Hash of a Certificate Imported from a Smart Card

• US 20080046739A1
• Filed: 08/16/2006
• Published: 02/21/2008
• Est. Priority Date: 08/16/2006
• Status: Abandoned Application

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Research In Motion Limited (Blackberry Limited)
• Inventors: Adams, Neil, Little, Herbert, Brown, Michael K.
• Application Number:
  US11/464,900
• Publication Number:
  US 20080046739A1
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3827 Use of message hashing
• CPC Class Codes: G07F 7/084 Additional components relating to data transfer and storing, e.g. error detection, self-diagnosis
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

A certificate from a smart card is imported into a computerized device via a smart card reader. The computerized device calculates a hash of the imported certificate and stores the hash in memory. The hash may be stored in a region of the memory that is unaffected by upgrades to the device.

Claims

1. A method in a computerized device, the method comprising:

calculating a hash of a certificate imported from a smart card; and

storing said hash in said device.

2. The method of claim 1, further comprising:

importing another certificate;

calculating a hash of said other certificate; and

comparing said hash of said other certificate to said stored hash.

3. The method of claim 2, further comprising:

if said hash of said other certificate and said stored hash are identical, using said other certificate for a particular purpose in said device.

4. The method of claim 3, wherein said particular purpose is authentication of a user.

5. The method of claim 3, wherein said particular purpose is encryption of information.

6. The method of claim 3, wherein said particular purpose is signing of information.

7. The method of claim 3, wherein said particular purpose is securing web browsing.

8. The method of claim 2, wherein said device has been upgraded after storing said hash in said device and prior to importing said other certificate.

9. The method of claim 1, wherein storing said hash in said device comprises:

storing said hash in a region of a memory of said device that is unaffected by upgrades to said device.

10. A computer-readable medium having computer-executable instructions thereon which, when executed by a computerized device that is coupled to a smart card reader, result in:

calculating a hash of a certificate imported from a smart card via said smart card reader; and

storing said hash in said device.

11. The computer-readable medium of claim 10, wherein said instructions, when executed by said computerized device, further result in:

importing another certificate;

calculating a hash of said other certificate; and

comparing said hash of said other certificate to said stored hash.

12. The computer-readable medium of claim 11, wherein said instructions, when executed by said computerized device, further result in:

if said hash of said other certificate and said stored hash are identical, using said other certificate for a particular purpose in said device.

13. The computer-readable medium of claim 12, wherein said particular purpose is authentication of a user.

14. The computer-readable medium of claim 12, wherein said particular purpose is encryption of information.

15. The computer-readable medium of claim 12, wherein said particular purpose is signing of information.

16. The computer-readable medium of claim 12, wherein said particular purpose is securing web browsing.

17. A computerized device comprising:

a communication interface through which said device is able to couple to a smart card reader;

a processor coupled to said communication interface; and

a memory coupled to said processor, said memory to store code which, when executed by said processor, imports a certificate from a smart card via said smart card reader, calculates a hash of said certificate, and stores said hash in said memory.