Secure terminal provided with a smart card reader designed to communicate with a server via an internet network

• US 7,047,558 B1
• Filed: 10/26/2000
• Issued: 05/16/2006
• Est. Priority Date: 10/28/1999
• Status: Expired due to Fees

• Current Assignee: CP8 Technologies (Thales SA)
• Original Assignee: CP8 Technologies (Thales SA)
• Inventors: Mariana, Renaud
• Primary Examiner(s): Vu, Kim
• Assistant Examiner(s): TRUVAN, LEYNNA THANH
• Application Number:
  US09/869,434
• Time in Patent Office: 2,028 Days
• Field of Search: 726 2- 7, 726/14, 726 18- 19, 726/34, 725/6, 709101-102, 709/223, 709/225, 709229-230, 380/229
• US Class Current: 726/3
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/161 Implementation details of TCP/IP or UDP/IP stack architecture; Specification of modified or new header fields
• CPC Class Codes: H04L 69/32 Architecture of open systems interconnection [OSI] 7-layer type protocol stacks, e.g. the interfaces between the data link level and the physical level
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

The invention concerns an architecture of a terminal (5) allowing communications between a smart card (8) and a web server (4), via an internet network (RI). The terminal (5) is equipped with a secure enclosure (6) comprising a smart card reader (8), a keyboard (62), and optionally, other computing resources (63). The non-secure part of the terminal (5) comprises a web browser (51) and a first communication node (50) that routes the requests received to the browser (51) or to the secure enclosure (6). The secure enclosure (6) comprises a second communication node (60) and an HTTP server (61). The smart card (8) comprises a third communication node (80) and an HTTP server (81). The web server (4) comprises a merchant application (41) that can be placed in communication with the smart card (8) and activate software applications (A₁–A_n) of the latter.

Claims

1. An assembly comprising:

a smart card and a terminal designed to communicate with at least one web server via an internet network, the terminal having a main part and a peripheral part, the peripheral part residing in a tamper-resistant enclosure and including a smart card reader for receiving the smart card,

the main part of the terminal comprising;

a first module for enabling the terminal to communicate with the web server by establishing a communication between said first module and the web server in accordance with an internet communication protocol via two stacks of open-systems-interconnection layers specific to the internet communication protocol, one of said two stacks residing in said first module and the other stack residing in the web server;

the peripheral part of the terminal further comprising;

a second module connected to the first module for establishing a communication between the peripheral part and the main part in accordance with a peripheral-device-communication protocol via two stacks of open-systems-interconnection layers specific to the peripheral-device-communication protocol, one of said two stacks residing in the second module and the other stack residing in said first module;

the smart card comprising;

a smart card communication module for establishing communication between the smart card and the peripheral part in accordance with a smart card communication protocol via two stacks of open-system-interconnection layers specific to the smart-card-communication protocol, one of said two stacks residing in the smart card communication module and the other stack residing in said second module, said smart card further comprising a card HTTP server connected via the smart card communication module to the second module; and

wherein each of said two stacks of open-systems-interconnection layers specific to the peripheral-device-communication protocol and each of said two stacks of open-systems-interconnection layers specific to the smart card communication protocol are provided with a software element called an intelligent agent having protocol conversion functions so that an internet communication between an application residing on the smart card activated through said card HTTP server, and an application residing on the web server is established via the respective stacks of open-systems-interconnection layers provided with the respective intelligent-agents, a first intelligent agent being provided in said peripheral part and using an interface connected to the smart card reader so as to communicate with a second intelligent agent provided in said smart card, said first and second intelligent agents enabling a bilateral data exchange session between said second module and smart card communication module.

2. The assembly of claim 1, wherein said main part comprises a web browser, said internet communication protocol for communication between the main part and the web server including the HTTP/TCP-IP protocol with URL addressing, comprising an IP internet address element and a port number for the selection of said terminal and of an internal element of said terminal.

3. The assembly of claim 1, wherein said peripheral part also comprises at least one data entry keyboard and at least one enclosure HTTP server disposed between said keyboard and said second module.

4. The assembly of claim 3, wherein said peripheral part comprises at least one additional computing resource connected to said HTTP server.

5. The assembly of claim 4, wherein said additional computing resource is a biometric authentication device.

6. The assembly of claim 3, wherein said smart card includes means for storing several software applications and also comprises a card HTTP server disposed between said storing means and said smart card communication module, said card HTTP server being adapted for selectively activating at least one of said software applications upon reception of a request coming from said second module and transmitting requests sent by said applications to said smart card communication module.

7. The assembly of claim 6, wherein said smart card also comprises a software entity capable of interpreting an instruction set conveyed by said data received from said smart card communication module, and of translating the instruction set into a set of commands, said translated commands set being associated with one of said software applications to be activated in said smart card.

8. The assembly of claim 6, wherein said web server stores a merchant software application designed to be placed in interactive communication with at least one of said software applications of said smart card via said first, second and smart card communication modules.