Pre-control of a program in an additional chip card of a terminal

• US 20050105731A1
• Filed: 12/14/2004
• Published: 05/19/2005
• Est. Priority Date: 06/03/1999
• Status: Active Grant

• Current Assignee: Gemalto SA (Thales SA)
• Original Assignee: Gemplus (Thales SA)
• Inventors: Basquin, Bruno
• Granted Patent: US 8,015,407 B2
• Time in Patent Office: Days
• US Class Current: 380/247
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/72 Subscriber identity
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Prior to the execution of a program contained in a second chip card inserted in a terminal such as a mobile radio telephone terminal, in addition to a first chip card containing data and connected to a telecommunication network to which the terminal is linked, one of the cards is authenticated by the other, or the two cards are authenticated mutually. This double authentication ensures the authenticity of the program for its overall execution in the terminal and the origin of the second card, distributed through conventional channels, for the network operator.

Claims

1. A process for executing an application program in a terminal of a telecommunication network having a first, card containing subscriber identification and communication information, and a second, program card containing the application program to be executed, comprising the following steps:

transmitting, from said second card to said first card, information pertaining to the application program to be executed;

authenticating said second card via said first card, based upon said transmitted information; and

executing said program contained in the second card if the authentication is successful.

2. The process of claim 1, wherein said authenticating step is performed, at least in part, by a server remote from said terminal, in response to a request from said first card.

3. The process of claim 1, further including the step of authenticating said first card by said second card, prior to executing said program.

4. The process of claim 1, wherein said transmitted information includes an identifier of the application program.

5. The process of claim 1, wherein said transmitted information includes characteristics required for the execution of the application program.

6. The process of claim 1, wherein said authenticating step includes the step of:

using the information pertaining to the program to select a key;

processing a data value in accordance with said key; and

comparing the processed data value with a value received from said second card.

7. The process of claim 6, wherein said data value comprises said information pertaining to the program.

8. The process of claim 6 wherein said data value comprises a random number, and the value received from said second card is a signature generated from said random number by said second card.