Method for Authorized Granting of a Service and Device for Carrying out Said Method

• US 20090039156A1
• Filed: 12/19/2006
• Published: 02/12/2009
• Est. Priority Date: 12/29/2005
• Status: Abandoned Application

• Current Assignee: Siemens It Solutions and Services GmbH (Atos SE), AXSionics AG
• Original Assignee: Axisonics AG, Siemens Schweiz AG (Siemens AG)
• Inventors: Wenger, Bruno, Brandli, Willi, Cattin-Liebl, Roger, Jacomet, Marcel, Rollier, Alain, Muller, Lorenz
• Application Number:
  US12/159,402
• Publication Number:
  US 20090039156A1
• Time in Patent Office: Days
• US Class Current: 235/382
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/357 Cards having a plurality of specified features
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: G07C 9/257 electronically G07C9/26 takes precedence
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

Current electronic cards, such as, for example, proximity cards, smartcards for short, can transmit data to a reader unit over a range of up to about 10 cm. Boosters are used to improve convenience which in essence represent a wireless extension. This is however not adequate with regards to autonomy, function (as a result of termination) and for the differing applications. A method is disclosed in which the transmission of service-specific codes, stored on a number of different smartcards, to a portable device is carried out. The portable device then transmits one or more of the codes via several different communication connections so that access to a service can be activated. By providing services to the corresponding authorized communication connection a modular system is achieved, permitting multiple access for a user to services.

Claims

1-16. -16. (canceled)

17. A method for an authorized granting of a service, selected from the group consisting of granting access to a location, granting access for obtaining information, and granting access for obtaining cash, using an electronic medium storing authorization for a specific service having a specific-service identifier, which comprises the steps of:

establishing a first secured communication link between a portable device and the electronic medium for at least one of a plurality of service-specific identifiers stored on the electronic medium and a plurality of different types of media, so that for each said service a secured end-to-end connection will be set up between an access point and the electronic medium;

transmitting the service-specific identifier over the first secured communication link between the electronic medium and the portable device in a near field;

transmitting the service-specific identifier over a second secured communication link between the portable device and the access point; and

creating a release signal for granting the service if there is a match between the service-specific identifier received by the access point and a stored identifier.

18. The method according to claim 17, which further comprises checking for a match between the service-specific identifier received by the access point and the stored identifier stored in a server coupled to the access point.

19. The method according to claim 18, which further comprises:

storing further identifier in the portable device;

transmitting the further identifier via the second secured communication link; and

generating the release signal only if the further identifier matches a stored further identifier.

20. The method according to claim 19, which further comprises providing a input means on the portable device, so that the further identifier is only transmitted via the second secured communication link if a code is entered via the input means and it is established that the code matches a stored code.

21. The method according to claim 20, which further comprises:

storing the stored code in one of the portable device, the access point and the server; and

modifying at least one transmitted service-specific identifier in relation to the stored identifier as a result of an authentication.

22. The method according to claim 19, which further comprises forming the further identifier in accordance with a challenge-response method.

23. The method according to claim 20, which further comprises forming the code entered using a biometric method.

24. The method according to claim 17, which further comprises providing the portable device with a plurality of air interfaces and selecting the second secured communication link from the plurality of air interfaces depending on the service defined by the service-specific identifier.

25. The method according to claim 17, which further comprises establishing the first secured communication link at least one of electrically and wirelessly.

26. The method according to claim 17, which further comprises establishing the first and second secured communication links according to one of a PKI method and a 3DES method.

27. An electronic portable device, comprising:

at least one interface unit for routing a first secure communication link in a near field to a medium containing an identifier;

at least one air interface unit for routing a second secure communication link to an access point;

a crypto controller connected to said interface unit and to said air interface unit;

a service-specific identifier being transmitted from the medium to the access unit for an authorized granting of a service and, if the service-specific identifier received by the access unit matches a stored identifier, a release signal for granting the service being generated; and

the first communication link connected between said at least one interface unit and the medium is able to be established for a plurality of service-specific identifiers stored on the medium and/or for a plurality of different types of media, so that a secure end-to-end connection is able to be set up by use of said crypto controller for each service between the medium and the access point.

28. The device according to claim 27, further comprising input means coupled to said crypto controller to carry out an authentication of a person assigned to the service-specific identifier or to set a specific operating state.

29. The device according to claim 28, wherein said input means is selected from the group consisting of a keypad and a biometric sensor and is coupled to said crypto controller.

30. The device according to claim 29, wherein said biometric sensor is a fingerprint sensor.

31. The device according to claim 27, further comprising a display coupled to said crypto controller on which operating states, challenges, and responses are able to be displayed.

32. The device according to claim 27, further comprising at least one wired interface allowing configuration data to be transmitted to the device.