Access to data stored in an embedded database

• US 7,891,571 B2
• Filed: 09/30/2002
• Issued: 02/22/2011
• Est. Priority Date: 10/01/2001
• Status: Expired due to Fees

• Current Assignee: Gemalto SA (Thales SA)
• Original Assignee: Gemalto SA (Thales SA)
• Inventors: Abellan Sevilla, Jorge, Muller Pareja, Ricardo
• Primary Examiner(s): Lee; Seung H
• Application Number:
  US10/491,397
• Publication Number:
  US 20040238645A1
• Time in Patent Office: 3,067 Days
• Field of Search: 235/492, 235/382, 235/375, 235/382.5, 235/487
• US Class Current: 235/492
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/77 in smart cards
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect

Abstract

The solution concerns the access to a number of data files stored in the memory of a data processing device. The device includes a privilege file (P1-P3) associated with a user type (ADM, PUBLIC, USER1, USER2), the privilege file identifying for at least one command (SEL, INS, UPD, SUP) the data files on which the command can be executed. A microcontroller is programmed to create, when a user accesses the data files, a set of flags from the privilege file, each flag being associated with a unique data file, the flag indicating whether or not the command can be executed on the associated file.

Claims

1. A smartcard (CAR) implementing a structured card query language, including a number of data files, wherein the smart card comprises:

a privilege file (P1-P3) associated with a user type (ADM, PUBLIC, USER1, USER2), said privilege file identifying for at least one command (SEL, INS, UPD, SUP) the data files on which said command can be executed, and

a microcontroller programmed to create, when a user accesses the data files, a set of flags from the privilege file, each set of flags being associated with a unique data file and each flag being associated with a command, the flag indicating whether or not the command can be executed by the user on the associated file.

2. The smart card of claim 1 further comprising:

a computer program including program code instructions operable to cause the microcontroller to create a set of flags from the privilege file, each flag being associated with a unique data file, the flag indicating whether or not the command can be executed on the associated file.

3. The smart card according to claim 1, wherein the microcontroller is further programmed to keep the flag states throughout the current user'"'"'s session.

4. The smart card of claim 1 wherein the data files are data tables.

5. A method to access a number of data files of a smart card including a privilege file (P1-P3) associated with a user type (ADM, PUBLIC, USER1, USER2), said privilege file identifying for at least one command (SEL, INS, UPD, SUP) the data files on which said command can be executed, the method comprising when a user accesses the data files, a step to create a set of flags from the privilege file, each set of flags being associated with a unique data file and each flag being associated with a command, the flag indicating whether or not the command can be executed by the user on the associated file.

6. The method of claim 5 wherein the data files are data tables.

7. A computer program loaded onto a smart card, the smart card having a number of data files including a privilege file (P1-P3) associated with a user type (ADM, PUBLIC, USER1, USER2), said privilege file identifying for at least one command (SEL, INS, UPD, SUP) the data files on which said command can be executed, and smart card having a microcontroller programmed to create, when a user accesses the data files, a set of flags from the privilege file, each set of flags being associated with a unique data file and each flag being associated with a command, the flag indicating whether or not the command can be executed by the user on the associated file, wherein the computer program comprises

program code instructions to cause the microcontroller to execute the step to create a set of flags from the privilege file, each set of flags being associated with a unique data file and each flag being associated with a command, the flag indicating whether or not the command can be executed by the user on the associated file.

8. The Computer program of claim 7 wherein the data files are data tables.