EP2912605A1

EP2912605A1 - Smart card including an integrated usb card reader

Info

Publication number: EP2912605A1
Application number: EP13789214.7A
Authority: EP
Inventors: Michel Thill; François-Xavier Marseille
Original assignee: Gemalto SA
Current assignee: Thales DIS France SA
Priority date: 2012-10-29
Filing date: 2013-10-24
Publication date: 2015-09-02
Also published as: WO2014067845A1; EP2725526A1

Abstract

A smart card (2) comprising a first microchip (P1) and a connector (12) compatible with the standard ISO 7816, two contacts (C4, C8) of which are compatible with the USB standard. The smart card (2) comprises a second microchip (P2) comprising a first USB interface and a second ISO interface, wherein the second microchip (P2) is connected: • firstly to the connector (12) by means of a first link (16) allowing the transfer of USB frames, and • secondly to the first microchip (P1) by means of a second link (33, 34, 35) allowing the transfer of ISO frames.

Description

SMART CARD INCLUDING AN INTEGRATED USB CARD READER

FIELD

This invention relates to the technical field of smart cards with at least one USB interface. More particularly, the field of the invention relates to smart cards for securing and sharing data by means of a USB interface.

BACKGROUND OF THE INVENTION ISO standardisation has defined the possibility of installing a USB connection on the standardised contacts C4 and C8 of a smart card. In 2005, such standardisation was extended by ETSI in order to offer the opportunity of adding the USB protocol and connectors to SIM cards with greater storage memory than the memories in the market. The increase in storage space aimed allows a large variety of applications. In particular, the increase has made it possible to enlarge the memory from 1 megabyte to several gigabytes.

The very significant increase in the quantity of memory has made it possible to require an exchange link that is faster than the ISO 7816 link of the already existing smart cards , which were limited until now to a few hundred Kbits/s. USB connections address that need for speed and also make it possible to set up a link that does not require a large number of wires. In particular, two wires are sufficient, which offers the advantage of using up only two contact points of the microchip of a smart card.

Prototypes of smart card integrated circuits comprising a USB interface in addition to the traditional ISO interface have been built during that period, then gradually abandoned in the absence of the success of SIM cards with large memories.

Further, smart cards with screens are also known. These smart cards may comprise a display controller and can interface with a secure microchip of a smart card. In general, the controller makes it possible to recover data that are in ISO 7816 format but are not secured, for example from an integrated circuit of a bank card, and interface with a display integrated in the smart card. That is the case of the bank card described in the application WO 201 1/151309 where the display screen allows the display of transactions saved in the secure microchip by means of a microcontroller that carries out the function of card reader.

These last smart cards comprise a screen and make it possible to envisage new applications, particularly as regards bank cards.

In these new applications, one issue is to allow communication between said card and electronic media other than conventional merchants' terminals, payment terminals or cash dispensers.

Particularly, one interoperability issue is to set up a connection between the smart card and any device with a USB connection.

Today, one of the problems with existing solutions is that it is not possible in the last case to communicate otherwise than through the ISO 7816 interface with the secure microcontroller from a PC or a tablet, which means that it is necessary to use an appropriate card reader to manage a connection with the microcontroller, particularly with all devices that require direct access to the microcontroller.

SUMMARY OF THE INVENTION

The invention makes it possible to overcome the aforementioned drawbacks. One aim of the invention relates to a smart card comprising a first microchip and a connector compatible with the standard ISO 7816, two contacts of which are compatible with the USB standard. Further, the smart card comprises a second microchip comprising at least one first USB interface and a second ISO interface.

The second microchip is connected:

• firstly to the connector by means of a first interface comprising at least one link allowing the transfer of USB frames, and

• secondly to the first microchip by means of a second interface comprising at least one link allowing the transfer of ISO frames.

In one mode of the invention, the second microchip comprises a calculator that makes it possible:

• to decode USB data frames received from the contacts of the connector and transiting through the first link;

• to re-emit said decoded data in ISO frames to the first microchip through the second link.

In one embodiment, the first microchip is connected to the external ISO interface via the contacts C1 , C5 for power supply and the contacts C2, C3, C7 for the ISO 7816 interface. The second microchip is connected to the external ISO interface via the contacts: C1 , C5 also for power supply and the contacts C4, C8 for the USB interface.

Such a card comprises the advantage of being compatible with USB connections by integrating the possibility of decrypting data received from a USB port and extracting some of them so as to transmit them to the microchip of the smart card in the form of ISO frames.

In one embodiment, the second microchip comprises a calculator that makes it possible to "decapsulate" USB data frames transmitted by an external system such as a PC or a tablet, and to re-emit said data in ISO frames to the first microchip. Further, the second microchip makes it possible to receive ISO frames from the first microchip and encapsulate them in USB frames to send them to an external system. One advantage is to make it possible to integrate a USB card reader in the card. Only mechanical connections are required to connect the USB contact points of the smart card connector to an outside device such as a PC for example. Such physical connections may be either a cable for adaptation from the USB format to the ISO format, or a removable or fixed card-edge USB footprint.

Advantageously, the second microchip is a microcontroller, wherein said microcontroller comprises a third interface with a display and a fourth interface with an actuator that makes it possible to activate a command from an operator.

Advantageously, the microcontroller comprises a fifth interface with a numeric keypad, wherein said numeric keypad makes it possible to define a numeric command from an operator.

One advantage is to allow the display of USB frames received from outside, such as a remote server, and to 'double' the security of a transaction by a first local PIN code (known to the operator) and a second transmitted PIN code that the operator must enter once it is displayed.

Advantageously, the actuator is an on/off button. Such a button makes it possible to instantiate a particular mode to secure a transaction for example. Advantageously, the microcontroller can be controlled by a command from the numeric keypad so as to emit USB data frames to the connector contacts by means of the first link, wherein said data comprise a numeric instruction.

Advantageously, when said card is connected via the USB interface of the connector, action by the operator on the card actuator allows the generation of a USB request from the microcontroller to the remote server. Advantageously, the display allows the display of the numeric command entered on the keypad.

Advantageously, the display allows the display of a numeric instruction encapsulated in at least one USB frame received by the USB connectors (C4, C8) of the connector from a remote server.

Advantageously, the display allows the display of a 2D code.

BRIEF DESCRIPTION OF DRAWINGS

Other characteristics and benefits of the invention will become clear in the detailed description below, by reference to the attached figures, which represent the following:

^■ figure 1 : diagram of an embodiment of the invention comprising a smart card in which a USB connection with the microcontroller is illustrated;

^■ figure 2: diagram of a smart card according to the invention comprising an integrated display and keypad;

^■ figure 3: representation of the connectors of a microchip of a smart card;

■ figure 4: diagram of a smart card according to the invention

comprising an integrated USB connector. DESCRIPTION

Figure 1 represents a first embodiment of the invention showing a smart card 1 comprising a first microchip P1 and a second microchip P2 and a connector 12 comprising 8 contact points. The connector 12 comprises a mechanical USB interface comprising two contact points C4, C8, which are connected to the second microchip P2 by means of a data link 16.

The data link 16 allows the transfer of data in USB format from an outside device connected to the connector 12 or makes it possible to emit these encapsulated data in USB format to said outside device. In figure 1 , two contacts C4, C8 (see figure 3) of the secure microchip 12 are wired to allow such a link 16 with the second microchip P2.

The smart card 1 according to the invention comprises an interface between the connector 12 and a first chip P1 by means of three links 13, 14, 15 allowing the transfer of data encapsulated in ISO 7816 format between the first microchip P1 and an outside device connected to the connector 12. In particular, figure 1 taken in consideration with figure 3 makes it possible to reference the contact points of the connector 12, which is connected to the first microchip P1 : the points C2, C3 and C7 are used to that end.

The smart card according to the invention remains compatible with connection devices of the prior art that interface with the connector 12. Indeed, when the card 1 is connected to a conventional ISO device, there is nothing outside on the USB connectors C4 and C8. The microchips P1 and P2 are powered by the inputs C1 , C5. But microchip P2 does not receive anything on the USB inputs and thus remains in inactive mode on its ISO interface, allowing the microchip P1 to operate correctly on the ISO interfaces. One benefit of this embodiment is that:

• firstly, data in USB format arriving from an outside device can be transmitted directly to the second microchip P2 which can extract data in that format;

· secondly, data in ISO 7816 format arriving from an outside device can be transmitted directly to the first microchip P1 which can extract data in that format.

Besides, the data received by the second microchip P2 or the data derived from computation by the second microchip P2 may be transmitted in ISO 7816 format to the first microchip P1 by means of an interface comprising an ISO 7816 data link. That last link comprises three links, which are referenced in figure 1 : 17, 18 and 19. These three links correspond to the data transmitted according to the ISO 7816 protocol, namely Reset, Clock and I/O interface.

When the first microchip P1 is a secure and standardised EMV type chip, the three ISO contact points of the microchip P1 are wired to the three links 13, 14, 15 and to the three links 17, 18, 19. The second microchip P2 is capable in that embodiment of receiving, decoding, emitting and encoding USB frames to an outside device connected to the connector 12 and receiving, decoding, emitting and encoding ISO 7816 data frames to a second microchip P2. One advantage of such a smart card is to make it unnecessary to connect the smart card 1 to a card converter for interfacing with a device enabling encoding, decoding and the transfer of data encapsulated in USB format. In this embodiment, a simple physical USB connection, also called a

'mechanical' USB connection in that adapted connection cables alone are sufficient, makes it possible to connect to the contacts C4 and C8 of a connector 12 of such a smart card.

Such mechanical connection makes it possible to transfer USB data from a smart card P2 to an outside device, such as a PC. If USB data are received by the microchip P1 , the data may be transferred directly from the microchip P1 to the microchip P2 by links 17, 18, 19 of figure 1 or 33, 34 and 35 of figure 2. The reverse link may also be established, that is to say allowing the reception of data in USB format by the smart card 1 or 2 and thus by the second microchip P2 of said smart card.

Figure 3 illustrates the contact points C1 to C8 of a microchip with eight contacts and their references as defined in standard ISO 7816. C1 is the power supply contact, also referenced VCC, C2 is the reset contact, referenced RST, C3 is the clock contact, also referenced CLK, C4 is one of the two interchip USB contacts, referenced D+. On the other side of the connector, is C5, which is the ground contact, known as GND. C6 is the contact known under the name "Single Wire Protocol" referenced SWP, C7 is the data input and output contact referenced I/O and lastly C8 is the second inter-chip USB contact, referenced D-.

The contact points C4 and C8 that support the USB connection are defined in the standard ETSI TS 102.600. The smart card 1 or 2 can also store data in USB format in the second microchip P2 and make it possible to use those data later on. Particularly, during exchanges of passwords or authentication checks during connection to a terminal comprising the two interfaces USB and ISO 7816, it is possible to benefit from a dual interface that allows the exchange of checks.

Figure 2 represents an embodiment in which a smart card 2 comprises a connector 12, a first microchip P1 identical to the first microchip P1 of figure 1 and a second microchip P2 which is a microcontroller that allows the management of a display 10, a keypad 23 and an on/off button 24.

A microcontroller P2, integrated into the microchip P2, comprises a USB interface that provides a physical connection by means of the connection 16 with the connector 12. Further, the microcontroller P2 comprises an ISO 7816 interface comprising three data links 33, 34, 35 that allow the transfer of ISO 7816 frames between the first microchip P1 and the second microchip P2. The microcontroller P2 thus comprises an ISO 7816 interface also with the connector 12 via the contact points C2, C3 and C7, wherein the links can be routed to the microchip P1 and/or to the connector 12. They may thus be made so as to build a second branch of links 13, 14 and 15 which are those connected to the first microchip P1 as shown in figure 2.

This embodiment makes it possible to transmit ISO 7816 frames from the connector 12 to the microcontroller P2. That microcontroller P2 can:

- either transmit these frames without analysing them to the microchip P1 via the links 33, 34 and 35

- or interpret these ISO 7816 frames by means of computations made within the microcontroller P2 to process the received data.

Similarly, when the ISO 7816 links: 33, 34 and 35 are implemented between the microcontroller P2 and the connector 12, they make it possible to emit ISO frames either from the microchip P1 or generated by the microchip P2 from the computations carried out by the microcontroller P2.

In the embodiment represented in figure 2, the microcontroller P2 comprises an interface that exchanges data with the display 10 by means of a link 18. Further, the microcontroller P2 comprises another interface that exchanges data with the keypad 23 by means of a link 27. Lastly, a link 26 makes it possible to exchange information from an on/off button, referenced 24 in figure 2, with another interface of the microcontroller P2.

In this configuration, the USB interface of the microcontroller P2 further makes it possible to communicate with an outside connected device which can put the smart card 2 into a so-called 'card reader emulation' mode.

Further, this configuration makes it possible to set up communication between the display 10 and the first microchip P1 through the ISO interface between the two microchips P1 and P2 while the USB connection is active. The smart card 2 according to the invention allows the display 10 to access secure information in the card, for example by using an external PIN code, that is to say received from a remote server, for example, to reveal it to the user without having to report it to an unsecured host.

The configuration of the invention represented in figure 2 is particularly valuable when a code is transmitted from a site, or a remote server, for example, during a transaction via the USB interface of the connector 12 to the second microchip. That code may be displayed on the display 10 and then be re-entered by the operator using their smart card.

In the latter case, the code is sent via the USB interface and the link 16 to the microcontroller P2. The latter may display the content of the transmitted code. In that case, the user may enter the displayed code on the keypad, and the microcontroller P2 then transmits the entered code via the ISO interface to the first microchip P1 by means of links 33, 34 and 35 connected in parallel. These connections replace the links 17, 18 and 19 represented in figure 1 . That last microchip P1 can then run a check and authorise payment. This means makes it possible to secure transactions via a dual

USB/ISO interface that is set in parallel between the two microchips P1 , P2. Such a means makes it possible to locally secure a transaction by means of a conventional PIN user code during payment. Further, the means makes it possible to secure the data transfer link during the emission or reception of messages via the network. Figure 4 represents an alternative embodiment of the smart card 3 according to the invention that can be combined with the characteristics of the card 1 of figure 1 or card 2 of figure 2.

In that alternative, a USB 40 connector is directly integrated into the smart card according to the invention, that is to say it is integral with the card 3. The USB 40 is wired to the connector 12 by means of two links that make it possible to interface with the contact points C4 and C8 of the connector 12.

The USB 40 connector is compatible with a conventional USB cable, it may be of the 'flat connector' type such as those found in the market for connecting a smart phone to USB connections.

In a second alternative embodiment of a smart card according to the invention that is not shown and can be combined with the characteristics of the card 1 of figure 1 or the card 2 of figure 2; the card may be associated with a card-holder that comprises firstly interior connections that make it possible to connect to the USB contact points C4 and C8 and secondly to connect those contact points via wiring to an external connector integral with the card holder. The microcontroller P2 thus comprises computation means such as a calculator and a memory that makes it possible to decode USB and ISO frames and re-encapsulate them in the required format.

Further, it is practical in this configuration to access the microcontroller management software and adapt it and update it. That also allows tracking that is equally local, that is to say in the card, of the operations carried out. Lastly, the smart card according to the invention makes it possible, not only to carry out transactions, but also to store receipts, notes, electronic tickets or any other electronic document in any format via the USB interface. For example, the purchase of tickets on the Internet via a PC may be carried out using the smart card according to the invention with simple means for connecting that screen card to the PC.

The following working may be then be initiated thanks to the smart card according to the invention:

^■ Payment by connecting the card to the PC with the benefit of card component security;

^■ Storage on the card in a secure area;

^■ Return of the ticket by means of the screen or the contactless link at the time of use of the ticket.

Claims

A smart card (1 , 2) comprising a first microchip (P1 ) connected to a connector (12) compatible with the standard ISO 7816, characterised in that the smart card (1 , 2) comprises a second microchip (P2) comprising a first USB interface (16) and a second ISO interface (33, 34, 35), wherein the second microchip (P2) is connected:

• firstly to the connector (12) by means of a first link (16) allowing the transfer of USB frames, and

• secondly to the first microchip (P1 ) by means of a second link (33, 34, 35) allowing the transfer of ISO frames.

A smart card (1 , 2) according to claim 1 , characterised in that the

second microchip (P2) comprises a calculator that makes it possible:

• to decode USB data frames received from the contacts of the connector (12) and transiting through the first link (16);

• to re-emit said decoded data in ISO frames to the first microchip (P1 ) through the second link (33, 34, 35).

A smart card (1 , 2) according to any of claims 1 to 2, characterised in that the second microchip (P2) is a microcontroller, wherein said microcontroller (P2) comprises a third interface with a display (10) and a fourth interface (26) towards an actuator (24) that makes it possible to activate a command from an operator.

A smart card according to claim 3, characterised in that the microcontroller (P2) comprises a fifth interface (27) towards a numeric keypad (23), wherein said numeric keypad (23) makes it possible to define a numeric command of an operator.

5. A smart card according to any of claims 3 or 4, characterised in that the microcontroller (P2) can be controlled by a command from the numeric keypad (23) so as to emit ISO data frames to the connector (12) by means of a third data link (33, 34, 35), wherein said data comprises a numeric instruction.

6. A smart card according to any of claims 3 to 7, characterised in that when said card is connected via the USB interface of the connector (12), the generation of a USB request from the microcontroller (P2) to a remote server follows the generation of a request from the microchip P1 to a remote server.

7. A smart card according to any of claims 3 to 9, characterised in that the display (10) makes it possible to display a numeric instruction encapsulated in at least one USB frame received by the USB connectors (C4, C8) from the connector (12) and coming from a remote server.

8. A smart card according to any of claims 1 to 1 1 , characterised in that the smart card (3) comprises a second USB connector (40), wherein said USB connector (40) is connected firstly to the USB contact points (C4, C8) of the connector (12) by wiring integrated into the smart card (3) and secondly allowing connection with a device comprising a USB connector adapted to cooperate with the USB connector (40).