Data transfer device, transaction system and method for exchanging control and I/O data with a data processing system

• US 6,941,404 B2
• Filed: 12/18/2001
• Issued: 09/06/2005
• Est. Priority Date: 12/19/2000
• Status: Expired due to Fees

• Current Assignee: Apple Inc.
• Original Assignee: Safenet BV (Thales SA)
• Inventors: Braams, Harm, Oerlemans, Robert V. M.
• Primary Examiner(s): AUVE, GLENN ALLEN
• Application Number:
  US10/025,375
• Publication Number:
  US 20020091889A1
• Time in Patent Office: 1,358 Days
• Field of Search: 235/375, 235/379, 235/380, 235/382, 235/382.5, 713150-202, 710/100, 710/305, 710/306
• US Class Current: 710/305
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/342 Cards defining paid or billed services or quantities
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/025 by means, e.g. cards, providing billing information at the time of purchase, e.g. identification of seller or purchaser, quantity of goods delivered or to be delivered
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A data transfer device, having first data interface means for exchanging data with a data processing system, second data interface means for exchanging data with a user of the data transfer device, and control means for controlling data transfer between the first and second data interface means. The control means are configured for receiving control data from the first data interface means for selectively enabling data exchange between the first and second data interface means. The control means can be configured for enabling part of the first and second data interface means for operation in a first or open mode, and for enabling the second data interface means for operation in a second or secure mode of operation. The second data interface means may comprise Input/Output means for secure data exchange with the first data interface means under the control of program execution data operative in the data transfer device and comprised by the control data.

Claims

1. A data transfer device, having a first data interface for exchanging data with a data processing system, a second data interface for exchanging data with a user device, and a control unit for selectively enabling data transfer between said first and second data interfaces in one of an open mode and a secure mode of operation, wherein said control unit is configured for receiving control data associated with an application to be processed by said data processing system and for providing an authentication check on said control data for setting said data transfer device in either one of the open and the secure modes of operation.

2. A data transfer device according to claim 1 wherein said control unit is configured for processing data provided by said first and second data interfaces in accordance with said control data.

3. A data transfer device according to claim 1 wherein said control unit is configured for processing data provided by said first and second data interfaces in accordance with program execution data to be executed by said data processing system, wherein said program execution data is comprised by said control data.

4. A data transfer device according to claim 1 wherein said control unit is configured for enabling part of said first and second data interfaces for operation in the open mode.

5. A data transfer device according to claim 1 wherein said control unit is configured for enabling said second data interface for operation in the secure mode and for executing program execution data if said data transfer device is set in the secure mode of operation.

6. A data transfer device according to claim 1, further comprising data storage means for storing certificate data, wherein said control data comprise certificate data, and said control unit is configured for checking said certificate data of said control data with respect to certificate data stored in said data storage means, for setting said data transfer device in the secure mode of operation if said certificate data of said control data are approved and for setting said data transfer device in the open mode of operation for either one of disapproval of said certificate data and non-availability of certificate data of said control data, and for deleting said control data if said certificate data thereof are false.

7. A data transfer device according to claim 1 wherein said control unit is configured for enabling part of said first and second data interfaces for operation in an open mode, and wherein said control unit is configured for enabling said second data interface for operation in the secure mode, said second data interface comprises keypad means, data card reader means and display means, said control unit in said open mode is configured for enabling access to said data card reader means, and said control unit in said secure mode is configured for enabling access to said keypad means, data card reader means and display means.

8. A data transfer device according to claim 7 wherein said control unit is configured for processing data provided by said card reader means in accordance with said control data received.

9. A data transfer device according to claim 1 wherein said control unit is configured for enabling part of said first and second data interfaces for operation in the open mode, and wherein said control unit is configured for enabling said second data interface for operation in the secure mode, wherein said second data interface comprises Input/Output (I/O) means for data exchange with at least one peripheral device to be connected to said I/O means, and wherein said control unit in said secure mode is configured for enabling access to said I/O means by said at least one peripheral device.

10. A data transfer device according to claim 9 wherein said I/O means are configured for connecting at least one data communication device.

11. A data transfer device according to claim 9 wherein said I/O means are configured for connecting at least one Voice over IP (VoIP) digital telephone device.

12. A data transfer device according to claim 1 wherein said control unit is configured for enabling part of said first and second data interfaces for operation in an open mode, and wherein said control unit is configured for enabling said second data interface for operation in the secure mode, further comprising signaling means for signaling said mode of operation of said data transfer device.

13. A data transfer device according to claim 12 wherein said signaling means comprise a Light Emitting Diode (LED), and said control unit is arranged for illuminating said LED if said data transfer device is in its secure mode of operation.

14. A data transfer device according to claim 1, further comprising means for supporting encrypted data transfer via said first interface.

15. A data transfer device according to claim 1 wherein said first data interface comprises a standardized computer data interface, such as USB (Universal Serial Bus) interface.

16. An Application Specific Integrated Circuit (ASIC) device comprising data exchange means and control means for selectively enabling data exchange between first and second data interfaces based on control data in accordance with claim 1.

17. An ASIC device according to claim 16, further comprising at leas one of said first and second data interfaces.

18. An ASIC device according to claim 16, further comprising a data processing unit to process data provided by said first and second data interfaces in accordance with program execution data provided by said control data.

19. An ASIC device according to claim 16, further comprising a data storage unit, among others to store said control data, said program execution data and authentication data.

20. A transaction system, comprising a first processing device such as to be operated by an authorization entity, a second processing device such as to be operated by a user, and a data transfer device having a first data interface to exchange data with a data processing system, a second data interface to exchange data with a user device, and a control unit to control data transfer between said first and second data interfaces in one of an open mode and a secure mode of operation, wherein said first and second processing devices connect to a data network, said data transfer device with its first interface connects to said second processing device, and said first and second processing devices being configured to exchange control data, associated with an application to be processed by said data processing system, from said first processing device to said data transfer device, wherein said first processing device is configured to provide the control data to set said data transfer device in the secure mode or the open mode based on an authentication check performed on the control data by the control unit.

21. A transaction system, according to claim 20, further comprising a third processing device such as to be operated by a transaction entity, wherein said third processing device connects to said data network, and said first processing device being configured to enable a transaction between said second and third processing devices dependent on enabling of said second data interface of said data transfer device.

22. A transaction system according to claim 21 wherein said transaction between said second and third processing devices involves exchange of trusted data between said first and second processing devices, wherein said first processing device is configured to provide control data to set said data transfer device in the secure mode of operation and wherein said third processing device is configured to enable said transaction between said second and third processing devices after said trusted data have been successfully exchanged.

23. A transaction system according to claim 21 wherein said second data interface comprises Input/Output (I/O) means for data exchange with at least one peripheral device to be connected to said I/O means, said transaction between said second and third processing devices involves exchange of trusted data between said first and second processing devices, said first processing device being configured to provide control data to set said data transfer device in the secure mode of operation and said third processing device is configured to enable a transaction between said I/O means and said third processing device after said trusted data have been successfully exchanged.

24. A transaction system according to claim 21 wherein said transaction entity is a telecommunication service provider.

25. A transaction system according to claim 21, comprising a plurality of first, second and third processing devices wherein said data network is a public data network, such as the Internet.

26. A third processing device configured for operating in accordance with claim 21.

27. A first processing device configured for operating in accordance with claim 20.

28. A second processing device configured for operating in accordance with claim 20.

29. A method of exchanging data with a data processing system using a data transfer device having a first data interface for exchanging data with said data processing system, a second data interface for exchanging data with a user device, and a control unit for controlling data transfer between said first and second data interfaces in one of an open mode and a secure mode of operation, said method comprising:

transferring control data from said data processing system to said data transfer device, the control data being associated with an application to be processed by the data processing system; and

performing an authentication check on the control data to set the data transfer device in either one of the open and the secure modes of operation.

30. A method according to claim 29 wherein said control data comprise certificate data, wherein said control data being checked by said control unit with respect to said certificate data, and wherein said data transfer device is set in its secure mode of operation if said certificate data of said control data are approved and said data transfer device is set in its open mode of operation for either one of disapproval of said certificate data and non-availability of certificate data of said control data, said control data being deleted if said certificate data thereof are false.

31. A method according to claim 30 wherein said data transfer device in its open mode of operation exchanges data with said second data interface through a limited number of data input means thereof, including a data card reader, whereas the data transfer device in its secure mode of operation exchanges data with said second data interface through a plurality of data input and output devices thereof, including keypad unit, display unit, card reader unit, and Input/Output (I/O) unit for data exchange with at least one peripheral device to be connected to said I/O unit.

32. A method according to claim 31 wherein said I/O unit is enabled and disabled under control of program execution data of a program executed by said data processing system, said program execution data being comprised by said control data.

33. A method according to claim 32 wherein said program execution data are operative in said data transfer device while a data card operatively connects to said card reader unit.

34. A method according to claim 29 wherein data provided by said first and second data interfaces are processed in accordance with program execution data of a program executed by said data processing system, said program execution data being comprised by said control data.

35. A method according to claim 29 wherein data between said data processing system and said data transfer device are exchanged in an encrypted form.

36. A method according to claim 29 wherein control data in said data transfer device are erased after the completion of a data exchange.