METHOD, SYSTEM AND SMART CARD READER FOR MANAGEMENT OF ACCESS TO A SMART CARD

• US 20110108624A1
• Filed: 01/17/2011
• Published: 05/12/2011
• Est. Priority Date: 07/19/2006
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Adams, Neil P., McCallum, Michael E.
• Granted Patent: US 8,079,530 B2
• Time in Patent Office: Days
• US Class Current: 235/441
• CPC Class Codes: G06K 7/0008 General problems related to the reading of electronic memory record carriers, independent of its reading method, e.g. power transfer
• CPC Class Codes: G06K 7/01 Details
• CPC Class Codes: G06K 7/10297 arrangements for handling protocols designed for non-contact record carriers such as RFIDs NFCs, e.g. ISO/IEC 14443 and 18092 cryptographic protocols H04L9/00; network security protocols H04L63/00; real-time communication protocols in data switching networks H04L65/00; network protocols for data switching network services H04L67/00
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/0893 the card reader reading the card in a contactless manner
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/50 Secure pairing of devices

Abstract

The described embodiments relate generally to devices, methods and systems for managing access to a memory card, such as a smart card, by a plurality of accessing devices. Certain embodiments relate to a smart card reader (SCR) for managing concurrent access to a smart card by a plurality of accessing devices, the SCR comprising: a processor; a channel manager responsive to the processor for interfacing with the smart card; a communication interface responsive to the channel manager for communicating with the plurality of accessing devices; and wherein, when a session is open on a first channel between a first accessing device and the smart card and the channel manager is configured to issue an open channel command to the smart card to cause the smart card to open a second channel between the smart card and the second accessing device in response to the session request.

Claims

1. A smart card reader (SCR) for managing concurrent access to a smart card by a plurality of accessing devices, the SCR comprising:

a processor;

a channel manager responsive to the processor for interfacing with the smart card; and

a communication interface responsive to the channel manager for communicating with the plurality of accessing devices,

wherein, when a first session is open on a first channel between a first accessing device and the smart card and the channel manager receives a session request from a second accessing device, the channel manager is configured to issue an open channel command to the smart card to cause the smart card to open a second session on a second channel between the second accessing device and the smart card,

wherein, while the first session is open, the channel manager is configured to;

receive data units from the second accessing device intended for transmission to the smart card on the first channel; and

modify the data units to indicate that the data units are intended for transmission to the smart card over the second channel, and

wherein, when the channel manager receives a close session request from the first accessing device, the channel manager is configured to;

issue a close channel command to the smart card to close the second channel;

issue the close session request from the first accessing device to the smart card to close the first session and the first channel; and

issue a further session request to the smart card to re-open the first channel, and continue the second session on the re-opened first channel.

2. The smart card reader of claim 1, wherein the channel manager modifies the data units by identifying a channel identifier within the data units received from the second accessing device, and modifying the channel identifier within the data units to identify the second channel.

3. The smart card reader of claim 1, wherein, while the first session is open, the first session and the second session are open concurrently.

4. The smart card reader of claim 1, wherein after the second session is continued on the re-opened first channel, the second channel is marked as available for reuse.

5. The smart card reader of claim 1, wherein the open channel command is a MANAGE_CHANNEL command.

6. The smart card reader of claim 1, further comprising a memory, the memory storing a connection table, wherein the connection table includes entries for each session established between the smart card and a respective accessing device.

7. The smart card reader of claim 6, wherein the connection table includes, for each session entry, one or more channel entries.

8. The smart card reader of claim 1, wherein the channel manager controls the channels that can be opened between the smart card and the plurality of accessing devices so that the total number of channels is limited to a predetermined number.

9. The smart card reader of claim 1, further comprising a socket for receiving the smart card and electrically coupling the processor and the smart card.

10. The smart card reader of claim 1, wherein the communication interface comprises a wireless communication interface.

11. A method of managing concurrent access to a smart card by a plurality of accessing devices, the method comprising:

when a first session is open on a first channel between a first accessing device and the smart card, receiving at a smart card reader a session request from a second accessing device;

issuing an open channel command to the smart card to cause the smart card to open a second session on a second channel between the second accessing device and the smart card in response to the session request;

while the first session is open, receiving data units from the second accessing device intended for transmission to the smart card on the first channel and modifying the data units to indicate that the data units are intended for transmission to the smart card over the second channel;

receiving a close session request from the first accessing device;

issuing a close channel command to the smart card to close the second channel;

issuing the close session request from the first accessing device to the smart card to close the first session and the first channel; and

issuing a further session request to the smart card to re-open the first channel, and continue the second session on the re-opened first channel.

12. The method of claim 11, wherein the modifying comprises identifying a channel identifier within the data units received from the second accessing device and modifying the channel identifier within the data units to identify the second channel.

13. The method of claim 11, wherein, while the first session is open, the first session and the second session are open concurrently.

14. The method of claim 11, wherein after the second session is continued on the re-opened first channel, the second channel is marked as available for reuse.

15. The method of claim 11, wherein the open channel command is a MANAGE_CHANNEL command.

16. The method of claim 11, further comprising storing a connection table in a memory of the smart card reader, the connection table comprising entries for each session established between the smart card and a respective accessing device.

17. The method of claim 16, wherein the connection table includes, for each session entry, one or more channel entries.

18. The method of claim 11, further comprising controlling the channels that can be opened between the smart card and the plurality of accessing devices so that the total number of channels is limited to a predetermined number.

19. The method of claim 11, wherein the session request is received by wireless communication between the smart card reader and the second accessing device.

20. A non-volatile computer readable storage medium storing program instructions which, when executed by a processor on a smart card reader, cause the processor to perform a method of managing concurrent access to a smart card by a plurality of accessing devices, the method comprising:

when a first session is open on a first channel between a first accessing device and the smart card, receiving at a smart card reader a session request from a second accessing device;

issuing an open channel command to the smart card to cause the smart card to open a second session on a second channel between the second accessing device and the smart card in response to the session request;

while the first session is open, receiving data units from the second accessing device intended for transmission to the smart card on the first channel and modifying the data units to indicate that the data units are intended for transmission to the smart card over the second channel;

receiving a close session request from the first accessing device;

issuing a close channel command to the smart card to close the second channel;

issuing the close session request from the first accessing device to the smart card to close the first session and the first channel; and

issuing a further session request to the smart card to re-open the first channel, and continue the second session on the re-opened first channel.