System and method for integrated circuit card data storage

• US 7,694,882 B2
• Filed: 10/07/2002
• Issued: 04/13/2010
• Est. Priority Date: 10/05/2001
• Status: Active Grant

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Nardone, Christopher Michael, Reynolds, Charles William
• Primary Examiner(s): Lee; Seung H
• Application Number:
  US10/266,056
• Publication Number:
  US 20030132284A1
• Time in Patent Office: 2,745 Days
• Field of Search: 235/492, 235/380, 235/487, 235/494
• US Class Current: 235/487
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3572 Multiple accounts on card
• CPC Class Codes: G06Q 20/35765 Access rights to memory zones
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A system and method for obtaining and storing information in an integrated circuit card is provided for use in a transaction over different environments. The card includes a memory unit having data records including formatted and unformatted fields, preferably comprising a name field, a data field and a security level field. The formatted fields are accessible, using generic labels and the unformatted fields are accessible using a non-generic label.

Claims

1. A system for obtaining and storing information in an integrated circuit card used by a cardholder for conducting transactions over one or more environments each having a different type of card-accepting terminal, comprising:

a memory unit in said card having data records for storing information, said records being accessible by a terminal computer operating compatible software and said records having both formatted and unformatted fields, said formatted fields being accessible using generic labels, and said unformatted fields being accessible using non-generic labels;

wherein generic labels are labels understandable to a variety of terminal types;

non-generic labels are labels understandable only to specific terminal types;

wherein the formatted fields are fields that are understandable to a variety of terminal types and software associated with said terminal types;

and the unformatted fields are fields that are understandable only to specific terminal types and software associated with said terminal types.

2. The system of claim 1, wherein said formatted fields are accessible using generic labels over at least two different environments.

3. The system of claim 1, wherein each of said formatted fields contain information having generic meaning and each of said unformatted fields contain information having meaning only to a particular terminal software type.

4. The system of claim 3, wherein each of said data records includes an associated security level field for storing data indicative of a level of security to be applied to the associated data record.

5. The system of claim 4, wherein said level of security includes one or more of public, private or conditional.

6. The system of claim 4, wherein said generic labels are stored in a formatted name field of said data record.

7. The system of claim 6, wherein said types of card-accepting terminals include a POS terminal, a PDA device, a mobile device and a personal computer.

8. The system of claim 7, wherein said formatted fields are populated by said cardholder, a merchant or an issuer.

9. The system of claim 8, wherein said cardholder is provided through said card-accepting terminal with targeted information based on data stored in said data records.

10. The system of claim 9, wherein said targeted information is based on data stored in said unformatted fields.

11. A memory device located within an integrated circuit of an integrated circuit card, comprising:

a plurality of formatted data records, said data records being accessible by a terminal computer operating compatible software, wherein each of the plurality of formatted data records include a generic name portion and a data portion, wherein labels stored in the generic name portion of each of the plurality of formatted data records are known to a plurality of terminal types and software associated with said terminal types;

and a plurality of unformatted data records, said data records being accessible by a terminal computer operating compatible software, wherein each of the plurality of unformatted data records include a non-generic name portion and a data portion

and wherein the unformatted data records are understandable only to specific terminal type and software associated with said terminal types.

12. The memory device of claim 11, wherein the name portion of one of the plurality of formatted data records is used by one of the plurality of terminals to access the corresponding data portion of the one of the plurality of formatted data records.

13. The memory device of claim 11, wherein each of the plurality of formatted data records further includes a security level portion.

14. The memory device of claim 13, wherein the security level portion of each of the plurality of formatted data records is one of public, conditional and private.

15. The memory device of claim 14, wherein the data portion of one of the plurality of formatted data records may be read by one of the plurality of terminals if the security level portion of the one of the plurality of formatted data records is public.

16. The memory device of claim 14, wherein the data portion of one of the plurality of formatted data records may be read by one of the plurality of terminals having a particular decryption key if the security level portion of the one of the plurality of formatted data records is conditional based on the particular decryption key.

17. The memory device of claim 16, wherein the particular decryption key is an industry specific decryption key.

18. The memory device of claim 17, wherein the industry specific decryption key is specific to a card issuing authority.

19. The memory device of claim 18, wherein the card issuing authority is MasterCard.

20. The memory device of claim 18, wherein the data portion of one of the plurality of formatted data records may be read by one of the plurality of terminals if the security level portion of the one of the plurality of formatted data records is private only if a personal identification number is provided to the one of the plurality of terminals.

21. The memory device of claim 11, wherein a label stored in the non-generic name portion of one of the plurality of unformatted data records is known to one of the plurality of terminals that wrote the label.

22. The memory device of claim 21, wherein the one of the plurality of terminals transmits a message to another of the plurality of terminals, wherein the message contains a reference to the label stored in the non-generic name portion of the one of the plurality of unformatted data records.

23. The memory device of claim 11, wherein the terminal is one of a point of sale terminal, a personal computer, a personal digital assistant and a mobile device.

24. The memory device of claim 23, wherein the terminal can access data stored in the plurality of formatted data records if the terminal is a mobile device.

25. The memory device of claim 24, wherein the terminal can write data to the plurality of formatted data records if the terminal is a mobile device.

26. The memory device of claim 23, wherein the terminal can access data stored in the plurality of formatted data records and write data to the plurality of formatted data records if the terminal is a personal digital assistant.

27. The memory device of claim 23, wherein the terminal can access data stored in the plurality of formatted data records and write data to the plurality of formatted data records if the terminal is a personal computer.

28. The memory device of claim 23, wherein the terminal can access data stored in the plurality of formatted data records and write data to the plurality of formatted data records if the terminal is a point of sale terminal.

29. A method for utilizing information in a memory device located within an integrated circuit of an integrated circuit card, comprising the steps of:

storing one of a plurality of formatted data records, said records being accessible by a terminal computer operating compatible software, wherein each of the plurality of formatted data records include a generic name portion and a data portion, wherein labels stored in the generic name portion of each of the plurality of formatted data records are known to a plurality of terminal types and software associated with said terminal types;

and storing one of a plurality of unformatted data records, said records being accessible by a terminal computer operating compatible software, wherein each of the plurality of unformatted data records include a non-generic name portion and a data portion

and wherein the unformatted data records are understandable only to specific terminal types and software associated with said terminal types.

30. The method of claim 29, further comprising the step of:

accessing one of the plurality of formatted data records to complete a transaction with the integrated circuit card.

31. The method of claim 29, wherein the name portion of one of the plurality of formatted data records is used by one of the plurality of terminals to access the corresponding data portion of the one of the plurality of formatted data records.

32. The method of claim 29, wherein each of the plurality of formatted data records further includes a security level portion.

33. The method of claim 32, wherein the security level portion of each of the plurality of formatted data records is one of public, conditional and private.

34. The method of claim 33, wherein the data portion of one of the plurality of formatted data records may be read by one of the plurality of terminals if the security level portion of the one of the plurality of formatted data records is public.

35. The method of claim 33, wherein the data portion of one of the plurality of formatted data records may be read by one of the plurality of terminals having a particular decryption key if the security level portion of the one of the plurality of formatted data records is conditional based on the particular decryption key.

36. The method of claim 35, wherein the particular decryption key is an industry specific decryption key.

37. The method of claim 35, wherein the industry specific decryption key is specific to a card issuing authority.

38. The method of claim 37, wherein the card issuing authority is MasterCard.

39. The method of claim 33, wherein the data portion of one of the plurality of formatted data records may be read by one of the plurality of terminals if the security level portion of the one of the plurality of formatted data records is private only if a personal identification number is provided to the one of the plurality of terminals.

40. The method of claim 29, wherein a label stored in the non-generic name portion of one of the plurality of unformatted data records is known to one of the plurality of terminals that wrote the label.

41. The method of claim 40, wherein the one of the plurality of terminals transmits a message to another of the plurality of terminals, wherein the message contains a reference to the label stored in the non-generic name portion of the one of the plurality of unformatted data records.

42. The method of claim 29, wherein the terminal is one of a point of sale terminal, a personal computer, a personal digital assistant and a mobile device.

43. The method of claim 42, wherein the terminal can access data stored in the plurality of formatted data records if the terminal is a mobile device.

44. The method of claim 43, wherein the terminal can write data to the plurality of formatted data records if the terminal is a mobile device.

45. The method of claim 42, wherein the terminal can access data stored in the plurality of formatted data records and write data to the plurality of formatted data records if the terminal is a personal digital assistant.

46. The method of claim 42, wherein the terminal can access data stored in the plurality of formatted data records and write data to the plurality of formatted data records if the terminal is a personal computer.

47. The method of claim 42, wherein the terminal can access data stored in the plurality of formatted data records and write data to the plurality of formatted data records if the terminal is a point of sale terminal, labels and the unformatted fields are accessible using a non-generic label.