Smart card with back up

• US 7,206,847 B1
• Filed: 05/22/2000
• Issued: 04/17/2007
• Est. Priority Date: 05/22/2000
• Status: Expired due to Fees

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Alberth, William P. Jr., Kotzin, Michael
• Primary Examiner(s): Wiley; David
• Assistant Examiner(s): SHIN, KYUNG H
• Application Number:
  US09/575,749
• Time in Patent Office: 2,521 Days
• Field of Search: 713/172, 705/40, 705/41, 235/379, 709/229
• US Class Current: 709/229
• CPC Class Codes: G06Q 20/102 Bill distribution or payments
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3576 Multiple memory zones on card
• CPC Class Codes: G07F 7/082 Features insuring the integrity of the data on or in the card
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

Smart card security is enhanced by making the smart card a two-piece device. Both parts of the smart card contain copies of user data and a processor, which executes program instructions stored in the smart card half so as to give each part of the two-part smart card security and intelligence. Both parts must be in communication with each other for the data in either card to be accessible and useable. By separating the two pieces, data compromise is virtually impossible.

Claims

1. A personal data storage apparatus comprised of:

a. a first personal data storage device including a memory device storing;

i. a first set of user data;

ii. a first encryption key for encrypting at least part of said first set of user data;

b. a first interface circuit coupled to said memory device granting conditional access to a third device to data therein using an appropriate data exchange protocol between the first personal data storage device and the third device only when a second personal data storage device is operatively coupled to said first personal data storage device;

c. a second interface circuit coupled to said memory device and providing communications access to the second personal data storage device; and

d. a processor, operatively coupled to said memory device and to said first and second interface circuits, the processor configured to adjust the first set of user data to create an adjusted first set of user data in response to a transaction with the third device, the processor further configured to encrypt the adjusted first set of user data to create an encrypted adjusted first set of user data, and the processor further configured to transfer the encrypted adjusted first set of user data to the second personal data storage device via the second interface circuit.

2. The personal data storage apparatus of claim 1 wherein said second personal data storage device is operatively coupled to said first personal storage device using a mechanical coupling.

3. The personal data storage apparatus of claim 2 wherein said mechanical coupling is a connector.

4. The personal data storage apparatus of claim 1 wherein said second personal data storage device is operatively coupled to said first personal storage device using a wireless connection.

5. The personal data storage apparatus of claim 4 wherein said wireless connection is a radio link.

6. The personal data storage apparatus of claim 1, where an agent of the issuer of the personal data storage apparatus can reclaim the user data from a single part of the personal data storage apparatus.

7. A personal data storage apparatus comprised of:

a. a first personal data storage device comprising;

i. a first memory device storing;

1. a first set of user data;

2. a first encryption key for encrypting at least part said first set of user data;

ii. a first interface circuit coupled to said memory device granting conditional access to data therein using a predetermined protocol and only when a second personal data storage device is operatively coupled to said first personal data storage device;

iii. a second interface circuit coupled to said memory device and providing access to a second personal data storage device;

b. a second personal data storage device coupled to said first personal data storage device and being comprised of;

i. the second memory device storing;

1. a substantially duplicate copy of said first set of user data;

c. a second encryption key for encrypting at least part said first set of user data;

ii. a second interface circuit coupled to said memory device granting conditional access to data therein using a predetermined protocol and only when said second personal data storage device is operatively coupled to said first personal data storage device;

whereby user data in either said first or second personal data storage device is accessible and usable only when said first and second personal data storage devices are in communication with each other, and

wherein said first personal data storage device is further comprised of a processor, operatively coupled to said first memory device and to said first and second interface circuits, the processor configured to adjust the first set of user data to create an adjusted first set of user data in response to a transaction with a third device, the processor further configured to encrypt the adjusted first set of user data to create an encrypted adjusted first set of user data, and the processor further configured to transfer the encrypted adjusted first set of user data to the second personal data storage device.

8. The personal data storage apparatus of claim 7 wherein said second personal data storage device is operatively coupled to said first personal storage device using a mechanical connector.

9. The personal data storage apparatus of claim 7 wherein said second personal data storage is operatively coupled to said first personal storage device using a wireless connection.

10. The personal data storage apparatus of claim 7 wherein said wireless connection is a radio link.

11. The personal data storage apparatus of claim 7, where an agent of the issuer of the personal data storage apparatus can reclaim the user data from a single part of the personal data storage apparatus.

12. A method of securing access to data stored in a personal data storage device comprised of the steps of:

a. storing personal data in first and second data storage devices that are capable of being operably coupled to each other;

b. encrypting said personal data in a first data storage device using a first encryption key and encrypting the data in said second data storage device using a second encryption key;

c. granting access to a third device to said personal data in either said first data storage device or said second data storage device only when said first and second data storage devices are operatively coupled together;

d. adjusting the personal data to create an adjusted personal data in response to a transaction with the third device if access is granted to the third device to the personal data in either the first data storage device or the second data storage device;

e. encrypting the adjusted personal data to create an encrypted adjusted personal data; and

f. transferring the encrypted adjusted personal data to the second data storage device.

13. The method of claim 12 wherein said step of granting access to a third device to said personal data in either said first data storage device or said second data storage device only when said first and second personal data storage devices are operatively coupled together is comprised of the step of granting access when said first and second personal data storage devices are coupled together through at least one of either a wireless data link or a mechanical connector.

14. The method of claim 12 wherein data stored in said first storage device can be recovered from data stored in said second storage device.

15. The method of claim 12 wherein said first and second encryption keys are the same.

16. A method of securing access to data stored in a personal data storage device comprised of the steps of:

a. storing personal data in a smart card and an enabling key device that are capable of being operably coupled to each other;

b. encrypting said personal data in the smart card using a first encryption key and encrypting said personal data in the enabling key device using a second encryption key;

c. prohibiting a transaction between the smart card and another device unless the smart card and the enabling key device are operatively coupled together;

d. adjusting the personal data in the smart card to create an adjusted personal data in response to a transaction affecting the personal data if the smart card and the enabling key device are operatively coupled together;

e. encrypting the adjusted personal data to create an encrypted adjusted personal data; and

f. transferring the encrypted adjusted personal data to the enabling key device.

17. The method of claim 16, wherein said step of prohibiting a transaction between the smart card and another device unless the smart card and the enabling key device are operatively coupled together is comprised of the step of prohibiting the transaction unless the smart card and the enabling key device are coupled together through at least one of either a wireless data link or a mechanical connector.