System and method for updating access control mechanisms

• US 20060076420A1
• Filed: 09/30/2005
• Published: 04/13/2006
• Est. Priority Date: 10/09/2004
• Status: Active Grant

• Current Assignee: Axalto S A
• Original Assignee: Axalto S A
• Inventors: Sachdeva, Kapil, Prevost, Sylvain
• Granted Patent: US 7,665,667 B2
• Time in Patent Office: Days
• US Class Current: 235/492
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/35765 Access rights to memory zones
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

Updating the access control of a smart card at multiple points of the smart card life cycle. The system and method for updating the access control mechanisms during the smart card life cycle includes implementing an interface having a method for providing access control and a method for registering an access manager as an active access manager. In response to a request to register an access manager, the system and method executes the method for determining whether registering the access manager may be allowed.

Claims

1. A method of updating the access control of a smart card at multiple points of the smart card life cycle, comprising:

implementing an interface having a method for providing access control and a method for registering a new access manager;

in response to a request to replace the current access manager with a new access manager, executing the method for registering a new access manager, thereby replacing the current access manager with the new access manager.

2. The method of claim 1, wherein the step of executing the method for registering a new access manager comprises:

determining whether the entity seeking to replace the access manager has been authorized to replace the access manager.

3. The method of claim 1, wherein the step of replacing the current access manager of a smart card is executed at a point in the smart card life cycle selected from the set including manufacture of the smart card, initialization of the smart card, personalization of the smart card, issuance of the smart card, loading of additional applications onto the smart card, updating an application on the smart card.

4. The method of claim 1 wherein the interface specifies arguments for the method to register a new access manager to allow the method to identify whether the new access manager is an access manager that may replace the current access manager.

5. A multi-application smart card in which the access control for the smart card may be updated at any of several points of the life cycle of the smart card, comprising:

a memory having instructions for causing the central process to perform certain tasks, the instructions including;

at least one application program loaded onto the smart card;

an access manager for providing access control to the smart card wherein the access control logic implements an access manager interface having a method for access control and a method for registering a new access control manager.

6. The multi-application smart card of claim 5, wherein the access control logic performs an access control protocol specified for a particular point in the smart card life cycle.

7. The multi-application smart card of claim 5, wherein the method for registering a new access control manager operates to determine whether the entity seeking to replace the access control for the smart card has been authorized to replace the access control for the smart card.

8. A method of updating the access control of a smart card at multiple points of the smart card life cycle, comprising:

implementing an interface having a method for providing access control and a method for registering an access manager as an active access manager;

in response to a request to register an access manager, executing the method for determining whether registering the access manager may be allowed.

9. The method of claim 8, wherein the step of executing the method for registering an access manager comprises:

determining whether the entity seeking to replace the access manager has been authorized to register the access manager.

10. The method of claim 8, wherein the step of registering an access manager of a smart card is executed at a point in the smart card life cycle selected from the set including manufacture of the smart card, initialization of the smart card, personalization of the smart card, issuance of the smart card, loading of additional applications onto the smart card, updating an application on the smart card.

11. The method of claim 8 wherein the interface specifies arguments that may allow the method for registering an access manager to determine whether the access manager is an access manager that may be registered as an active access manager.