EP1364349A1

EP1364349A1 - Method for secure storing of personal data and for consulting same, chip card, terminal and server used to carry out said method

Info

Publication number: EP1364349A1
Application number: EP02704842A
Authority: EP
Inventors: Murielle Rose
Original assignee: Gemplus SCA; Gemplus Card International SA; Gemplus SA
Current assignee: Gemplus SA
Priority date: 2001-02-20
Filing date: 2002-02-15
Publication date: 2003-11-26
Also published as: FR2821188A1; US20060118614A1; WO2002067212A1; FR2821188B1

Abstract

The invention relates to a method for the secure storing of personal data and for consulting same. According to the invention, the method comprises the following steps: using a terminal that is connected to a chip card reader and fitted with a man-machine interface comprising a means for displaying and inputting data; using a browser that can dialogue with a remote server by means of a communication network, from said terminal; viewing pages of data using said display means; inputting of personal data by a user in response to the pages displayed and storing said data locally for consultation and remotely on the server for saving.

Description

METHOD FOR SECURE STORAGE OF PERSONAL DATA AND

CONSULTATION, CHIP CARD, TERMINAL AND SERVER FOR

THE IMPLEMENTATION OF THE PROCESS.

The invention relates to a method for secure storage of personal data and for consultation.

The invention also relates to smart cards intended for communicating with a remote server through a communication network <via a terminal linked to a smart card reader. It also relates to telecommunications terminals and in particular mobile telephones equipped with a subscriber identification smart card, each provided with a browser allowing dialogue with a server. Today an adult person has dozens of information which is personal or even confidential and which he may need at any time in his daily life. The number of information continues to increase with the emergence of new services or ^'new industrial products.

Among all personal information, we can mention bank account numbers, subscription numbers to services, secret codes or passwords and of course telephone numbers whose volume increases by the simple fact that it is it is becoming more and more common to attach a mobile phone number to a number on the fixed telephone network. The mass of confidential information that a person must manage today. keeps increasing.

A large number of people still use paper diaries to write down all of this information, including secret codes. It is clear that this solution is no longer suitable at all. to store confidential and even less secret information. Paper calendars can remain an interesting solution, of course insofar as personal information is only telephone numbers and this information does not require frequent modifications (updates) ^' .

However, for a few years now, we have seen portable electronic devices called Pers ^' onnal Digital Agenda PDAs which make it possible to memorize a large amount of information, in particular personal information. These devices allow a person to create a private file in which they go. be able to memorize all the personal information she wishes. A word from _. password is required to activate and decrypt ^'stored data.

Unfortunately, - these devices do not provide sufficient security because their operating system is an open operating system that is to say accessible and into which we can therefore introduce spyware (Trojan horse) or viruses , even if the data exchanged with the outside is encrypted.

The present invention aims to solve this problem.

To this end - the invention allow a user to enter personal data des- from a terminal linked to smart card reader using a browser that ^'may be present in the smart card and / or in the terminal, capable of ordering. display by the terminal of pages supplied by a server through a communication network and to order a backup. on the card, data possibly encrypted, entered. Furthermore the process

^• allow - to make a copy of the ^backup on the very simple and safe way server to the user. The user can thus, in the event of loss or theft of his' terminal - request that the server load his personal data on the new equipment. - Chip cards with application programs, currently being developed, are similar to a computer in that they have an operating system and one or more application programs that can be loaded or downloaded and of which execution is started by the operating system. The operating system is protected by the fact that it is stored in read-only memory

(ROM memory). The operating system is therefore not modifiable inside the card. Among the application programs executed (or interpreted) by the operating system, there is provided according to the invention a navigation program able to dialogue with ^' a server and able to provide pages for entering personal data of the user.

Advantageously, data entry is carried out online.

The subject of the present invention is therefore a method of secure storage of personal data and of consultation mainly characterized in that it comprises the following steps:. use a terminal linked to a smart card reader and provided with a home machine interface comprising a ^'display means and data entry, using a browser capable.de interact with a remote server through a communication network, from said terminal,

- display data pages with said display means,

- enter personal data of a user in response to the pages viewed and store them locally for consultation and remotely on the server for backup. According to another characteristic, the data pages are supplied by the server.

According to another characteristic, the data pages are provided during a communication and entry. . Data entry is carried out online, the session remaining open for the duration of the entry.

Personal data is stored locally ^' 5 on the smart card and a copy is saved on the server.

The backup of the copied remotely is performed substantially simultaneously with the local recording. Preferably, the. personal data is encrypted by the card before being saved and can only be decrypted by the card.

Preferably, the personal data is encrypted by means of an encryption algorithm using one or more keys saved in the card.

The encryption keys are also saved by a trusted entity.

The browser includes the functions of a browser of the type defined by the s @ t standard (SIM 0 Alliance TooL Box).

The pages provided by the server are pages of the type defined by the s @ tML language.

The invention also concerns a smart card comprising a processing unit and one or more memories 5 ^'programs including programs including card operating system, mainly characterized in that it further comprises a browser program capable of communicating 0 with a remote server through a terminal linked to a smart card reader, provided with a man-machine interface, and in that the browser allows the entry of personal data by a user of the terminal out of 5. data pages and their local storage in the card for consultation and remotely on the server

Preferably, the card includes a program for securing the saved data. 'The data security program implements. an encryption algorithm using one or more keys stored in - the card to encrypt the personal data entered before saving, and decryption for any consultation of this data

• by the user.

This encryption program can be integrated into the navigation program.

According to an example, the card is a SIM card. Advantageously, the browser includes the functions of a browser of the type defined by the standard s @ t (SIM Alliance Tool Box).

The invention also relates to a communication terminal provided with a man-machine interface comprising display and input means capable of establishing communication through a network with a remote server mainly characterized in that it includes a browser able to provide for viewing personal data entry pages and local storage of data entered and remotely on the server.

According to an example, the terminal is a mobile phone.

In this example, said smart card is inserted into the terminal by a user and resides there.

According to another example, the terminal is of the microcomputer type and the smart card is inserted by the user at each use.

The invention also relates to a server, mainly characterized in that it comprises an application capable of supplying a remote browser via a communication terminal with pages interpretable and / or executable by the browser, the pages comprising 'at least requests to enter personal information, requests to store this information locally, requests to return this information to the server, said application comprising a step of storing said information received. Other particularities and advantages of the invention will appear clearly on reading the following description which is given by way of nonlimiting example and with reference to the figures in which: FIG. 1 illustrates the diagram of an exemplary system allowing the implementation of the method according to the invention,

FIG. 2, illustrates, an example of the seizure sequence on several pages,

FIG. 3, illustrates a functional diagram of a smart card,

Figure 4 illustrates ^a terminal provided with a smart card.

The invention applies to smart card reader terminals or connected to a smart card reader. In the following, we will generally speak of a smart card reader terminal or linked to a smart card reader.

The invention ^'will therefore apply to any electronic device equipped with means of communication with a smart card. It ^is' such as mobile phones, computers, personal electronic organizers (PDAs), banking terminals, including smart cards they even to the extent that there are smart card "reader" of another smart card.

The smart card is either resident in the terminal, or inserted in the terminal, or connected to the terminal through a reader in connection with the terminal. This link can be wired or. infrared or radio for example or Blue Tooth type.

Chip cards which are intended to communicate with a terminal have a communication program with the terminal. The terminal or card has a browser to connect and exchange with a remote server. Indeed, in the present invention we are interested in a smart card provided a navigation program, also known as browser or browser in English terminology. This browser allows dialogue via the terminal, with a server through a communication network (for example GSM, UMTS or other).

The application programs are generally stored in electrically programmable memory. These programs can thus be updated and some downloaded using the terminal. Will be described in the following an example in the case ^where the terminal is a communication terminal such as a mobile telephone in which it will be recalled, the chip card resides.

We therefore choose, for the following, by way of example, the case of SIM cards which are. identification cards ^f subscribers.

One also chooses by way of example a browser as defined by the standard s @ t of the organization SIM ALLIANCE (SIM ALLIANCE TOOLBOX).

Figure 1 gives a schematic diagram in the case of this particular example.

A phone ^mobile T equipped with a smart card C

(SIM) can communicate through a communication network R and a gateway P with a server S dedicated to this application and in which the user is listed for example by a customer number.

Also shown in this FIG. 1 is also the entity A which represents a trusted third party with whom the secret keys of the client clients of the server S can be stored.

We will now refer to better understand the invention, to the following tables given by way of example in order to illustrate the various exchanges between card, terminal _. and server during an input operation and during a consultation operation:.

An operation of _. entry is illustrated by detailed steps 1 to 20 in the following table. ENTERING PERSONAL DATA

Thus, as can be seen in this example, at every instant, the database of the server S and the update data in the card C are consistent.

In case the data is not stored on the server, for example by lack of coverage of the

10 network, a callback function can be provided to automatically perform or offer this backup upon detection of network coverage.

The application program may further include functions which give the user choices:

- for saving data both in the card and / or on the server;

- a single backup can be made either in the card or on the server or in the terminal;

20 ^' - the data to be stored in the terminal is preferably encrypted or may not be encrypted depending on the choice of the user.

In addition, this program can provide that the data pages are generated by the card or by the

25 terminal. The application program may propose to store it in two places or not (on the SIM card, on the server, on another card, on the terminal, on a computer).

A consultation operation is illustrated by steps 1 to 9 of the following table.

10 CONSULTATION OF PERSONAL DATA:

Preferably, the update mode (data entry) is done online and the consultation mode is done outside

15 connection. It can also be provided that the pages supplied by the server are stored blank to allow the user to close the session and enter the data on the offline pages (closed session). Of course the session is opened in a secure and known manner, that is to say after the user. has been identified (for example, entered an identification code). In addition, in the case of a mobile phone, the PIN code (Personal Identifier Number) may also be required. ^'

The browser provides transmission / reception and interpretation of a page containing executable • and / or interpretable commands.

Among the commands present in the executable and / or interpretable pages we have:

- The issuance of a request to the server for the provision of an STKML page; the request to display the terminal, wording or data contained in the pages; - the call to the encryption function or direct triggering of its execution if this function is integrated into the browser; local data backup (especially in an electrically programmable memory on the card); the request to send each page with the personal data entered, from the mobile to save on the server.

The display commands can be print commands or equivalent intended for the user. The man-machine interface then includes a display screen or a printer.

As has been said, the personal data entered _. and saved on the card are secured by the card's intrinsic security (TPR hardware resistant to intrusion attacks).

This security is advantageously reinforced by encryption of this data by means of a known algorithm, using a secret key reserved for this application. and contained in the card. The encryption / decryption algorithm can be integrated into the browser or be in the form of a separate program which can be called the browser. The .sauvegardées data on the server are also preferably _≠ secure, that is to say, encrypted by the card before sending. Only the - card can decrypt them.

Indeed, the data can be stored encrypted or encrypted before saving on the server.

This encryption is carried out on the basis of a key dedicated to this application stored on the card and a duplicate of which can be kept by a trusted third party A.

Before the display, the data is decrypted by. the map.

The invention thus makes it possible to perform a backup of a user's personal data on the card and on the server.

So in case ^'of loss or theft of the card reader device Smart and specifically the smart card, the user can recover. data and / or its key (s), in particular by requesting the loading of the backup copy of his personal data on his new card.

Figure 2 illustrates an example of the progress of the display ^'three successive pages and personal data can be ^• entered.

Figure 3 illustrates the ^block diagram of a smart card CP. The smart card or object- with an integrated circuit or -equivalent, comprises a central unit U connected to a non-volatile program memory M1 and at least one electrically programmable program memory M2.

The memory M1 includes the operating system of the CP card and possibly the navigation program. The smart card can thus communicate with the remote server via the telecommunications terminal.

FIG. 4 illustrates the diagram of a terminal T. This terminal has the functions of smart card reader which allow it to communicate with the smart card ^' CP. It has a screen E and a keyboard C.

According to an exemplary embodiment, the terminal T is a mobile telephone, the card is a SIM card and the browser responds to the standard s @ t of the SIM ALLIANCE.

According to another example, the terminal can be a terminal in which the smart card does not reside but must be inserted into an associated reader by a user of the terminal. It can be, for example, a bank terminal or a microcomputer or a PDA.

Claims

1. Method for secure storage of personal data and consultation, • characterized in that it comprises the following stages:

- use a terminal linked to a smart card reader and provided with a home machine interface comprising a means of viewing and entering data, use a browser capable of dialoguing with a remote server through a communication network, from said terminal,

- display data pages with said display means,

- enter personal data of a user ^• in response to the pages viewed and store them locally for consultation and remotely on the server for backup.

2. Storage method according to claim 1, characterized in that the data pages are provided by the server.

3 Storage method according to. Claim 1 or 2, characterized in that the data pages are provided during communication and input.

4. Storage method according to any one of the preceding claims, characterized in that the data entry is carried out online.

5. A storage method according to any one of the ^'preceding claims, characterized in that the personal data is saved locally on the smart card and a copy is saved on the server.

6. Storage method according to claim 3, characterized in that the remote copy backup is carried out substantially simultaneously with the local recording.

7. Storage method according to any one of the preceding claims, characterized in that the personal data are encrypted by the card before being saved.

,

8. Storage method according to claim 7, characterized in that the personal data is encrypted by means of an encryption algorithm using one or more keys saved in the card.

9. A storage method according to claim 8, characterized in that the encryption key or keys are also backed up by an entity of ^' trust.

10. Storage method according to any one of the preceding claims, characterized. in that the browser includes the functions of a browser of the type defined by the s @ t standard (SIM Alliance TooL Box).

11. Storage method according to claim 10, characterized in that the pages provided by the server are pages of the type defined by the language s @ tML.

12. Chip card comprising a processing unit and one or more program memories comprising programs including the card operating system, characterized in that it further comprises a browser program capable of communicating with a remote server through a terminal linked to a smart card reader, ^' provided with a man-machine interface, and ^{the "} in that the browser allows the entry of personal data by a user of the terminal on data pages and their storage locally in the card for consultation and remotely on the server.

13. Smart card according to claim 12, characterized in that said card is a SIM card. -

14. Chip card according to claims 12 or 13 above, characterized in that the browser includes the functions of a browser of the type defined by the standard s @ t (SIM Alliance Tool Box).

15. Communication terminal for implementing the method according to claim 1, said terminal being provided with a man-machine interface comprising display and input means and capable of establishing communication through a network with a remote server, - characterized in that it includes a browser

^' able to provide for viewing personal data entry pages and local storage - data entered and remotely on the server.

16. Terminal according to claim 15, characterized in that the terminal being is mobile telephone.

17. Terminal according to claim 15, characterized in that ^' the terminal is of the microcomputer type, said smart card being inserted into the terminal by a user each time it is used.

18. Server for implementing the method according to claim 1, characterized in. it comprises an application adapted to provide a remote browser via a terminal communication ^• pages interpretable and / or executable by the browser, the pages comprising at least requests for personal information input in local storage requests of this information, requests to return this information to the server, said application comprising a step of storing said information received.