Integrated circuit card, secure application module, system comprising a secure application module and a terminal and a method for controlling service actions to be carried out by the secure application module on the integrated circuit card

• US 6,249,869 B1
• Filed: 07/10/1997
• Issued: 06/19/2001
• Est. Priority Date: 07/12/1996
• Status: Expired due to Fees

• Current Assignee: Koninklijke KPN NV
• Original Assignee: Koninklijke KPN NV
• Inventors: Drupsteen, Michel Marco Paul, Feiken, Albertus
• Primary Examiner(s): Swann, Tod
• Assistant Examiner(s): MEISLAHN, DOUGLAS J
• Application Number:
  US08/891,186
• Time in Patent Office: 1,440 Days
• Field of Search: 380/24, 713/172, 705/65
• US Class Current: 713/172
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/3576 Multiple memory zones on card
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G07F 7/0826 Embedded security module
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

An integrated circuit card includes a memory storing service data relating to at least one service. At least part of the memory comprises data in file structures within one directory including at least a first file and a second file. The service data is grouped together in at least one service slot. Each service slot is divided into a profile part and a data part. Each profile part has a slot number and is arranged to function as an authorization mechanism. Each profile part is stored in the first file and comprises a unique application identifier. Each data part is at least partly stored in the second file and comprises data related to a given service. And the memory stores at least one key to protect write access to the first and second files. A secure application module and a terminal are also provided for controlling service actions to be carried out by the terminal on the integrated circuit card.

Claims

1. An integrated circuit card comprising a memory storing service data relating to at least two services, the integrated circuit card to be used with a secure application module that contains service data relating to at least one of the at least two services, wherein:

at least part of the memory comprises data in file structures within one directory including at least a first file and a second file;

the service data for each service is grouped together in a service slot;

each service slot is divided into a profile part and a data part;

each profile part has a slot number, comprises an application identifier, and is arranged to function as an authorization mechanism;

each data part comprises data related to a given service, and a service identifier to identify a service type;

the first file comprises the profile part of all of the service slots;

the second file comprises at least a portion of the data part of all of the service slots; and

the memory stores at least one key to protect write access to each service slot in the first and second files.

2. An integrated circuit card according to claim 1, wherein at least one profile part also comprises data relating to an expire date.

3. An integrated circuit card according to claim 1, wherein at least one profile part also comprises data relating to an application status.

4. An integrated circuit card according to claim 1, wherein:

each service slot comprises its own distinct profile part and its own distinct data part;

the first file is divided in a first plurality of records with each distinct profile part forming one record of the first plurality of records;

the second file is divided into a second plurality of records with each distinct data part forming one record of the second plurality of records; and

the memory means stores a further key to protect access to the first file.

5. An integrated circuit card according to claim 1, wherein:

the profile parts of a plurality of service slots coincide to form one common profile part and the data parts of the plurality of service slots are distinct;

the common profile part forms one record of the first file; and

the second file comprises a plurality of records each corresponding to a respective one of the distinct data parts.

6. An integrated circuit card according to claim 1, wherein said directory also comprises a third file and at least one service slot comprises an additional data part in said third file for storing additional data.

7. An integrated circuit card according to claim 6, wherein said third file comprises a plurality of records and each additional data part forms one record of said plurality of records.

8. A secure application module for communicating with an integrated circuit card, wherein:

(i) said integrated circuit card comprises a memory storing service data relating to at least two services, wherein;

at least part of the memory comprises data in file structures within one directory including at least a first file and a second file;

the service data of each service is grouped together in a service slot;

each service slot is divided into a profile part and a data part;

each profile part has a slot number, comprises an application identifier, and is arranged to function as an authorization mechanism;

each data part comprises data related to a given service, and a service identifier to identify a service type;

the first file comprises the profile part of all of the service slots;

the second file comprises at least a portion of the data part of all of the service slots; and

the memory stores at least a first key to protect write access to each service slot in the first and second files; and

(ii) said secure application module comprises a memory storing service data relating to at least one of the at least two services, wherein at least part of the memory of the secure application module comprises service data in file structures within one directory, said directory comprising at least one file, and said at least one file storing data relating to said at least one of the at least two services grouped together into;

application/service definition data comprising one of said application identifiers and one of said service identifiers;

at least two application counters for administrating a number of allocations and for generating a unique record transaction number;

a service sequence counter for generating a unique object number and for administrating a number of created service objects;

a service float for administrating a number of one of issued and received value units; and

application/service access conditions defining service actions allowed to be performed by said secure application module;

wherein the memory of the secure application module comprises said first key and a second key, said first key being used to protect data communication with the integrated circuit card, and said second key being used by said secure application module to store said application/service definition data and said application/service access conditions.

9. A secure application module according to claim 8, wherein said memory means of the secure application module stores a third key for protecting data communication with the integrated circuit card.

10. A system comprising:

(A) secure application module for communicating with an integrated circuit card, wherein;

(i) the integrated circuit card comprises a memory storing service data relating to at least two services, wherein;

at least part of the memory comprises data in file structures within one directory including at least a first file and a second file;

the service data of each service is grouped together in a service slot;

each service slot is divided into a profile part and a data part;

each profile part has a slot number, comprises an application identifier, and is arranged to function as an authorization mechanism;

each data part comprises data related to a given service, and a service identifier to identify a service type;

the first file comprises the profile part of all of the service slots;

the second file comprises at least a portion of the data part of all of the service slots; and

the memory stores at least a first key to protect write access to each service slot in the first and second files; and

(ii) said secure application module comprises a memory storing service data relating to at least one of the at least two services, wherein at least part of the memory of the secure application module comprises service data in file structures within one directory, said directory comprising at least one file, and said at least one file storing data relating to said at least one of the at least two services grouped together into;

application/service definition data comprising one of said application identifiers and one of said service identifiers;

at least two application counters for administrating a number of allocations and for generating a unique record transaction number;

a service sequence counter for generating a unique object number and for administrating a number of created service objects;

a service float for administrating a number of one of issued and received value units; and

application/service access conditions defining service actions allowed to be performed by said secure application module;

wherein the memory of the secure application module comprises said first key and a second key, said first key being used to protect data communication with the integrated circuit card, and said second key being used by said secure application module to store said application/service definition data and said application/service access conditions; and

(B) at least one terminal coupled to the secure application module, said terminal being equipped to communicate with said secure application module and with the integrated circuit card in order to control a service action carried out on the integrated circuit card.

11. A method for controlling a service action to be carried out by a terminal on an integrated circuit card, said terminal being coupled to both a secure application module and to the integrated circuit card, wherein:

(i) the integrated circuit card comprises a memory storing service data relating to at least two services, wherein;

at least part of the memory comprises data in file structures within one directory including at least a first file and a second file;

the service data of each service is grouped together in a service slot;

each service slot is divided into a profile part and a data part;

each profile part has a slot number, comprises an application identifier, and is arranged to function as an authorization mechanism;

each data part comprises data related to a given service, and a service identifier to identify a service type;

the first file comprises the profile part of all of the service slots;

the second file comprises at least a portion of the data part of all of the service slots; and

the memory stores at least a first key to protect write access to each service slot in the first and second files; and

(ii) said secure application module comprises a memory storing service data relating to at least one of the at least two services, wherein at least part of the memory of the secure application module comprises service data in file structures within one directory, said directory comprising at least one file, and said at least one file storing data relating to said at least one of the at least two services grouped together into;

application/service definition data comprising one of said application identifiers and one of said service identifiers;

at least two application counters for administrating a number of allocations and for generating a unique record transaction number;

a service sequence counter for generating a unique object number and for administrating a number of created service objects;

a service float for administrating a number of one of issued and received value units; and

application/service access conditions defining service actions allowed to be performed by said secure application module;

wherein the memory of the secure application module comprises said first key and a second key, said first key being used to protect data communication with the integrated circuit card, and said second key being used by said secure application module to store said application/service definition data and said application/service access conditions;

said method comprising;

establishing on the secure application module whether the secure application module is allowed to carry out the service action on said integrated circuit card by using said first key, said application/service definition data and said application/service access conditions;

carrying out the service action on the integrated circuit card; and

checking on the terminal whether the service action has been carried out on the integrated circuit card.

12. A method according to claim 11, wherein prior to establishing on the secure application module whether the secure application module is allowed to carry out the service action on the integrated circuit card, given service data is read from a given service slot on the integrated circuit card and a predetermined part of the given service data which has to remain unchanged is stored in the secure application module, and wherein the service action is carried out on the integrated circuit card without changing the predetermined part of the given service data in the given service slot on the integrated circuit card.

13. A method according to claim 11, wherein the service action comprises:

reading out an integrated circuit card ID;

selecting a given service slot associated with the integrated circuit card ID;

reading and verifying at least service slot data and a service slot definition;

storing a stamped MAC and a random number of the service slot definition and the service slot data;

securely storing the integrated circuit card ID, the service slot definition and the service slot data in a third party memory; and

erasing the service slot data and releasing the service slot definition.

14. A method according to claim 13, wherein the service action further comprises:

verifying whether the data in the third party memory was read out from the integrated circuit card by checking whether the stored integrated circuit card ID equals the integrated circuit card ID;

selecting a free service slot in the integrated circuit card;

allocating a free service slot with a new service slot definition in the integrated circuit card;

writing new service slot data in the selected free service slot; and

erasing the third party memory.

15. A method according to claim 11, wherein a given service slot on the integrated circuit card is temporarily locked.