Secure multi-application IC card system having selective loading and deleting capability

• US 6,659,354 B2
• Filed: 12/21/2001
• Issued: 12/09/2003
• Est. Priority Date: 02/21/1997
• Status: Expired due to Term

• Current Assignee: Multos Ltd
• Original Assignee: Mondex International Ltd. (MasterCard Incorporated)
• Inventors: Everett, David Barrington, Richards, Timothy Philip, Miller, Stuart James, Viner, John Charles, Simmons, Ian Stephen, Peacham, Anthony David
• Primary Examiner(s): TREMBLAY, MARK STEPHEN
• Application Number:
  US10/033,281
• Publication Number:
  US 20020050528A1
• Time in Patent Office: 718 Days
• Field of Search: 235/379, 235/380, 235/492, 705/41
• US Class Current: 235/492
• CPC Class Codes: G06K 19/0719 at least one of the integrated circuit chips comprising an arrangement for application selection, e.g. an acceleration sensor or a set of radio buttons application selection on smart cards using pure software control, see G07F7/10
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/355 Personalisation of cards for use
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/3574 Multiple applications on card
• CPC Class Codes: G06Q 20/35765 Access rights to memory zones
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

A multi-application IC card system is disclosed having selective application loading and deleting capability. Prior to loading an application onto an IC card a test is conducted to determine if the card is qualified to receive the application using personalization data stored on the card and comparing it with permissions data associated with the application indicating one or more sets of cards upon which the application may be loaded. If the personalization data of the card falls within the allowable set of permissions for that application then the card may be loaded with the application. Preferably, the personalization data includes data representative of the card number, issuer, a product class and the date on which the card is personalized.

Claims

1. An IC card system comprising at least one IC card, an application to be loaded onto said card and means for determining whether said card is qualified to accept the loading of said application onto said card, wherein said IC card contains card personalization data, and said application is assigned application permissions data representing at least one set of IC cards upon which said application may be loaded.

2. The IC card system of claim 1, wherein said determining means compares said card personalization data with said application permissions data.

3. The IC card system of claim 2, wherein whether said application is loaded onto said IC card depends on the result of said comparison, such that in the event the card personalization data matches said permissions data set the card is qualified and the application is loaded.

4. The IC card system of claim 1, wherein said personalization data comprises data representative of a unique card identification designation.

5. The IC card system of claim 4, wherein said personalization data further comprises data representative of a card issuer.

6. The IC card system of claim 5, wherein said personalization data further comprises data representative of a product class.

7. The IC card system of claim 6, wherein said personalization data further comprises data representative of a date.

8. An IC card system comprising at least one IC card and an application, wherein said IC card contains personalization data representative of that card and said application is assigned a permissions data set representing at least one IC card upon which said application may be loaded, said system further comprising means for determining whether said personalization data falls within said permissions data set.

9. The IC card system of claim 8, wherein said application is loaded onto said IC card in the event said determining means determines that said personalization data falls within said set.

10. The IC card system of claim 8, wherein said personalization data comprises data representing a card identification designation, and an issuer of said card.

11. The IC card system of claim 10, wherein said personalization data further comprises data representing a product class and a date.

12. The IC card system of claim 8, wherein said permissions data set includes a plurality of card identification designations.

13. The IC card system of claim 8, wherein said permissions data set includes one or more issuers of IC cards.

14. The IC card system of claim 8, wherein said permissions data set includes one or more product classes.

15. The IC card system of claim 8, wherein said permissions data set includes a range of dates.

16. A process for loading an application onto an IC card comprising the step of determining whether said IC card is qualified to accept the loading of said application onto said card, wherein said determining step includes the steps of:

providing said card with personalization data;

assigning to said application permissions data representing at least one set of IC cards upon which said application may be loaded;

comparing said personalization data with said permissions data; and

loading said application onto said IC card provided said personalization data falls within said set of cards upon which said application may be loaded.

17. The process of claim 16, wherein said personalization data comprises data representative of a card identification designation.

18. The process of claim 17, wherein said personalization data further comprises data representative of a card issuer.

19. The process of claim 16, wherein said personalization data comprises data representative of a product class.

20. The process of claim 19, wherein said personalization data further comprises data representative of a date.

21. The process of claim 18, further comprising the first step of enabling said card to be loaded with said application.

22. The process of claim 21, wherein said enabling step includes the step of storing personalization data onto said card.

23. The process of claim 21, wherein said enabling step includes the step of setting an enablement bit indicating that the card has been enabled.

24. The process of claim 22, wherein said enabling step further includes the step of setting an enablement bit indicating that the card has been enabled.

25. The process of claim 23, wherein prior to said enabling step a checking step is performed to determine whether said card has been enabled.

26. The process of claim 24 wherein prior to said enabling step a checking step is performed to determine whether said card has been enabled.

27. A process for deleting an application from an IC card comprising the step of determining whether said IC card is qualified to delete said application based upon permissions data associated with said application, wherein said determining step includes the steps of:

providing said card with personalization data;

assigning to said application permissions data representing at least one set of IC cards from which said application may be deleted;

comparing said personalization data with said permissions data; and

deleting said application from said IC card provided said personalization data falls within said set of cards from which said application may be deleted.

28. The process of claim 27, wherein said personalization data comprises data representative of a card identification designation.

29. The process of claim 27, wherein said personalization data further comprises data representative of a card issuer.

30. The process of claim 27, wherein said personalization data comprises data representative of a product class.

31. The process of claim 27, wherein said personalization data further comprises data representative of a date.

32. An IC card system comprising at least one IC card, an application to be deleted from said card and means for determining whether said card is qualified to delete said application from said card, wherein said IC card contains card personalization data, and said application is assigned application permissions data representing at least one set of IC cards from which said application may be deleted.

33. The IC card system of claim 32, wherein said determining means compares said card personalization data with said application permissions data.

34. The IC card system of claim 33, wherein whether said application is deleted from said IC card depends on the result of said comparison, such that in the event the card personalization data matches said application permissions data the card is qualified and the application is deleted.