Method and apparatus for authenticating an open system application to a portable IC device

• US 7,010,684 B2
• Filed: 07/14/2003
• Issued: 03/07/2006
• Est. Priority Date: 10/26/1998
• Status: Expired due to Term

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: DeTreville, John
• Primary Examiner(s): Darrow, Justin T.
• Application Number:
  US10/619,153
• Publication Number:
  US 20040015694A1
• Time in Patent Office: 967 Days
• Field of Search: 713/158, 713/159, 713/164, 713/165, 713/166, 713/167, 713/169, 713/172, 713/192
• US Class Current: 713/159
• CPC Class Codes: G06F 21/1011 to devices
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 9/4406 Loading of operating system
• CPC Class Codes: G06F 9/468 Specific access rights for resources, e.g. using capability register
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses

Abstract

A secure communication channel between an open system and a portable IC device is established. An application running on the open system desiring access to the information on the portable IC device authenticates itself to the portable IC device, proving that it is trustworthy. Once such trustworthiness is proven, the portable IC device authenticates itself to the application. Once such two-way authentication has been completed, trusted communication between the open system and the portable IC device can proceed, and private information that is maintained on the portable IC device can be unlocked and made available to the application.

Claims

1. A system comprising:

a portable integrated circuit device having stored thereon an authentication application and a definition of a list of trusted applications; and

a computer, coupled to communicate with the portable integrated circuit device, to,

form a secure connection between the portable integrated circuit device and an application running on the computer,

request, via the application running on the computer, that the portable integrated circuit device unlock itself,

receive the list of trusted applications from the portable integrated circuit device, and

identify to the portable integrated circuit device whether the application is one of the applications in the list of trusted applications.

2. A system as recited in claim 1, wherein the portable integrated circuit device is further to authenticate itself to the application running on the computer.

3. A system as recited in claim 1, wherein the portable integrated circuit device is to unlock itself only if the application is one of the applications on the list of trusted applications.

4. A system as recited in claim 3, wherein:

the portable integrated circuit device, in unlocking itself, makes private information stored thereon accessible to the application; and

the portable integrated circuit device includes a signaling device to notify a user of the portable integrated circuit device that it is safe to use the computer.

5. A system as recited in claim 4, wherein the signaling device includes an indicator light.

6. A system as recited in claim 1, wherein the portable integrated circuit device is to unlock itself only if both the application and the operating system executing on the computer are each one of the applications on the list of trusted applications.