Method for enabling pki functions in a smart card

• US 20040053642A1
• Filed: 09/15/2003
• Published: 03/18/2004
• Est. Priority Date: 01/24/2001
• Status: Active Grant

• Current Assignee: Telenor Asa (Government of Norway)
• Original Assignee: Telenor Asa (Government of Norway)
• Inventors: Sandberg, Leif, Rodberg-Larsen, Kjell
• Granted Patent: US 7,024,226 B2
• Time in Patent Office: Days
• US Class Current: 455/558
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/006 involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

The present invention discloses a method for enabling at least a part of a Smart Card. According to a preferred embodiment of the present invention, a one time activation code is generated in a server at a telephone operator. The activation code is sent via registered mail to a user of a Smart Card, e.g. a SIM card in a GSM cellular phone. When the user enters the activation code into the cellular phone, the entry is transmitted to the server for verification. Upon successful verification, the server transmits an enabling command to the phone for thereby enabling the intended part of the SIM card. This may be enabling of PKI functionalities that until now have been hidden in the SIM card and thus unavailable for the user. The user may then choose his own signing PIN for authentication, encryption and transaction signing. In case of enabling PKI functions, all necessary generation of private and public keys and establishment of certifications are carried through when the activation code is verified.

Claims

1. Method for enabling at least a part of a Smart Card, said Smart Card associated to a terminal, said terminal connected to a communication network to which a server also is connected, said Smart Card accessible for a user of said terminal, characterized in the following steps:

generating an activation code in said server

sending said activation code to said user

adapting said terminal to prompt said user for his/her reading of said activation code

on response to said user'"'"'s entry of said reading of said activation code into said terminal, transmitting said entry to said server through said communication network

on responds to receiving said entry, comparing said entry with said activation code

if said entry and said activation code are equal, transmitting an enabling command to said terminal through said communication network

upon receiving said activation code, enabling said at least a part of said Smart Card.

2. Method as defined in claim 1, characterized in that said part of said Smart Card is PKI functions and said server is a PKI server.

3. Method as defined in claim 2, characterized in that the step of enabling further includes the following steps:

generating a key pair including a private key and a public key

requesting said user to choose and enter a signing, encryption and authentication PIN into said terminal

transmitting said public key to said PKI server through said communication network

from said PKI server, requesting a certificate for said user from a CA

4. Method as defined in claim 2 or 3, characterized in that said PKI functions is stored in said Smart Card, but hidden for the user until enabling.

5. Method as defined in any of the preceding claims, characterized in that the step of adapting includes transmitting a menu enabling code to said terminal from said server providing said terminal with a menu for said prompting of said user for said reading of said activation code.

6. Method as defined in any of the preceding claims, characterized in that said communication network is a GSM network, said terminal is a GSM motile telephone, and said Smart Card is a SIM card.

7. Method as defined in claim 6, characterized in that said transmitting of said reading from said terminal to said server is carried through via an SMS.

8. Method as defined in claim 6 or 7, characterized in that said activation code completely replaces the PUK code used for PKI.

9. Method as defined in any of the preceding claims, characterized in that said activation code is sent to the user via registered mail.