Method, system and smart card reader for management of access to a smart card

• US 8,485,449 B2
• Filed: 08/03/2012
• Issued: 07/16/2013
• Est. Priority Date: 07/19/2006
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Research In Motion Limited (Blackberry Limited)
• Inventors: Adams, Neil Patrick, McCallum, Michael Edwin
• Primary Examiner(s): Le, Thien M
• Assistant Examiner(s): JOHNSON, SONJI N
• Application Number:
  US13/565,891
• Publication Number:
  US 20120292393A1
• Time in Patent Office: 347 Days
• Field of Search: None
• US Class Current: 235/492
• CPC Class Codes: G06K 7/0008 General problems related to the reading of electronic memory record carriers, independent of its reading method, e.g. power transfer
• CPC Class Codes: G06K 7/01 Details
• CPC Class Codes: G06K 7/10297 arrangements for handling protocols designed for non-contact record carriers such as RFIDs NFCs, e.g. ISO/IEC 14443 and 18092 cryptographic protocols H04L9/00; network security protocols H04L63/00; real-time communication protocols in data switching networks H04L65/00; network protocols for data switching network services H04L67/00
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/0893 the card reader reading the card in a contactless manner
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/50 Secure pairing of devices

Abstract

The described embodiments relate generally to devices, methods and systems for managing access to a memory card, such as a smart card, by a plurality of accessing devices. Certain embodiments relate to a smart card reader (SCR) for managing concurrent access to a smart card by a plurality of accessing devices, the SCR comprising: a processor; a channel manager responsive to the processor for interfacing with the smart card; a communication interface responsive to the channel manager for communicating with the plurality of accessing devices; and wherein, when a session is open on a first channel between a first accessing device and the smart card and the channel manager is configured to issue an open channel command to the smart card to cause the smart card to open a second channel between the smart card and the second accessing device in response to the session request.

Claims

1. A smart card reader (SCR) for managing concurrent access to a smart card by a plurality of accessing devices, the SCR comprising:

a processor configured to provide a channel manager interfacing with the smart card, the channel manager configured to prioritize commands received by a plurality of devices;

a communication subsystem responsive to the channel manager for communicating with the plurality of accessing devices,

wherein, when the channel manager receives a close session request from a first accessing device, and a first session is open on a first channel between the first accessing device and the smart card and a second session is open on a second channel between a second accessing device and the smart card, the channel manager is configured to;

issue a close channel command to the smart card to close the second channel;

issue the close session request from the first accessing device to the smart card to close the first session and the first channel; and

notify the first accessing device that the smart card is available to establish another secure session.

2. The smart card reader of claim 1, wherein the first channel is a basic channel and the second channel is a logical channel.

3. The smart card reader of claim 1, wherein, while the first session is open, the channel manager is configured to:

receive data units from the second accessing device intended for transmission to the smart card on the first channel; and

modify the data units to indicate that the data units are intended for transmission to the smart card over the second channel.

4. The smart card reader of claim 3, wherein the channel manager modifies the data units by identifying a channel identifier within the data units received from the second accessing device, and modifying the channel identifier within the data units to identify the second channel.

5. The smart card reader of claim 1, wherein after the second session is continued on the re-opened first channel, the second channel is marked as available for reuse.

6. The smart card reader of claim 1, further comprising a memory, the memory storing a connection table, wherein the connection table includes entries for each session established between the smart card and a respective accessing device.

7. The smart card reader of claim 6, wherein the connection table includes, for each session entry, one or more channel entries.

8. The smart card reader of claim 1, wherein the channel manager controls the channels opened between the smart card and the plurality of accessing devices so that a total number of channels is limited to a predetermined number.

9. The smart card reader of claim 1, wherein the channel manager determines if an intended channel is different from an assigned channel, and performs a channel mapping.

10. The smart card reader of claim 1, further comprising a socket configured to receive the smart card and electrically coupling the processor and the smart card.

11. The smart card reader of claim 1, wherein the communication subsystem comprises a wireless communication subsystem.

12. A method of managing concurrent access to a smart card by a plurality of accessing devices, the method comprising:

receiving a dose session request from a first accessing device when a first session is open on a first channel between the first accessing device and the smart card and a second session is open on a second channel between a second accessing device and the smart card;

issuing a close channel command to the smart card to close the second channel;

issuing the close session request from the first accessing device to the smart card to close the first session and the first channel; and

notifying the first accessing device that the smart card is available to establish another secure session.

13. The method of claim 12, wherein the first channel is a basic channel and the second channel is a logical channel.

14. The method of claim 12, further comprising, while the first session is open receiving data units from the second accessing device intended for transmission to the smart card on the first channel and modifying the data units to indicate that the data units are intended for transmission to the smart card over the second channel.

15. The method of claim 14, wherein the modifying comprises identifying a channel identifier within the data units received from the second accessing device, and modifying the channel identifier within the data units to identify the second channel.

16. The method of claim 12, wherein after the second session is continued on the re-opened first channel, the second channel is marked as available for reuse.

17. The method of claim 12, further comprising storing a connection table in a memory of the smart card reader, the connection table comprising entries for each session established between the smart card and a respective accessing device.

18. The method of claim 17, wherein the connection table includes, for each session entry, one or more channel entries.

19. The method of claim 12, further comprising controlling the channels opened between the smart card and the plurality of accessing devices so that a total number of channels is limited to a predetermined number.

20. The method of claim 12, wherein the session request is received by wireless communication with the second accessing device.

21. A non-transitory computer readable storage medium storing program instructions which, when executed by a processor on a smart card reader, cause the processor to perform a method of managing concurrent access to a smart card by a plurality of accessing devices, the method comprising:

when a first session is open on a first channel between a first accessing device and the smart card and a second session is open on a second channel between a second accessing device and the smart card, receiving a close session request from the first accessing device;

issuing a close channel command to the smart card to close the second channel;

issuing the close session request from the first accessing device to the smart card to close the first session and the first channel; and

notifying the first accessing device that the smart card is available to establish another secure session.