Method, system and smart card reader for management of access to a smart card

• US 7,766,243 B2
• Filed: 03/16/2007
• Issued: 08/03/2010
• Est. Priority Date: 07/19/2006
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Research In Motion Limited (Blackberry Limited)
• Inventors: McCallum, Michael E., Singh, Ravi, Sibley, Richard P., Davis, Dinah L. M., Adams, Neil P., Little, Herbert A.
• Primary Examiner(s): Paik; Steven S
• Assistant Examiner(s): JOHNSON, SONJI N
• Application Number:
  US11/687,331
• Publication Number:
  US 20080022043A1
• Time in Patent Office: 1,236 Days
• Field of Search: 235/380, 235/439, 235/487, 235/492, 719/328, 711/154, 711/115, 711/147
• US Class Current: 235/492
• CPC Class Codes: G06K 7/0008 General problems related to the reading of electronic memory record carriers, independent of its reading method, e.g. power transfer
• CPC Class Codes: G06K 7/10297 arrangements for handling protocols designed for non-contact record carriers such as RFIDs NFCs, e.g. ISO/IEC 14443 and 18092 cryptographic protocols H04L9/00; network security protocols H04L63/00; real-time communication protocols in data switching networks H04L65/00; network protocols for data switching network services H04L67/00
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/35765 Access rights to memory zones
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/0833 Card having specific functional components
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/0893 the card reader reading the card in a contactless manner
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

The described embodiments relate generally to devices, methods and systems for managing access to a memory card, such as a smart card, by a plurality of accessing devices. Certain embodiments relate to a smart card reader (SCR) for managing access to a smart card by a plurality of accessing devices. The SCR comprises: a processor; a channel manager responsive to the processor for interfacing with the smart card; and a communication interface responsive to the channel manager for communicating with the plurality of accessing devices.

Claims

1. A card reader device for managing access to a memory card by a plurality of accessing devices, the card reader device comprising:

a processor;

a wireless communication interface responsive to the processor for communicating with the plurality of accessing devices; and

a memory card interface for enabling communication between the processor and the memory card;

wherein, when at least a first secure session is open between at least a first accessing device and the memory card, and the card reader device receives an open session command from a second accessing device, the processor is configured;

to determine whether the memory card is configured to support a second secure session contemporaneously with at least the first secure session,

to terminate the first secure session if the processor determines that the memory card is not configured to support the second secure session contemporaneously with at least the first secure session, and

to allow the second accessing device to open the second secure session between the memory card and the second accessing device.

2. The device of claim 1, wherein the open session command comprises a MANAGE_CHANNEL command.

3. The device of claim 1, wherein the processor is configured to transmit a MANAGE_CHANNEL command to the memory card to open the second secure session.

4. The device of claim 1, further comprising a memory, the memory storing a connection table, wherein the connection table comprises entries for each session established between the memory card and a respective accessing device.

5. The device of claim 4, wherein the connection table comprises, for each session entry, one or more channel entries.

6. The device of claim 1, wherein the memory card interface comprises a channel manager and the channel manager is configured to determine whether multiple secure sessions can be supported by the memory card.

7. The device of claim 1, wherein the processor is further configured to, prior to terminating the first secure session:

determine all secure sessions established with the memory card, and

provide a list of accessing devices corresponding to the all secure sessions to the second accessing device for display to a user of the second accessing device.

8. The device of claim 7, wherein the processor is further configured to terminate the first secure session in response to a command received from the second accessing device corresponding to a user selection of the first accessing device from the list.

9. The device of claim 1, wherein the memory card interface comprises a channel manager and the channel manager controls the channels that can be opened between the memory card and the plurality of accessing devices so that a total number of channels is limited to a predetermined number.

10. The device of claim 1, wherein the plurality of accessing devices comprises one or more additional accessing devices each having a secure session established with the memory card.

11. The device of claim 1, wherein the processor is configured to terminate the first secure session by notifying the first accessing device that the memory card cannot be accessed by the card reader device.

12. The device of claim 1, wherein the processor is configured to terminate the first secure session by notifying the first accessing device that the memory card has been removed from the card reader device.

13. The device of claim 1, further comprising a serial interface for wired communication with one of the plurality of accessing devices.

14. The device of claim 1, further comprising a socket for receiving the memory card and electrically coupling the processor and the memory card.

15. The device of claim 1, wherein the memory card interface enables wireless communication between the card reader device and the memory card.

16. A method of managing communication between a memory card and a plurality of accessing devices comprising at least first and second accessing devices when at least a first secure session is established, the first secure session being established between the memory card and the first accessing device, the method comprising:

receiving at a card reader device in communication with the memory card an open session command from the second accessing device to open a second secure session with the memory card;

determining whether the memory card is configured to support the second secure session with the second accessing device contemporaneously with at least the first secure session;

terminating the first secure session between the first accessing device and the memory card if it is determined that the memory card is not configured to support the second secure session contemporaneously with at least the first secure session; and

opening the second secure session between the second accessing device and the memory card.

17. The method of claim 16, wherein the open session command comprises a MANAGE_CHANNEL command.

18. The method of claim 16, wherein opening the second secure session comprises transmitting a MANAGE_CHANNEL command from the card reader device to the memory card.

19. The method of claim 16, further comprising storing a connection table in a memory of the card reader device, the connection table comprising entries for each session established between the memory card and a respective accessing device.

20. The method of claim 19, wherein the connection table comprises, for each session entry, one or more channel entries.

21. The method of claim 16, wherein the determining comprises determining whether multiple secure sessions can be supported by the memory card.

22. The method of claim 16, further comprising:

prior to terminating the first secure session, determining all secure sessions established with the memory card; and

providing a list of accessing devices corresponding to the all secure sessions to the second accessing device for display to a user of the second accessing device; and

wherein the first secure session is terminated in response to a command received from the second accessing device corresponding to a user selection of the first accessing device from the list.

23. The method of claim 16, further comprising controlling the channels that can be opened between the memory card and the plurality of accessing devices so that a total number of channels is limited to a predetermined number.

24. The method of claim 16, wherein the terminating comprises notifying the first accessing device that the memory card cannot be accessed by the card reader device.

25. The method of claim 16, wherein the terminating comprises notifying the first accessing device that the memory card has been removed from the card reader device.

26. The method of claim 16, wherein the plurality of accessing devices comprises one or more additional accessing devices each having a secure session established with the memory card.

27. Computer readable storage storing program instructions which, when executed by a processor on a smart card reader, cause the processor to perform a method of managing communication between a memory card and a plurality of accessing devices comprising at least first and second accessing devices when at least a first secure session is established, the first secure session being established between the memory card and the first accessing device, the method comprising:

receiving at the card reader device in communication with the memory card an open session command from the second accessing device to open a second secure session with the memory card;

determining whether the memory card is configured to support the second secure session with the second accessing device contemporaneously with at least the first secure session;

terminating the first secure session between the first accessing device and the memory card if it is determined that the memory card is not configured to support the second secure session contemporaneously with at least the first secure session; and

opening the second secure session between the second accessing device and the memory card.

28. A system for managing access to a memory card by a plurality of accessing devices, the system comprising:

a card reader device having a processor, a wireless communication interface responsive to the processor for communicating with the plurality of accessing devices, and a memory card interface for enabling communication between the processor and the memory card;

at least a first accessing device in communication with the card reader device; and

a second accessing device in communication with the card reader device;

wherein, when at least a first secure session is open between the first accessing device and the memory card and the card reader device receives an open session command from the second accessing device, the processor is configured;

to determine whether the memory card is configured to support a second secure session contemporaneously with the at least first secure session,

to terminate the first secure session if the processor determines that the memory card is not configured to support the second secure session contemporaneously with at least the first secure session, and

to allow the second accessing device to open the second secure session between the memory card and the second accessing device.