Method and terminal for detecting fake and/or modified smart card

• US 20060041402A1
• Filed: 12/05/2003
• Published: 02/23/2006
• Est. Priority Date: 01/14/2003
• Status: Active Grant

• Current Assignee: NXP B.V. (NXP Semiconductors NV)
• Original Assignee: Koninklijke Philips Electronics N.V. (Koninklijke Philips N.V.)
• Inventors: Baker, Keith
• Granted Patent: US 7,454,318 B2
• Time in Patent Office: Days
• US Class Current: 702/189
• CPC Class Codes: G06K 19/073 Special arrangements for circuits, e.g. for protecting identification code in memory protection against unauthorised use of computer memory G06F12/14
• CPC Class Codes: G06K 19/07372 by detecting tampering with the circuit
• CPC Class Codes: G06K 5/00 Methods or arrangements for verifying the correctness of markings on a record carrier; Column detection devices

Abstract

This invention relates to a method and a terminal for detecting a fake and/or modified smart card inserted into a physical interface of a terminal, the method comprising the steps of performing a sequence of current measurements by a current monitor in order to obtain a first current signature, comparing the obtained first current signature with a second current signature, representing a unique current signature of a smart card, and determining whether a difference exists within a predetermined range between the first current signature and the second current signature.This allows for simple detection of fake and/or modified smart cards. Further, it is possible to detect (and thereby protect against) false cards and/or ‘rouge’ application residing on a smart card.

Claims

1. A method of detecting a fake and/or modified smart card inserted into a physical interface of a terminal, the method comprising the steps of:

performing a sequence of current measurements by a current monitor in order to obtain a first current signature,

comparing the obtained first current signature with a second current signature, representing a unique current signature of a smart card, and

determining whether a difference exists within a predetermined range between the first current signature and the second current signature.

2. A method according to claim 1, characterized in that the second current signature is a IDDQ current signature or a ICCQ current signature.

3. A method according to claim 1, characterized in that the method further comprises the step of:

regulating the use of the smart card on the basis of said step of determining.

4. A method according to claim 1, characterized in that the method further comprises the step of

measuring and storing a current signature of a smart card coupled to the terminal.

5. A method according to claim 1, characterized in that said sequence is determined by a self-test program to be executed by and residing in the smart card.

6. A method according to claim 1, characterized in that said second current signature is retrieved from a database and/or is comprised in a digital certificate.

13. A computer readable medium having stored thereon instructions for causing one or more processing units to execute the method according to claim 1.

7. A terminal for detecting a fake and/or modified smart card inserted in a physical interface of the terminal, the terminal comprising:

a controller adapted to perform a sequence of current measurements in order to obtain a first current signature, and

a current monitor for performing said sequence of current measurements,

wherein the controller is further adapted to;

compare the obtained first current signature with a second current signature, representing a unique current signature of a smart card, and

determining whether a difference exists within a predetermined range between the first current signature and the second current signature.

8. A terminal according to claim 7, characterized in that the second current signature is a IDDQ current signature or a ICCQ current signature.

9. A terminal according to claim 7, characterized in that the terminal further comprises means for:

regulating the use of the smart card on the basis of said step of determining.

10. A terminal according to claim 7, characterized in that the terminal further comprises means for:

measuring and storing a current signature of a smart card coupled to the terminal.

11. A terminal according to claim 7, characterized in that said sequence is determined by a self-test program to be executed by and residing in the smart card.

12. A terminal according to claim 7, characterized in that said second current signature is retrieved from a database and/or is comprised in a digital certificate.