Integrated circuit device with data modifying capabilities and related methods

• US 20050055562A1
• Filed: 10/22/2004
• Published: 03/10/2005
• Est. Priority Date: 11/05/1999
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Guthery, Scott B.
• Granted Patent: US 7,120,801 B2
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/77 in smart cards
• CPC Class Codes: G06K 19/0719 at least one of the integrated circuit chips comprising an arrangement for application selection, e.g. an acceleration sensor or a set of radio buttons application selection on smart cards using pure software control, see G07F7/10
• CPC Class Codes: G06K 19/073 Special arrangements for circuits, e.g. for protecting identification code in memory protection against unauthorised use of computer memory G06F12/14
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/357 Cards having a plurality of specified features
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

Various embodiments pertain to an integrated circuit (IC) device and related systems that are configured to modify data values held by the device.

Claims

1. A system comprising:

means for storing a plurality of masks that are configured to modify specific data values into general representations of the specific data values;

means for selecting a first mask responsive to a first use context for use in an end-user transaction;

means for applying the first mask to a specific data value to provide a first general representation for the first use context that is used in place of the specific data value in the end-user transaction;

means for selecting a second mask responsive to a second use context associated with a second end user transaction; and

means for applying the second mask to the specific data value to provide a second general representation for the second use context, the second general representation being different from the first general representation and being used in place of the second use context'"'"'s specific data value.

2. The system of claim 1, wherein the first and second use contexts are associated with requests that are received from first and second different identities.

3. The system of claim 2, wherein the first and second different identities are authenticatable identities, and wherein application of a mask does not take place unless the identity with which the mask is associated is authenticated.

4. The system of claim 1 embodied as a smart card, and wherein application of said masks takes place entirely on the smart card.

5. A system comprising:

means for associating a mask with an identity that is capable of making a data request associated with an end-user transaction;

means for receiving a data request from the identity;

means for selecting the mask that is associated with the identity;

means for applying the selected mask to a data value having a first precision and producing therefrom a data value having a second precision that is lower than the first precision; and

means for transferring the data value having the second precision to the identity for use in the end-user transaction.

6. The system of claim 5, wherein the identity is authenticatable, and further comprising means for authenticating the identity before transferring the data value having the second precision.

7. The system of claim 5, wherein said means for associating comprises means for associating a plurality of masks with a plurality of respective identities, at least some of the masks being different.

8. The system of claim 5 embodied as a smart card.

9. One or more computer-readable media having computer-readable instructions thereon which, when executed by an integrated circuit device, cause the integrated circuit device to perform a method comprising:

storing a plurality of masks that are configured to modify specific data values into general representations of the specific data values;

selecting a first mask responsive to a first use context for use in an end-user transaction;

applying the first mask to a specific data value to provide a first general representation for the first use context that is used in place of the specific data value in the end-user transaction;

selecting a second mask responsive to a second use context associated with a second end user transaction; and

applying the second mask to the specific data value to provide a second general representation for the second use context, the second general representation being different from the first general representation and being used in place of the second use context'"'"'s specific data value.

10. The one or more computer-readable media of claim 9, wherein the first and second use contexts are associated with requests that are received from first and second different identities.

11. The one or more computer-readable media of claim 10, wherein the first and second different identities are authenticatable identities, and wherein application of a mask does not take place unless the identity with which the mask is associated is authenticated.

12. The one or more computer-readable media of claim 9 embodied in a smart card, and wherein application of said masks takes place entirely on the smart card.

13. One or more computer-readable media having computer-readable instructions thereon which, when executed by an integrated circuit device, cause the integrated circuit device to perform a method comprising:

associating a mask with an identity that is capable of making a data request associated with an end-user transaction;

receiving a data request from the identity;

selecting the mask that is associated with the identity;

applying the selected mask to a data value having a first precision and producing therefrom a data value having a second precision that is lower than the first precision; and

transferring the data value having the second precision to the identity for use in the end-user transaction.

14. The one or more computer-readable media of claim 13, wherein the identity is authenticatable, and wherein the instructions further cause the integrated circuit device to authenticate the identity before transferring the data value having the second precision.

15. The one or more computer-readable media of claim 13, wherein said associating comprises associating a plurality of masks with a plurality of respective identities, at least some of the masks being different.

16. The one or more computer-readable media of claim 13 embodied in a smart card.