with the Internet. In particular, they cannot receive and transmit data packets, according to one or the other of the protocols used on this type of network. It is therefore necessary to provide an additional piece of software, located in terminal 1, generally in the form of what is called a "plug-in", according to English terminology.
• This piece of software which bears the reference 12 in FIG. 1A, performs the interface between the browser 10 and the card 2, more precisely the electronic circuits 20 of this card 2.
• the host system associated with the card reader 3, that is to say the terminal 1 is also associated with a particular application.
• the host system associated with the card reader 3, that is to say the terminal 1 is also associated with a particular application.
• the invention therefore relates in particular to a method of activating applications located in a smart card by a browser of the so-called "WEB" type, making it possible to overcome the drawbacks of the known art, some of which have just been recalled .
• the smart card presents to the host system, that is to say the terminal, a model of virtual terminal, for example in the form of a page in "HTML" language (for "HyperText Markup Language "), or more generally in hypertext language, or even in the form of an" applet ", in” JAVA "language, which allows the user to choose a particular application among those available and offered by the card to chip.
• HTML HyperText Markup Language
• applet for "HyperText Markup Language ")
• JAVA JAVA
• the host system is seen as a peripheral of the smart card, and it makes available to it hardware resources, such as a display screen, a keyboard, etc.
• a specific communication software layer is provided in the smart card and its counterpart in the terminal.
• the term "specific” should be understood as specific to the process of the invention. Indeed, these layers of communications, called specific, are trivialized whatever the application considered. They are only involved in the two-way data exchange process between the smart card and the terminal, on the one hand, and the smart card and the network.
• the specific communication software layers notably comprise software components, called “intelligent agents", allowing in particular protocol conversions.
• agents paired in the respective specific communication layers associated with the terminal and the smart card. According to the method of the invention, sessions are established between paired agents.
• the method of the invention makes it possible to activate applications of conventional type, that is to say of the aforementioned "CGA” type, located in a smart card, without having to modify them in what whether it be.
• script translators which receive requests from a browser and translate them into "APDU” orders understandable by the "CGA” type application.
• the method of the invention makes it possible to manage applications of an unconventional type, without having to modify the architecture of the system. According to another characteristic, the method of
• 1 invention allows dynamic downloading of new applications in the smart card, traditional or not, as well as updating or deleting one or more applications.
• the subject of the invention is therefore an on-board system, equipped with a chip comprising information processing means and information storage means, and intended to cooperate with a network through a terminal, characterized in that that he understands:
• network interface means arranged to cooperate with paired network interface means, located in the terminal, so that the on-board system constitutes an information server on the network;
• application interface means arranged to establish a correspondence between instructions circulating on the network and assigned to at least one application stored in the on-board system (these instructions notably emanating from a browser or intended for a browser), and instructions for exchanging information between said network interface means and said application.
• the invention also relates to a method for activating at least one application stored in an on-board system, equipped with a chip comprising information processing means and information storage means, and intended to cooperate with a network through of a terminal, characterized in that it uses an on-board system comprising network interface means, arranged to cooperate with paired network interface means, located in the terminal, so that the embedded system constitutes an information server on the network, and application interface means, arranged to establish a correspondence between instructions circulating on the network and assigned to at least one application stored in the embedded system, and instructions information exchange between said network interface means and said application, and in that it comprises the following phases:
• the invention also relates to a method of activating at least one application located in a smart card connected to a terminal, called local, provided with a reader of said smart card, by means of a browser. , characterized in that it comprises at least the following phases: a / a first preliminary phase consisting in implanting, in said smart card, a first specific piece of software, forming an interface with at least said applications, recorded in the smart card chip; b / a second preliminary phase consisting in installing, in the terminal, a second specific piece of software forming an interface with at least said browser;
• said first and second pieces of specific software also comprise at least one pair of first paired software entities, each of said entities cooperating with one another so as to allow the establishment of an exchange session bidirectional data between said terminal and said smart card, so that said smart card offers the functionality of an information server;
• a third preliminary phase consisting of implanting in said smart card a second software entity capable of interpreting a sequence of instructions and translating it into a sequence of orders, said second software entity cooperating with said applications and said second specific piece of software;
• FIG. 1A and 1B schematically illustrate the hardware and logic architectures, respectively, of an example application system based on smart card according to the known art,
• FIG. 2 schematically illustrates an example of a smart card-based application system according to the invention, the latter acting as a "WEB" server;
• FIG. 3 illustrates an exchange between terminal and smart card in the form of a menu page in "HTLM" language
• - Figure 4 illustrates in a simplified way the logical architecture of a system in which the smart card comprises intelligent agents
• FIG. 5A to 5D illustrate architectures of systems according to the invention, according to several embodiments, in which the smart card comprises intelligent agents translating scripts;
• FIG. 6 illustrates an example of a form transmitted to the smart card by the terminal.
• FIG. 7 schematically illustrates the main phase of exchanges between a browser and a smart card according to the method of the invention.
• OSI Open System Interconnection
• ISO Open System Interconnection
• a given layer offers its services to the layer immediately above it and requires other services from the layer immediately below, via appropriate interfaces.
• Layers communicate using primitives. They can also communicate with layers of the same level. In some architectures, one or the other of these layers may be nonexistent.
• FIG. 2 An example of such an architecture is shown diagrammatically in FIG. 2.
• the elements common to FIG. 1 have the same references and will only be re-described as necessary.
• FIG. 1 screen 5 and keyboard 6, for example.
• FIG. 1 screen 5 and keyboard 6, for example.
• the terminal 1 comprises circuits 11 for accessing the RI network, consisting for example of a modem for the Internet network or of a network card for a local network. These circuits include the lower software layers Ci and C 2 , corresponding to the "physical" and "data link” layers.
• the upper layers C 3 and C4 have also been shown, corresponding to the "network addressing"("IP”, in the case of the Internet) and "transport”("TCP") layers.
• the upper application layer ("http”, “ftp”, "e-mail”, etc.) has not been shown.
• the interface between the lower layers, Ci and C2, and the upper layers, C 3 and C 4 is constituted by a software layer generally called "low layer driver".
• the upper layers, C 3 and C 4 rely on this interface and are implemented by means of libraries of specific functions or network libraries 14, with which they correspond.
• libraries of specific functions or network libraries 14, with which they correspond.
• TCP / IP is implemented by means of libraries known as “sockets”.
• This organization allows a browser 10 (FIG. 1) to ask requests to a server 4 (FIG. 1), for consulting "WEB” pages (“HTTP” protocol), for transferring files (“FTP” protocol) or sending electronic mail (“e-mail” protocol), in a completely classic way.
• HTTP HyperText Transfer Protocol
• FTP File Transfer Protocol
• e-mail electronic mail
• the terminal 1 also includes a card reader 3, integrated or not.
• the card reader also includes two layers bass, CCi (physical layer) and CC 2 (data link layer), playing a similar role to layers Ci and C 2 .
• the software interfaces with the layers CCi and CC2 are described, for example, by the specification "PC / SC"("part 6, service provider").
• the layers themselves, CCi and CC2 are in particular described by ISO standards 7816-1 to 7816-4, as has been recalled.
• An additional software layer 16 forms the interface between the application layers (not shown) and the lower layers, CCi and CC2.
• the main function assigned to this layer is a multiplexing / demultiplexing function.
• the communications with the smart card 2a are carried out according to a paradigm similar to that used for the manipulation of files in an operating system of the type "UNIX” (registered trademark): OPEN ("OPEN”), READ (“READ "), WRITE, CLOSE, etc.
• OPEN OPEN
• READ READ
• WRITE WRITE
• CLOSE CLOSE
• CCai physical layer
• CCa 2 data link layer
• a first characteristic provision is made, on either side, that is to say in the terminal 1 and in the smart card 2a, two layers of specific protocols: 13 and 23a, respectively, corresponding to means network interface.
• the specific layer 13 interfaces with the "low layer drivers” 15, with the libraries 14 of the network layers, C 3 and C4, and with the protocol layers of the card reader 3, that is to say the lower layers, CCi and CC 2 , via the multiplexing layer 16.
• the specific layer 13 allows the transfer network packets from and to the smart card 2a.
• it adapts existing applications such as the Internet browser 10 (FIG. 2), electronic mail, etc., for uses using the smart card 2a.
• a module, 130 or 230a for transferring information blocks between the layers 13 and 23a, via the conventional layers CCi, CC 2 , CCai and CCa 2 ; - one or more pieces of software, called "intelligent agents", 132 or 232a, which perform, for example, protocol conversion functions;
• a specific configuration management module 131 and 231a, respectively; module which can be likened to a particular intelligent agent.
• level two data link layers
• CC2 and CCa 2 ensure the exchange between the smart card 2a and the terminal 1.
• These layers are responsible for the detection and possible correction of transmission errors .
• Different protocols can be used, and as non-exhaustive examples the following: - the ETSI GSM 11.11 recommendation;
• HDLC High-Level Data Link Control procedure
• the ISO 7816-3 protocol will preferably be used, in block mode.
• each protocol layer is associated with a certain number of primitives which allow the exchange of data between layers of the same level and from one layer to another.
• the primitives associated with the layer of level two are of the type "data request” ("Data .request”) and “sending of data” by the card (“Data .response”), as well as “ data confirmation "(” jData.co.n.fir-71 "), etc.
• the layers 13 and 23a are responsible for the dialogue between the smart card 2a and the host, that is to say the terminal 1. These layers allow the exchange of information between a user (not shown) of terminal 1 and the smart card 2a, for example via drop-down menus in the form of hypertext in "HTML" format, as will be shown with regard to FIG. 3. They also allow the establishment of a configuration suitable for the transmission and / or reception of data packets.
• the layers include three separate entities.
• the first layer, 130 or 230a is essentially constituted by a software multiplexer. It allows the exchange of information between the smart card 2a and the host terminal 1, in the form of protocol data units. It plays a role similar to that of a data packet switch. These units are issued or received via level 2 layer (data link layer).
• This particular communication protocol makes it possible to put at least one pair of "intelligent agents" into communication.
• the first agent of each pair, 132 is located in layer 13, on the terminal side 1, the second, 232a, is located in layer 23i, on the smart card side 2a.
• a link between two "intelligent agents" is associated with a session.
• a session is a two-way data exchange between these two agents.
• An intelligent agent can perform all or part of the functions of the layers of levels three and four, depending on the configuration implemented by the terminal 1.
• a particular intelligent agent is advantageously identified by an integer, for example on 16 bits (number between 0 and 6535). This identifier is used, for example, in a protocol data unit constituting a destination reference and a source reference.
• agents of the "server” type which are identified by a fixed reference
• agents of the "client” type which are identified by a variable reference, delivered by the management module. configuration, 130 or 230a.
• the process for opening a session is usually as follows: an intelligent agent of the "client” type opens the session to an intelligent agent of the "server” type.
• Layers 130 and 230a manage tables (not shown) which contain the list of intelligent agents present, on the host terminal side 1 and smart card 2a.
• Intelligent agents are associated with particular properties or attributes. To fix ideas, and by way of nonlimiting example, the following six properties are associated with intelligent agents:
• agent who initiates a session
• agent who receives a session request.
• Intelligent agents are used to exchange data (hypertext for example), but also to trigger network transactions.
• the configuration management modules, 131 and 231a can be assimilated, as indicated, to particular intelligent agents.
• the module 131 on the host terminal side 1, manages in particular information relating to the configuration of this terminal (operating modes), list of the other agents present, etc.
• the module 231a on the smart card side 2a, has similar functions. These two agents can be put in communication with each other to establish a session.
• the smart card 2a offers the host system, that is to say the terminal 1, a model of virtual terminal. To do this, the smart card 2a behaves like a "WEB" server.
• the smart card 2i is "addressed” by the browser 10. It then transmits to it a "WEB” type page in "HTML" language, an “applet” or any other piece of software.
• the "WEB” page can be in the form of a home page giving a choice of possible applications and / or hyperlinks to external servers.
• the smart card 2a is advantageously “addressed” by using a "URL” address (for "Universal Resource Location") defining a loopback on the terminal 1 itself, and not a pointing on an external server .
• the structure of this "URL” is usually as follows: http://127.0.0.1:8080 (1), in which 127.0.0.1 is the loopback "IP" address and 8080 is the port number.
• FIG. 3 schematically illustrates this process.
• the smart card 2a in response to the request from the browser 10, the smart card 2a has a page P in "HTML" language, page displayed for example on the display member 5 of the terminal 1.
• the page P which we will describe as reception, can display, in the usual way, different graphic or text elements, but includes at least a certain number of hyperlinks to external servers, Hl ⁇ , Hl 2 ⁇ ••• / Hl ⁇ , at i and n being arbitrary numbers, n represents the maximum number of possible choices. It naturally depends on the smart card 2a inserted in the reader 3, and on the maximum number n of application A ⁇ (FIG. 1B) present on this card. The choices presented may depend on the rights which are granted to the owner of the smart card 2a: subscription subscribed to services, level of authorization, etc.
• the process described uses all or part of the standard communication layers (not shown), as well as the specific layers, 13 and 23a.
• Each hyperlink points to an external "URL” resource.
• the structure of the "URL” can be as follows: http: //127.0.0.1.8081/www.NOM.com/index.html (2), in which 127.0.0.1 is the "IP” address and 8081 is the port number, "NOM.com” the name of a website for a company or other entity, in accordance with the rules of naming usually used, and "index.html” the home page of this site.
• suffix ".corn” a priori used for commercial organizations, there are other suffixes, such as “.fr", ".gov”, etc. , which are associated with the location of the website or the nature of the organization.
• FIG. 4 illustrates in a simplified manner the logical architecture of a system of which the smart card 2a comprises intelligent agents, of which only two have been shown: an intelligent agent of the type not precisely defined 232a ⁇ and an intelligent agent 232a ⁇ , type called "WEB".
• the logical stack comprises, the lower protocol layers, referenced 200a, meeting ISO standards 7816-3 (FIG. 2: CCai and CCa 2 ), the "APDU" command manager 201a, and the packet multiplexer 230a, the latter being interface to intelligent agents, in particular the intelligent agent "WEB" 232a ⁇ -
• the first stack includes the organs 11 (FIG. 2: Ci and C 2 ) for accessing the network (OSI standards 1 and 2) and the "TCP / IP" protocol layers (FIG. 2: C 3 and C4), referenced 100 These latter layers are interfaced with the "WEB" browser 10.
• the other stack includes the lower protocol layers, referenced 101, meeting the ISO 7816-3 standards (FIG. 2: Ci and C 2) the order manager 101 "APDU" and the packet multiplexer 102, the latter being interface with intelligent agents, of which only one 132 is shown.
• the latter which will be assumed to be "network type" can also communicate, on the one hand with the browser 10, via the "TCP / IP” layers 100, on the other hand with the Internet network RI, via these same layers “TCP / IP” 100 and member 11, for access to the RI network.
• the "APDU" order manager 201a also interfaces with one or more level layers applications, which we will simply call applications. These applications are, as has been indicated, applications of the conventional type, which have been called “cardlets”.
• the "WEB server" function provided by the smart card 2a, can be performed by combining the intelligent agent "WEB" 232a ⁇ in the smart card and the network agent 132 in the terminal 1 .
• the smart card 2a therefore clearly presents the "WEB” server functionality.
• any conventional application, Ai to A n of the aforementioned "CGA” type, can be activated through this "WEB” server, or by the "WEB” browser.
• the applications, Ai to An do not need to be rewritten and are implemented as they are.
• these applications remain accessible to a terminal of the conventional type, that is to say according to the known art.
• WEB offered by the smart card, includes application interface means, corresponding to a mechanism similar to the so-called “CGI” function (for "Common Gateway
• CGI is a specification for the implementation, from a “WEB” server, of applications written for the "UNIX” (registered trademark), "DOS”, or "WINDOWS” (registered trademark) operating systems.
• UNIX registered trademark
• DOS registered trademark
• WINDOWS registered trademark
• an "HTTP" request for a "URL” address of the type:
• host refers to a host system (generally remote)
• WEB writeback server
• command script of the "CGI” type named "xxx” and present in the " cgi-bin "from this host system.
• name of the directory can be a priori arbitrary, by convention, it is the name given to the directory storing scripts of type "CGI”.
• a script is a series of instructions from the operating system of the host system, the final result of which is transmitted to the "WEB" browser issuing the above request.
• Different languages can be used to write this script, for example the language "PERL” (registered trademark).
• the request is usually displayed on a computer screen in the form of a form included in a "HTLM” page.
• the "HTLM” language allows you to translate a form into a "URL” address.
• the form includes one or more fields, mandatory or not, which are filled in by a user using the usual input methods: keyboard for text, mouse for checkboxes or so-called “radio” buttons, etc.
• the content of the form (as well as possibly so-called “hidden” information and instructions) is sent to the "WEB” server.
• the "HTLM” code on the page describes the physical structure of the form (frame, graphics, color, and any other attribute), as well as the structure of the data fields to be entered (name, length, type of data, etc.).
• Transmission can take place in two main types of formats.
• a first format uses the so-called "POST” method and a second uses the so-called "GET” method.
• Format type information is present in the code of the form page.
• the example form has two numeric fields, Ch ⁇ and Ch2, entitled “Certificate” and Debit “, as well as two buttons “radio”, i> ⁇ and b2, entitled “Submit” and “Reset”, respectively. It also includes, on the right of the figure, the usual function called "elevator”. This form is displayed on the display screen (figure 1: 5) of terminal 1.
• a third step the user completes the two numeric fields, C ⁇ i and Ch 2 .
• both fields must be completed.
• Ji the user transmits the content of the form.
• £ 2 it erases all the data displayed, either to correct them or to enter a new series.
• the data is sent and received by the network agent 132. It is recalled that the "WEB" browser is not necessarily located in the local terminal 1. It can be either in this one ci or located in any system connected to the network
• the data then passes through the packet multiplexer 130 (which constitutes one of the components of the specific layer 13, terminal side 1), the "APDU" order manager 102, the protocol layers 101, to be transmitted to the card at bullet 2a. They then pass through the protocol layers 200a, the "APDU” order manager 201a, the packet multiplexer 230a to be received by the agent.
• the data sent to the "WEB” agent 232a ⁇ is transported conventional per se, in the form of "APDU” orders intended for the particular application "Packet multiplexer".
• the “APDU” order manager 201a selects this application in a manner very similar to the other “CGA” type applications present in the smart card 2a, referenced Ai to A n .
• the packet multiplexer 230a is seen by the "APDU” order manager 201a as an ordinary "CGA” application.
• the "HTTP" request is then analyzed by the "WEB” agent 232a ⁇ which detects a reference to a particular directory, which will be called hereinafter by convention "cgi-smart", on the one hand, and to an application particular, for example "pme” in the case of the example described.
• the full path is therefore, in this case "cgi-smart / pme”.
• the above entity designates a particular script associated with an equally particular application ("PME" in this case).
• the script is then interpreted by an intelligent agent called “Script translator agent”, which will be called “ATS” below.
• This translation can be carried out in different ways: a / by the "WEB” agent 232a ⁇ itself, which in this case is provided with a double capacity; b / by a single script agent capable of translating all the scripts present in the smart card 2a; c / by a dedicated scripting agent which will be called “ATSD” below (one per script); or d / by an agent "APDU” 2010a of the order manager "APDU” 201a, which is equipped, in this case, with a double capacity.
• the "APDU” agent 2010a is a component of the "APDU” order management layer 201a.
• the latter is a layer capable of centralizing all the "APDU” orders sent and / or received by the system, from select applications, from Ai to A, but also to offer an intelligent agent type interface. It is therefore capable, according to one of the characteristics of the method, of communicating with all the intelligent agents of the system (via sessions), whether these agents are located in the terminal 1 or the smart card 2a.
• FIG. 5A illustrates an example of architecture for which the translating agents are of the "ATSD" type. They are referenced ATS1 to ATSn and associated with the applications Ai to A - The selected application being assumed to be the application A ⁇ , the session is established between the "WEB" agent 232a ⁇ and the agent ATS ⁇ .
• a script translator agent generates a sequence of "APDU” orders.
• a session is opened between the translating agent, for example the ATS ⁇ agent, and the "APDU” agent 2010a.
• the orders are then issued to the "APDU” agent 2010a.
• the "APDU” order manager 201a selects the "CGA” A ⁇ application (for example the "PME” application) and transmits to it the "APDU” orders, translated and therefore conventional orders, which it is able to understand. This application is therefore correctly activated, without having to modify or rewrite it.
• the responses of the "CGA” A ⁇ application are transmitted to the "APDU” order manager 201a, to the "APDU” agent 2010a, then again to the ATS agent ⁇ (and more generally to the script translator agent).
• the script translator for example the ATS ⁇ agent in the example in FIG. 5A, creates a page in "HTML" language and transmits it via the different layers borrowed by the initial request, but in reverse, this to be presented on the display screen 5 ( Figure 1).
• the smart card 2a must be able to continue to be used in conjunction with a conventional terminal.
• the smart card no longer plays the role of "WEB” server and the "intelligent agents” functionalities are not used. It is the same for the specific layer 23a ( Figure 2).
• These various components remain “transparent” vis-à-vis the exchanges between terminal and smart card. These exchanges are carried out in a purely conventional manner, by exchange of "ADPU" orders between an application located in the terminal and an application located in the smart card, as has been explained with reference to FIGS. 1A and 1B.
• FIG. 7 schematically summarizes the main stages of the process which has just been described: a / transmission via the Internet network RI (or from the local terminal: in both cases using a conventional browser 10) of a request
• HTTP referenced RQ
• b response from the “WEB” server of the smart card 2a, in the form of a form, referenced FO; c / transmission of the completed form, in the form of a new RQ request; and d / response in the form of a page "HTLM”, referenced PR.
• the answer could also consist in the transmission of a file, or a piece of software or "Applet”.
• the system can accommodate unconventional applications. By this is meant applications which do not need to exchange "APDU" orders.
• This type of application which does not meet the aforementioned ISO standards, is not accessible by conventional terminals, but is, without requiring any additional modification of their architecture, by terminals in accordance with the invention, that is to say that is to say comprising the specific layer 13.
• FIG. 5B schematically illustrates an example of an architecture conforming to this additional variant.
• the applications have been referenced A'i to A ' ⁇ .
• ATSDA Dedicated and Autonomous Script Translator Agent
• this agent can be either the "WEB” 232al agent, with double capacity, or an "ATSDA” agent, unique for the whole system, or the "APDU” agent 2010a, with a double capacity, or again, as illustrated in FIG. 5B, a plurality of "ATSDA” agents, referenced ATS'l to ATS'n.
• each "ATSDA” agent is associated with a single application.
• the terminal 1 does not undergo any modification of architecture and it can communicate either with smart cards comprising non-conventional applications or with entirely conventional smart cards.
• the smart card 2a itself comprises the conventional protocol layers, it is possible to store therein, both conventional applications, of the "CGA" type, accessible according to the process explained with reference to FIG. 5A or by a conventional terminal, and unconventional applications, accessible only by the variant of the method which has just been explained.
• FIG. 5C only the components of the smart card part 2a have been shown, it being understood that the terminal must necessarily have an architecture in accordance with the invention (see FIG. 2, for example) in order to be able to benefit from these advantageous features. It is indeed necessary to use the "WEB" server function offered by the smart card 2a, according to one of the characteristics of the method of the invention. To do this, the terminal must therefore include the specific layer 13 ( Figure 2).
• the general architecture of the smart card 2a is similar to that described with reference to FIG. 5A, and the common components will only be re-described as necessary.
• a piece of software 7 the function of which is to monitor downloads. It should be understood that the "downloader” 6 and “download monitoring” 7 functions can be confused by modifying the piece of software 6.
• the additional piece of software 7 "warns" the order manager "APDU” when it detects the download of a new application, the Aj application in this case. The latter then saves this modification. He can therefore now send the Aj application.
• the specific layer is updated, in particular the component 231a, configuration manager of the smart card 2a. It is further necessary to update the translating agent "ATS", “ATSD”, or “ATSDA”, as the case may be, if it is a single agent, or to create a new ATSj, associated with the new Aj application. The information required for this update is downloaded at the same time as the new Aj application.
• Updates or deletions of applications can be done using the same mechanism.
• the smart card 2a When the smart card 2a is again connected to a terminal according to the invention, the latter can be notified of the new possibilities of the smart card or of modifications, by sending a "HTLM" page, similarly to what has been described with reference to FIG. 5A.
• a specific application is provided in the smart card 2, which will be referenced by AQ convention, associated with a dedicated script translator ATSo.
• the translation can also be carried out centrally, as previously indicated ("WEB" agent, etc.).
• This Ao application is assigned the role of downloading and monitoring downloaded, modified or deleted applications.
• 1 • ATSo translator agent interacting with the Ao application, generates a PMAJ page, which will be called update page.
• This can be in the form of a menu indicating the applications present in the smart card 2a, with possibly information on their version and / or the date of downloading or modification, menu transmitted automatically or on request. of browser 10 of terminal 1.
• the downloading, updating or deletion of applications can be carried out directly from the browser 10, using the "WEB" server function of the smart card 2a.
• the necessary data are transmitted by exchanges between the terminal 1 and the smart card 2a, according to the usual process.
• the Ao application then takes care of updating the configuration information of the smart card 2a, in particular by interacting on the "APDU" order manager (not shown in FIG. 5D), as well as possibly updating or create the script translator associated with a new application, or a modified application.
• the "APDU" order manager can then send the new downloaded application.
• the Ao application and its script translator therefore constitutes a complete service for updating applications, an additional service offered by the smart card 2a. It should be clear that this update service remains compatible with the existing one.
• the smart cards 2a can continue to be downloaded from an external device EXT, on the other hand, the applications downloaded or updated by means of the browser 10, can be of a conventional "CGA" or unconventional type. In the first case, they remain compatible with the terminals of the known art.
• the invention applies in particular to an electronic purse service, but cannot in any case be limited to this single application.

Landscapes

• Engineering & Computer Science (AREA)
• Business, Economics & Management (AREA)
• General Physics & Mathematics (AREA)
• Physics & Mathematics (AREA)
• Theoretical Computer Science (AREA)
• Computer Networks & Wireless Communication (AREA)
• Microelectronics & Electronic Packaging (AREA)
• Accounting & Taxation (AREA)
• Strategic Management (AREA)
• General Business, Economics & Management (AREA)
• Signal Processing (AREA)
• Computer Hardware Design (AREA)
• Computer And Data Communications (AREA)
• Information Transfer Between Computers (AREA)

Applications Claiming Priority (3)

Publications (1)

Family

ID=9542260

Family Applications (1)

Country Status (10)

Families Citing this family (24)

Family Cites Families (13)

• 1999
  • 1999-02-19 FR FR9902056A patent/FR2790629A1/fr active Pending
• 2000
  • 2000-02-17 US US09/673,420 patent/US6839756B1/en not_active Expired - Fee Related
  • 2000-02-17 JP JP2000600248A patent/JP3913984B2/ja not_active Expired - Fee Related
  • 2000-02-17 TW TW089102697A patent/TW462029B/zh not_active IP Right Cessation
  • 2000-02-17 CN CNB008003653A patent/CN1179307C/zh not_active Expired - Fee Related
  • 2000-02-17 EP EP00906418A patent/EP1074007A1/fr not_active Withdrawn
  • 2000-02-17 CA CA2329044A patent/CA2329044C/en not_active Expired - Fee Related
  • 2000-02-17 KR KR1020007011619A patent/KR100641241B1/ko not_active IP Right Cessation
  • 2000-02-17 AU AU28099/00A patent/AU775230B2/en not_active Ceased
  • 2000-02-17 WO PCT/FR2000/000400 patent/WO2000049584A1/fr active IP Right Grant

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events