Method for authenticating a portable object, corresponding portable object, and apparatus therefor

• US 6,977,577 B2
• Filed: 05/04/2001
• Issued: 12/20/2005
• Est. Priority Date: 05/09/2000
• Status: Expired due to Term

• Current Assignee: CP8 Technologies (Thales SA)
• Original Assignee: CP8 Technologies (Thales SA)
• Inventors: Hazard, Michel
• Primary Examiner(s): Horabik, Michael
• Assistant Examiner(s): NGUYEN, NAM V
• Application Number:
  US10/030,255
• Publication Number:
  US 20030098775A1
• Time in Patent Office: 1,691 Days
• Field of Search: 380/25, 380/4, 380/21, 380/22, 380/23, 380/24, 380/244, 380/229, 340/5.8, 340/5.81, 340/5.85, 340/5.86, 455/411, 455/433, 713155-159, 235/380, 235/382, 235/379
• US Class Current: 340/5.8
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G07F 7/082 Features insuring the integrity of the data on or in the card
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A method is described for authenticating a portable object that includes a processor and a memory. The memory contains at least one code defining operations capable of being executed by the portable object, as well as a one-way function. The method comprises an authentication of the portable object which includes sending the portable object an order so that the latter executes a calculation of a result by applying to the one way function at least part of the code. This result enters into the implementation of a given operation, the operation being performed successfully only when the portable object is authentic.

Claims

1. A method for authenticating a portable object including information processing means and information storage means connected to said information processing means, the information storage means containing at least one code defining operation steps capable of being executed by the portable object, as well as a one-way function, said method comprising:

using an information processing device for communicating with the portable object;

sending from said information processing device to the portable object an order to execute a calculation of a result by applying to said one-way function at least part of said code; and

entering said result into the implementation of a given operation, said operation being performed successfully only when the portable object is authentic.

2. A method according to claim 1, wherein said operation comprises a decryption operation, said result making it possible to produce an associated decryption key.

3. A method according to claim 1, wherein said part of said code used in execution of the calculation, comprises a machine code.

4. A method according to claim 1, wherein the portable object contains a real code that defines operations designed to be executed by the portable object, and a dummy code that defines operations not designed to be executed by the portable object, said code used in the calculation of a result comprising a dummy code.

5. A method according to claim 1, further comprising repeatedly sending said order to the portable object during its life, prior to execution by the portable object of said operation steps.

6. A method according to claim 1, wherein said code used in the calculation is defined by a start address and an end address in the information storage means, and further including the step of sending said start and end addresses to the portable object.

7. A method according to claim 1, wherein said code comprises a set of binary words, said code used in the calculation being defined by a subset of said binary words comprising binary words distributed in the information storage means at a determined pitch, said pitch being sent to the portable object.

8. A method for having a portable object execute a sensitive operation, the portable object comprising information processing means and information storage means, comprising:

storing in the information storage means at least one code that defines operations capable of being executed by the portable object, as well as a one-way function, and

sending the portable object an order so that the portable object executes a calculation of a result by applying to said one-way function at least part of said code, said result input into the implementation of said sensitive operation, said operation being performed successfully only when the portable object is authentic.

9. A method according to claim 8, wherein the code part used in the calculation comprises a machine code.

10. A method according to claim 8, wherein the portable object contains a real code that defines operations designed to be executed by the portable object, and a dummy code that defines operations not designed to be executed by the portable object, said code part used in the calculation comprising a dummy code.

11. A portable object, comprising:

information processing means and information storage means connected to said information processing means, the information storage means containing at least one code that defines operations capable of being executed by the portable object, as well as a one-way function, and means for executing a calculation of a result by applying to said one-way function at least part of said code, said result entering into the implementation of a given operation, said operation being performed successfully only when the portable object is authentic, said information processing means being connected to means for cooperating with an external information processing device distinct from the portable object, so as to receive from an external information processing device an order to execute said calculation.

12. A portable object according to claim 11, wherein said code part used in the calculation comprises a machine code.

13. A device comprising:

information processing means and information storage means, said information processing means designed to communicate with a portable object in order to authenticate the portable object, the portable object comprising;

information processing means, information storage means connected to said information processing means, the information storage means of the portable object containing at least one code that defines operations capable of being executed by the portable object, as well as a one-way function, said device further comprising means for sending the portable object an order so that the portable object determines a result by applying to said one-way function at least part of said code of the portable object, said result entering into the implementation of a given operation, said operation being performed successfully only when the portable object is authentic.

14. A device according to claim 13, wherein said code part used in the calculation comprises a machine code.