Method for safely transferring data and applications onto a chipcard

• US 6,145,080 A
• Filed: 06/30/1997
• Issued: 11/07/2000
• Est. Priority Date: 07/01/1996
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Hanel, Walter
• Primary Examiner(s): Beausoliel, Jr., Robert W.
• Assistant Examiner(s): REVAK, CHRISTOPHER A
• Application Number:
  US08/884,786
• Time in Patent Office: 1,226 Days
• Field of Search: 713/200, 713/201, 713/202, 707/9, 708/135, 705/18, 705/44, 711/154, 711/163, 711/164, 902/1, 902/4, 902/5, 902/25
• US Class Current: 726/21
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3576 Multiple memory zones on card
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

A method is disclosed in a number of embodiments, which use an identifier to control and limit the operation of a command and/or security code to one or more subdomains, such as directories, of a file structure. In one embodiment, the identifier is allocated to the command or to the security code. In another embodiment, the identifier is allocated to the subdomain. The security code includes a cryptographic key or a password.

Claims

1. Method for the secure transfer of applications into a chipcard memory having a file structure comprising:

receiving a command at the chipcard from a chipcard reading and writing device;

accessing an identifier;

comparing the identifier and the command to determine limitations on use of the command in the chipcard;

limiting use of the command in the chipcard to use in a subdomain of the chipcard memory file structure when the identifier indicates that the command is not to be used outside of the subdomain.

2. Method according to claim 1, wherein the identifier is allocated to the command and the act of accessing further comprises:

accessing the identifier received with the command.

3. Method according to claim 1, wherein the identifier is allocated to the subdomain of the chipcard memory file structure and the act of accessing further comprises:

accessing the identifier in the subdomain.

4. Method according to claim 1, wherein the limiting use of the command further comprises:

limiting use of the command to use outside of a subdomain of the chipcard memory file structure when the identifier indicates that the command is not to be used inside of the subdomain.

5. Method according to claim 1, wherein the limiting use of the command further comprises:

limiting use of the command to use in another subdomain of the chipcard memory file structure when the identifier indicates that the command is to be used only inside of the another subdomain.

6. Method according to claim 1, wherein the limiting use of the command further comprises:

permitting use of the command in another subdomain of the chipcard memory file structure when the identifier indicates that the command may be used inside of the another subdomain.

7. Method according to claim 1, wherein the limiting use of the command further comprises:

limiting use of the command to use in creating a directory in a subdomain of the chipcard memory file structure when the identifier indicates that the command is not to be used outside of the subdomain.

8. Method according to claim 1, wherein the limiting use of the command further comprises:

limiting use of the command to use in creating a file in a subdomain of the chipcard memory file structure when the identifier indicates that the command is not to be used outside of the subdomain.

9. Method according to claim 1, wherein the limiting use of the command further comprises:

limiting use of the command to use with a password.

10. Method according to claim 1, wherein the limiting use of the command further comprises:

limiting use of the command to use with a cryptographic key.

11. Method for the secure exchange of data with a chipcard memory having a file structure comprising:

receiving a security code at the chipcard from a chipcard reading and writing device;

accessing an identifier;

comparing the identifier and the security code to determine limitations on use of the security code in the chipcard;

limiting use of the security code to use outside a subdomain of the chipcard memory file structure when the identifier indicates that the security code is not to be used inside of the subdomain.

12. Method according to claim 11, wherein the identifier is allocated to the security code and the act of accessing further comprises:

accessing the identifier received with the security code.

13. Method according to claim 11, wherein the identifier is allocated to the subdomain of the chipcard memory file structure and the act of accessing further comprises:

accessing the identifier in the subdomain.

14. Method according to claim 13, wherein the limiting use of the security code further comprises:

limiting use of the security code to use inside of a subdomain of the chipcard memory file structure when the identifier indicates that the security code is not to be used outside of the subdomain.