Universal smart card access system

• US 6,748,532 B1
• Filed: 10/29/1999
• Issued: 06/08/2004
• Est. Priority Date: 10/29/1999
• Status: Expired due to Term

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: Levy, Moshe, Digiorgio, Rinaldo, Uhler, Stephen
• Primary Examiner(s): Smithers, Matthew
• Application Number:
  US09/430,524
• Time in Patent Office: 1,684 Days
• Field of Search: 713/159, 713/155, 713/182, 713/185, 713/202, 713/172, 705/64, 705/65, 705/67
• US Class Current: 713/159
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G06Q 20/3827 Use of message hashing
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G07F 7/0866 by active credit-cards adapted therefor G07F7/1008 takes precedence
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

The present invention is a universal secure token scheme that provides two way authentication, credit, debit, and stored value operations. The invention permits the use of universally available networks to access corporate, private, and proprietary devices. The invention provides strong authentication, offers optional encryption of the established session, and operates without requiring special permission to reconfigure firewalls. One application of the invention provides a universal token scheme that can be used in debit and stored value transactions. In one embodiment, devices and services are treated as URLs and a smart card is configured to perform the necessary HTTP protocol to access the URL.

Claims

1. A universal access method comprising:

in a first processing device, generating and sending a first secure token via an insecure communication fabric;

authenticating said first secure token;

replying to said first secure token when said first secure token is authenticated;

wherein,

said first secure token represents at least one transactional abstraction;

further wherein,

said at least one transactional abstraction comprises a state machine step counter.

2. The method of claim 1 wherein said state machine step counter is incremented according to a protocol type.

3. The method of claim 1 wherein said authenticating step executes on a second processing device.

4. The method of claim 3 wherein said second processing device comprises an associated URL.

5. The method of claim 3 wherein said second processing device generates a fault if said authenticating step fails.

6. The method of claim 1 wherein said first processing device comprises a smart card.

7. The method of claim 1 wherein said first processing device comprises an associated URL.

8. A universal access system comprising:

a first processing device configured to generate and send a first secure token representative of a transactional abstraction via an insecure communication fabric;

a second processing device configured to authenticate said first secure token and reply to said first secure token when said first secure token is authenticated;

wherein said at least one transactional abstraction comprises a state machine step counter.

9. The system of claim 8 wherein said state machine step counter is incremented according to a protocol type.

10. The system of claim 9 wherein said authenticating step executes on a second processing device.

11. The system of claim 10 wherein said second processing device comprises an associated URL.

12. The system of claim 10 wherein said second processing device generates a fault if said authenticating step fails.

13. The system of claim 8 wherein said first processing device comprises a smart card.

14. The system of claim 8 wherein said first processing device comprises an associated URL.

15. The system of claim 14 wherein said first processing device is accessed by traversing said associated URL.

16. A computer program product comprising:

a computer usable medium comprising computer readable program code embodied therein said computer readable program code configured to;

generate a first secure token representative of at least one transaction abstraction at a first processing device having a first associated URL;

send said first secure token representative of said transactional abstraction from said first processing device to a second associated URL via an insecure communication fabric wherein said second associated URL represents the address of a second processing device;

authenticate said first secure token at said second processing device;

send a reply to said first processing device having said first associated URL when said first secure token is authenticated;

wherein said at least one transactional abstraction comprises a state machine step counter.

17. The computer program product of claim 16 wherein said state machine step counter is incremented according to a protocol type.

18. The computer program product of claim 16 wherein said second processing device generates a fault if said authentication fails.

19. The computer program product of claim 16 wherein said at least one transactional abstraction comprises a transfer amount.

20. The computer program product of claim 16 wherein said first processing device comprises a smart card.