Secure multi-application IC card system having selective loading and deleting capability

• US 6,575,372 B1
• Filed: 02/12/1998
• Issued: 06/10/2003
• Est. Priority Date: 02/21/1997
• Status: Expired due to Term

• Current Assignee: Multos Ltd
• Original Assignee: Mondex International Ltd. (MasterCard Incorporated)
• Inventors: Simmons, Ian Stephens, Everett, David Barrington, Richards, Timothy Philip, Miller, Stuart James, Viner, John Charles, Peacham, Anthony David
• Primary Examiner(s): TREMBLAY, MARK STEPHEN
• Application Number:
  US09/023,057
• Time in Patent Office: 1,944 Days
• Field of Search: 235/380, 235/379, 235/492, 705/41
• US Class Current: 235/492
• CPC Class Codes: G06K 19/0719 at least one of the integrated circuit chips comprising an arrangement for application selection, e.g. an acceleration sensor or a set of radio buttons application selection on smart cards using pure software control, see G07F7/10
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/355 Personalisation of cards for use
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/3574 Multiple applications on card
• CPC Class Codes: G06Q 20/35765 Access rights to memory zones
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

A multi-application IC card system is disclosed having selective application loading and deleting capability. Prior to loading an application onto an IC card a test is conducted to determine if the card is qualified to receive the application using personalization data stored on the card and comparing it with permissions data associated with the application indicating one or more sets of cards upon which the application may be loaded. If the personalization data of the card falls within the allowable set of permissions for that application then the card may be loaded with the application. Preferably, the personalization data includes data representative of the card number, issuer, a product class and the date on which the card is personalized.

Claims

1. An IC card system comprising at least one IC card and an application, wherein said IC card contains personalization data representative of that card and said application is assigned a permissions data set representing at least one IC card upon which said application may be loaded, said system further comprising means for determining whether said personalization data falls within said permissions data set, wherein said permissions data set includes all IC cards which attempt to load the application.