Integrated circuit card with application history list

• US 6,328,217 B1
• Filed: 05/13/1998
• Issued: 12/11/2001
• Est. Priority Date: 05/15/1997
• Status: Expired due to Term

• Current Assignee: Mondex International Ltd. (MasterCard Incorporated)
• Original Assignee: Mondex International Ltd. (MasterCard Incorporated)
• Inventors: Viner, John Charles, Everett, David Barrington, Richards, Timothy Philip, Miller, Stuart James, Simmons, Ian Stephen, Peacham, Anthony David
• Primary Examiner(s): TREMBLAY, MARK STEPHEN
• Application Number:
  US09/078,031
• Time in Patent Office: 1,308 Days
• Field of Search: 235/379, 235/380, 235/492, 705/41
• US Class Current: 235/492
• CPC Class Codes: G06K 19/0719 at least one of the integrated circuit chips comprising an arrangement for application selection, e.g. an acceleration sensor or a set of radio buttons application selection on smart cards using pure software control, see G07F7/10
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/355 Personalisation of cards for use
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/35765 Access rights to memory zones
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 17/16 for devices exhibiting advertisements, announcements, pictures or the like
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

There is provided an integrated circuit card for loading an application copy thereon and a method of loading an application copy onto the integrated circuit card, wherein the application copy is one of a plurality of copies of an application. The application copy has an associated application identifier that uniquely identifies the application from other applications and an application copy number that is unique for each copy of the application. The integrated circuit card includes a microprocessor and a memory coupled to the microprocessor. The memory includes an application history list area for storing application identifiers and application copy numbers of applications that have been previously loaded onto the integrated circuit card. The method includes receiving by the integrated circuit card the application copy, the application identifier, and the application copy number; determining by the integrated circuit card whether the application identifier and the application copy number are contained in the application history list area; and failing to load the application copy by the integrated circuit card if the application identifier and the application copy number are contained in the application history list area.

Claims

1. A method of loading an application copy onto an integrated circuit card, wherein said application cop'"'"'y comprises application code and application data and a portion of said application data comprises units of value that may be exchanged for goods or services, and

wherein said application copy is one of a plurality of copies of an application, said application copy having an associated application identifier that uniquely identifies said application from other applications and an application copy number that is unique for each copy of said application, said integrated circuit card comprising a microprocessor and memory coupled to said microprocessor, said memory comprising an application history list area for storing application identifiers and application copy numbers of applications that have been previously loaded onto said integrated circuit card, said method comprising:

receiving by said integrated circuit card said application copy, said application identifier, and said application copy number;

determining by said integrated circuit card whether said application identifier and said application copy number are contained in said application history list area; and

failing to load said application copy by said integrated circuit card if said application identifier and said application copy number are contained in said application history list area;

transmitting said application copy, said application identifier, and said application copy number to said integrated circuit card by an application provider;

encrypting by said application provider at least a portion of said application copy before transmitting said application copy to said integrated circuit card;

transmitting by said application provider a key transformation unit comprising information relating to the encryption of said portion of said application copy;

wherein said integrated circuit card has a first public key pair, and further comprising the steps of;

encrypting said key transformation unit by said application provider with the public key of said first public key pair before transmitting said key transformation unit to said integrated circuit card;

decrypting by said integrated circuit card said encrypted key transformation unit with the secret key of said first public key pair; and

decrypting said application copy using the information contained in said decrypted key transformation unit;

wherein said application provider has a second public key pair, and further comprising the steps of;

forming a signed application copy by said application provider by encrypting said application copy with the secret key of said second public key pair; and

transmitting by said application provider said signed application copy to said integrated circuit card;

registering the public key of said second public key pair with a certification authority, which has a third public key pair;

providing a certificate by said certification authority to said application provider by encrypting the public key of said second public key pair with the secret key of said third public key pair; and

transmitting said certificate by said application provider to said integrated circuit card;

obtaining the public key of said second key pair by said integrated circuit card by decrypting said certificate using the public key of said third public key pair;

verifying by said integrated circuit card said signed application copy using the public key of said second public key pair; and

failing to load said application copy by said integrated circuit card if said signed application copy is not verified.

2. The method of claim 1, further comprising the steps of:

allocating a predetermined portion of said memory for said application history list area;

determining by said integrated circuit card whether said application history list area is full; and

failing to load said application copy if said application history list is full.

3. The method of claim 1, further comprising the step of:

adding said application identifier and said application copy number to said application history list area if said application identifier and said application copy number are not contained in said application history list area.

4. The method of claim 1, further including the step of:

adding said application identifier and said application copy number to said application history list area if said application identifier and said application copy number are not contained in said application history list area and said application copy number is not zero.

5. The method of claim 1, wherein said application copy comprises application code and application data and wherein said application identifier and said application copy number are contained in said application data.