System and method for establishing temporary and permanent credentials for secure online commerce

• US 20070130617A1
• Filed: 12/02/2005
• Published: 06/07/2007
• Est. Priority Date: 12/02/2005
• Status: Active Grant

• Current Assignee: Palo Alto Research Center Incorporate
• Original Assignee: Palo Alto Research Center Incorporate
• Inventors: Balfanz, Dirk, Smetters, Diana, Durfee, Glenn
• Granted Patent: US 7,725,928 B2
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 30/0603 Catalogue ordering
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3265 using certificate chains, trees or paths; Hierarchical trust model
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

One embodiment of the present invention provides a system for establishing temporary and permanent credentials for secure remote data access. The system includes a temporary smart card configured to provide a temporary credential for a first device, thereby providing the first device with temporary secure access to a remote data source when the temporary smart card is used with the first device. Additionally, the system includes an enrollment smart card configured to provide a permanent credential for a second device, thereby providing the second device with permanent secure access to the remote data source without presence of the enrollment smart card or the temporary smart card.

Claims

1. A system for establishing temporary and permanent credentials for secure remote data access, the system comprising:

a temporary smart card configured to provide a temporary credential for a first device, thereby providing the first device with temporary secure access to a remote data source when the temporary smart card is used with the first device; and

an enrollment smart card configured to provide a permanent credential for a second device, thereby providing the second device with permanent secure access to the remote data source without presence of the enrollment smart card or the temporary smart card.

2. The system of claim 1, wherein the temporary smart card stores:

a private key priv_T;

a certificate [pub_T]_E which contains a public key for the temporary smart card signed with a private key for the enrollment smart card;

a certificate [pub_E]_F which contains a public key for the enrollment smart card signed with a private key for a certification authority; and

a root certificate [pub_F]_F which contains a public key for the certification authority signed with the private key for the certification authority.

3. The system of claim 2, wherein while providing the temporary credential for the first device, the temporary smart card is configured to communicate [pub_T]_E and [pub_E]_F to a remote computer controlling access to the data source, thereby establishing a certificate chain to facilitate subsequent secure communications between the first device and the remote computer.

4. The system of claim 1, wherein the enrollment smart card stores:

a private key priv_E;

a certificate [pub_T]_E which contains a public key for the temporary smart card signed with the private key priv_E;

a certificate [pub_E]_F which contains a public key for the enrollment smart card signed with the private key priv_E; and

a root certificate [pub_F]_F which contains a public key for the certification authority signed with the private key for the certification authority.

5. The system of claim 4, wherein certificates [pub_E]_F and [pub_F]_F both contain an Abstract Syntax Notation One (ASN.1) object identifier (OID) which can be used to authorize [pub_E]_F to provide the permanent credential for the second device.

6. The system of claim 4, wherein while providing the permanent credential for the second device, the enrollment smart card is configured to:

communicate [pub_E]_F to a remote computer controlling access to the data source, thereby establishing a certificate chain to facilitate subsequent secure communications between the second device and the remote computer; and

to allow the second device to;

generate a pair of public key and private key, denoted as pub_C and priv_C, respectively;

receive from the remote computer a certificate [pub_C]_M which contains the public key pub_C signed with a private key for the remote computer and a certificate [pub_M]_F which contains a public key for the remote computer signed with the private key for the certification authority; and

to install a certificate chain, [pub_C]_M and [pub_M]_F, to facilitate future secure communications between the second device and the remote computer.

7. The system of claim 1, further comprising a remote computer controlling access to the data source, the remote computer storing:

a private key priv_M;

a public key pub_M;

a certificate [pub_M]_F which contains the public key pub_M signed by a private key for a certification authority; and

a root certificate [pub_F]_F which contains a public key for the certification authority signed with the private key for the certification authority.

8. The system of claim 1, further comprising a certificate revocation list, wherein if the temporary smart card or the enrollment smart card is lost, the certificate revocation list is configured to include:

a certificate [pub_T]_E which contains a public key for the temporary smart card signed with a private key for the enrollment smart card; and

a certificate [pub_E]_F which contains a public key for the enrollment smart card signed with a private key for the temporary smart card.

9. The system of claim 1, further comprising a card information database configured to:

receive and store information about a user to whom the temporary smart card and the enrollment smart card are issued; and

to provide user information in response to the user'"'"'s use of the temporary smart card or the enrollment smart card.

10. The system of claim 9, wherein while providing user information, the card information database is configured to provide a list of websites tailored to the user'"'"'s needs.

11. The system of claim 9, wherein if the temporary smart card or the enrollment smart card is lost, the card information database is configured to revoke both cards and to communicate the revocation to one or more computers controlling access to the data source.

12. The system of claim 9, wherein the card information database is configured to aggregate the information about a user to whom a plurality of temporary smart cards and enrollment smart cards have been issued, and to provide the aggregated user information in response to the user'"'"'s use of any one of said plurality of temporary smart cards and enrollment smart cards.

13. The system of claim 1, further comprising a hybrid smart card configured to:

provide a temporary credential or a permanent credential for a device, wherein the temporary credential facilitates temporary secure access the remote data source, and the permanent credential facilitates permanent secure access to the remote data source; and

to allow a user to determine whether the device is to be given the temporary credential or the permanent credential when the hybrid smart card is inserted in the device.

14. A smart card for establishing temporary and permanent credentials for secure remote data access, the smart card configured to:

provide a temporary credential or a permanent credential for a device, wherein the temporary credential facilitates temporary secure access to a remote data source, and the permanent credential facilitates permanent secure access to the remote data source; and

to allow a user to determine whether the device is to be given temporary credential or the permanent credential when the smart card is inserted in the device.

15. The smart card of claim 14, wherein the smart card is further configured to cause an external confirmation request to be sent to the user, thereby allowing the user to confirm providing of the temporary credential or the permanent credential to the device.

16. The smart card of claim 15, wherein the external confirmation request is sent to the user via an email or a wireless Short Message System (SMS) message.

17. A system for establishing temporary and permanent credentials for secure date access, the system comprising:

a home network server residing in a network identified by a network name;

a temporary smart card configured to provide a temporary credential for a first device, thereby providing the first device with temporary secure access to the home network server when the temporary smart card is used with the first device; and

an enrollment smart card configured to provide a permanent credential for a second device, thereby providing the second device with permanent secure access to the home network server without presence of the enrollment smart card or the temporary smart card.

18. The system of claim 17, wherein the home network server is configured to establish a certificate chain on the temporary smart card and a certificate chain on the enrollment smart card, thereby facilitating secure data access to the home network server.

19. The system of claim 17, wherein while providing the permanent credential for the second device, the enrollment smart card is configured to allow the second device to:

generate a pair of private key and public key; and

to obtain necessary certificates for establishing a certificate chain to facilitate secure communications between the second device and the home network server.

20. The system of claim 17, wherein the temporary smart card is configured to grant to the first device temporary access to a wireless network to which the home network server is coupled.

21. The system of claim 17, wherein the enrollment smart card is configured to grant to the second device permanent access to a wireless network to which the home network server is coupled.

22. The system of claim 17, wherein the temporary smart card stores computer instructions which can be automatically executed by the first device to:

invoke a web browser for temporary secure online shopping;

provide temporary access to a wireless network to which the home network server is coupled;

or

to provide temporary secure access to the home network server.

23. The system of claim 17, wherein the enrollment smart card stores computer instructions which can be automatically executed by the second device to:

invoke a web browser for permanent secure online shopping;

provide permanent access to a wireless network to which the home network server is coupled;

or to provide permanent secure access to the home network server.

24. A method for establishing temporary and permanent credentials for secure remote data access, the method comprising:

providing a temporary smart card to provide a temporary credential for a first device, thereby providing the first device with temporary secure access to a remote data source when the temporary smart card is used with the first device; and

providing an enrollment smart card to provide a permanent credential for a second device, thereby providing the second device with permanent secure access to the remote data source without presence of the enrollment smart card or the temporary smart card.