Host and user transaction system

• US 6,091,817 A
• Filed: 10/24/1997
• Issued: 07/18/2000
• Est. Priority Date: 10/26/1992
• Status: Expired due to Fees

• Current Assignee: Intellect Australia Pty Limited
• Original Assignee: Intellect Australia Pty Limited
• Inventors: Bertina, Johannes Marinus George, Oliver, Quentin Rees
• Primary Examiner(s): CANGIALOSI, SALVATORE A
• Application Number:
  US08/957,722
• Time in Patent Office: 998 Days
• Field of Search: 380/9, 380/23, 235/380
• US Class Current: 380/260
• CPC Class Codes: G06K 7/0008 General problems related to the reading of electronic memory record carriers, independent of its reading method, e.g. power transfer
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3415 Cards acting autonomously as pay-media
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/3576 Multiple memory zones on card
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A host and user transaction system comprising a self contained portable intelligent device (13) for use by a service user, and an interface device (11) for use by a service provider. The intelligent device (13) is in the form of an integrated circuit (IC) card incorporating a single chip microcomputer having an input/output communication port (15), nonvolatile memory (17, 19) and random access memory (21). The interface device (11) has its own memory for storing data and a coupler (14) to connect to the IC card for communicating therewith. The nonvolatile memory (17, 19) has in one part an operating system mask programmed in native code for performing basic functions and in a second part data files with different access restriction levels. The random access memory (21) is available for use by the operating system and stores data received from or ready for transmission via the communication port (15). The interface device (11) includes a program module within its own memory, which includes instructions for working with prescribed data files within the second part of the nonvolatile memory (17, 19). These instructions are performed by the operating system after the IC card is connected to the coupler by means of a program interpreter and form part of a prescribed instruction set discrete from the native code. Basic functions performed by the operating system in native code are only performed in accordance with a command executor which is limited to enabling the IC card to receive commands, perform prescribed functions in respect of the command and provide a result or status to the command, but not to execute program modules for performing a transaction which involves data file access.

Claims

1. A system for performing a transaction comprising:

(i) a self contained portable intelligent device including a microcomputer having an input/output communication port, nonvolatile memory and random access memory; and

(ii) an interface device associated with a memory for storing data and a coupler to effect communication with said intelligent device for establishing communications therewith;

said nonvolatile memory being arranged such that one part thereof has an operating system which can be run for performing basic functions of the device, said operating system being programmed in the native code of said microcomputer;

said random access memory being provided for use by said microcomputer when performing a function under the control of the operating system and for storing data received from or ready for transmission via said communication port; and

said interface device including one or more program modules stored within said memory, a said program module comprising one or more instructions forming part of a prescribed instruction set discrete from said native code;

wherein said store includes a program interpreter for interpreting and executing a said program module when the microcomputer is under the control of said operating system to perform a transaction in accordance with said instruction(s) of said prescribed instruction set comprising said program module.

2. A system as claimed in claim 1, wherein said nonvolatile memory also includes a command executor for receiving a command, performing a prescribed function in respect of said command, and providing a result or status to the command, when the microcomputer is under the control of said operating system.

3. A system as claimed in claim 1, wherein said nonvolatile memory is arranged such that a second part thereof is adapted to store data files having different access restriction levels thereto;

and

said program module is programmed with one or more said instructions from said prescribed instruction set, particularly adapted to enable working with prescribed data files within said second part of said nonvolatile memory when said microcomputer is under the control of said program interpreter and interpreting and executing said one or more instructions;

and wherein said one or more instructions have restricted control functions to limit access to said data files.

4. A system as claimed in claim 1, wherein said program module is programmed with one or more said instructions from said prescribed instruction set, particularly adapted to enable the performing of control functions solely in accordance with said prescribed instruction set and peripherals of the device.

5. A system as claimed in claim 2, wherein said program module is loaded into said random access memory via said communication port when said microcomputer is operating said command executor in response to a prescribed command received and executed thereby for subsequent execution by said program interpreter.

6. A system as claimed in claim 2, wherein said program module is loaded into a third part of said nonvolatile memory via said communication port when said microcomputer is operating said command executor in response to a prescribed command received and executed thereby for execution by said program interpreter.

7. A system as claimed in claim 1, wherein said program module is encrypted and said nonvolatile memory includes a data encryption and decryption program for execution by said microcomputer to decrypt said program module in accordance with a prescribed algorithm.

8. A system as claimed in claim 7, wherein said prescribed algorithm is the Data Encryption Standard algorithm (D.E.S.) or RSA algorithm.

9. A system as claimed in claim 1, wherein said intelligent device includes a keyboard and display.

10. A system as claimed in claim 1, wherein a plurality of said program modules are loaded sequentially into said random access memory and chained together to extend the capability of the system.

11. A system as claimed in claim 10, wherein said program modules are encrypted and said nonvolatile memory includes a data encryption and decryption program for execution by said microcomputer to decrypt said program modules in block chaining mode in accordance with a prescribed algorithm.

12. A system as claimed in claim 3, wherein said data files each comprise records whereby different records within a file can have different access restriction levels thereto.

13. A system as claimed in claim 12, wherein said data files and records each comprise headers for specifying an access restriction level.

14. A system as claimed in claim 13, wherein said access restriction level comprises a password.

15. A system as claimed in claim 1, wherein a said program module is adapted to allow a data representation method suited to the specific application thereof to be used.

16. A system as claimed in claim 2, wherein operation of said program interpreter is invoked when said microcomputer is operating said command executor in response to a prescribed command received and executed thereby.

17. A system as claimed in claim 1, wherein said microcomputer is a single chip microcomputer.

18. A system as claimed in claim 1, wherein said operating system is mask programmed in said native code.

19. A self-contained portable intelligent device for performing a transaction with an interface device associated with a memory for storing data and a coupler for connecting to said intelligent device for establishing communications therewith, the intelligent device comprising:

a microcomputer having an input/output communication port, nonvolatile memory and random access memory;

wherein;

(i) said nonvolatile memory is arranged such that one part thereof has an operating system which can be run for performing basic functions of the device, said operating system being programmed in native code of said microcomputer;

(ii) said random access memory is provided for use by said microcomputer when performing a function under the control of the operating system and for storing data received from or ready for transmission via said communication port;

(iii) said nonvolatile memory includes a program interpreter for interpreting and executing a program module transmitted thereto for performing a transaction; and

(iv) said program module comprises one or more instructions forming part of a prescribed instruction set discrete from said native code.

20. An intelligent device as claimed in claim 19, wherein said nonvolatile memory includes a command executor for receiving a command, performing a prescribed function in respect of said command, and providing a result or status to the command, when the microcomputer is under the control of said operating system.

21. An intelligent device as claimed in claim 20, wherein said nonvolatile memory is arranged such that a second part thereof is adapted to store data files having different access restriction levels thereto;

said program module is programmed with one or more said instructions from said prescribed instructions set, particularly adapted to enable working with prescribed data files within said second part of said store when said microcomputer is under the control of said program interpreter and interpreting and executing said one or more instructions; and

wherein said one or more instructions have restricted control functions to limit access to said data files.

22. An intelligent device as claimed in claim 19, wherein said program module is programmed with one or more said instructions from said prescribed instruction set, particularly adapted to enable the performing of control functions solely in accordance with said prescribed instruction set and peripherals of the device.

23. An intelligent device as claimed in claim 20, wherein said program module is loaded into said random access memory via the coupler of the interface device and said communication port for execution by said program interpreter.

24. An intelligent device as claimed in claim 19, wherein said program module is loaded into a third part of said nonvolatile memory via the coupler of the interface device and said communication port for execution by said program interpreter.

25. An intelligent device as claimed in claim 19, wherein said program module is encrypted and said store includes a data encryption and decryption program for execution by said microcomputer to decrypt said program module in accordance with a prescribed algorithm.

26. An intelligent device as claimed in claim 19, wherein a plurality of said program modules are loaded sequentially into said random access memory and chained together to extend the capability of the system.

27. An intelligent device as claimed in claim 19, wherein said program modules are encrypted and said nonvolatile memory includes a data encryption and decryption program for execution by said microcomputer to decrypt said program modules in block chaining mode in accordance with a prescribed algorithm.

28. An intelligent device as claimed in claim 21, wherein said data files each comprise records whereby different records within a file can have different access restriction levels thereto.

29. An intelligent device as claimed in claim 28, wherein said data files and records each comprise headers for specifying an access restriction level.

30. An intelligent device as claimed in claim 29, wherein said access restriction level comprises a password.

31. An intelligent device as claimed in claim 19, wherein a said program module is adapted to allow a data representation method suited to the specific application thereof to be used.

32. An intelligent device as claimed in claim 20, wherein operation of said program interpreter is invoked when said microcomputer is operating said command executor in response to a prescribed command received and executed thereby.

33. An intelligent device as claimed in claim 19, wherein said microcomputer is a single chip microcomputer.

34. An intelligent device as claimed in claim 19, wherein said operating system is mask programmed in said native code.

35. A method for performing a transaction between a self-contained portable intelligent device as claimed in claim 19 and the interface device referred to therein, comprising:

creating a program module comprising one or more instructions forming part of a prescribed instruction set discrete from the native code for the microcomputer of the intelligent device;

storing said program module in the memory of the interface device;

coupling the intelligent device to the interface device for establishing communications therewith; and

invoking a program interpreter included in the store of the intelligent device to interpret and execute said instructions of said program module.

36. A method as claimed in claim 35, wherein one or more said instructions are for working with prescribed data files within the intelligent device and have restricted control functions to limit access to said data files.

37. A method as claimed in claim 35, wherein said one or more instructions are for performing control functions solely in accordance with said prescribed instruction set and peripherals of the device.

38. A method as claimed in claim 35, including loading said program module into the memory of the intelligent device before invoking said program interpreter.

39. A method as claimed in claim 38 wherein said loading comprises invoking a command executor also included in the store of the intelligent device to receive and execute a load command from the interface device, and wherein said invoking of said program interpreter is performed by said microcomputer when operating said command executor pursuant to receiving and executing a program module execution command from the interface device.

40. A method as claimed in claim 35, wherein said data files have headers providing for different access restriction levels applicable to different program modules and wherein said instructions decode the header of a said prescribed data file before accessing it to determine whether it is accessible.