Process for the control of secret keys between two smart cards

• US 5,602,915 A
• Filed: 02/25/1994
• Issued: 02/11/1997
• Est. Priority Date: 02/25/1993
• Status: Expired due to Term

• Current Assignee: Gula Consulting Limited Liability Company (Intellectual Ventures LLC)
• Original Assignee: France Telecom SA (Orange S.A.)
• Inventors: Gilbert, Henri, Arditti, David, Campana, Mireille
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US08/201,979
• Time in Patent Office: 1,082 Days
• Field of Search: 380/21, 380/23, 380/24, 380/25, 380/28, 380/30, 380/44, 380/46, 380/49, 380/50, 235/379, 235/380
• US Class Current: 380/277
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys

Abstract

A process for controlling communication between a first and a second smart card using key-based cryptography is provided. In the disclosed process, a first identity code is stored in the first smart card and a second identity code is stored in the second smart card. The smart cards are customized by writing into each of the smart cards an identical group secret key and respective algorithms for processing the identical group secret key and the first and second identity codes stored in the first and second smart cards, respectively. The smart cards are used by transmitting the first identity code to the second smart card, transmitting the second identity code to the first smart card, and calculating using the respective processing algorithms stored in the smart cards, first and second session keys for the first and second smart cards, respectively.

Claims

1. A process for controlling communication between a first and a second smart card using key-based cryptography, in which a first identify code is stored in the first smart card and a second identity code is stored in the second smart card, said process comprising the steps of:

customizing said smart cards by;

writing into each of the smart cards an identical group cryptographic secret key, and

writing into each of the smart cards respective algorithms for processing the identical group cryptographic secret key and the first and second identity codes stored in said first and second smart cards, respectively; and

using said smart cards by;

transmitting the first identity code to the second smart card,

transmitting the second identity code to the first smart card,

calculating, by using said respective processing algorithms stored in said smart cards, first and second session keys for said first and second smart cards, respectively.

2. A process according to claim 1, wherein an identical random number is supplied to each of the smart cards, and the calculation of the first and second session keys by the respective processing algorithms includes the following steps:

applying a diversification algorithm for determining a secret number based on the first and second identity codes and the identical group secret key, and

applying an algorithm for calculating the session keys based upon the random number and the secret number.

3. A process according to claim 2, wherein the diversification algorithm comprises:

determining a first secret key based upon the first identify code and the identical group secret key stored in each of the smart cards,

determining a second secret number based upon the second identity code and the identical group secret key, and

combining, by a commutative operation, said first and second secret numbers to obtain the secret number used by the algorithm for calculating the session keys.

4. A process according to claim 3, wherein the commutative operation performed on the first and second secret numbers in the diversification algorithm is an addition.

5. A process according to claim 4, wherein diversification algorithms for determining secret numbers in each said smart card and algorithms for calculating the session keys for the first and second smart cards are respectively identical, and the first and second session keys are identical.

6. A process according to claim 3, wherein diversification algorithms for determining secret numbers in each said smart card and algorithms for calculating the first and second session keys for the first and second smart cards are respectively identical, and the first and second session keys are identical.

7. A process according to claim 2, wherein diversification algorithms for determining secret numbers in each said smart card and algorithms for calculating the first and second session keys for the first and second smart cards are respectively identical, and the first and second session keys are identical.