GB2434905A

GB2434905A - Smart card reaffirmation service

Info

Publication number: GB2434905A
Application number: GB0602143A
Authority: GB
Inventors: Eyal Webber-Zvik; Yossi Fixman; Jacob Mendel
Original assignee: SCsquare Ltd
Current assignee: SCsquare Ltd
Priority date: 2006-02-03
Filing date: 2006-02-03
Publication date: 2007-08-08
Also published as: GB0602143D0

Abstract

An Internet based system for reactivating (reaffirming) a smart card is available only to a cardholder who has registered in advance of a denial or blocking of the card. A reaffirming service provider works on behalf of the smart card service provider. Personal data provided by a cardholder to the reaffirming service provider during the registration process is encrypted and stored in a user database that is used in the reaffirming procedure for identifying the applicant (174) in conjunction with the PIN associated with the PIN associated with the card (172). The card is unblocked (178) when a second PIN (an 'unblocking PIN') is verified (176). A new unblock PIN is then generated for future use (180).

Description

FIELD OF THE INVENTION

The present invention relates in general to smart cards and in particular to re -affirming denied card service.

BACKGROUND OF THE INVENTION

Smart cards (SC) are commonly employed as an authentication means for identifying a user. In a variety of known services such as electronic financial transactions, mobile communications, or accessing computer networks, a user is identified by means of the SC and by a variety of additional means, for example by a personal password or a personal identifying number (PIN). SCs typically get an automatic service denial following submission of a succession of erroneous PINs. A reaffirming service (RS) associated with a SC service is provided as described by reference to Fig. I in which a flow chart of a typical reaffirming process of a blocked SC is shown. A user whose smart card has been blocked applies for RS in step 10. The RS provider may negotiate with the user terms of the service in step 12. This step usually includes additional identification procedures such as comparing between newly provided answers to personal data stored in the user database controlled by the service provider. If the user identity is confirmed, the SC service is unblocked in step 16. If the identity is not confirmed the denied SC service is not unblocked. RS providers normally operate help desks in which authorized personnel members carry out the reaffirming process. Often a user from his/her personal computer or terminal in the computer network individually carries out a reaffirming process, such as by means of a web site. Typically in such a case, the user has to answer a security questionnaire. The newly provided answers are automatically compared to personal data stored in the user database managed by the service provider. By successful completion of such comparison the applicant gets a re-approval for his SC service and may change the previous PIN to a new one. However, such a web page, which is linked to the database of the service provider, is publicly accessible and is therefore potentially exposed to an unauthorized intruder.

BRIEF DESCRIPTION OF THE DRAWINGS

Fig. I is a flowchart of a prior art reaffirming process; Fig. 2 is a flowchart describing the registration process to a re-affirming service (RS) according to a preferred embodiment of the present invention; Fig. 3 is a flowchart of a re-affirming process of a denied smart card employing a RS of the invention;

DETAILED DESCRIPTION OF THE PRESENT INVENTION

In accordance with a preferred embodiment of the invention reaffirming a previously denied service for smart cards is done by a web based procedure described below. In order to apply for a reaffirming service the cardholder has to register his/her name in the reaffirming service (RS) provider list first. The RS provider works on behalf of the SC card service provider or in an association with it. The registration process is available to a cardholder at any time as long as his/her smart card is active. A cardholder whose smart card service has been denied, and who has not registered prior to the time of the denial of service, has to personally approach a help desk where an authorized personnel member is to carry out the process of re-approval of the service. To explain the registration procedure reference is first made to Fig. 2. A cardholder who applies for the service, whose smart card is active and having in his possession an unlocking PIN, accesses the web site of the RS provider within the Internet and selects the registration process, in step 20. From this moment up to the end of the process the communications between the applicant and the RS server are carried out via a secured communications channel. In step 22 the terms and conditions (T&Cs) of the service are presented to the applicant. If the applicant accepts the T&Cs in step 24, he/she would then proceed to step 26. If the applicant declines to accept the T&Cs, the process is ended in step 28. In step 26, the applicant is requested to insert the smart card (SC) in the card reader in order to read the identification data. The data of the SC is verified against a list of cards data approved for service in step 30. If not approved, the procedure goes to step 28 and the process ends. If approved, in step 30, encryption keys are generated in step 32 and the details of the applicant's identity are stored in a user database in step 34.

The applicant is required to provide answers to a security questionnaire and the answers are stored in the user database in step 36. The applicant is asked then to submit the current unblocking PIN in step 38. In return, a new unblocking PIN is generated and provided to the applicant for subsequent use at step 40. The newly received data as well as the newly generated data are encrypted by means of the new keys in step 42. The newly generated data is stored in the user database while some of the newly generated data is stored encrypted in the smart card at step 44. The applicant is notified of the successful completion of the registration process in step 46 and the process terminates in step 48. To assist the applicant, one or more applets may be sent by the service provider to be embedded in the user interface, for example in the registration process or in a reaffirming process. In accordance with the present invention The user database described hereinabove is separated from the user database of the SC service provider and is associated only with the RS service.

Once the applicant has been properly registered and approved for RS, the applicant becomes a user eligible for a reaffirmation service. A user can apply through the Internet to affirm a SC denied of service, which has been blocked for use. Basically, the process of reaffirmation includes verifying the applicants' identity, and unblocking the denied card. The actual unblocking is typically done providing a new PIN. A flowchart of an exemplary process of reaffirming of the blocked smart card is shown in Fig. 3. The applicant accesses the RS provider's website in the Internet and selects the reaffirming service in step 160. The T&Cs of the service are presented in step 162. The applicant is requested to confirm his/her acceptance of the T&Cs in step 164. The process terminated in step 166 if the user declines to reconfirm the T&Cs. If the T&Cs are confirmed, the smart card is inserted into the card reader and its identification details are entered in the system. From this moment on the communication between the user's interface and the RS server is carried out employing a secured communication channel. The eligibility of the SC for the RS is verified in step 170. If denied, the process terminates in step 166. If the card is approved for the service in step 170 the applicant's identity is verified by means of the PIN in step 172. The applicant's identity is verified by correct answers provided in response to some questions selected from the security questionnaire in step 174.

The applicant is asked to input the unblocking PIN in step 176, which is then checked with its stored value in step 177. A failure toprovide the correct unblocking PIN results in termination of the process in step 166. By inserting the correct PIN the smart card is unblocked in step 178. A new set of keys and unblocking PIN are generated in step 180. The newly generated data is is encrypted employing the new keys in step 182. The new data is stored in the smart card and in the service provider's database in step 184. The applicant is notified that the process is successfully accomplished in step 186 and the process ends in step 188.

Claims

CLAIMS

1. A method for re-affirming a smart card (SC) having had a service denied with a subsequent blocking of use, said method comprising: t registering interactively through a network to a reaffirmation service (RS) as long as said SC is active; t applying for a RS subsequent to a denial of service to a SC over the Internet; i. submitting personal identification, and i. unbiocking said denied service if the identity is verified.

2. A method as in claim 1, further comprising verifying identity of a cardholder by employing data originated at said registration.

3. A smart card system comprising at least a reaffirming service (RS) server employing a user database.

4. A smart card system as in claim 3, wherein said RS server is accessible through the Internet.