Smart card applications implementing CGI agents and directory services

• US 7,194,545 B2
• Filed: 02/09/2001
• Issued: 03/20/2007
• Est. Priority Date: 02/10/2000
• Status: Expired due to Fees

• Current Assignee: CP8 Technologies (Thales SA)
• Original Assignee: CP8 Technologies (Thales SA)
• Inventors: Urien, Pascal
• Primary Examiner(s): Vaughn, Jr.; William
• Assistant Examiner(s): BENGZON, GREG C
• Application Number:
  US09/958,724
• Publication Number:
  US 20020124092A1
• Time in Patent Office: 2,230 Days
• Field of Search: 709/206, 709/217, 709/229, 235/375, 235/492, 707/1, 707/9, 707/3, 370/522, 710/33
• US Class Current: 709/229
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/45 Network directories; Name-to-address mapping
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/162 involving adaptations of sockets based mechanisms secure socket layer H04L63/168
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

The invention relates to a method for listing a user in a directory server and/or locating a subscriber in an internet-type network (RI), by consulting a directory server (SA_i), in such a way as to determine an IP address associated with this subscriber. To do so, a smart card (2a) is used, which stores applications (A_l) that are each associated with a listing and/or locating (“PL”) protocol. Subscriber profiles can be stored in the smart card (2a). A plurality of different protocols can be stored, converting the smart card (2a) into a multi-directory database. The card (2a) is provided with client/webserver and CGI functions, in such a way as to be capable of initiating transmissions, by internet protocols, between directory servers (SA_i) and the smart card (2a) and activating the applications (A_l) stored in the card, for the execution of listing and/or locating (“PL”) protocols.

The invention also relates to the associated card.

Claims

1. A method for communicating information between at least one directory server and a smart card, said method comprising the following steps:

1) opening a first sequence of data exchanges between a terminal connected to a smart card reader and said smart card, for transmission of a request by a web navigator in said terminal to retrieve data enabling selection and activation of one of a listing software and locating software with a view to selecting one of said directory servers, wherein the smart card receives request data identifying the data to be retrieved;

2) opening a second sequence of data exchanges between said smart card and said terminal in order to transmit said retrieved data to said terminal, wherein the web navigator receives said retrieved data;

3) after selecting and activating one of said listing software and locating software by using the retrieved data, opening a third sequence of data exchanges between said terminal and said smart card to transmit to said smart card data comprising selection data and optional parameters, said selection data and optional parameters including a reference to the selected and activated one of said listing software and locating software;

4) implementing a CGI function and executing the selected and activated one of said listing software and locating software; and

5) as a result of said executing step, opening a fourth sequence of data exchanges between said smart card and at least one of said directory servers according to said selection data in such a way as to transmit a request to perform a predetermined listing or locating operation.

2. The method of claim 1, wherein said terminal is connected to a smart card reader, said smart card reader and said smart card include first and second protocol stacks for said data exchanges by a first predetermined protocol which are defined by ISO Standard 7816, said first stack located in said terminal and said second stack located in said smart card, each stack including at least predetermined software communication protocol lower layers disposed in such a way as to enable said data exchanges between said smart card and said terminal, said lower layers forming an interface with a first software program in said terminal associated with said first stack and a second software program in said smart card associated with said second stack, said software programs form said specific communication protocol layers, respectively, and wherein first and second software programs each include a first and second software entities, said first software entity comprising a data transfer module forming an interface with said lower layers of said first and second protocol stacks, and said second software entity comprising a management module, said management module further comprising intelligent agents that establish bidirectional data exchange sessions for said data exchanges.

3. The method of claim 2, wherein one of said listing software and locating software has associated therewith a set of instructions comprising a script to be interpreted by said management module of said second software program, said management module corresponding to an intelligent script translator agent that furnishes orders that can be understood by one of said listing software and locating software.

4. The method of claim 1, wherein said step of opening a first sequence includes sending a request of an http type by an internet-type protocol by addressing, using an address of the URL feedback type, a predetermined page in HTML language containing said selection data and optional parameters.

5. The method of claim 1, wherein said step of opening a second sequence includes sending a form in HTML language to said smart card, and wherein said form includes at least one URL feedback address and a path leading to a predetermined directory associated with one of said listing software and locating software, said path for sending said optional parameters to one of said listing software and locating software.

6. The method of claim 5, wherein said step of opening a third sequence includes sending a request of the http type to said URL address designating said directory containing one of said listing software and locating software, said request including said selection data and said optional parameters.

7. The method of claim 6, wherein said listing software is associated with a first protocol enabling a listing of a first user in said predetermined directory server;

wherein said optional parameters comprise profile data defining a subscriber profile including at least identification data for said first user;

wherein said http request of said step of opening a third sequence includes first data indicating that said request is said listing of said first user and second data enabling the development, by said listing software, of a URL address characteristic of said predetermined directory server; and

wherein said profile data associated with said subscriber profile are transmitted, during said implementing step, to said directory server in such a way as to accomplish said listing of said first user, said listing including an IP address in association with a directory server address of said directory server and said identification data of said first user.

8. The method of claim 7, further comprising sending an acknowledgment or an error code to said smart card.

9. The method of claim 8, further comprising data exchanges between one of said directory servers and said smart card in such a way as to authenticate said smart card or said first user, and that said authentication employs a certificate and at least one encryption key stored in said smart card.

10. The method of claim 6, wherein said locating software is associated with a second protocol enabling location of at least one second user in said internet-type network, said second user being listed in said predetermined directory server;

wherein said listing includes at least identification data of said second user;

wherein said http request of said step of opening a third sequence includes first data indicating that said request is said locating of said second user, second data for identifying said second user to be located, and third data making it possible for said locating software to develop a URL address characteristic of said predetermined directory server; and

wherein said data identifying said second user are transmitted, during said implementing step, to this directory server, in such a way as to achieve said location of said second user by looking for an IP address, associating said second data for identifying this second user received by said directory server with said identification data stored in this directory, and retransmitting said IP address to said smart card so as to enable said location.

11. The method of claim 1, wherein said exchanges between said smart card and said terminal are preformed in protocol units.