Method for secure storing of personal data and for consulting same, chip card, terminal and server used to carry out said method

• US 20060118614A1
• Filed: 02/15/2002
• Published: 06/08/2006
• Est. Priority Date: 02/20/2001
• Status: Abandoned Application

• Current Assignee: Gemplus (Thales SA)
• Original Assignee: Gemplus (Thales SA)
• Inventors: Rose, Murielle
• Application Number:
  US10/468,480
• Publication Number:
  US 20060118614A1
• Time in Patent Office: Days
• US Class Current: 235/380
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/346 Cards serving only as information carrier of service
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

A method for the secure storing of personal data and for consulting same is carried out in a terminal that is connected to a chip card reader and fitted with a man-machine interface. A browser executing on the terminal conducts a dialogue with a remote server by way of a communication network. Pages of data are viewed on a display device of the interface. Personal data is input by a user in response to the pages displayed, and the data is stored locally for consultation and remotely on the server for saving.

Claims

1. A method for the secure storage of personal data and for consultation, comprising the following steps:

using a terminal connected to a chip-card reader and provided with a man-machine interface comprising a display and data input means,

using a browser capable of dialoguing with a remote server through a communication network, from the said terminal,

displaying pages of data with the said display means,

inputting personal data of a user in response to the pages displayed and storing them locally for consultation and remotely on the server for saving.

2. A storage method according to claim 1, wherein the data pages are supplied by the server.

3. A storage method according to claim 1, wherein the data pages are supplied during a communication and entry.

4. A storage method according to claim 1, wherein the data entry is carried out on line.

5. A storage method according to claim 1, wherein the personal data are recorded locally on a chip card connected to said reader and a copy is saved on the server.

6. A storage method according to claim 3, wherein the saving of the copy remotely is carried out substantially simultaneously with the recording locally.

7. A storage method according to claim 1, wherein the personal data are encrypted by a card connected to said reader before being saved.

8. A storage method according to claim 7, wherein the personal data are encrypted by means of an enciphering algorithm using one or more keys saved in the card.

9. A storage method according to claim 8, wherein the enciphering key or keys are also saved by an entrusted entity.

10. A storage method according to claim 1, wherein the browser comprises the functions of a browser of the type defined by the S@T standard (SIM Alliance Toolbox).

11. A storage method according to claim 10, wherein pages supplied by the server are pages of the type defined by the S@TML language.

15. A communication terminal for implementing the method according to claim 1, said terminal being provided with a man-machine interface comprising display and inputting means able to establish communication through a network with a remote server, and including a browser able to display personal data entry pages and to store data entered both locally at the terminal and remotely on the server.

16. A terminal according to claim 15, wherein the terminal is a mobile telephone.

17. A terminal according to claim 15, wherein the terminal is of the microcomputer type, and a chip card is inserted in the terminal by a user at each use.

18. A server for implementing the method according to claim 1, comprising an application able to supply to a distant browser, via a communication terminal, pages which can be interpreted and/or executed by the browser, the pages comprising at least requests for the input of personal information and requests for the local storage of this information, requests to return this information to the server, said application executing a step of storing information received.

12. A chip card comprising a processing unit and one or more program memories comprising programs including the operating system of the card, and further including a browser program capable of dialoguing with a distant server through a terminal connected to a chip card reader, provided with a man-machine interface, and

wherein the browser permits the entry of personal data by a user of the terminal on pages of data and their storage locally in the card for consultation and remotely on the server.

13. A chip card according to claim 12, wherein said card is a SIM card.

14. A chip card according to claim 12, wherein the browser comprises the functions of a browser of the type defined by the S@T (SIM Alliance Toolbox) standard.