EP1761904A1 - Systeme de transfert de donnees au moyen d'une carte intelligente et methodes pour assurer la securite du stockage et de la transmission - Google Patents

Systeme de transfert de donnees au moyen d'une carte intelligente et methodes pour assurer la securite du stockage et de la transmission

Info

Publication number
EP1761904A1
EP1761904A1 EP04741621A EP04741621A EP1761904A1 EP 1761904 A1 EP1761904 A1 EP 1761904A1 EP 04741621 A EP04741621 A EP 04741621A EP 04741621 A EP04741621 A EP 04741621A EP 1761904 A1 EP1761904 A1 EP 1761904A1
Authority
EP
European Patent Office
Prior art keywords
chip
card
distribution server
key
data
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP04741621A
Other languages
German (de)
English (en)
Inventor
Vincenzo Valentino Di Luoffo
Craig William Fellenstein
Dylan Maxwell Reilly
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
International Business Machines Corp
Original Assignee
International Business Machines Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by International Business Machines Corp filed Critical International Business Machines Corp
Publication of EP1761904A1 publication Critical patent/EP1761904A1/fr
Withdrawn legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
    • G07F7/1008—Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/341—Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/355—Personalisation of cards for use
    • G06Q20/3552—Downloading or loading of personalisation data
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3823—Payment protocols; Details thereof insuring higher security of transaction combining multiple encryption tools for a transaction
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/40—Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
    • G06Q20/409—Device specific authentication in transaction processing
    • G06Q20/4097—Device specific authentication in transaction processing using mutual authentication between devices and transaction partners
    • G06Q20/40975—Device specific authentication in transaction processing using mutual authentication between devices and transaction partners using encryption therefor

Definitions

  • This invention relates generally to smart cards and, more particularly, to systems for performing secure data transactions with embedded chips in smart cards.
  • a typical smart card includes a microprocessor coupled to a memory, and the microprocessor executes instructions and performs operations on data of at least one software application program stored in the memory.
  • the smart card provides a compact and portable computation resource for executing transactions in areas such as banking, sales, or security. Smart cards commonly appear in the form of credit cards, key-shaped tokens, and subscriber identity modules (SIMs) used in certain types of cellular telephones.
  • SIMs subscriber identity modules
  • a smart card reader/writer for communicating with such smart cards has a similarly arranged set of electrically conductive contacts.
  • the main standards in the area of smart card and reader/writer interoperability are the International Standards Organization (ISO) 7816 standards for integrated circuit cards with contacts.
  • ISO 7816 standards specify interoperability at the physical, electrical, and data-link protocol levels.
  • Other types of smart cards are "contactless.” In this situation, both the smart card and the smart card reader/writer include wireless communication interfaces for communicating wirelessly (i.e., without electrical contact).
  • Cryptography is, in general, a technique commonly used to protect sensitive information by encrypting a message to protect the information in the message.
  • One method of encryption is to use a key to mathematically transform the information into an unreadable format.
  • a key may include without limitation a code or series of characters. Only those possessing the key can decrypt the message to reveal the information.
  • issuers of smart cards will use one or more issuer's master keys to encrypt data for transmission to a smart card after issuance to ensure only changes authorized by the issuers are made to issued smart cards. Since an issuer's master keys may also be used to make unauthorized changes to issued smart cards, security of the issuer's master keys is essential.
  • U.S. Pat. No. 6,131,090 describes a method and system for providing controlled access to information stored on a smart card.
  • the information is stored in encrypted form.
  • a data processing center provides an access code, including a key for decrypting the information by authorized service providers.
  • the smart card receives and verifies access codes, uses the access code to decrypt requested information, outputs the requested information, and computes a new encryption key as a function of information unique to the access session.
  • U.S. Pat. No. 6,481,632 discloses a smart card architecture wherein a card issuer empowers application providers to initiate approved changes to smart cards.
  • Loading an application onto a smart card involves a card acceptance device issuing a load command.
  • the load command includes an appended command authentication pattern used to verify the load command.
  • the card acceptance device provides the application to the smart card.
  • the application includes an appended application authentication pattern used to verify the application. After verification, the application is loaded into a memory of the smart card. Disclosure of Invention
  • the invention provides an apparatus for secure transmission of a post issuance data from a distribution server to a smart card comprising: a smart card inserted in a card reader; a chip embedded in the smart card and electronically connected to the card reader; a computer connected to the card reader and to the distribution server by a network; a chip relay module in a browser in the memory of the computer; wherein the chip relay module establishes a secure session with the distribution server; and wherein the post issuance data is transmitted in an XML message that has been provided with a code derived from an issuer's master key.
  • the code is a message authentication code.
  • the code is a message authentication code encrypted.
  • the message authentication code is derived from a first card key.
  • the first card key is derived from the issuer's master key.
  • the message authentication code encrypted is derived from a second card key.
  • the second card key is derived from the issuer's master key.
  • the issuer's master key is obtained from a first hardware security module in a security server and transmitted to a second hardware security module in the distribution server.
  • the issuer's master key is encrypted using a system public key.
  • the issuer' s master key is decrypted in the second hardware security module using a system private key.
  • the chip relay module establishes a secure communication between the chip and the distribution server by a second mutual authentication.
  • the chip relay module establishes a session context security using a session key.
  • a data marker is a precondition for a secure transmission between the distribution server and the chip.
  • a flag is a precondition for a secure transmission between the distribution server and the chip.
  • a secure communication between the distribution server and the browser using a first mutual authentication In a preferred embodiment a secure communication between the distribution server and the browser using a first mutual authentication.
  • a chip management system is connected to the network.
  • the chip management system further comprises a plurality of chipholder files.
  • the chipholder files further comprise a card file.
  • the card file further comprises a reference key.
  • the reference key is used to obtain the issuer' s master key.
  • the chip management system and the distribution server share a means for a first mutual authentication.
  • the post issuance data is encrypted for transmission from a security server to the distribution server.
  • the post issuance data is digitally signed for transmission from a security server to the distribution server.
  • the post issuance data is encrypted and digitally signed for transmission from a security server to the distribution server.
  • the post issuance data is bulk data and the bulk data is encrypted using a system symmetric key.
  • the post issuance data is encrypted using a system symmetric key and is further encrypted using a system public key.
  • the invention preferably provides a smart card system for secure transmission of post issuance data to an embedded chip using a chip relay module, a plurality of hardware security modules, a first communication system having two security layers and a second communication system having four security layers.
  • the first communication system may be considered a server side system and comprises a chip management system, a security server having a first hardware security module, a distribution server having a second hardware security module and a computer system connected by a network
  • the first communication system preferably has a first security layer and a second security layer.
  • the first security layer preferably comprises mutual authentication that makes each component of the first communication system a trusted node to the others through client mutual authentication.
  • the second security layer preferably comprises system keys for secure communication between the hardware security modules.
  • the second communication system may be considered a client side system and comprises the computer system connected to the distribution server by a network, a PC/SC card reader driver, a Web browser application, and a chip relay module.
  • the second communication system is for secure communication between the distribution server and the chip of a smart card inserted in the card reader/writer.
  • the second communication system preferably has a third, fourth, fifth and sixth security layer.
  • the third security layer comprises secure communication between the distribution server and the web browser application program using mutual authentication.
  • the fourth security layer comprises session context security using a session key generated between the distribution server and the chip relay module.
  • the fifth security layer comprises a data marker or flag necessary for secure transmissions between the distribution server and the chip.
  • the sixth security layer comprises message authentication code or message authentication code encrypted messages between the distribution server and the chip.
  • the first communication system is a server side system that allows secure communication between the elements of the smart card system.
  • the second communication system or client side system preferably allows secure communication between the chip and the distribution server.
  • the distribution server is the common element between the two communication systems and the conduit for information from one system to the other.
  • operations in the first communication system use the first security layer and the second security layer.
  • the chip management system, the distribution server, the security server and the computer system may communicate using the first security layer based on mutual client authentication.
  • Data is preferably transmitted between the hardware security module of the security server and the hardware security module of the distribution server may be secured by the second security layer.
  • the second security layer uses a set of system keys that allow data to be encrypted, digitally signed, or both encrypted and digitally signed for transmission between the hardware security modules.
  • the system keys are the system authentication key, the system encryption key and the system digital signing key.
  • the system authentication key is preferably used to establish mutual authentication between the trusted nodes of the server side system.
  • the system encryption keys preferably include a system public key and a system private key.
  • a system symmetric key is also preferably provided for encrypting bulk data.
  • the system public key is preferably used to encrypt data for transmission to another hardware security module where the data is decrypted using the system private key at the receiving hardware security module.
  • the system symmetric key is preferably used to encrypt bulk data prior to encryption using the system public key.
  • the system digital signing key preferably allows data to be transmitted while integrity protected.
  • the hardware security module is preferably located in the security server uses the system public key to wrap the system symmetric key used to encrypt the bulk data to be transmitted, and establishes a signature for transmission of the data to be transmitted to the distribution server.
  • the system public key is preferably used to encrypt the data to be transmitted.
  • the hardware security module at the distribution server uses the system private key and performs the signature verification and unwrapping of the transmitted data from the security server.
  • Data is preferably transmitted in extensible markup language.
  • Transmitted data preferably includes without lirnitation the issuer' s master key, chipholder files, and post issuance data not included in the chipholder files.
  • the second security layer preferably ensures that the issuer's master key is never transmitted in the clear.
  • the distribution server's hardware security module also preferably uses the issuer's master key to generate card keys used to communicate with the chip.
  • operations in the second communication system use the third, fourth, fifth and sixth security layers.
  • the third security layer is established by the chip relay module that interacts with the driver of the card reader and uses browser keys to establish secure communication between the chip and the distribution server using client mutual authentication.
  • the chip relay module is preferably a secure applet that interacts with the browser, the operating system and the card reader driver.
  • the browser keys may consist of signed applets.
  • the third security layer is preferably established after the smart card is inserted into the card reader and the smart card is authenticated by mutual authentication between the chip and the website. After authentication, the third security layer is preferably established by the chip relay module which is downloaded to the browser application program after authentication.
  • the third security layer preferably allows transmission of the chip information number so that the chipholder profile corresponding to the smart card can be identified.
  • the chip relay module preferably also establishes a fourth security layer comprising a session key.
  • the chip relay module preferably establishes a secured communications link specific to a user log on session between the chip and the distribution server by generating a unique per user logon session key for communication with the distribution server. Each time a user logs on in a new session, a unique key is preferably generated to keep track of the data interaction between the user and the distribution server.
  • the session key is then preferably used by the distribution server to track and authorize any and all operations performed by a user through the chip relay module.
  • the chip relay module further preferably generates a fifth security layer that is a data marker or flag specifying that the chip relay module has established a secure session with the chip. Only upon reading this data marker or flag will additional secure operations such as post issuance operations be processed by the distribution server.
  • applications can preferably be loaded or deleted by directly transmitting Application Protocol Data Unit (APDU) messages to the chip subject to a sixth security layer.
  • APDU Application Protocol Data Unit
  • Data is preferably transmitted from the distribution server to the chip subject to a sixth security layer where the data is either message authentication coded or message authentication coded encrypted using a set of card keys that are generated at the distribution server's hardware security module so that the generated card keys match the card keys installed on the chip at personalization of the smart card.
  • the authentication protocol of the sixth security layer may be initiated by APDUs that are part of Glob- alPlatform® specification standards.
  • the messages are sent in extensible markup language.
  • a method for secure transmission of a post issuance data between a distribution server and a chip comprising: inserting a smart card having a chip into a card reader connected to a computer and a network; and responsive to authentication of the chip at the distribution server, using a chip relay module to establish a secure communication between the chip and the distribution server.
  • the method further comprises receiving the post issuance data in an XML message that has been provided with a code derived from an issuer's master key.
  • the method further comprises: generating a set of card keys at a hardware security module of the distribution server; using the card keys to encrypt an XML message containing the post issuance data; and fransmitting the post issuance data from the distribution server to the chip.
  • a method for secure transmission of a post issuance data between a distribution server and a chip comprising: configuring a first communication system having a distribution server, a security server, a chip management system and a first security layer; configuring a second communication system having the distribution server and a client card system having a chip relay module; using the chip relay module to establish a third security layer in the second communication system; using a CIN to obtain the post issuance data from the chip management system; using a card key to encrypt the post issuance data for transmission from the distribution server to the chip; and wherein the card key is generated from an issuer's master key obtained from the security server.
  • the method comprises: configuring a second security layer in the first communication system.
  • the method comprises: configuring a fourth security layer in the second communication system.
  • the method comprises: configuring a fifth security layer in the second communication system.
  • the method comprises configuring a sixth security layer in the second communication system.
  • the method comprises using a first system key to establish the second security layer.
  • the method comprises using a session key to establish the fourth security layer.
  • the method comprises using a data marker or flag to establish a fifth security layer.
  • the method comprises using a MAC to establish a sixth security layer.
  • the method comprises using a MAC encrypted to establish a sixth security layer.
  • the method comprises sing a second system key to encrypt the post issuance data.
  • the method comprises using a second system key to wrap a post issuance data that has been encrypted using a symmetric key.
  • an apparatus for secure transmission of a post issuance data from a distribution server to a smart card comprising: a first communication system connecting a security server, a distribution server and a chip management system; a second communication system connecting the distribution server and a chent card system having a card reader; a chip embedded in the smart card and electronically connected to the card reader; wherein the post issuance data is transmitted from the chip management system to the distribution server encrypted by a system key; and wherein the post issuance data is transmitted from the distribution server to the chip encrypted by a card key.
  • the chip has a set of installed card keys.
  • the post issuance data in order to securely transmit the post issuance data from the distribution server to the chip, the post issuance data must be message authentication coded.
  • a set of card keys corresponding to a set of card keys in the chip is generated using an issuer's master key.
  • the issuer' s master key is requested from the security server.
  • a first hardware security module in the security server encrypts the issuer's master key using a system encryption key, and transmits the encrypted issuer's master key to the distribution server.
  • a second hardware security module in the distribution server decrypts the issuer's master key.
  • the hardware security module uses the issuer's master key to generate a set of card keys.
  • post issuance data is encrypted for transmission from the security server to the distribution server using a system public key.
  • post issuance data is encrypted for transmission from the distribution server to the chip using a set of card keys.
  • the bulk data is first encrypted using a system symmetric key and then encrypted using a system public key.
  • post issuance that has been encrypted is decrypted at the distribution server using a system private key.
  • post issuance data that is bulk data is decrypted at the distribution server using a system private key and a system symmetric key.
  • FIG. IB is a depiction of a smart card
  • FIG. 2A is a diagram of one embodiment of the computer system of FIG. 1 ;
  • FIG. 2B is a depiction of the software stack that interacts with the CRM
  • FIG. 3 is a diagram of one embodiment of the card reader/writer of FIG. 1 ;
  • FIG.4 is a diagram depicting an initial portion of a smart card transaction carried out in the system of FIG. 1 ;
  • FIG. 5 depicts a flow chart of one embodiment of a method for conducting smart card transactions;
  • FIG. 6 is a diagram depicting secure transmissions between the security server and the distribution server;
  • FIG. 7 A is a flow chart of one embodiment of a method for requesting the issuer' s master key by the distribution server;
  • FIG. 7B is a flow chart for one embodiment of a method for teansmitting the issuer's master key from the security server to the distribution server; [090] FIG.
  • FIG. 8 is a diagram depicting the establishment of a secure communication session between the distribution server (DS) and the computer system;
  • FIG. 9 is a diagram depicting the transmission of post-issuance data from the chip management system (CMS) to the smart card;
  • CMS chip management system
  • FIG. 10A is a diagram of one embodiment of the XML message of FIG. 9;
  • FIG. 10B is a diagram of a second embodiment of the XML message of FIG. 9;
  • FIG. 11 depicts a flow chart of a method for secure transmission of post-issuance data from the distribution server to a smart card;
  • FIG. 12 depicts one embodiment of a method for generating card keys;
  • FIG. 13 depicts one embodiment of a method for transmitting post issuance data from the security server to the distribution server; and [097] FIG. 14 depicts one embodiment of a method for secure transmission of post issuance data from the distribution server to an embedded chip of a smart card.
  • Mode for the Invention [098] The following definitions shall be used herein:
  • Application Protocol Data Unit means a message according to the standard communication protocol defined in ISO 78 16-4.
  • Card keys means a group of keys generated from an issuer' s master key (TLMK), an issuer identification number (TIN) and a chip information number (CIN), including without limitation a card key encryption key (CKEK), a card mac key (CMK) and a card encryption key (CEK).
  • TLMK issuer' s master key
  • TIN issuer identification number
  • CIN chip information number
  • CKEK card key encryption key
  • CMK card mac key
  • CEK card encryption key
  • Card Key Encryption key means a key used to create a session key.
  • CCMK Card MAC key
  • CEK Card Encryption Key
  • Card profile means an XML representation of a chip including all the attributes of the chip, the chip's operating system, the chip's physical characteristics, the chip's application profile and the chip's key profiles.
  • Chip means a processor and a memory contained wilhin a smartcard wherein the processor is connected to the memory and is capable of wired or wireless communication with a card reader writer.
  • Chipholder means a person to which a smart card has been issued by an issuer and does not include actual or potential unauthorized users.
  • Chipholder profile means information about the chip assigned to a chipholder and all of the chips' data/status including without limitation personalized entitlement data and available options of the chipholder.
  • chipholder profile shall mean a file that may contain chipholder profile information, one or more card profiles, one or more applications and/or one or more scripts.
  • Chip Information Number means a unique number assigned to each individual chip.
  • CMS Chip Management System
  • CCM Chip Relay Module
  • Client Card System means a computer having an interface for communication with a smart card.
  • Computer means a machine having at least a processor, a memory and an operating system capable of interaction with a user or another computer, and includes without limitation desktop computers, notebook computers, mainframes, servers, personal digital assistants (PDAs), handheld computers, and cell phones.
  • PDAs personal digital assistants
  • Cryptographic operations includes without limitation encryption and decryption operations.
  • Customer Reference Number (CRN) means a unique number assigned to each chipholder.
  • Decryption means the reversal of the corresponding encryption, reversible transformation of a cryptogram by cryptographic algorithm to retrieve the original plain text data.
  • Digital signature means an asymmetric transformation of data intended to prove to the data recipient the origin and integrity of the data.
  • DS distributed Server
  • the DS has an Intelligent Gateway mode where the user is directly interfacing with the server or a router mode where another device such as an automatic teller machine (ATM) is performing the interaction with the user.
  • ATM automatic teller machine
  • Encryption means the reversible transformation of data by cryptographic algorithm to produce a cryptogram.
  • Entitlement data is a representation of current applications(s) and chip state, what applications the end-user can add/delete, and possible administrative functions such as a new application update, or a state change to the chip or application and the entitlement data is contained in the chipholder profile.
  • GlobalPlatformTM specification means guidelines allowing consistent behavior between smart cards and applications.
  • HSM Hardware Security Module
  • Input device means a device for entering information into a smartcard or a computer and shall include without limitation a keyboard, mouse, trackball, touchpad, touchpoint device, stylus pen, and touch screen.
  • TIN isssuer Identification Number
  • Issuer's master key means a private key for the issuer of a chip.
  • Issuer specific data means standard tags according to GlobalPlatformTM specification, including without limitation Issuer Identification Number (TIN) and Chip Information Number (CIN) and cryptographic keys.
  • Key means a sequence of bits that control the operation of cryptographic transformation.
  • Key Encryption Key means a key used to encrypt another key type for key distribution purposes.
  • MAC Message Authentication Code
  • “Mutual Authentication” means recognition of one element of the smart card system by another using available protocols cluding but not limited to Secure Sockets Layer (SSL) version 3, browser keys and signed applets.
  • SSL Secure Sockets Layer
  • Output device means a device for displaying data and shall include without limitation cathode ray tubes (CRT), liquid crystal display (LCD) and printers.
  • CTR cathode ray tubes
  • LCD liquid crystal display
  • Personal Information Number means a unique number assigned to each individual smartcard.
  • Periodization means configuring a smart card for a chipholder including without limitation placing card cryptographic keys on the card.
  • Personalized entitlement data and available option information means chipholder information including without limitation a current smart card status report, a list of software apphcation programs the chipholder is authorized to add and/or delete, and/or acta ⁇ strative functions that may be carried out regarding the chip or installed software apphcation programs.
  • Post issuance data shall mean instructions and data for adding, modifying, or deleting data stored in a chip.
  • Prime key means the secret component of an asymmetric key pair which may be used to decrypt messages that are encrypted using the corresponding public key and that may also be used to digitally sign messages for authentication purposes.
  • Public key means the public component of an asymmetric key pair which may be used to encrypt messages intended for the owner of its corresponding private key and also to verify a message digital signature to authenticate the message sender.
  • SS Security server
  • Server means a local or remote back-end system supporting smart cards.
  • Smart card means a card used for personal or business transactions comprising at least a processor and a memory capable of supporting an operating system, apphcation programs, storage of chip holder personalization data, apphcation data and other data as may be required by the issuer of the smart card.
  • Smart card system means a system comprising a chip management system, a distribution server, a security server and a computer system connected by a network.
  • Symmetric cryptography means a cryptographic technique that uses the same secret key for both the originator's and the recipient's transformation.
  • System keys means a set of cryptographic keys used to create trusted nodes for communication within a smart card system including without limitation a system authentication key, a system encryption key and a system digital signing key.”
  • Unauthorized user means a person who may gain possession of a smart card but who is not intended by the issuer of the smart card to have access to the capabihties of the card created by the microprocessor coupled to a memory in the card.
  • FIG. 1 A is a diagram of one embodiment of smart card system 100 for carrying out data transactions with smart card 102.
  • system 100 includes chip management system (CMS) 104, security server (SS) 106, distribution server (DS) 108, and computer system 110 coupled to card reader/writer 112.
  • CMS chip management system
  • SS security server
  • DS distribution server
  • computer system 110 coupled to card reader/writer 112.
  • CMS 104, SS 106, DS 108, and computer system 110 are all coupled to communication network 114.
  • Communication network 114 includes, without limitation, the pubhc switched telephone network (PSTN) and/or the Internet.
  • PSTN pubhc switched telephone network
  • computer system 110, CMS 104, SS 106, and DS 108 communicate with one another via communication network 114, and data transactions with smart card 102 are carried out via a secure communication channel established within communication network 114.
  • FIG. IB depicts smart card 102.
  • Smart card 102 includes microprocessor 120 coupled to memory 122, and is capable of storing at least one software application program in the memory. Each software apphcation program includes instructions and data.
  • Microprocessor 120 is coupled to interface 124 which is adapted for coupling with card reader writer 112.
  • smart card 102 is shown partially inserted into card reader/writer 112.
  • smart card 102 is capable of communicating with card reader/writer 112
  • card reader/writer 112 is capable of communicating with smart card 102.
  • card reader/writer 112 is capable of reading data from, and writing data to, smart card 102.
  • card reader/writer 112 may be a reader only such as a cellular phone.
  • Some cellular phones have dual chip support.
  • Global System for Mobile Communication (GSM) phones have only one SIM chip whereby the reader is the GSM phone and all applications would communicate through the wireless link of the GSM phone.
  • GSM Global System for Mobile Communication
  • Persons skilled in the art know that other cellular telephones have dual slots where one slot is for SIM and the other slot is for the smart card.
  • smart card 102 may have a set of electrically conductive contacts (not shown) arranged on an upper surface, and card reader/writer 112 may have a similarly arranged set of electrically conductive contacts (not shown).
  • Smart card 102 and card reader/writer 112 may, for example, comply with the International Standards Organization (ISO) 7816 standards for integrated circuit cards with contacts.
  • ISO International Standards Organization
  • corresponding members of the two sets of contacts may come into physical contact with one another.
  • both card reader/writer 112 and smart card 102 may include wireless communication interfaces for communicating without electrical contact.
  • card reader/writer 112 and smart card 102 are preferably capable of estabhshing and carrying out secure communications as described below.
  • computer system 110 and card reader/writer 112 form a chent card system with smart card read/write capability.
  • Computer system 110 and card reader/ writer 112 may form, for example, smart card update terminal, apoint-of-sale terminal, or an automatic teller machine (ATM).
  • ATM automatic teller machine
  • FIG. 2A is a diagram of one embodiment of computer system 110 of FIG. 1.
  • computer system 110 includes processor 200, network interface card 202, and memory 204.
  • Memory 204 stores network communication software 206, Chip Relay Module (CRM) 208, security software 210, browser 212, operating system 214 and PC/SC card reader driver 216.
  • Processor 200 is coupled to memory 204, and, in general, fetches and executes instructions and data of network communication software 206, CRM 208, and security software 210.
  • CRM Chip Relay Module
  • FIG. 2B depicts software stack 200 of CRM 208, browser 212, operating system 214 and PC/SC card reader driver 216.
  • chent stack may include software for wireless devices with no reader.
  • communication network 114 of FIG. 1 A includes the Internet
  • network communication software 206 is a Web browser apphcation program such as browser 212. Suitable Web browser apphcation programs include Microsoft® Internet Explorer (Microsoft Corporation, Redmond, WA), and Netscape Navigator® (Netscape Communications Corporation, Mountain View, CA).
  • network interface card 202 is coupled between processor 200 and communication network 114 of FIG. 1 A.
  • network interface card 202 is adapted for connection to communication network 114, and forms a hardware portion of a first communication system of computer system 110.
  • a software portion of the first communication system includes network communication software 206.
  • the software portion includes PC/SC card reader driver 216 associated with network interface card 202.
  • computer system 110 communicates with CMS 104, SS 106, and or DS 108 (see FIG. 1) via the first communication system.
  • CMS 104, SS 106, DS 108 and computer system 110 are trusted nodes to each other through mutual authentication in the first communication system having a first security layer in smart card system 100.
  • processor 200 is coupled to card reader/writer 112 (see FIG. 1A).
  • card reader/writer 112 is capable of reading data from, and writing data to, smart card 102 (see FIG. 1 A).
  • card reader/writer 112 also includes an input device for receiving user input and an output device for presenting data to the user.
  • CRM 208 stored in memory 204 includes instructions and data for communicating with card reader/writer 112 and or a smart card inserted in card reader/writer 112.
  • Processor 200 fetches and executes the instructions and data of CRM 208 to communicate with card reader/writer 112 and/or the smart card inserted in card reader/writer 112.
  • Card reader/writer 112 of FIG. 1A may, for example, include an interface device coupled between processor 200 and other hardware of card reader/writer 112.
  • the interface device may form a hardware portion of a second communication system of computer system 110.
  • a software portion of the second communication system may include CRM 208, and, for example, a driver program such as PC/SC card reader driver 216 associated with card reader/writer 112.
  • Smart card 102 inserted into card reader/writer 112 may communicate with DS 108 via the second communication system as explained below.
  • CRM 208 may be in memory 204 of computer system 110.
  • CRM 208 is downloaded to browser 212 after smart card 102 is inserted into card reader/writer 112 and after microprocessor 120 of smart card 102 is authenticated by mutual authentication.
  • a suitable mutual authentication mechanism is a smart card having a secure access application such as an X509 certificate and a private web key on the card.
  • the website that the chipholder is logging into is the authentication mechanism.
  • DS 108 will request that the chipholder insert the chip into the reader and that the chipholder insert a PIN or password so that the chipholder may also be authenticated to the chip.
  • the chips' private web key will exchange information between the chipholder and server for mutual authentication.
  • the server will authenticate the chipholder to the website.
  • CRM 208 estabhshes secure communication between microprocessor 120 of smart card 102 and DS 108 using mutual authentication to establish the third security layer in smart card system 100.
  • the secure communication in the second communication system allows transmission of the chip information number (CIN) through the DS 108 to the first communication system.
  • CIN chip information number
  • FIG. 3 is a diagram of one embodiment of card reader/writer 112 of FIG. 1 A.
  • card reader/writer 112 includes smart card input output (I/O) interface 300, input device 302, and output device 304.
  • smart card input/ output (I/O) interface 300 is capable of reading data from, and writing data to, a smart card brought into contact with (wired), or into proximity of (wireless), smart card input/output (I O) interface 300.
  • Input device 302 is adapted for receiving user input.
  • Input device 302 includes, without limitation, a keypad.
  • Card reader/writer 112 provides the user input to computer system 110 (see FIGS. 1 A and 2A).
  • Output device 304 is, in general, adapted for providing data to the user.
  • Output device 304 includes, without limitation, a liquid crystal display (LCD).
  • Card reader/writer 112 receives output data from computer system 110 (see FIGS. 1 A and 2A) and presents the output data to the user via output device 304.
  • LCD liquid crystal display
  • FIG.4 is a diagram depicting an initial portion of a smart card transaction carried out in system 100 of FIG. 1A. Such transactions may involve, for example, post- issuance operations such as software apphcation program loads and/or deletions.
  • DS 108 authenticates a user inserting smart card 102 into card reader/writer 112. Such authentication may involve, for example, a mutual authentication and/or the user entering a personal identification number (PIN) via input device 302 of card reader/writer 112 (see FIG. 3).
  • PIN personal identification number
  • a PIN may also be a password depending on the apphcation.
  • ha GlobalPlatformTM cards a PIN can be a Global PEST for the card and an apphcation may support the Global PIN or the apphcation may have its own PIN.
  • smart card 102 includes a chip identification number (CIN) 400.
  • ON 400 may be, for example, stored in a read only memory (ROM) of smart card 102.
  • CRM 208 of computer system 110 requests CIN 400 from smart card 102 and smart card 102 responds by providing CIN 400 to computer system 110 as indicated in FIG. 4.
  • CRM 208 of computer system 110 provides CIN 400 to DS 108.
  • DS 108 provides a request to CMS 104 including CIN 400.
  • CMS 104 includes memory 402 storing multiple chipholder profiles 404A, 404B, and 404C.
  • Each of the chipholder profiles 404 includes information associated with a different chipholder.
  • CMS 104 stores and maintains chipholder profiles 404.
  • Each chipholder profile 404 also includes data regarding the corresponding smart card.
  • a given chipholder profile 404 would expectedly include the CIN 400 of the corresponding smart card 102, as well as information regarding software apphcation programs stored in a memory system of the smart card, entitlement data regarding the stored applications, and other information as desired by the issuer of the smart card.
  • chipholder profiles including applications, scripts and card profiles are tested at a security server such as SS 106 (see FIG. 1) to ensure that there are no patterns in the data indicating a security concern such as virus, and that an apphcation is not a rogue apphcation that has been placed on a card without issuer approval.
  • Each chipholder profile may include a card profile for one or more smart cards that have been issued to a user.
  • Each card profile contains apphcation and key profiles depending on the number of applications and other information.
  • the card profile also contains a key reference that is used to obtain the corresponding issuer's master key from the security server, if needed.
  • a specific chipholder profile is identified by CIN 400.
  • the CIN 400 is transmitted via the third security layer so that the corresponding chipholder profile may be identified.
  • CMS 104 In response to the request including CIN 400 from DS 108, CMS 104 provides the corresponding chipholder profile, labeled 404D, to DS 108.
  • DS 108 After receiving chipholder profile 404D corresponding to CIN 400 of smart card 102, DS 108 processes the in- formation of chipholder profile 404D, determines personalized entitlement data and available options of the chipholder, and sends the personalized entitlement data and available option information to computer system 110.
  • CRM 208 of computer system 110 (see FIG. 2A) processes the personalized entitlement data and available option information, thereby generating output data, and provides the output data to card reader/ writer 112 for output to the user.
  • the user may, for example, select a specific option.
  • the option is relayed to DS 108 via computer system 110, and is processed by DS 108.
  • the option may include, without limitation, the transmitting of post-issuance data from CMS 104 to smart card 102.
  • DS 108 modifies the information of chipholder profile 404D as needed.
  • chipholder profile 404D has been modified, DS 108 transmits updated chipholder profile 404D to CMS 104, and CMS 104 stores modified chipholder profile 404D.
  • Chipholder profile 404D is modified by updating a stored original version of chipholder profile 404D.
  • FIG. 5 depicts a flow chart of one embodiment of method 500 for conducting smart card transactions (MSCT).
  • MSCT 500 may be embodied within DS 108 (see FIGS. 1 and 4).
  • MSCT 500 starts (502).
  • a chip identification number (CIN) of a smart card that has been inserted in card reader/writer 112 (see FIGS. 1 and 4) is received (504).
  • a request including the CIN is provided to CMS 104 (see FIGS. 1A and 4) having a memory containing a plurality of chipholder profiles (506).
  • a chipholder profile corresponding to the CFN is received from CMS 104 (see FIGS. 1A and 4) (508).
  • Personalized entitlement data and available option information is produced (510).
  • the personalized entitlement data and available option information is provided to computer system 110 (see FIGS. 1A and 4) (512).
  • FIG. 6 is a diagram depicting the secure transmission of issuer's master key (TMK) 602 within smart card system 100 of FIG. 1.
  • SS 106 includes first hardware security module (HSM1) 600.
  • HSM1 600 may be, for example, a cryptographic co-processor.
  • a suitable cryptographic co-processor is the IBM 4758 cryptographic co-processor (IBM Corporation, White Plains, NY).
  • IMK 602 and system keys 604 are stored in HSM1 600 of SS 106.
  • DS 108 needs IMK 602 and does not have IMK 602, DS 108 sends a request to transmit IMK 602 to SS 106.
  • SS 106 encrypts issuer's master key 602 using system keys 604 and or symmetric key 616, thereby forming encrypted issuer's master key 606.
  • SS 106 generates an extensible markup language (XML) message 610 including encrypted issuer's master key 606.
  • HSM 600 produces digital signature 608 for XML message 610, and may add digital signature 608 to XML message 610.
  • SS 106 transmits the complete secure XML message 610 to DS 108 via communication network 114 of FIG. 1 and the secure session, wherein the complete secure XML message 610 includes encrypted issuer's master key 606 and/or digital signature 608.
  • the extensible markup language is commonly used to store structured data and to pass it between computer systems such as the network hosts.
  • the syntax of XML is similar to HTML in that it contains matching sets of tags.
  • XML includes provisions for an extensible set of tags.
  • the specific tag definitions to be used by an apphcation set are determined in advance, and are utihzed by both a sender and a receiver. While XML is particularly well suited for data exchange operations, the use of XML to transmit cryptographic keys described herein is considered unique and innovative.
  • DS 108 includes second hardware security module (HSM2) 612 for performing cryptographic operations and for providing secure cryptographic key storage.
  • HSM2612 may be, for example, a cryptographic co-processor.
  • a suitable cryptographic co-processor is the IBM 4758 cryptographic co-processor (IBM Corporation, White Plains, NY).
  • system keys 604 Prior to reception of secure XML message 610, system keys 604 are stored in HSM2612 of DS 108. Symmetric key 616 is also stored in HMS2612. After sending the request to transmit IMK 602 to SS 106, DS 108 estabhshes a secure session with SS 106 as described above. When DS 108 receives secure XML message 610 via the secure session, HSM2612 may first use digital signature 608 to validate secure XML message 610. Once HSM2612 validates secure XML message 610, HSM2 612 decrypts encrypted IMK 606 using system keys 604 and stores the resulting copy of IMK 602 in HSM2612.
  • FIG. 7A is a flow chart of one embodiment of CMS IMK Program (CIP) 700 for processing a request for IMK 602.
  • IRP 700 starts (702) and receives a request for an IMK such as IMK 602 (704).
  • a determination is made whether a CIN is included in the request (706). If not, an error message is sent (708) and CIP 700 goes to step 716.
  • CIP 700 obtains the chipholder profile from CMS (710).
  • a key reference, such as key reference 800 is obtained from the chipholder profile (712). The key reference and the chipholder profile are sent to the DS (714).
  • a determination is made whether there is another request (716). If so, CIP 700 goes to step 704. If not, CIP 700 stops (718).
  • FIG. 7B depicts SS IMK Program (SIP) 750.
  • SIP 750 starts (752) and receives a request for an IMK (754). A deterrnination is made whether there is a key reference ( 756). If there is no key reference, an error message is sent (758) and SIP 750 stops ( 766). If there is a key reference, the IMK is obtained (760). The IMK is encrypted with a system key (762). The IMK is transmitted to the HSM of the DS (764) and SIP 750 stops (766).
  • SS 106 has first hardware security module (HSMl) 600 and DS 108 has second hardware security module (HSM2) 612 for the second layer of security using system keys 604 that allow data to be encrypted, digitally signed, or both encrypted and digitally signed for transmission between HSMl 600 and HSM2612.
  • System keys 604 include a system authentication key, a system encryption keys and a system digital signing key.
  • the system authentication key is used to establish mutual authentication.
  • the system encryption keys include a system pubhc key and a system private key.
  • the system pubhc key is used to encrypt data for transmission to another hardware security module where the data is decrypted using the system private key at the receiving hardware security module.
  • HSMl and HSM2 have system symmetric key 616 used for encrypting and decrypting bulk data.
  • HSMl 600 uses a system pubhc key to encrypt the data to be transmitted, and/or estabhshes a signature for transmission of the data to be transmitted to DS 108.
  • the bulk data if first encrypted using system symmetric key 616, and then wrapped using the system pubhc key.
  • HSM2612 uses the system private key and performs the signature verification and unwrapping of the transmitted data from HSMl 600.Data is transmitted in extensible markup language. Transmitted data includes without limitation the issuer's master key, chipholder files, and post issuance data not included in the chipholder files.
  • the second security layer ensures that IMK 602 is never transmitted in the clear.
  • HSM2612 also uses IMK 602 to generate card keys 806 used to communicate with chip 120.
  • smart card issuers may require that software apphcation program loadings be carried out in particular ways via specific security pohcies. Smart card 102 issuers may also mandate business rules regarding how software apphcation programs are processed.
  • a set of rules at the chip management system makes selections at the second security layer and at the sixth security layer.
  • the set of rules selects whether data transmitted between the chip management system, the security server and the distribution server is to be encrypted, digitally signed, or encrypted and digitally signed (second security layer).
  • the set of rules further selects whether data transmitted between the distribution server and the chip is to be message authentication code or message authentication code encrypted (sixth security layer).
  • An apphcation provider or a chip issuer may mandate how the loading or deleting operation is performed by a set of security rules.
  • An apphcation provider or a chip issuer may mandate how an apphcation or applications are to be processed by a set of business rules. The rales are communicated to the chip management system by each specific apphcation issuer.
  • card keys 806 In order to securely transmit data from DS 108 to the chip, card keys 806 must be generated in HSM2612. If IMK 602 is not available at DS 108, it must be obtained from SS 106.
  • SS 106 is the credential management component of smart card system 100 and stores FMK 602. Transmission of EvTK 602 from SS 106 to DS 108 is secured using the second security layer.
  • FIG. 8 is a diagram depicting the establishment of a secure communication session between DS 108 and computer system 110.
  • DS 108 Using ON 400 of smart card 102, DS 108 obtains the corresponding chipholder profile 404D as described above.
  • Chipholder profile 404D has key reference 800 identifying the corresponding issuer's master key 802.
  • Issuer' s master key 802 is issuer's master key 602 (see FIG. 6). If DS 108 does not initially have issuer's master key 802 identified by key reference 800, DS 108 may obtain issuer's master key 802 from SS 106 as described above with respect to FIGS. 6, 7 A and 7B. HSM2612 uses issuer's master key 802 to generate card keys 806.
  • HSM2612 of DS 108 stores card keys 804. Once stored in DS 108 card keys 804 are used to encrypt and decrypt data exchanged between DS 108 and smart card 102.
  • FIG. 9 is a diagram depicting the transmission of post-issuance data 900 from CMS 104 to smart card 102.
  • a secure session established between DS 108 and computer system 110.
  • the secure communication session may be established as described above with respect to FIG. 8.
  • CMS 104 stores post-issuance data 900, and transmits stored post-issuance data 900 to DS 108.
  • post- issuance data 900 is encrypted using system keys to the DS 108.
  • DS 108 decrypts post- issuance data 900 using system keys.
  • DS 108 now needs issuer's master key 802 to create a secure communication session with smart card 102. If DS 108 does not initially have issuer's master key 802, DS 108 may obtain issuer's master key 802 from SS 106 as described above with respect to FIGS. 6 and 7.
  • Post-issuance data 900 is encrypted by CMS 104 prior to transmission to DS 108 using system keys and when apphcable, the system symmetric key.
  • encrypted post-issuance data 900 is decrypted by using system keys and when apphcable, the system symmetric key.
  • Decrypted post issuance data is provided to HSM2612 which uses issuer's master key 802 to generate card keys.
  • HSM2612 uses the card keys to generate a secure XML message 902 for fransmitting post issuance data 900.
  • CRM 208 also estabhshes a fourth security layer comprising session key 804.
  • CRM 208 establishes a secured communications link specific to a user log on session between chip 120 and DS 108 by generating a session key 804 for communication with the distribution server.
  • Session key 804 is unique for each user logon is generated to keep track of the data interaction between the user and DS 108. Session key 804 is then used by the DS 108 to track and authorize any and all operations performed by a user through CRM 208.
  • CRM 208 further generates a fifth security layer that is a data marker or flag specifying that the chip relay module has established a secure session with the chip. Only upon reading this data marker or flag will additional secure operations such as post issuance operations be processed by the distribution server. Once the secure session is established by CRM 208, applications can be loaded or deleted by directly ttansmitting APDU messages to chip 120 subject to a sixth security layer.
  • a fifth security layer that is a data marker or flag specifying that the chip relay module has established a secure session with the chip. Only upon reading this data marker or flag will additional secure operations such as post issuance operations be processed by the distribution server.
  • Data is transmitted from DS 108 to chip 120 subject to a sixth security layer where the data is either message authenticated coded or message authentication coded encrypted using a card keys 806 that are generated at HSM2612 so that the generated card keys 806 match the card keys installed on the chip at personahzation of smart card 102.
  • the authentication protocol of the sixth security layer may be initiated by APDUs that are part of GlobalPlatform® specification standards.
  • the messages are sent in extensible markup language.
  • HSM2612 of DS 108 generates a secure XML message 902 including post-issuance data 900.
  • the following is a programmatic definition of a suitable structure of secure XML message 902:
  • the value of the attribute "value” of the element “sessionID” is "a_session_id," the session key 804 used by DS 108, CRM 208 and smart card 102.
  • the value of the attribute "value” of the element “secureSession” is either true or false, and represents the state of a secure session similarly established between DS 108 and smart card 102.
  • the "action” element has an attribute "value,” the value of which specifies an action to be executed by DS 108 and/or CRM 208 of computer system 110 (see FIG. 2).
  • any data can reside in the "data” elements, but the data is often apphcation protocol data units (APDUs) including message authentication codes (MA.Cs).
  • APDUs apphcation protocol data units
  • MA.Cs message authentication codes
  • HSM2 612 produces a message authentication code (MAC) for XML message 902, and adds the MAC to the message.
  • MAC message authentication code
  • the MAC is a code or series of characters derived by applying a mathematical algorithm and a cryptographic key to post-issuance data 900. Any one of several known methods for computing MACs may be used.
  • FIG. 10A is a diagram of one embodiment of XML message 902 (see FIG. 9).
  • XML message 902 includes data portion 1000 and message authentication code (MAC) 1002.
  • Data portion 1000 includes post-issuance data 900
  • MAC 1002 is the MAC produced by DS 108 as described above.
  • FIG. 10B is a diagram of a second embodiment of XML message 902 (see FIG. 9).
  • XML message 902 includes data portion 1000 and message authentication code (MAC) encrypted 1002.
  • Data portion 1000 includes post- issuance data 900, and MAC encrypted 1004 is the MAC encrypted produced by DS 108 as described above.
  • MAC message authentication code
  • HSM 612 encrypts XML message 902 using card keys 804, and DS 108 transmits XML message 902 to computer system 110 via the secure session.
  • Computer system 110 receives encrypted XML message 902 from DS 108.
  • CRM 208 and/or security software 214 of computer system 110 decrypts the XML message 902 to obtain post-issuance data 900 and MAC 1002.
  • Computer system 110 uses MAC 1002 to verify both the authenticity and the integrity of post- issuance data 900.
  • computer system 110 transmits encrypted post-issuance data 900 and encrypted MAC 1002 to smart card 102 via card read/writer 112.
  • Smart card 102 receives and decrypts encrypted post-issuance data 900 and encrypted MAC 1002 to obtain post-issuance data 900 and MAC 1002. Smart card 102 then uses MAC 1002 to verify both the authenticity and the integrity of post-issuance data 900. Once the authenticity and the integrity of post-issuance data 900 are verified, smart card 102 processes post-issuance data 900. As used herein the term processing shall include without limitation loading a new software apphcation program, deleting an existing software apphcation program, or otherwise modifying stored data.
  • computer system 110 and/or smart card 102 may include security software for perfo ⁇ ning cryptographic operations including without limitation encryption and decryption, and for providing secure cryptographic key storage.
  • FIG. 11 depicts a flow chart of a Method for Transmitting Post-Issuance Data (MTPD) 1100 to a smart card such as smart card 102 (see FIGS. 1 A and 9).
  • MTPD 1100 may be embodied within distribution server (DS) 108 (see FIGS. 1A and 9).
  • DS distribution server
  • MTPD 100 starts and post-issuance data 900 (see FIG. 9) is received, wherein the post- issuance data is encrypted using system pubhc key (1104). Encrypted post-issuance data is decrypted using the system private key, thereby obtaining the (unencrypted) post-issuance data (1106).
  • An XML message such as XML message 902 is generated including the post-issuance data (1108).
  • a message authentication code (MAC) or a message authentication code (MAC) encrypted for the XML message is produced using card keys (1110).
  • the MAC or MAC encrypted is added to the XML message (1112).
  • the MAC or MAC encrypted XML message is transmitted to a smart card via a card reader of a computer system such as computer system 110. (see FIGS. 1A and 9) (1116).
  • MTPD 1100 stops (1116).
  • FIG. 12 depicts Card Key Generation Method (CKGM) 1200.
  • CKGM 1200 starts ( 1202) and a determination is made as to whether a Post Issuance Data Transaction has been received (1204). If not, CKGM 1200 stops (1216). If so, a determination is made whether the FMK is in the HSM of the DS (1206). If the IMK is not in the HSM of the DS, the IMK is obtained (1208) and DKGM 1200 proceeds to step 1210. If so, the Card KEK is produced (1210). The Card Mac Key is produced. The Card encryption key is produced (1214). CKGM 1200 stops (1216).
  • FIG. 13 depicts a flow chart of the post issuance data transmission method (PIDTM) 1300.
  • PIDTM 1300 starts (1302) and a determination is made whether there is a post issuance data transaction (1304). If not, PIDTM 1300 stops (1326). If so, a determination is made whether there is a bulk message to be sent (1306). If so, the bulk message is encrypted with a symmetric key (1308) and PIDTM 1300 goes to step 1310 . If not, the CMS rules are checked (1310). A determination is made as to whether the data should be encrypted using system keys (1312). If so the data is encrypted (1314) and PIDTM 1300 goes to step 1324.
  • a dete ⁇ nination is made whether the data is to be digitally signed (1316). If so, the data is digitally signed (1318) and PIDTM 1300 goes to step 1324. If not, a determination is made whether the data is to be encrypted and digitally signed (1320). If so, the data is encrypted and digitally signed (1322) and PIDTM 1300 goes to step 1324. The data is transmitted to the DS HSM (1324). PIDTM 1300 stops (1326).
  • FIG. 14 depicts a flow chart of DS transaction process (DTP) 1400.
  • DTP 1400 starts (1402) and a dete ⁇ nination is made whether a card has been placed in a card reader (1404). If not, an error message is sent (1406) and DTP 1400 returns to step 1404. If so, a determination is made as to whether the chip has been authenticated by the browser (1408). If not, an error message is sent and DTP 1400 goes to step 1404. If so, a determination is made whether the CRM is in the browser (1412). If not, the CRM is downloaded to the browser (1414). An SSL V3 session is established (1416). The ON is read (1418). A session context key is generated (1420). The type of transaction is identified (1422).
  • the type of transaction is compared to the CMS rules ( 1424). In accordance with an embodiment of the present invention, a determination is made whether a secure transaction is required by the CMS rules (1426). If not, DTP 1400 goes to step 1440. If so, the card keys are generated 1428. A determination is made whether the message is to be MAC (1430). If so, the MAC is generated using the card keys (1432). If not, a determination is made whether the message is to be MAC encrypted (1436). If not, an error message is generated (1434) and DTP 1400 goes to step 1444. If so, MAC encrypted is generated using the system keys (1438). The XML message is prepared with either the MAC or MAC encrypted code (1440). The XML message is transmitted to the chip (1442).

Landscapes

  • Business, Economics & Management (AREA)
  • Engineering & Computer Science (AREA)
  • Accounting & Taxation (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Computer Security & Cryptography (AREA)
  • Finance (AREA)
  • Storage Device Security (AREA)

Abstract

Ce système à carte intelligente permet de transmettre avec sécurité des données après émission à une puce intégrée au moyen d'un module de relais de la puce, d'une pluralité de modules matériels de sécurité, d'un premier système de communication à deux couches de sécurité et d'un deuxième système de communication à quatre couches de sécurité. Le premier système de communication peut être considéré comme étant un système côté serveur et comprend un système de gestion de la puce, un serveur de sécurité avec un premier module matériel de sécurité, un serveur de distribution avec un deuxième module matériel de sécurité et un système informatique connecté par un réseau. Le premier système de communication comprend une première couche de sécurité et une deuxième couche de sécurité. La première couche de sécurité comprend un système d'authentification mutuelle qui fait de chaque composant du premier système de communication un noeud de confiance pour tous les autres composants, grâce à une authentification mutuelle des systèmes clients. La deuxième couche de sécurité comprend des clés de système pour assurer une communication de sécurité entre les modules matériels de sécurité. Le deuxième système de communication peut être considéré comme étant un système côté client et comprend le système informatique connecté au serveur de distribution par un réseau, une unité d'entraînement et de lecture d'une carte PC/SC, un programme navigateur de l'internet et un module de relais de la puce, et assure la sécurité de la communication entre le serveur de distribution et la puce d'une carte intelligente insérée dans l'unité de lecture et d'écriture de la carte. Le deuxième système de communication comprend des troisième, quatrième, cinquième et sixième couches de sécurité.
EP04741621A 2004-05-28 2004-05-28 Systeme de transfert de donnees au moyen d'une carte intelligente et methodes pour assurer la securite du stockage et de la transmission Withdrawn EP1761904A1 (fr)

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/EP2004/050880 WO2005119606A1 (fr) 2004-05-28 2004-05-28 Systeme de transfert de donnees au moyen d'une carte intelligente et methodes pour assurer la securite du stockage et de la transmission

Publications (1)

Publication Number Publication Date
EP1761904A1 true EP1761904A1 (fr) 2007-03-14

Family

ID=35463089

Family Applications (1)

Application Number Title Priority Date Filing Date
EP04741621A Withdrawn EP1761904A1 (fr) 2004-05-28 2004-05-28 Systeme de transfert de donnees au moyen d'une carte intelligente et methodes pour assurer la securite du stockage et de la transmission

Country Status (5)

Country Link
EP (1) EP1761904A1 (fr)
CN (1) CN1954345B (fr)
CA (1) CA2568990C (fr)
IL (1) IL179597A (fr)
WO (1) WO2005119606A1 (fr)

Families Citing this family (20)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
FR2908209B1 (fr) * 2006-11-07 2009-02-13 Oberthur Card Syst Sa Entite electronique portable et procede de personnalisation d'une telle entite electronique
US8014755B2 (en) 2007-01-05 2011-09-06 Macronix International Co., Ltd. System and method of managing contactless payment transactions using a mobile communication device as a stored value device
JP4470071B2 (ja) 2008-03-03 2010-06-02 フェリカネットワークス株式会社 カード発行システム、カード発行サーバ、カード発行方法およびプログラム
WO2010003274A1 (fr) * 2008-07-09 2010-01-14 Gemalto Sa Dispositif électronique portable gérant des données xml
CN102257540A (zh) 2008-12-19 2011-11-23 Nxp股份有限公司 增强智能卡使用
EP2209080A1 (fr) * 2009-01-20 2010-07-21 Gemalto SA Procédé de chargement de données dans un dispositif électronique
CN101483554B (zh) * 2009-02-23 2013-09-11 中兴通讯股份有限公司 硬件安全管理的方法与系统
CN102341782B (zh) 2009-03-10 2015-03-11 Nxp股份有限公司 用于传输nfc应用程序的方法和计算设备
FR2949877B1 (fr) * 2009-09-10 2017-09-15 Viaccess Sa Procede de verification de l'integrite de donnees inscrites dans une memoire
DE102010006987A1 (de) 2010-02-05 2011-08-11 Giesecke & Devrient GmbH, 81677 Komplettierung portabler Datenträger
DE102010027586B4 (de) 2010-07-19 2012-07-05 Siemens Aktiengesellschaft Verfahren zum kryptographischen Schutz einer Applikation
CN103049776A (zh) * 2012-12-31 2013-04-17 中国电子科技集团公司第十五研究所 一种基于文件交换的b/s系统读写卡方法
CN103178953B (zh) * 2013-02-27 2016-09-21 中国电力科学研究院 一种安全型芯片密钥发行系统及其方法
WO2015167544A1 (fr) 2014-04-30 2015-11-05 Hewlett-Packard Development Company, Lp Demande de vérification
CN105592033B (zh) * 2014-12-30 2018-12-25 中国银联股份有限公司 可信服务管理系统和方法
CN106250750B (zh) * 2016-07-18 2019-08-16 深圳市文鼎创数据科技有限公司 基于MacOSX系统的USB设备接入方法及装置
EP3632035A4 (fr) 2017-05-31 2021-03-10 Entrust Datacard Corporation Gestion d'objets cryptographiques sur de multiples sites distants
GB2565411A (en) * 2017-06-12 2019-02-13 British Telecomm Improved hardware security module management
CN111654367B (zh) * 2018-08-31 2023-05-12 创新先进技术有限公司 密码运算、创建工作密钥的方法、密码服务平台及设备
CN109347625B (zh) * 2018-08-31 2020-04-24 阿里巴巴集团控股有限公司 密码运算、创建工作密钥的方法、密码服务平台及设备

Family Cites Families (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP0798673A1 (fr) 1996-03-29 1997-10-01 Koninklijke KPN N.V. Méthode pour transférer des commandes dans une carte à circuit intégré
US6131090A (en) 1997-03-04 2000-10-10 Pitney Bowes Inc. Method and system for providing controlled access to information stored on a portable recording medium
EP1125262A1 (fr) 1998-10-27 2001-08-22 Visa International Service Association Delegation de gestion pour applications de cartes a puce
WO2000079411A2 (fr) * 1999-06-21 2000-12-28 Sun Microsystems, Inc. Procede et appareil pour la realisation de transactions commerciales via internet
JP3793377B2 (ja) 1999-08-30 2006-07-05 日本電信電話株式会社 データ格納システム及びデータ格納プログラムを格納した記憶媒体
GB2357229B (en) 1999-12-08 2004-03-17 Hewlett Packard Co Security protocol
FR2805059A1 (fr) 2000-02-10 2001-08-17 Bull Cp8 Procede de chargement d'une piece de logiciel dans une carte a puce, notamment du type dit "applet"
US7103773B2 (en) 2001-10-26 2006-09-05 Hewlett-Packard Development Company, L.P. Message exchange in an information technology network

Non-Patent Citations (3)

* Cited by examiner, † Cited by third party
Title
JOYE M ET AL: "ID-BASED SECRET-KEY CRYPTOGRAPHY", 1 October 1998, OPERATING SYSTEMS REVIEW, ACM, NEW YORK, NY, US, PAGE(S) 33 - 39, ISSN: 0163-5980, XP000849893 *
JOYE M ET AL: "ID-BASED SECRET-KEY CRYPTOGRAPHY", OPERATING SYSTEMS REVIEW, ACM, NEW YORK, NY, US, vol. 32, no. 4, 1 October 1998 (1998-10-01), pages 33 - 39, XP000849893, ISSN: 0163-5980, DOI: 10.1145/302350.302359 *
See also references of WO2005119606A1 *

Also Published As

Publication number Publication date
CA2568990C (fr) 2011-09-27
IL179597A0 (en) 2007-05-15
CN1954345B (zh) 2012-11-21
IL179597A (en) 2010-12-30
WO2005119606A1 (fr) 2005-12-15
CN1954345A (zh) 2007-04-25
CA2568990A1 (fr) 2005-12-15

Similar Documents

Publication Publication Date Title
US7380125B2 (en) Smart card data transaction system and methods for providing high levels of storage and transmission security
CA2568990C (fr) Systeme de transfert de donnees au moyen d'une carte intelligente et methodes pour assurer la securite du stockage et de la transmission
US6385723B1 (en) Key transformation unit for an IC card
Hansmann et al. Smart card application development using Java
CA2753375C (fr) Procedes et appareil de transactions electroniques
US6230267B1 (en) IC card transportation key set
US8924310B2 (en) Methods and apparatus for conducting electronic transactions
US7707408B2 (en) Key transformation unit for a tamper resistant module
US7917760B2 (en) Tamper resistant module having separate control of issuance and content delivery
KR20210069033A (ko) 비접촉식 카드의 암호화 인증을 위한 시스템 및 방법
KR20060125835A (ko) 모바일 단말기를 이용하여 전자 트랜잭션을 수행하기 위한방법 및 시스템
KR20210069030A (ko) 비접촉식 카드의 암호화 인증을 위한 시스템 및 방법
US20040236624A1 (en) Method and apparatus for targeted marketing in embedded chip post issuance transactions
AU2004231226B2 (en) Methods and apparatus for conducting electronic transactions
Laidi Using smart card in e-business applications: an e-business model

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20061221

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IT LI LU MC NL PL PT RO SE SI SK TR

17Q First examination report despatched

Effective date: 20070723

DAX Request for extension of the european patent (deleted)
STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN

18D Application deemed to be withdrawn

Effective date: 20130123