WO2004063979A1 - Method and terminal for detecting fake and/or modified smart card - Google Patents
Method and terminal for detecting fake and/or modified smart card Download PDFInfo
- Publication number
- WO2004063979A1 WO2004063979A1 PCT/IB2003/005830 IB0305830W WO2004063979A1 WO 2004063979 A1 WO2004063979 A1 WO 2004063979A1 IB 0305830 W IB0305830 W IB 0305830W WO 2004063979 A1 WO2004063979 A1 WO 2004063979A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- terminal
- current signature
- smart card
- current
- signature
- Prior art date
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
- G06K17/00—Methods or arrangements for effecting co-operative working between equipments covered by two or more of main groups G06K1/00 - G06K15/00, e.g. automatic card files incorporating conveying and reading operations
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
- G06K5/00—Methods or arrangements for verifying the correctness of markings on a record carrier; Column detection devices
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
- G06K19/00—Record carriers for use with machines and with at least a part designed to carry digital markings
- G06K19/06—Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code
- G06K19/067—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components
- G06K19/07—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components with integrated circuit chips
- G06K19/073—Special arrangements for circuits, e.g. for protecting identification code in memory
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06K—GRAPHICAL DATA READING; PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
- G06K19/00—Record carriers for use with machines and with at least a part designed to carry digital markings
- G06K19/06—Record carriers for use with machines and with at least a part designed to carry digital markings characterised by the kind of the digital marking, e.g. shape, nature, code
- G06K19/067—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components
- G06K19/07—Record carriers with conductive marks, printed circuits or semiconductor circuit elements, e.g. credit or identity cards also with resonating or responding marks without active components with integrated circuit chips
- G06K19/073—Special arrangements for circuits, e.g. for protecting identification code in memory
- G06K19/07309—Means for preventing undesired reading or writing from or onto record carriers
- G06K19/07372—Means for preventing undesired reading or writing from or onto record carriers by detecting tampering with the circuit
Definitions
- the invention relates to a method, and a corresponding terminal, of detecting a fake and/or modified smart card inserted into a physical interface of a terminal.
- Smart cards are commonly used in a wide range of applications for the purpose of authority check, payment, satellite TV, data storage, etc.
- a smart card usually resembles a credit card in size and shape, but typically contains an embedded microprocessor inside.
- a terminal with a card reader communicates with the microprocessor which controls access to the data on the card.
- Smart cards may e.g. be used with a smart card reader attached to or located in a personal computer to authenticate a user, etc. Smart card readers can also be found in mobile phones for SIM reading and vending machines.
- a private and or in-home terminal with a smart card reading capability such as a set top box (STB), integrated digital television (IDTV), Digital TVs, home gateways, access systems, GSMs, Internet audio sets, car systems, etc.
- STB set top box
- IDTV integrated digital television
- Digital TVs home gateways
- access systems GSMs
- Internet audio sets etc.
- the possibilities to spy on the electronic communication between a smart card and/or a secure access card and the terminal is much greater than in a public automated teller machine (ATM) or similar semi- public/public terminals e.g. used for/in connection with e-commerce.
- ATM public automated teller machine
- This enables attack on the smart card that is not possible with conventional smart card applications in public and/or semi-public terminals, due to the operation in a private sphere.
- a financial and service industry consortium Finread in Europe is attempting to standardize a form of e-commerce terminals used in public ATM and personal computers (PCs), and also for future STBs, IDTV and similar home terminals.
- PCs public ATM and personal computers
- STBs future STBs, IDTV and similar home terminals.
- Embedded Finread is a part of the Finread consortium examining the issues of low-cost terminals for e-commerce such as LDTV, Jave terminals and STBs.
- the cost of temper resistant and other counter measures normally adopted for dedicated terminals i.e. ATMs
- Such cards have on-card dynamic data processing capabilities and allocate card memory into independent sections assigned to a specific function and/or application.
- the multi-application/multi-function smart card is distributed by one issuer but allows two or more applications/functions to be resident on the smart card.
- advanced 32-bit processor cards are used for this purpose.
- Java smart card is a smart card with a Java Virtual Machine (JVM) that allows applications to enter and reside on the card.
- JVM Java Virtual Machine
- a Java smart card is a first step towards multi-application smart cards.
- a device typically designated a sub-terminal is a device which includes some features of a terminal, i.e. user input, display, storage and a remote connection to the Internet, or a broadcast channel, but not all.
- a terminal is complete, and examples are e.g.
- a sub-terminal is incomplete, hi this way, a sub-terminal is a low-cost version of a terminal that provides some but not all the functionality of a terminal.
- a sub-terminal is e.g. a TV remote control.
- the sub-terminal may e.g. also be the conditional access module (typically denoted POD (point of deployment) in the US) of the conditional access system implemented in a STB and/or a TV.
- the conditional access module is a DVB based term derived from the Common Interface concept for DVB terminals. Most system can be attacked successfully by a sufficiently resourced attacking entity.
- a fake terminal can be used to gain access to an unwary user's pin-code or other application information of the card, which is hard to defend against, and would require other protection/detection schemes than provided by the present invention.
- a typical security attack on genuine terminals/sub-terminals is to use a smart card emulating the function of a valid card andor use a modified smart card, e.g. modified in order to gain access to otherwise restricted services, functions, etc in a terminal.
- Patent specification US 5,416,423 discloses a method of verifying the integrity of a smart card by detecting the capacitance of wires connecting the card.
- this specific verifying method requires that electrical wires are connected to the card in order to gain information regarding whether a smart card simulating an external circuit is coupled thereto.
- the terminal according to the above-mentioned patent specification is not able to detect a smart card emulating another smart card, i.e. when no external circuit is attached thereto with wires.
- a further object is to provide this in a simple way.
- Yet a further object is to enable detection of smart cards comprising unauthorized application like rogue digital TV application (i.e. so called 'roguelets').
- the second current signature is a LDDQ current signature or a ICCQ current signature.
- the method further comprises the step of:
- the method further comprises the step of:
- the sequence is determined by a self-test program to be executed by and residing in the smart card. In this way, the sequence of the test program is then fixed and known, both to the manufacturer of the card and the testing application of the terminal (101).
- the second current signature is retrieved from a database and/or is comprised in a digital certificate.
- the present invention also relates to a terminal corresponding to the method according to the present invention.
- the invention relates to a terminal for detecting a fake and/or modified smart card inserted in a physical interface of the terminal, the terminal comprising:
- controller is further adapted to:
- the terminal further comprises means for:
- the terminal further comprises means for:
- the sequence is determined by a self-test program to be executed by and residing in the smart card.
- the second current signature is retrieved from a database and/or is comprised in a digital certificate.
- the invention also relates to a computer readable medium having stored thereon instructions for causing one or more processing units to execute the method according to the present invention.
- Figure 1 schematically illustrates a smart card
- Figure 2 illustrates a smart card and a prior art terminal
- Figure 3 schematically illustrates a terminal according to an embodiment of the present invention.
- Figure 1 schematically illustrates a typical smart card. Shown is a security card/a smart card (100) that is well known in the prior art. Typically the card (100) has the form of standard size credit card, although the form, layout, size, etc. may vary.
- the card (100) typically comprises embedded memory, a processor/controller and input/output (I/O) used for communication with an appropriate card reader/(sub-)terminal (not shown) via a number of contacts (100').
- I/O input/output
- the shown contacts (100') (the size of which is exaggerated/enlarged for illustrative purposes) complies with the standard of ISO 7816 part 2 and comprises power supply (10), ground (11), three optional contacts/pins (12, 14, 15) that may be used for different functionality dependent on the specific card, a bi-directional input/output pin (13), check (16) and reset (17). All of these signals are provided by a terminal, receiving the card, to the smart card (100), and the terminal is expected to monitor the bi-directional input/output (13) according to the standard protocols in order to observe the response of the smart card (100).
- Such a card (100) may be used to store information like PIN-codes, identification information, personal information, security information, etc.
- Figure 2 illustrates a smart card and a typical prior art terminal. Shown are the smart card (100) and the terminal (101) that communicates via a smart card interface.
- the terminal (101) comprises a main processor (105) and a smart card interface (106) and optionally a communications/IP link e.g. useful for various e-commerce application or other functions.
- a smart card (100) When inserted in a private and/or home terminal/sub-terminal (101) (both forth denoted terminal), a smart card (100) would be supplied with power from a power supply from a central source, and the ground would be the central ground of the terminal's
- FIG. 3 schematically illustrates a terminal according to an embodiment of the present invention. Shown is a smart card (100) corresponding to the one shown and explained in connection with Figure 1. Also shown is a terminal (101) corresponding to the one shown and explained in connection with Figure 2, with the exception that it further comprises a monitoring circuit (102) and a controller (104), where the monitoring circuit
- the monitoring circuit (102), the controller is also integrated in/embedded into an IC (110) in the terminal (101), where the IC (110) controls the physical smart card interface (115).
- a current signature i.e. a first current signature of the actual smart card (100) coupled to the terminal (101) is obtained.
- a fake and/or modified smart card (100) may emulate the functions of a valid and authorized card, but will not demonstrate the same current signature since a current signature for each card according to the present invention is unique. In this way, it is possible to detect both fake cards and originally valid cards that have been tampered with e.g. to gain access to other applications in a very simple way, as explained in more detail in the following.
- the monitoring circuit (102) is preferably a dynamic current monitoring circuit that allows a current of a connection with the smart card (100) to be detected, determined, monitored, etc.
- the current monitoring circuit (102) is more specifically connected to the V D D (e.g. the power pin (10) in Figure 1) input of the physical card interface (115).
- the monitoring circuit (102) may be connected to the Vcc (e-g- the ground pin (11) in Figure 1) input of the physical interface (115) instead or both (which enhances the security even further). In this way detection may be performed either on V DD or Vcc or both.
- the physical interface (115) couples/electrically connects the IC (110) and the smart card (100) and is a DC interface preferably with a control level of decoupling of the VDD line to earth.
- the current may be measured according to a number of techniques including using one or more current mirrors, one or more voltage drop sensors, etc.
- a number of the techniques for measuring a current signature of integrated circuits have been described in the literature and is typically used for the purpose of IC debug, test and measurement. These techniques comprise methods for monitoring e.g. either the I DDQ or and/or the IC CQ - They also provide the capability to integrate the current monitoring circuit (102) with voltage regulation of a power supply to ensure correct operation of the smart card (100).
- the process of measuring the leakage current of CMOS integrated circuits or finished products that contain CMOS ICs is typically known as 'ID DQ ' or 'I CCQ ' testing.
- the ID D Q/ICCQ is a static current that occurs during the quiescent state of a CMOS circuit.
- the measurement according to the present invention measures a current of the V DD and/or Vcc power supply while the IC is in the quiescent state.
- I DDQ or I CCQ testing is normally used in connection with IC debug, test and measurement, e.g. to check for shorted gate oxide and other IC defects that may cause a failure over time.
- the magnitude of the current is typically very small since it is the sum of the leakage of the pairs of P and N MOSFET networks from the gates of the circuit.
- the actual current is determined by the Vt of the MOSFET's, where Vt of the MOSFET is a random variable across the die and wafer. This random variable is controlled during manufacturing to very strict limits; nevertheless each circuit has a unique I DDQ (and I CCQ ) characteristic when measured over a set of states. Therefore such measurements if very suitable for being used to detect altered/fake smart cards according to the present invention.
- An execution control program in the controller (104) in the IC of the terminal determines the timing of sampling of the current. This program will determine when in the program the current signature should be measured, how it should be compared to the known signature (i.e. a second current signature), and any actions that should be undertaken as a consequence of the comparison. To avoid tampering, as many as possible of these actions should autonomous of the middleware of the terminal (100).
- the smart card In order to measure the current signature, the smart card must be driven through a number/a sequence of states. These states may be entered in any order, but the logic state of the circuit must be known for the current measurement to be compared to the expected or known current.
- a simple way to change the state of the smart card (100) is for a self-test program to be executed by and residing in the smart card (100). In this way, the sequence of the test program is then fixed and known, both to the manufacturer of the card and the testing application of the terminal (101).
- the expected/known/second current signature is a range with limits, i.e. of a nominal current, a low and a high limit.
- the current signature may be calibrated/modified, if required, to compensate for variability caused by extremes of temperature. Such techniques are well known in the IC testing community, as they are common to most test programs where testing at room and high temperatures are employed.
- the signature of the individual card may be retained in a database or other storage e.g. by an issuer of the card and any verification of a transaction preferably uses the smart card (101) current signature to verify authenticity.
- the database or storage may e.g. be local or remote, where the communications/IP link may be used to retrieve the information.
- the current signature may also be part of a digital signature e.g. also obtainable by the communications/IP link.
- the current signature may be measured by a circuit (not shown) in the terminal (101) and stored for future use. In this way, a comparison may be made between the known signature stored by the terminal (locally and/or remotely) and of the card when a subsequent transaction is made using the card, thereby enabling detection of whether the card have been modified in the meantime.
- the length of the current signatures may be of virtual unlimited length.
- schemes may be devised where the card (100) signals/communicate to the terminal (101) via the current signature.
- This signaling via the current signature could e.g. be implemented as part of a specific application, and would be very useful where the normal communication between the card (100) and the terminal (101) is suspect, or in a case where the card (100) has been inserted in a fake terminal and the applications residing on the card is seeking some confirmation of the authenticity of the terminal.
- This capability to create or modify current signatures is employed by smart cards to resist attack on the cryptographic algorithms using current monitoring techniques. So extensions of the circuit to allow communication will be relatively simple and easy to implement.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Hardware Design (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Theoretical Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- General Engineering & Computer Science (AREA)
- Microelectronics & Electronic Packaging (AREA)
- Storage Device Security (AREA)
- Credit Cards Or The Like (AREA)
Abstract
Description
Claims
Priority Applications (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP03775741A EP1588318A1 (en) | 2003-01-14 | 2003-12-05 | Method and terminal for detecting fake and/or modified smart card |
AU2003283760A AU2003283760A1 (en) | 2003-01-14 | 2003-12-05 | Method and terminal for detecting fake and/or modified smart card |
US10/542,483 US7454318B2 (en) | 2003-01-14 | 2003-12-05 | Method and terminal for detecting fake and/or modified smart card |
JP2004566179A JP2006513477A (en) | 2003-01-14 | 2003-12-05 | Method and terminal for detecting counterfeit and / or altered smart cards |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP03100047.4 | 2003-01-14 | ||
EP03100047 | 2003-01-14 |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2004063979A1 true WO2004063979A1 (en) | 2004-07-29 |
Family
ID=32695636
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/IB2003/005830 WO2004063979A1 (en) | 2003-01-14 | 2003-12-05 | Method and terminal for detecting fake and/or modified smart card |
Country Status (7)
Country | Link |
---|---|
US (1) | US7454318B2 (en) |
EP (1) | EP1588318A1 (en) |
JP (1) | JP2006513477A (en) |
KR (1) | KR20050089883A (en) |
CN (1) | CN100437634C (en) |
AU (1) | AU2003283760A1 (en) |
WO (1) | WO2004063979A1 (en) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8044676B2 (en) | 2008-06-11 | 2011-10-25 | Infineon Technologies Ag | IDDQ testing |
Families Citing this family (116)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
KR100477670B1 (en) * | 2002-09-26 | 2005-03-18 | 삼성전자주식회사 | Monitor for security using smart card and method thereof |
US7610164B1 (en) * | 2006-10-31 | 2009-10-27 | Marvell International Ltd. | System and method of constant power biasing circuit |
FR2910657B1 (en) * | 2006-12-22 | 2012-11-16 | Ingenico Sa | METHOD OF VERIFYING THE CONFORMITY OF AN ELECTRONIC PLATFORM AND / OR A COMPUTER PROGRAM PRESENT ON THIS PLATFORM, DEVICE AND CORRESPONDING COMPUTER PROGRAM. |
US11238329B2 (en) * | 2007-12-24 | 2022-02-01 | Dynamics Inc. | Payment cards and devices with gift card, global integration, and magnetic stripe reader communication functionality |
US8132713B2 (en) * | 2009-10-16 | 2012-03-13 | Visa International Service Association | System and method for automated selection of testing criteria for payment devices |
FR2953960B1 (en) * | 2009-12-14 | 2012-01-13 | Oberthur Technologies | ELECTRONIC COMPONENT FOR DETECTING ATTACKS BY ENERGY DELIVERY |
US8645772B2 (en) * | 2010-08-25 | 2014-02-04 | Itron, Inc. | System and method for managing uncertain events for communication devices |
KR101080511B1 (en) * | 2011-08-03 | 2011-11-04 | (주) 아이씨티케이 | Integrated circuit chip prevneting leak of identification key and method for certification of the integrated circuit chip |
US8752156B1 (en) * | 2012-03-30 | 2014-06-10 | Emc Corporation | Detecting soft token copies |
JP5939675B2 (en) * | 2012-04-20 | 2016-06-22 | ルネサスエレクトロニクス株式会社 | Semiconductor device and control system |
US10140197B2 (en) * | 2015-10-23 | 2018-11-27 | Oberthur Technologies Of America Corp | Method performed by an electronic device capable of communicating with a reader with improved self-testing |
CN105223455B (en) * | 2015-11-11 | 2018-04-10 | 无锡中感微电子股份有限公司 | Safety monitoring system, method and portable electric appts |
US11263875B2 (en) * | 2018-02-23 | 2022-03-01 | Madic Italia S.p.a. | Method for detecting the presence of a smart card cloning device in an automatic payment and/or withdrawal terminal and respective automatic payment and/or withdrawal terminal |
CN108540652B (en) * | 2018-03-15 | 2019-12-17 | 北京华大智宝电子系统有限公司 | Secure interaction method and device |
US10546444B2 (en) | 2018-06-21 | 2020-01-28 | Capital One Services, Llc | Systems and methods for secure read-only authentication |
CA3108917A1 (en) | 2018-10-02 | 2020-04-09 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
US10592710B1 (en) | 2018-10-02 | 2020-03-17 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
KR20210066798A (en) | 2018-10-02 | 2021-06-07 | 캐피탈 원 서비시즈, 엘엘씨 | System and method for cryptographic authentication of contactless card |
US10860814B2 (en) | 2018-10-02 | 2020-12-08 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
US10992477B2 (en) | 2018-10-02 | 2021-04-27 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
US11210664B2 (en) | 2018-10-02 | 2021-12-28 | Capital One Services, Llc | Systems and methods for amplifying the strength of cryptographic algorithms |
US10771253B2 (en) | 2018-10-02 | 2020-09-08 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
AU2019355878A1 (en) | 2018-10-02 | 2021-02-25 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
US10949520B2 (en) | 2018-10-02 | 2021-03-16 | Capital One Services, Llc | Systems and methods for cross coupling risk analytics and one-time-passcodes |
US10797882B2 (en) | 2018-10-02 | 2020-10-06 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
MX2021003138A (en) | 2018-10-02 | 2021-05-14 | Capital One Services Llc | Systems and methods for cryptographic authentication of contactless cards. |
US10607214B1 (en) | 2018-10-02 | 2020-03-31 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
US10909527B2 (en) | 2018-10-02 | 2021-02-02 | Capital One Services, Llc | Systems and methods for performing a reissue of a contactless card |
US10582386B1 (en) | 2018-10-02 | 2020-03-03 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
US10554411B1 (en) | 2018-10-02 | 2020-02-04 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
US10581611B1 (en) | 2018-10-02 | 2020-03-03 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
US10783519B2 (en) | 2018-10-02 | 2020-09-22 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
US10511443B1 (en) | 2018-10-02 | 2019-12-17 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
US10505738B1 (en) | 2018-10-02 | 2019-12-10 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
US10542036B1 (en) | 2018-10-02 | 2020-01-21 | Capital One Services, Llc | Systems and methods for signaling an attack on contactless cards |
WO2020072583A1 (en) | 2018-10-02 | 2020-04-09 | Capital One Services, Llc | Systems and methods for establishing identity for order pick up |
CA3115107A1 (en) | 2018-10-02 | 2020-04-09 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
US10771254B2 (en) | 2018-10-02 | 2020-09-08 | Capital One Services, Llc | Systems and methods for email-based card activation |
US10489781B1 (en) | 2018-10-02 | 2019-11-26 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
AU2019355110A1 (en) | 2018-10-02 | 2021-04-08 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
CA3115252A1 (en) | 2018-10-02 | 2020-04-09 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
US10565587B1 (en) | 2018-10-02 | 2020-02-18 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
US10579998B1 (en) | 2018-10-02 | 2020-03-03 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
CA3115142A1 (en) | 2018-10-02 | 2020-04-09 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
US10748138B2 (en) | 2018-10-02 | 2020-08-18 | Capital One Services, Llc | Systems and methods for cryptographic authentication of contactless cards |
US20200226581A1 (en) | 2019-01-11 | 2020-07-16 | Capital One Services, Llc | Systems and methods for touch screen interface interaction using a card overlay |
US11037136B2 (en) | 2019-01-24 | 2021-06-15 | Capital One Services, Llc | Tap to autofill card data |
US11120453B2 (en) | 2019-02-01 | 2021-09-14 | Capital One Services, Llc | Tap card to securely generate card data to copy to clipboard |
US10510074B1 (en) | 2019-02-01 | 2019-12-17 | Capital One Services, Llc | One-tap payment using a contactless card |
US10467622B1 (en) | 2019-02-01 | 2019-11-05 | Capital One Services, Llc | Using on-demand applications to generate virtual numbers for a contactless card to securely autofill forms |
US10585139B1 (en) | 2019-02-14 | 2020-03-10 | Science Applications International Corporation | IC device authentication using energy characterization |
US10425129B1 (en) | 2019-02-27 | 2019-09-24 | Capital One Services, Llc | Techniques to reduce power consumption in near field communication systems |
US10523708B1 (en) | 2019-03-18 | 2019-12-31 | Capital One Services, Llc | System and method for second factor authentication of customer support calls |
US10643420B1 (en) | 2019-03-20 | 2020-05-05 | Capital One Services, Llc | Contextual tapping engine |
US10535062B1 (en) | 2019-03-20 | 2020-01-14 | Capital One Services, Llc | Using a contactless card to securely share personal data stored in a blockchain |
US10438437B1 (en) | 2019-03-20 | 2019-10-08 | Capital One Services, Llc | Tap to copy data to clipboard via NFC |
US10984416B2 (en) | 2019-03-20 | 2021-04-20 | Capital One Services, Llc | NFC mobile currency transfer |
US10970712B2 (en) | 2019-03-21 | 2021-04-06 | Capital One Services, Llc | Delegated administration of permissions using a contactless card |
US10467445B1 (en) | 2019-03-28 | 2019-11-05 | Capital One Services, Llc | Devices and methods for contactless card alignment with a foldable mobile device |
US11521262B2 (en) | 2019-05-28 | 2022-12-06 | Capital One Services, Llc | NFC enhanced augmented reality information overlays |
US10516447B1 (en) | 2019-06-17 | 2019-12-24 | Capital One Services, Llc | Dynamic power levels in NFC card communications |
US11392933B2 (en) | 2019-07-03 | 2022-07-19 | Capital One Services, Llc | Systems and methods for providing online and hybridcard interactions |
US11694187B2 (en) | 2019-07-03 | 2023-07-04 | Capital One Services, Llc | Constraining transactional capabilities for contactless cards |
US10871958B1 (en) | 2019-07-03 | 2020-12-22 | Capital One Services, Llc | Techniques to perform applet programming |
US10713649B1 (en) | 2019-07-09 | 2020-07-14 | Capital One Services, Llc | System and method enabling mobile near-field communication to update display on a payment card |
US10885514B1 (en) | 2019-07-15 | 2021-01-05 | Capital One Services, Llc | System and method for using image data to trigger contactless card transactions |
US10498401B1 (en) | 2019-07-15 | 2019-12-03 | Capital One Services, Llc | System and method for guiding card positioning using phone sensors |
US11182771B2 (en) | 2019-07-17 | 2021-11-23 | Capital One Services, Llc | System for value loading onto in-vehicle device |
US10832271B1 (en) | 2019-07-17 | 2020-11-10 | Capital One Services, Llc | Verified reviews using a contactless card |
US10733601B1 (en) | 2019-07-17 | 2020-08-04 | Capital One Services, Llc | Body area network facilitated authentication or payment authorization |
US11521213B2 (en) | 2019-07-18 | 2022-12-06 | Capital One Services, Llc | Continuous authentication for digital services based on contactless card positioning |
US10506426B1 (en) | 2019-07-19 | 2019-12-10 | Capital One Services, Llc | Techniques for call authentication |
US10541995B1 (en) | 2019-07-23 | 2020-01-21 | Capital One Services, Llc | First factor contactless card authentication system and method |
EP4038587A4 (en) | 2019-10-02 | 2023-06-07 | Capital One Services, LLC | Client device authentication using contactless legacy magnetic stripe data |
US11651361B2 (en) | 2019-12-23 | 2023-05-16 | Capital One Services, Llc | Secure authentication based on passport data stored in a contactless card |
US11615395B2 (en) | 2019-12-23 | 2023-03-28 | Capital One Services, Llc | Authentication for third party digital wallet provisioning |
US10862540B1 (en) | 2019-12-23 | 2020-12-08 | Capital One Services, Llc | Method for mapping NFC field strength and location on mobile devices |
US10733283B1 (en) | 2019-12-23 | 2020-08-04 | Capital One Services, Llc | Secure password generation and management using NFC and contactless smart cards |
US10657754B1 (en) | 2019-12-23 | 2020-05-19 | Capital One Services, Llc | Contactless card and personal identification system |
US10885410B1 (en) | 2019-12-23 | 2021-01-05 | Capital One Services, Llc | Generating barcodes utilizing cryptographic techniques |
US11113685B2 (en) | 2019-12-23 | 2021-09-07 | Capital One Services, Llc | Card issuing with restricted virtual numbers |
US11200563B2 (en) | 2019-12-24 | 2021-12-14 | Capital One Services, Llc | Account registration using a contactless card |
US10853795B1 (en) | 2019-12-24 | 2020-12-01 | Capital One Services, Llc | Secure authentication based on identity data stored in a contactless card |
US10664941B1 (en) | 2019-12-24 | 2020-05-26 | Capital One Services, Llc | Steganographic image encoding of biometric template information on a card |
US10909544B1 (en) | 2019-12-26 | 2021-02-02 | Capital One Services, Llc | Accessing and utilizing multiple loyalty point accounts |
US10757574B1 (en) | 2019-12-26 | 2020-08-25 | Capital One Services, Llc | Multi-factor authentication providing a credential via a contactless card for secure messaging |
US11038688B1 (en) | 2019-12-30 | 2021-06-15 | Capital One Services, Llc | Techniques to control applets for contactless cards |
US10860914B1 (en) | 2019-12-31 | 2020-12-08 | Capital One Services, Llc | Contactless card and method of assembly |
US11455620B2 (en) | 2019-12-31 | 2022-09-27 | Capital One Services, Llc | Tapping a contactless card to a computing device to provision a virtual number |
US11210656B2 (en) | 2020-04-13 | 2021-12-28 | Capital One Services, Llc | Determining specific terms for contactless card activation |
US11030339B1 (en) | 2020-04-30 | 2021-06-08 | Capital One Services, Llc | Systems and methods for data access control of personal user data using a short-range transceiver |
US11222342B2 (en) | 2020-04-30 | 2022-01-11 | Capital One Services, Llc | Accurate images in graphical user interfaces to enable data transfer |
US11823175B2 (en) | 2020-04-30 | 2023-11-21 | Capital One Services, Llc | Intelligent card unlock |
US10861006B1 (en) | 2020-04-30 | 2020-12-08 | Capital One Services, Llc | Systems and methods for data access control using a short-range transceiver |
US10915888B1 (en) | 2020-04-30 | 2021-02-09 | Capital One Services, Llc | Contactless card with multiple rotating security keys |
US10963865B1 (en) | 2020-05-12 | 2021-03-30 | Capital One Services, Llc | Augmented reality card activation experience |
US11100511B1 (en) | 2020-05-18 | 2021-08-24 | Capital One Services, Llc | Application-based point of sale system in mobile operating systems |
US11063979B1 (en) | 2020-05-18 | 2021-07-13 | Capital One Services, Llc | Enabling communications between applications in a mobile operating system |
US11062098B1 (en) | 2020-08-11 | 2021-07-13 | Capital One Services, Llc | Augmented reality information display and interaction via NFC based authentication |
US11482312B2 (en) | 2020-10-30 | 2022-10-25 | Capital One Services, Llc | Secure verification of medical status using a contactless card |
US11165586B1 (en) | 2020-10-30 | 2021-11-02 | Capital One Services, Llc | Call center web-based authentication using a contactless card |
US11373169B2 (en) | 2020-11-03 | 2022-06-28 | Capital One Services, Llc | Web-based activation of contactless cards |
US11216799B1 (en) | 2021-01-04 | 2022-01-04 | Capital One Services, Llc | Secure generation of one-time passcodes using a contactless card |
US11682012B2 (en) | 2021-01-27 | 2023-06-20 | Capital One Services, Llc | Contactless delivery systems and methods |
US11792001B2 (en) | 2021-01-28 | 2023-10-17 | Capital One Services, Llc | Systems and methods for secure reprovisioning |
US11562358B2 (en) | 2021-01-28 | 2023-01-24 | Capital One Services, Llc | Systems and methods for near field contactless card communication and cryptographic authentication |
US11687930B2 (en) | 2021-01-28 | 2023-06-27 | Capital One Services, Llc | Systems and methods for authentication of access tokens |
US11438329B2 (en) | 2021-01-29 | 2022-09-06 | Capital One Services, Llc | Systems and methods for authenticated peer-to-peer data transfer using resource locators |
US11777933B2 (en) | 2021-02-03 | 2023-10-03 | Capital One Services, Llc | URL-based authentication for payment cards |
US11637826B2 (en) | 2021-02-24 | 2023-04-25 | Capital One Services, Llc | Establishing authentication persistence |
US11245438B1 (en) | 2021-03-26 | 2022-02-08 | Capital One Services, Llc | Network-enabled smart apparatus and systems and methods for activating and provisioning same |
US11961089B2 (en) | 2021-04-20 | 2024-04-16 | Capital One Services, Llc | On-demand applications to extend web services |
US11935035B2 (en) | 2021-04-20 | 2024-03-19 | Capital One Services, Llc | Techniques to utilize resource locators by a contactless card to perform a sequence of operations |
US11902442B2 (en) | 2021-04-22 | 2024-02-13 | Capital One Services, Llc | Secure management of accounts on display devices using a contactless card |
US11354555B1 (en) | 2021-05-04 | 2022-06-07 | Capital One Services, Llc | Methods, mediums, and systems for applying a display to a transaction card |
US12041172B2 (en) | 2021-06-25 | 2024-07-16 | Capital One Services, Llc | Cryptographic authentication to control access to storage devices |
Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5416423A (en) * | 1993-04-07 | 1995-05-16 | Gpt Limited | Method and apparatus for verifying the integrity of a smart card |
EP1017219A1 (en) * | 1998-12-30 | 2000-07-05 | SCHLUMBERGER Systèmes | Fraud detection process for telephone chip cards |
Family Cites Families (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
FR2774492A1 (en) * | 1998-02-04 | 1999-07-30 | Schlumberger Ind Sa | DEVICE WITH INTEGRATED CIRCUIT SECURED BY MITIGATION OF ELECTRIC SIGNATURES |
DE19917884C1 (en) * | 1999-04-20 | 2000-11-16 | Siemens Ag | Circuit with built-in self-test |
US6646565B1 (en) * | 2000-06-01 | 2003-11-11 | Hewlett-Packard Development Company, L.P. | Point of sale (POS) terminal security system |
EP1258807A3 (en) * | 2001-05-14 | 2005-11-02 | Matsushita Electric Industrial Co., Ltd. | Illegal access monitoring device, ic card, and illegal access monitoring method |
US6781353B2 (en) * | 2002-03-20 | 2004-08-24 | Semiconductor Components Industries, L.L.C. | Synchronous regulator with switchable current reference source |
-
2003
- 2003-12-05 US US10/542,483 patent/US7454318B2/en not_active Expired - Lifetime
- 2003-12-05 EP EP03775741A patent/EP1588318A1/en not_active Withdrawn
- 2003-12-05 JP JP2004566179A patent/JP2006513477A/en active Pending
- 2003-12-05 CN CNB2003801087657A patent/CN100437634C/en not_active Expired - Fee Related
- 2003-12-05 WO PCT/IB2003/005830 patent/WO2004063979A1/en active Application Filing
- 2003-12-05 AU AU2003283760A patent/AU2003283760A1/en not_active Abandoned
- 2003-12-05 KR KR1020057013075A patent/KR20050089883A/en not_active Application Discontinuation
Patent Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5416423A (en) * | 1993-04-07 | 1995-05-16 | Gpt Limited | Method and apparatus for verifying the integrity of a smart card |
EP1017219A1 (en) * | 1998-12-30 | 2000-07-05 | SCHLUMBERGER Systèmes | Fraud detection process for telephone chip cards |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8044676B2 (en) | 2008-06-11 | 2011-10-25 | Infineon Technologies Ag | IDDQ testing |
Also Published As
Publication number | Publication date |
---|---|
CN1739113A (en) | 2006-02-22 |
AU2003283760A1 (en) | 2004-08-10 |
KR20050089883A (en) | 2005-09-08 |
US7454318B2 (en) | 2008-11-18 |
US20060041402A1 (en) | 2006-02-23 |
JP2006513477A (en) | 2006-04-20 |
EP1588318A1 (en) | 2005-10-26 |
CN100437634C (en) | 2008-11-26 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US7454318B2 (en) | Method and terminal for detecting fake and/or modified smart card | |
US7293709B2 (en) | Detection of tampering of a smart card interface | |
US6880752B2 (en) | System for testing, verifying legitimacy of smart card in-situ and for storing data therein | |
US6883715B1 (en) | Multi-mode smart card, system and associated methods | |
US6910638B2 (en) | Smart card that can be configured for debugging and software development using secondary communication port | |
US20030154355A1 (en) | Methods and apparatus for providing a memory challenge and response | |
EP2105892B1 (en) | Apparatus and method for initializing an IC card | |
EP1325466A1 (en) | Dual mode smart card and associated methods | |
US10007815B2 (en) | Production method, RFID transponder, authentication method, reader device and computer program product | |
US20040234111A1 (en) | Method for verifying a fingerprint | |
US10528928B1 (en) | Scanning system with direct access to memory | |
TWI646481B (en) | Pairing authentication method for electronic transaction device | |
EP2495690B1 (en) | Transponder and method for monitoring access to application data in the transponder | |
US20180183597A1 (en) | Method for the security of an electronic operation with a chip card | |
Sanchez-Reillo | Achieving security in Integrated Circuit Card applications: reality or desire? | |
JP2020013249A (en) | IC chip and IC card | |
Reid et al. | Making sense of smart card security certifications | |
JP2003505755A (en) | Apparatus and associated method for restricting access to information transferred between an electronic security device and a host device | |
KR20080075744A (en) | Contact card reader, control method thereof and tv having the contact card reader | |
JPH10171945A (en) | Ic card and its reader/writer |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
AK | Designated states |
Kind code of ref document: A1 Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BW BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE EG ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NI NO NZ OM PG PH PL PT RO RU SC SD SE SG SK SL SY TJ TM TN TR TT TZ UA UG US UZ VC VN YU ZA ZM ZW |
|
AL | Designated countries for regional patents |
Kind code of ref document: A1 Designated state(s): BW GH GM KE LS MW MZ SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IT LU MC NL PT RO SE SI SK TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG |
|
121 | Ep: the epo has been informed by wipo that ep was designated in this application | ||
WWE | Wipo information: entry into national phase |
Ref document number: 2003775741 Country of ref document: EP |
|
WWE | Wipo information: entry into national phase |
Ref document number: 20038A87657 Country of ref document: CN Ref document number: 2004566179 Country of ref document: JP |
|
ENP | Entry into the national phase |
Ref document number: 2006041402 Country of ref document: US Kind code of ref document: A1 |
|
WWE | Wipo information: entry into national phase |
Ref document number: 1020057013075 Country of ref document: KR Ref document number: 10542483 Country of ref document: US |
|
WWP | Wipo information: published in national office |
Ref document number: 1020057013075 Country of ref document: KR |
|
WWP | Wipo information: published in national office |
Ref document number: 2003775741 Country of ref document: EP |
|
WWP | Wipo information: published in national office |
Ref document number: 10542483 Country of ref document: US |