Classifications

• • G—PHYSICS
  • G07—CHECKING-DEVICES
  • G07F—COIN-FREED OR LIKE APPARATUS
  • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
  • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
  • G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
  • G07F7/1008—Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
  • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
  • G06Q20/341—Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• • G—PHYSICS
  • G06—COMPUTING; CALCULATING OR COUNTING
  • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
  • G06Q20/00—Payment architectures, schemes or protocols
  • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
  • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
  • G06Q20/357—Cards having a plurality of specified features

Definitions

• the invention relates to the internal architecture of a smart card integrating various types of peripheral.
• the invention proposes in particular to increase the level of security of such a card and to facilitate its use.
• Smart cards with and / or contactless are intended for carrying out various operations such as, for example, banking operations, telephone communications, various identification operations, or operations of the telebilietic type.
• the majority of chip card manufacturing methods are based on the assembly of an integrated circuit chip in a subassembly called a micromodule which is connected to a communication interface and inserted, that is to say placed in a cavity formed in the card body, using techniques known to those skilled in the art.
• the integrated circuit chip is a secure component capable of communicating only with a card reader.
• Contact cards include metallizations flush with the surface of the card, arranged at a precise location on the card body, defined by the usual standard ISO 7816. These metallizations are intended to come into contact with a read head of a reader for electrical data transmission.
• Contactless cards include an antenna for exchanging information with the outside world thanks to an electromagnetic coupling between the card's electronics and a receiving or reading device. This pairing can be done in read mode or in read / write mode, and data transmission takes place by radio frequency or microwave.
• hybrid cards or "co bicards” which include both metallizations flush with the surface of the card and an antenna embedded in the body of the card. This type of card can therefore exchange data with the outside either in contact mode or without contact.
• devices that can be associated with a smart card. This is for example a display, a keyboard, a loudspeaker or a piezoelectric vibrator, a radio frequency communication interface, or components for measuring the environment such as such as temperature, ionizing radiation or other, or biometric measurement components such as a fingerprint sensor, microphone and voice processing system, or the like.
• These peripherals must necessarily communicate with the integrated circuit chip of the card in order to exchange data.
• the integrated circuit chips used in smart cards are secure components designed to establish communication only with a card reader.
• the present invention provides another solution for integrating peripherals into a smart card which allows standard secure components to be used.
• the invention proposes to integrate a device manager provided with a reader function in order to provide the interface with the secure component of the card.
• This reader function can be identical to those performed by standard smart card readers.
• the card's external communications interface is shared between an external reader when the card is used like a conventional smart card, and a reader function integrated in the device manager.
• the latter therefore presents itself as a card reader for the secure component.
• the invention more particularly consists in a portable electronic device, of the smart card type, integrating at least one peripheral and comprising at least one secure component and an external communications interface, characterized in that it also comprises a peripheral manager. comprising at least one smart card reader function for communicating with the secure component.
• the device management function is implemented by an executable program stored in the secure component.
• the secure component comprises a plurality of executable programs intended for the implementation of different applications, each executable program comprising a specific part of instructions intended to be executed by the device manager.
• the device manager constitutes an interface between the secure component and the user, and includes a function for selecting the applications allowing the latter to choose the application to be implemented.
• the secure component and the device manager are connected to the parallel communication interface.
• the device includes means for disconnecting or inhibiting the device manager when the external communication interface is requested to communicate with the secure component.
• the secure component has two input-output communication ports, a first port for communication with the external interface and a second port for communication with the device manager.
• the secure component and the device manager are connected to the serial communication interface, the device manager managing the transmissions. data between the external interface and the secure component.
• the device manager includes a transparent operating mode when the external communications interface is requested to communicate with the secure component.
• the peripherals are chosen from a display, a keyboard, a biometric sensor.
• the present invention makes it possible to produce a smart card integrating peripherals while using standard secure components, which represents a significant cost saving.
• the architecture proposed by the present invention makes it possible to use different secure components corresponding to different applications from the same device manager on the same standard card.
• the smart card obtained according to the present invention retains all of its standard characteristics and can be used like a conventional smart card.
• Figure 1 is a diagram of the architecture of the card according to a first embodiment of the invention
• FIG. 2 is a diagram of the architecture of the card according to a second embodiment of the invention.
• FIG. 3 is a diagram of the architecture of the card according to a third embodiment of the invention.
• the applications of the invention are multiple and variable.
• the most direct applications can be, for example, an electronic wallet with display of the balance on a screen, or a smart card for medical records with direct and rapid display of certain data such as blood group or vaccination record.
• the peripheral or peripherals are controlled by a peripheral manager which constitutes an interface with the secure component of the card while behaving in its respect like a card reader.
• the device manager includes a microprocessor for managing signals from the devices. For example, on a smart card integrating a screen and a keyboard as peripherals, it is possible to display information on the screen by pressing keys on the keyboard. The device manager then receives a signal from the keyboard that it processes by searching for the corresponding information in the secure component.
• the device manager indeed includes an executable program which transforms the signals coming from the peripherals into a smart card command code.
• the device manager therefore behaves like a smart card reader with regard to the secure component.
• the above executable program is stored in the secure component.
• the data permanently stored in the device manager can advantageously be limited to the instructions necessary for reading the file of the secure component containing said executable program, as well as to the instructions for launching the execution of this contained program. in this file.
• the device manager may be desirable to provide the device manager with a program allowing in particular the keyboarding of a digital code, or the calculation of a biometric or other signature.
• the device manager may be advantageous to have the device manager execute a new biometric signature calculation algorithm or to modify the nature of the messages displayed on a screen.
• the secure component comprises a plurality of programs executables capable of implementing the various applications and transmitting the appropriate instructions to the device manager.
• the device manager can advantageously serve as an interface between the secure component and the user so that the latter chooses the application to be implemented. To this end, it includes a program for selecting the different applications.
• the secure component comprises one file per application, each file containing a specific executable program for managing the peripherals.
• the interface between the secure component of the card and the device manager can be organized in different ways, but nevertheless still using the signals available on a standard secure component.
• Figure 1 illustrates schematically the architecture of the card according to a first embodiment of the invention.
• the device manager and the secure component are connected to the card's communication interface in parallel.
• the communication interface consists of metal contact pads for application to a contact smart card. Nevertheless, an equivalent scheme can be envisaged for an application to a contactless smart card, the communication interface then being constituted by an antenna.
• the device manager has a smart card reader function in order to read and write data to memory space on the card. Preferably, when the card is inserted into an external smart card reader, the device manager immediately disconnects from the contacts so as not to interfere in the transmission of external data.
• the device manager includes means for detecting (detecting) the connection to an external reader, for example by detecting the supply voltage; as well as means for disconnecting the contacts, for example by means of a signal coming from the detection means of an external reader and acting on the logic gates which will disconnect it from the contacts.
• This embodiment advantageously allows the use of a standard secure component without any modification.
• FIG. 2 schematically illustrates the architecture of the card according to a second embodiment of the invention.
• the device manager and the secure component are also connected to the communication interface of the card in parallel.
• This embodiment uses a second input / output port generally present on secure components but rarely used.
• This second input / output port constitutes a direct interface between the secure component and the device manager. It is however necessary to integrate into the secure component, at the time of its conception, the microcode necessary for the management of this second input / output port.
• This embodiment allows greater data security because the secure component controls the information circulating at the interface with the device manager.
• Such an architecture is also more flexible because it allows direct control of the information sent from the secure component to the peripherals.
• FIG. 3 schematically illustrates the architecture of the card according to a third embodiment of the invention.
• the device manager and the secure component are connected to the communication interface of the serial card, the device manager filtering the commands of the secure component.
• This embodiment allows a simplification of the external interface of the smart card. Indeed, it is no longer necessary to share access to the secure component between the external communications interface and the device manager, the latter operating in a transparent mode when the card is inserted in an external reader.
• detection means such as those previously described can be used.
• means are provided ensuring a direct connection between the secure component and the contacts, these means being controlled by a signal coming from the above detection means in response to the detection of an external reader.
• this architecture is particularly advantageous in the context of a contactless smart card application when the card's external interface is of the radio frequency type. Indeed, the device manager being located between the external interface and the secure component, it may be able to manage the interruptions coming from any device and from an external communication terminal according to predetermined priorities.

Landscapes

• Engineering & Computer Science (AREA)
• Business, Economics & Management (AREA)
• Physics & Mathematics (AREA)
• General Physics & Mathematics (AREA)
• Microelectronics & Electronic Packaging (AREA)
• Computer Networks & Wireless Communication (AREA)
• Accounting & Taxation (AREA)
• Strategic Management (AREA)
• General Business, Economics & Management (AREA)
• Theoretical Computer Science (AREA)
• Storage Device Security (AREA)
• Credit Cards Or The Like (AREA)

Applications Claiming Priority (3)

Publications (1)

Family

ID=9548636

Family Applications (1)

Country Status (5)

Cited By (1)

Families Citing this family (21)

Family Cites Families (4)

• 1999
  • 1999-07-28 FR FR9909818A patent/FR2797074B1/fr not_active Expired - Fee Related
• 2000
  • 2000-07-13 AU AU67057/00A patent/AU6705700A/en not_active Abandoned
  • 2000-07-13 EP EP00954696A patent/EP1210689A1/de not_active Withdrawn
  • 2000-07-13 CN CN 00810934 patent/CN1365484A/zh active Pending
  • 2000-07-13 WO PCT/FR2000/002046 patent/WO2001008087A1/fr not_active Application Discontinuation

Non-Patent Citations (1)

Also Published As

Similar Documents

Legal Events