System and method for performing transactions and a portable intelligent device therefore

• US 5,682,027 A
• Filed: 06/20/1995
• Issued: 10/28/1997
• Est. Priority Date: 10/26/1992
• Status: Expired due to Term

• Current Assignee: Intellect Australia Pty Limited
• Original Assignee: Intellect Australia Pty Limited
• Inventors: Bertina, Johannes Marinus George, Oliver, Quentin Rees
• Primary Examiner(s): Hajec, Donald T.
• Assistant Examiner(s): Lee, Michael G.
• Application Number:
  US08/424,258
• Time in Patent Office: 861 Days
• Field of Search: 235/375, 235/380, 235/382, 235/492, 902/26
• US Class Current: 235/380
• CPC Class Codes: G06K 7/0008 General problems related to the reading of electronic memory record carriers, independent of its reading method, e.g. power transfer
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3415 Cards acting autonomously as pay-media
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/3576 Multiple memory zones on card
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A host and user transaction system comprising a self contained portable intelligent device (13) for use by a service user, and an interface device (11) for use by a service provider. The intelligent device (13) is in the form of an integrated circuit (IC) card incorporating a single chip microcomputer having an input/output communication port (15), nonvolatile memory (17, 19) and random access memory (21). The interface device (11) has its own memory for storing data and a coupler (14) to connect to the IC card for communicating therewith. The nonvolatile memory (17, 19) has in one part an operating system mask programmed in native code for performing basic functions and in a second part data files with different access restriction levels. The random access memory (21) is available for use by the operating system and stores data received from or ready for transmission via the communication port (15). The interface device (11) includes a program module within its own memory, which includes instructions for working with prescribed data files within the second part of the nonvolatile memory (17, 19). These instructions are performed by the operating system after the IC card is connected to the coupler by means of a program interpreter and form part of a prescribed instruction set discrete from the native code. Basic functions performed by the operating system in native code are only performed in accordance with a command executor which is limited to enabling the IC card to receive commands, perform prescribed functions in respect of the command and provide a result or status to the command, but not to execute program modules for performing a transaction which involves data file access.

Claims

1. A system for performing a transaction comprising:

(i) a self-contained portable intelligent device including a microcomputer having an input/output communication port, nonvolatile memory, and random access memory; and

(ii) an interface device associated with a memory for storing data and a coupler to connect to said intelligent device for establishing communications therewith;

said nonvolatile memory being arranged such that one part thereof has an operating system programmed in native code for said microcomputer for performing basic functions, and a second part thereof adapted to store data files having different access restriction levels thereto;

said random access memory being provided for use by said operating system when performing a function and for storing data received from or ready for transmission via said communication port; and

said interface device including a program module within said memory comprising one or more instructions forming part of a prescribed instruction set discrete from said native code for working with prescribed data files within said second part of said nonvolatile memory in accordance with said operating system after said intelligent device is connected to said coupler;

wherein said operating system includes;

(a) a command executor for receiving a command, performing a prescribed function in respect of said command, and providing a result or status to the command, and (b) a program interpreter for executing said program module to perform a transaction; and

wherein said instructions have restricted control functions to limit access to said data files.

2. A system as claimed in claim 1, wherein said program module is loaded into said random access memory via said communication port by said command executor in response to a prescribed command received and executed thereby when said intelligent device is connected to said coupler for subsequent execution by said program interpreter.

3. A system as claimed in claim 1, wherein said program module is loaded into a third part of said nonvolatile memory via said communication port by said command executor in response to a prescribed command received and executed thereby when said intelligent device is connected to said coupler for execution by said program interpreter.

4. A system as claimed in claim 1, wherein said program module is encrypted and said operating system includes a data encryption and decryption program to decrypt said program module in accordance with a prescribed algorithm.

5. A system as claimed in claim 4, wherein said prescribed algorithm is the Data Encryption Standard algorithm (D.E.S.) or RSA algorithm.

6. A system as claimed in claim 1, wherein said intelligent device includes a keyboard and display.

7. A system as claimed in claim 1, wherein a plurality of said program modules are loaded sequentially into said random access memory and chained together to extend the capability of the system.

8. A system as claimed in claim 7, wherein said program modules are encrypted and said operating system includes a data encryption and decryption program to decrypt said program modules in block chaining mode in accordance with a prescribed algorithm.

9. A system as claimed in claim 1, wherein said data files each comprise records whereby different records within a file can have different access restriction levels thereto.

10. A system as claimed in claim 9, wherein said data files and records each comprise headers for specifying an access restriction level.

11. A system as claimed in claim 10, wherein said access restriction level comprises a password.

12. A system as claimed in claim 1, wherein a said program module is adapted to allow a data representation method suited to the specific application thereof to be used.

13. A system as claimed in claim 1, wherein operation of said program interpreter is invoked by said command executor in response to a prescribed command received and executed thereby.

14. A self-contained portable intelligent device for performing a transaction with an interface device associated with a memory for storing data and a coupler for connecting to said intelligent device for establishing communications therewith, comprising:

a microcomputer having an input/output communication port, nonvolatile memory, and random access memory;

wherein;

(i) said nonvolatile memory is arranged such that one part thereof has an operating system programmed in native code for said microcomputer for performing basic functions, and a second part thereof adapted to store data files having different access restriction levels thereto;

(ii) said random access memory is provided for use by said operating system when performing a function and for storing data received from or ready for transmission via said communication port;

(iii) said operating system includes;

(a) a command executor for receiving a command, performing a prescribed function in respect of said command, and providing a result or status to the command; and

(b) a program interpreter for executing a program module transmitted thereto for performing a transaction;

(iv) said program module comprises one or more instructions forming part of a prescribed instruction set discrete from said native code for working with prescribed data files within said second part of said nonvolatile memory in accordance with said operating system; and

(v) said one or more instructions having restricted control functions to limit access to data file.

15. An intelligent device as claimed in claim 14, wherein said program module is loaded into said random access memory from the coupler of the interface device via said communication port when said intelligent device is connected to said coupler for execution by said operating system.

16. An intelligent device as claimed in claim 14, wherein said program module is loaded into a third part of said nonvolatile memory from the coupler of the interface device via said communication port when said intelligent device is connected to the coupler for execution by said operating system.

17. An intelligent device as claimed in claim 14 wherein said program module is encrypted and said operating system includes a data encryption and decryption program to decrypt said program module in accordance with a prescribed algorithm.

18. An intelligent device as claimed in claim 14 wherein a plurality of said program modules are loaded sequentially into said random access memory and chained together to extend the capability of the system.

19. An intelligent device as claimed in claim 18, wherein said program modules are encrypted and said operating system includes a data encryption and decryption program to decrypt said program modules in block chaining mode in accordance with a prescribed algorithm.

20. An intelligent device as claimed in claim 14 wherein said data files each comprise records whereby different records within a file can have different access restriction levels thereto.

21. An intelligent device as claimed in claim 20, wherein said data files and records each comprise headers for specifying an access restriction level.

22. An intelligent device as claimed in claim 21, wherein said access restriction level comprises a password.

23. An intelligent device as claimed in claim 14 wherein a said program module is adapted to allow a data representation method suited to the specific application thereof to be used.

24. An intelligent device as claimed in claim 14 wherein operation of said program interpreter is invoked by said command executor in response to a prescribed command received and executed thereby.

25. A method for performing a transaction between an intelligent device as claimed in claim 14 and the interface device referred to therein, comprising:

creating a program module comprising one or more instructions for working with prescribed data files within the intelligent device;

storing said program module in the memory of the interface device;

coupling the intelligent device to the interface device; and

invoking a program interpreter forming part of the operator system of the intelligent device to interpret and execute said instructions of said program module;

wherein said one or more instructions form part of a prescribed instruction set discrete from the native code for the microcomputer of the intelligent device, and have restricted control functions to limit data file access.

26. A method as claimed in claim 25, including loading said program module into the memory of the intelligent device before invoking said program interpreter.

27. A method as claimed in claim 26 wherein said loading comprises invoking a command executor also forming part of the operator system of the intelligent device to receive and execute a load command from the interface device, and wherein said invoking of said program interpreter is performed by said command executor pursuant to receiving and executing a program module execution command from the interface device.

28. A method as claimed in claim 25, wherein said data file have headers providing for different access restriction levels applicable to different program modules and wherein said instructions decode the header of a said prescribed data file before accessing it to determine whether it is accessible.