CA in a card

• US 7,624,441 B2
• Filed: 01/17/2002
• Issued: 11/24/2009
• Est. Priority Date: 01/17/2002
• Status: Expired due to Term

• Current Assignee: III Holdings 1, LLC (Intellectual Ventures LLC)
• Original Assignee: Elad Barkan, Nir Barkan
• Inventors: Barkan, Nir, Barkan, Elad
• Primary Examiner(s): Kim; Jung
• Assistant Examiner(s): PERUNGAVOOR, VENKATANARAY
• Application Number:
  US10/046,745
• Publication Number:
  US 20030135731A1
• Time in Patent Office: 2,868 Days
• Field of Search: 713155-159, 713/173, 713/284, 713/185, 713193-194, 726 9- 10, 726 17- 21
• US Class Current: 726/18
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A secure method for generating digital documents that are certified by a known authority, comprising the steps of: A. Programming an electronic device with a document issuing method that originates with the known authority; B. programming the electronic device with data identifying the owner of the device; C. reading a digital document into the device; D. physical identification of the owner of the device, based on the identifying data as programmed in step (B); E. if the result of the identification process in step (D) is positive, then issuing of a digital document signed by the known authority. A device for generating digital documents that are certified by a known authority, comprising a computer for implementing a program written in the memory, and wherein the memory includes a document issuing method that originates with the known authority; input means for reading information related to physical user identification; and output means.

Claims

1. A method of transferring the functionality of a smart device (“

existing device”

) to a different smart device (“

new device”

), without the need of intervention of a third trusted authority and/or device, whereas the said functionality of the existing device is allowed to the user by a certified digital document of a certifying authority (CA), comprising;

implementing in the new device a document issuing policy of the certifying authority (CA); and

reading from the existing device into the new device without the intervention of a third trusted device the said certified digital document associated with the said user; and

generating by the new device a new certified digital document according to the said issuing policy of the said CA, without the intervention of a third trusted authority and/or device which permits the user to use the new device with the same functionality of the existing device.

2. The method according to claim 1, wherein information associated with the identity of the new device or it'"'"'s user is stored within the new device.

3. The method of claim 1, wherein the issuing policy attests to personal identifying information of the user of the device.

4. The method of claim 1, wherein the new certified digital document is output by the new device through a communication channel.

5. The method of claim 1, wherein the certified digital documents are permits or certificates.

6. The method of claim 1, wherein a person using the new device to sign or certify a digital document is requested to identify himself prior to the new device signing or certifying the digital document.

7. The method of claim 6, wherein a user identifies himself using biometric identification information.

8. The method of claim 1, wherein a plurality of certified digital documents associated with the user are stored within the new device, each of which plurality of certified digital documents is associated with a different certifying authority.

9. A smart device associated with a user, adapted to obtain the functionalities of the said user smart devices (“

existing devices”

);

without the need of intervention of a third trusted authority and/or device, where the said functionalities are allowed by certified digital documents of a certifying authority (CA) comprising;

a controller adapted to execute a program associated with the certifying authority (CA) based on a document issuing policy of the certifying authority (CA); and

The controller reads a certified digital document associated with its user from the existing devices, and

According to the said issuing policy the controller generates without intervention of a third trusted authority and/or device, a new certified digital documents which permit the user to use the new device with the same functionalities of the existing devices.

10. The smart device according to claim 9, wherein the said program generates the new certified digital document from a certified document associated with the user if data in the certified document is consistent with the document issuing policy.

11. The smart device of claim 9, wherein the controller reads a digital document provided to the smart device and signs or certifies the digital document only after the electronic device attests to personal identifying of the user.

12. The smart device of claim 11, further comprising a biometric data input module.

13. The smart device of claim 9, wherein a plurality of certified documents associated with the user are stored within the smart device, each of the plurality of certified documents are associated with a different certifying authority.

14. The smart device of claim 9, wherein the smart device is functionally associated with a wristwatch.

15. The smart device of claim 9, wherein the smart device is functionally associated with a smart card.