Method, system and smart card reader for management of access to a smart card

• US 7,871,010 B2
• Filed: 01/11/2007
• Issued: 01/18/2011
• Est. Priority Date: 07/19/2006
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Adams, Neil P., McCallum, Michael E.
• Primary Examiner(s): Le; Thien M.
• Assistant Examiner(s): JOHNSON, SONJI N
• Application Number:
  US11/622,250
• Publication Number:
  US 20080017711A1
• Time in Patent Office: 1,468 Days
• Field of Search: 711/115, 711/154, 235/380, 235/439, 719/328
• US Class Current: 235/492
• CPC Class Codes: G06K 7/0008 General problems related to the reading of electronic memory record carriers, independent of its reading method, e.g. power transfer
• CPC Class Codes: G06K 7/01 Details
• CPC Class Codes: G06K 7/10297 arrangements for handling protocols designed for non-contact record carriers such as RFIDs NFCs, e.g. ISO/IEC 14443 and 18092 cryptographic protocols H04L9/00; network security protocols H04L63/00; real-time communication protocols in data switching networks H04L65/00; network protocols for data switching network services H04L67/00
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/0893 the card reader reading the card in a contactless manner
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/50 Secure pairing of devices

Abstract

The described embodiments relate generally to devices, methods and systems for managing access to a memory card, such as a smart card, by a plurality of accessing devices. Certain embodiments relate to a smart card reader (SCR) for managing concurrent access to a smart card by a plurality of accessing devices, the SCR comprising: a processor; a channel manager responsive to the processor for interfacing with the smart card; a communication interface responsive to the channel manager for communicating with the plurality of accessing devices; and wherein, when a session is open on a first channel between a first accessing device and the smart card and the channel manager is configured to issue an open channel command to the smart card to cause the smart card to open a second channel between the smart card and the second accessing device in response to the session request.

Claims

1. A smart card reader (SCR) for managing concurrent access to a smart card by a plurality of accessing devices, the SCR comprising:

a processor;

a channel manager responsive to the processor for interfacing with the smart card;

a communication interface responsive to the channel manager for communicating with the plurality of accessing devices; and

wherein, when a session is open on a first channel between a first accessing device and the smart card and the channel manager receives a session request from a second accessing device, the channel manager is configured to issue an open channel command to the smart card to cause the smart card to open a second channel between the smart card and the second accessing device in response to the session request such that the first channel and second channel are open concurrently; and

wherein the channel manager is configured to;

receive data units from the second accessing device intended for transmission to the smart card on the first channel;

identify a channel identifier within the data units received from the second accessing device, the channel identifier identifying the first channel; and

modify the channel identifier within the data units to identify the second channel, in order to indicate that the data units are intended for transmission to the smart card over the second channel.

2. The smart card reader of claim 1, wherein the open channel command is a MANAGE_CHANNEL command.

3. The smart card reader of claim 1, further comprising a memory, the memory storing a connection table, wherein the connection table includes entries for each session established between the smart card and a respective accessing device.

4. The smart card reader of claim 3, wherein the connection table includes, for each session entry, one or more channel entries.

5. The smart card reader of claim 1, wherein, when first and second channels are open between the smart card and respective first and second accessing devices and the channel manager receives a further session request, from one of the first accessing device, the second accessing device and a third accessing device, the channel manager is configured to issue a further open channel command to the smart card to cause the smart card to open a third channel between the smart card and the one accessing device in response to the further session request.

6. The smart card reader of claim 1, wherein the channel manager modifies a class byte of the data units to indicate that the data units were received over the second channel.

7. The smart card reader of claim 1, wherein the channel manager controls the channels that can be opened between the smart card and the plurality of accessing devices so that the total number of channels is limited to a predetermined number.

8. The smart card reader of claim 1, further comprising a socket for receiving the smart card and electrically coupling the processor and the smart card.

9. The smart card reader of claim 1, wherein the communication interface comprises a wireless communication interface.

10. A method for managing concurrent access to a smart card by a plurality of accessing devices, comprising:

while a session is open on a first channel between a first accessing device and the smart card, receiving at a smart card reader a session request from a second accessing device; and

issuing an open channel command to the smart card to cause the smart card to open a second channel between the smart card and the second accessing device in response to the session such that the first channel and second channel are open concurrently;

receiving data units from the second accessing device intended for transmission to the smart card on the first channel;

identifying a channel identifier within the data units received from the second accessing device, the channel identifier identifying the first channel; and

modifying the channel identifier within the data units to identify the second channel, in order to indicate that the data units are intended for transmission to the smart card over the second channel.

11. The method of claim 10, wherein the open channel command is a MANAGE_CHANNEL command.

12. The method of claim 10, further comprising storing a connection table in a memory of the smart card reader, the connection table comprising entries for each session established between the smart card and a respective accessing device.

13. The method of claim 12, wherein the connection table includes, for each session entry, one or more channel entries.

14. The method of claim 10, further comprising:

when first and second channels are open between the smart card and respective first and second accessing devices, receiving a further session request from one of the first accessing device, the second accessing device and a third accessing device; and

issuing a further open channel command to the smart card to cause the smart card to open a third channel between the smart card and the one accessing device in response to the further session request.

15. The method of claim 10, further comprising controlling the channels that can be opened between the smart card and the plurality of accessing devices so that the total number of channels is limited to a predetermined number.

16. The method of claim 10, wherein the modifying comprises modifying a class byte of the data units to indicate that the data units were received over the second channel.

17. The method of claim 10, wherein the session request is received by wireless communication between the smart card reader and the second accessing device.

18. A computer readable storage medium storing program instructions which, when executed by a processor on a smart card reader, cause the processor to perform a method of managing concurrent access to a smart card by a plurality of accessing devices, the method comprising:

while a session is open on a first channel between a first accessing device and the smart card, receiving at a smart card reader a session request from a second accessing device; and

issuing an open channel command to the smart card to cause the smart card to open a second channel between the smart card and the second accessing device in response to the session request such that the first channel and second channel are open concurrently;

receiving data units from the second accessing device intended for transmission to the smart card on the first channel;

identifying a channel identifier within the data units received from the second accessing device, the channel identifier identifying the first channel; and

modifying the channel identifier within the data units to identify the second channel, in order to indicate that the data units are intended for transmission to the smart card over the second channel.