Method and system for facilitating data access and management on a secure token

• US 20040139021A1
• Filed: 09/05/2003
• Published: 07/15/2004
• Est. Priority Date: 10/07/2002
• Status: Abandoned Application

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Aabye, Christian, Reed, Sonia
• Application Number:
  US10/656,858
• Publication Number:
  US 20040139021A1
• Time in Patent Office: Days
• US Class Current: 705/50
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/77 in smart cards
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/35765 Access rights to memory zones
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

A system for facilitating data access and management on a smart card is provided. According to one exemplary aspect of the system, a storage architecture is provided in the smart card which allows data stored thereon to be shared by multiple parties. Access to data stored on the smart card is controlled by various access methods depending on the actions to be taken with respect to the data to be accessed.

Claims

1. A system for facilitating data management on a secure token, comprising:

a client having a plurality of applications residing thereon; and

a secure token having a storage architecture, wherein the storage architecture includes;

a directory and one or more attributes associated with the directory, wherein the one or more attributes associated with the directory are used to control access to the directory by the plurality of applications,

one or more cell groups under the directory, each cell group having one or more associated attributes, wherein the one or more attributes associated with a cell group are used to control access to that cell group by the plurality of applications, and

one or more cells under each cell group, each cell having one or more associated attributes, wherein the one or more attributes associated with a cell are used to control access to that cell by the plurality of applications.

2. The system of claim 1 wherein the one or more attributes associated with the directory permit access to the directory by one application and deny access to the directory to another application.

3. The system of claim 1 wherein the one or more attributes associated with the cell group permit access to that cell group by one application and deny access to that cell group to another application.

4. The system of claim 1 wherein the one or more attributes associated with the cell permit access to that cell by one application and deny access to that cell to another application.

5. The system of claim 1 wherein one or more additional cell groups are added to the directory subsequent to issuance of the secure token to a token holder.

6. The system of claim 1 wherein ownership of one of the one or more cell groups is determined subsequent to issuance of the secure token to a token holder.

7. The system of claim 1 wherein ownership of one of the one or more cell groups is modified subsequent to issuance of the secure token to a token holder.

8. The system of claim 1 wherein one or more additional cells are added to a cell group subsequent to issuance of the secure token to a token holder.

9. The system of claim 1 wherein the one or more attributes associated with the directory are modified in terms of permitting or denying access to the directory by the plurality of applications.

10. The system of claim 1 wherein the one or more attributes associated with a cell group are modified in terms of permitting or denying access to that cell group by the plurality of applications.

11. The system of claim 1 wherein the one or more attributes associated with a cell are modified in terms of permitting or denying access to that cell by the plurality of applications.

12. The system of claim 1 wherein the one or more attributes associated with a cell further control operations on contents of that cell by the plurality of applications.

13. The system of claim 12 wherein the one or more attributes associated with the cell permit a first set of operations on the contents of that cell by a first application;

wherein the one or more attributes associated with the cell permit a second set of operations on the contents of that cell by a second application; and

wherein the first set of operations is different from the second set of operations.

14. The system of claim 1 wherein the one or more attributes associated with the directory permit a first application to access the directory after a first access condition is satisfied;

wherein the one or more attributes associated with the directory permit a second application to access the directory after a second access condition is satisfied; and

wherein the first access condition is different from the second access condition.

15. The system of claim 1 wherein the one or more attributes associated with the cell group permit a first application to access that cell group after a first access condition is satisfied;

wherein the one or more attributes associated with the cell group permit a second application to access that cell group after a second access condition is satisfied; and

wherein the first access condition is different from the second access condition.

16. The system of claim 1 wherein the one or more attributes associated with the cell permit a first application to access that cell after a first access condition is satisfied;

wherein the one or more attributes associated with the cell permit a second application to access that cell after a second access condition is satisfied; and

wherein the first access condition is different from the second access condition.

17. The system of claim 1 wherein the secure token is a smart card.

18. The system of claim 17 wherein the smart card is an open platform smart card.

19. The system of claim 17 wherein the smart card is a static or native smart card.

20. A secure token comprising:

a directory and one or more attributes associated with the directory, wherein the one or more attributes associated with the directory are used to control access to the directory by a plurality of applications,

one or more cell groups under the directory, each cell group having one or more associated attributes, wherein the one or more attributes associated with a cell group are used to control access to that cell group by the plurality of applications, and

one or more cells under each cell group, each cell having one or more associated attributes, wherein the one or more attributes associated with a cell are used to control access to that cell by the plurality of applications.

21. The secure token of claim 20 wherein the one or more attributes associated with the directory permit access to the directory by one application and deny access to the directory to another application.

22. The secure token of claim 20 wherein the one or more attributes associated with the cell group permit access to that cell group by one application and deny access to that cell group to another application.

23. The secure token of claim 20 wherein the one or more attributes associated with the cell permit access to that cell by one application and deny access to that cell to another application.

24. The secure token of claim 20 wherein one or more additional cell groups are added to the directory subsequent to issuance of the secure token to a token holder.

25. The secure token of claim 20 wherein ownership of one of the one or more cell groups is determined subsequent to issuance of the secure token to a token holder.

26. The secure token of claim 20 wherein ownership of one of the one or more cell groups is modified subsequent to issuance of the secure token to a token holder.

27. The secure token of claim 20 wherein one or more additional cells are added to a cell group subsequent to issuance of the secure token to a token holder.

28. The secure token of claim 20 wherein the one or more attributes associated with the directory are modified in terms of permitting or denying access to the directory by the plurality of applications.

29. The secure token of claim 20 wherein the one or more attributes associated with a cell group are modified in terms of permitting or denying access to that cell group by the plurality of applications.

30. The secure token of claim 20 wherein the one or more attributes associated with a cell are modified in terms of permitting or denying access to that cell by the plurality of applications.

31. The secure token of claim 20 wherein the one or more attributes associated with a cell further control operations on contents of that cell by the plurality of applications.

32. The secure token of claim 31 wherein the one or more attributes associated with the cell permit a first set of operations on the contents of that cell by a first application;

wherein the one or more attributes associated with the cell permit a second set of operations on the contents of that cell by a second application; and

wherein the first set of operations is different from the second set of operations.

33. The secure token of claim 20 wherein the one or more attributes associated with the directory permit a first application to access the directory after a first access condition is satisfied;

wherein the one or more attributes associated with the directory permit a second application to access the directory after a second access condition is satisfied; and

wherein the first access condition is different from the second access condition.

34. The secure token of claim 20 wherein the one or more attributes associated with the cell group permit a first application to access that cell group after a first access condition is satisfied;

wherein the one or more attributes associated with the cell group permit a second application to access that cell group after a second access condition is satisfied; and

wherein the first access condition is different from the second access condition.

35. The secure token of claim 20 wherein the one or more attributes associated with the cell permit a first application to access that cell after a first access condition is satisfied;

wherein the one or more attributes associated with the cell permit a second application to access that cell after a second access condition is satisfied; and

wherein the first access condition is different from the second access condition.

36. The secure token of claim 20 wherein the secure token is a smart card.

37. The secure token of claim 36 wherein the smart card is an open platform smart card.

38. The secure token of claim 36 wherein the smart card is a static or native smart card.

39. A method for facilitating data management on a secure token, comprising:

providing a directory and one or more attributes associated with the directory, wherein the one or more attributes associated with the directory are used to control access to the directory by a plurality of applications,

providing one or more cell groups under the directory, each cell group having one or more associated attributes, wherein the one or more attributes associated with a cell group are used to control access to that cell group by the plurality of applications, and

providing one or more cells under each cell group, each cell having one or more associated attributes, wherein the one or more attributes associated with a cell are used to control access to that cell by the plurality of applications.

40. The method of claim 39 wherein the one or more attributes associated with the directory permit access to the directory by one application and deny access to the directory to another application.

41. The method of claim 39 wherein the one or more attributes associated with the cell group permit access to that cell group by one application and deny access to that cell group to another application.

42. The method of claim 39 wherein the one or more attributes associated with the cell permit access to that cell by one application and deny access to that cell to another application.

43. The method of claim 39 further comprising:

adding one or more additional cell groups to the directory subsequent to issuance of the secure token to a token holder.

44. The method of claim 39 further comprising:

determining ownership of one of the one or more cell groups subsequent to issuance of the secure token to a token holder.

45. The method of claim 39 further comprising:

modifying ownership of one of the one or more cell groups subsequent to issuance of the secure token to a token holder.

46. The method of claim 39 further comprising:

adding one or more additional cells to a cell group subsequent to issuance of the secure token to a token holder.

47. The method of claim 39 further comprising:

modifying the one or more attributes associated with the directory in terms of permitting or denying access to the directory by the plurality of applications.

48. The method of claim 39 further comprising:

modifying the one or more attributes associated with a cell group in terms of permitting or denying access to that cell group by the plurality of applications.

49. The method of claim 39 further comprising:

modifying the one or more attributes associated with a cell in terms of permitting or denying access to that cell by the plurality of applications.

50. The method of claim 39 wherein the one or more attributes associated with a cell further control operations on contents of that cell by the plurality of applications.

51. The method of claim 50 wherein the one or more attributes associated with the cell permit a first set of operations on the contents of that cell by a first application;

wherein the one or more attributes associated with the cell permit a second set of operations on the contents of that cell by a second application; and

wherein the first set of operations is different from the second set of operations.

52. The method of claim 39 wherein the one or more attributes associated with the directory permit a first application to access the directory after a first access condition is satisfied;

wherein the one or more attributes associated with the directory permit a second application to access the directory after a second access condition is satisfied; and

wherein the first access condition is different from the second access condition.

53. The method of claim 39 wherein the one or more attributes associated with the cell group permit a first application to access that cell group after a first access condition is satisfied;

wherein the one or more attributes associated with the cell group permit a second application to access that cell group after a second access condition is satisfied; and

wherein the first access condition is different from the second access condition.

54. The method of claim 39 wherein the one or more attributes associated with the cell permit a first application to access that cell after a first access condition is satisfied;

wherein the one or more attributes associated with the cell permit a second application to access that cell after a second access condition is satisfied; and

wherein the first access condition is different from the second access condition.

55. The method of claim 39 wherein the secure token is a smart card.

56. The method of claim 55 wherein the smart card is an open platform smart card.

57. The method of claim 55 wherein the smart card is a static or native smart card.