Apparatus for selecting a virtual card application

• US 8,519,822 B2
• Filed: 12/04/2007
• Issued: 08/27/2013
• Est. Priority Date: 12/04/2006
• Status: Expired due to Fees

• Current Assignee: Infineon Technologies AG
• Original Assignee: Infineon Technologies AG
• Inventors: Riegebauer, Josef
• Primary Examiner(s): Lee, Benjamin C
• Assistant Examiner(s): KING, CURTIS J
• Application Number:
  US11/950,113
• Publication Number:
  US 20080129450A1
• Time in Patent Office: 2,093 Days
• Field of Search: None
• US Class Current: 340/5.74
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: G06Q 20/3576 Multiple memory zones on card
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

An apparatus for selecting a virtual card application from a multi-application contactless card, including a receiver configured to receive an authentication command containing a card key from a card reader. The apparatus further includes a verifier configured to verify the card key in the virtual card applications and to select a card application for communication with the card reader by means of a key match. The apparatus further includes a transmitter configured to transmit a response of the selected card applications to the card reader.

Claims

1. An apparatus for selecting an application of a device, the apparatus comprising:

a receive unit configured to receive an authentication command encrypted using a key of a reading device which communicates with the device;

a verifying unit configured to verify whether one of the applications and the reading device share a key, based on a determination whether the authentication command has been encrypted using a key of one of the applications, until a key match is found, and to select for a communication with the reading device an application having a matching key; and

a transmit unit configured to transmit a response of the selected application to the reading device.

2. The apparatus as claimed in claim 1, wherein the verifying unit further comprises an emulation unit configured to emulate the application selected and to generate a response of the application selected.

3. The apparatus as claimed in claim 1, further comprising a memory configured to store the application.

4. The apparatus as claimed in claim 1, which is integrated within a portable device.

5. The apparatus as claimed in claim 4, which is implemented in a mobile telephone, a PDA or a portable computer.

6. The apparatus as claimed in claim 1, wherein the verifying unit is adapted, for selecting the application, to simultaneously verify the applications and to select that application which provides a key match.

7. The apparatus as claimed in claim 1, wherein the verifying unit is adapted to select the application, to sequentially verify the applications, and to temporarily exclude applications having an unsuccessful verification from being verified.

8. The apparatus as claimed in claim 1, wherein the receive unit is adapted to receive signals in compliance with at least one of ISO 14443 Type A, ISO 14443, Type B, ISO 18092, or ISO 15693, and the transmit unit is adapted to transmit signals in compliance with at least one of ISO 14443 Type A, ISO 14443 Type B, ISO 18092, or ISO 15693.

9. The apparatus as claimed in claim 1, wherein the verifying unit is adapted to verify the card application in accordance with an authentication mechanism in compliance with ISO 9798-2 standards.

10. A selection circuit comprising

a receiver comprising an output configured to output a receive signal, the receive signal including an authentication command encrypted using an authentication key of a reading device;

a verifier comprising an input coupled to the output of the receiver, an interface for several virtual applications and configured to verify, whether one of the virtual applications and the reading device share an authentication key based on a determination whether the authentication command has been encrypted using an authentication key of one of the virtual applications, until an authentication key match is found, and an output for a response signal of a virtual application having a matching authentication key;

a device suitable for many applications which is coupled to the interface for several virtual applications and comprises a memory storing at least two virtual applications; and

a transmitter comprising an input coupled to the output for the response signal.

11. The selection circuit as claimed in claim 10, wherein the verifier comprises an emulator configured to provide the response signal by emulating the virtual application for which the authentication key may be verified.

12. The selection circuit as claimed in claim 10, wherein the device suitable for many applications is configured to store virtual applications of the same type or in the same communication technology.

13. The selection circuit as claimed in claim 10, wherein the verifier is adapted to verify the authentication key using a protocol.

14. The selection circuit as claimed in claim 13, wherein the protocol corresponds to one of the Mifare Classic or My-D standards.

15. The selection circuit as claimed in claim 10, wherein indicators for applications which comprise unsuccessful verifications may further be temporarily stored by the verifier for verifying the authentication key.

16. The selection circuit as claimed in claim 10, wherein the receiver and the transmitter are adapted to communicate in compliance with at least one of ISO 14443 Type A, ISO 14443 Type B, ISO 18092, or ISO 15693.

17. The selection circuit as claimed in claim 10, wherein the authentication key may be verified by the verifier in compliance with the ISO 9798-2 standard.

18. A method for selecting an application from a plurality of applications of a device, the method comprising:

receiving an authentication command encrypted using a key of a reading device which communicates with the device;

verifying whether one of the applications and the reading device share a key, based on a determination whether the authentication command has been encrypted using a key of one of the applications, until a key match is found;

selecting an application having a matching key; and

responding in accordance with the application selected.

19. The method as claimed in claim 18, wherein the selecting further comprises emulating the application selected.

20. The method as claimed in claim 18, comprising storing the plurality of applications prior to the receiving.

21. The method as claimed in claim 18, wherein the verifying comprises sequentially verifying the individual application of the plurality of applications.

22. The method as claimed in claim 18, wherein the verifying comprises simultaneously verifying at least two applications of the plurality of applications.

23. The method as claimed in claim 18, wherein the verifying comprises excluding the application if verifying the virtual application was unsuccessful.

24. A method for selecting a virtual card application on a multi-application controller card providing at least two virtual card applications, the method comprising:

receiving information encrypted using a key of a card reader;

verifying, in at least two virtual card applications, whether one of the virtual card applications and the card reader share a key, based on a determination whether the information has been encrypted using a key of one of the applications, until a key match is found;

identifying a key match with a matching card application of the at least two virtual card applications;

emulating the matching card applications;

responding to the card reader in compliance with a protocol and the matching card application.

25. The method as claimed in claim 24, further comprising storing the at least two virtual card applications.