System and method for downloading of files to a secure terminal

• US 7,254,706 B2
• Filed: 06/29/2001
• Issued: 08/07/2007
• Est. Priority Date: 06/29/2001
• Status: Expired due to Fees

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Sheets, John F., Gougeon, Dominique, Le Crom, Serge
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): Nalven; Andrew L
• Application Number:
  US09/893,465
• Publication Number:
  US 20030005289A1
• Time in Patent Office: 2,230 Days
• Field of Search: 713/201, 713/175, 713/180, 713/156, 713/193, 705/72
• US Class Current: 713/156
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

Protection of private keys used to digitally sign files to be downloaded to a terminal is accomplished by storing the private keys in smartcards, and arranging a secure processor unit embedded in the smartcard to perform all signing operations requiring access to the keys so that the keys never leave the card. In addition, access to the signing operations is protected by multiple PINs, which may be distributed to multiple individuals and/or used to establish different signing authorization levels associated with different types of files.

Claims

1. A system for protecting keys used to digitally sign files to be downloaded to a terminal, comprising:

a smartcard having stored thereon a private key; and

a file signing tool arranged to receive a file to be signed, to access the smartcard, and to download the file to the terminal,

wherein the smartcard includes an embedded secure processor programmed to perform all digital signing operations that require access to the private key before supplying results of the operations to the file signing tool, the file signing tool then performing further processing as necessary to generate a digital signature that is appended to the file for download to the terminal,

wherein said smartcard has stored thereon an authentication level indicating a number of PINs that must be input in order to access the smartcard.

2. A system as claimed in claim 1, wherein the smartcard also has stored thereon a signer certificate containing a public key corresponding to said private key.

3. A system as claimed in claim 2, wherein said file signer tool is arranged to retrieve said signer certificate from said smartcard and append the signer certificate to the signed file for use by the terminal in authenticating a digital signature generated by the smartcard and file signing tool.

4. A system as claimed in claim 3, wherein the signer certificate includes a field designating file types that may be authenticated by the signer certificate.

5. A system as claimed in claim 3, further comprising an owner certificate installed on said terminal for use by the terminal in authenticating the signer certificate.

6. A system as claimed in claim 1, wherein the smartcard also has stored thereon a PIN, and wherein said smartcard is arranged to perform digital signing operations only if a corresponding PIN is input through said file signing tool.

7. A system as claimed in claim 1, wherein said PINs that must be input are combined by a logical exclusive OR operation in order to obtain a combined PIN to be compared with a PIN stored on the smartcard before said digital signing operations are performed.

8. A system as claimed in claim 1, wherein different ones of said PINs permit access to different private keys and public keys certificates having different file type properties, thereby enabling different authorization levels to be established.

9. A system for protecting keys used to digitally sign files to be downloaded to a terminal, comprising:

a smartcard; and

means for storing a key on the smartcard and means for protecting the key by requiring input of multiple PINs before the smartcard can be accessed,

wherein the smartcard includes an embedded secure processor programmed to perform digital signing operations that require access to the key,

wherein said PINs that must be input are combined in order to obtain a combined PIN to be compared with a PIN stored on the smartcard before said digital signing operations are performed.

10. A system as claimed in claim 9, wherein said PINs that must be input are combined by a logical exclusive OR operation in order to obtain said combined PIN.

11. A system as claimed in claim 9, wherein different ones of said PINs permit access to different private keys and public keys certificates having different file type properties, thereby enabling different authorization levels to be established.

12. A method of protecting keys used to digitally sign files to be downloaded to a terminal, comprising the steps of:

providing a smartcard having stored thereon a private key;

providing a file signing tool arranged to receive a file to be signed, to access the smartcard, and to download the file to the terminal;

storing at least one PIN on the smartcard;

storing an authentication level on the smartcard, said authentication level indicating a number of PINs that must be input to the file signing tool in order to enable said file signing tool to access the smartcard;

reading the authentication level and prompting at least one user to input said PINs to the file signing tool;

combining said PINs to obtain a combined PIN;

comparing said combined PIN with said at least one PIN stored on the smartcard; and

if said combined PIN corresponds to said at least one PIN stored on the smartcard, utilizing a secure processor embedded in the smartcard to perform all digital signing operations that require access to the private key before supplying results of the operations to the file signing tool, the file signing tool then performing further processing as necessary to generate a digital signature that is appended to the file for download to the terminal.

13. A method as claimed in claim 12, comprising the step of storing on said smartcard a plurality of said PINs in order to permit access to different private keys and public key certificates having different file type properties, thereby enabling different authorization levels to be established.