System and method for locking and unlocking and application in a smart card

• US 6,179,205 B1
• Filed: 03/05/1998
• Issued: 01/30/2001
• Est. Priority Date: 03/05/1998
• Status: Expired due to Term

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Sloan, Jerry F.
• Primary Examiner(s): Frech, Karl D.
• Assistant Examiner(s): FUREMAN, JARED
• Application Number:
  US09/035,647
• Time in Patent Office: 1,062 Days
• Field of Search: 235/379, 235/380, 235/382, 235/382.5, 902/1, 902/2, 902/4, 902/26, 713/202, 705/41, 705/44
• US Class Current: 235/382
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G07F 7/0886 the card reader being portable for interacting with a POS or ECR in realizing a payment transaction
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

Locking and unlocking an application in a smart card allows for automatic authenticity of a lock or unlock command without the need for a personal identification number (PIN). The smart card is locked and unlocked by using a smart card device that need not have a keypad. The smart card device is a dedicated reader and locking/unlocking device, or can be a bank terminal, PC, telephone, etc. The smart card is inserted into the smart card device. A lock command is sent from the device to the smart card. An application on the smart card is locked. The smart card sends identifying information, such as a password and a card identification number, to the device which is stored in a cache. The identifying information allows automatic authentication for unlocking of the card at a later time. The locked application cannot be used until it is unlocked. To unlock, the smart card is inserted into the device and an unlock button is pressed. The smart card device reads the card identification number of the card and determines if the corresponding password for that card is present in the cache of the device. If so, an unlock command is issued to the smart card along with the password. If the password received by the smart card matches the password of the smart card then the smart card is unlocked.

Claims

1. A smart card system comprising:

a smart card defining one or more applications; and

a smart card device configured to selectively lock or unlock a selective one of the applications on the smart card, the smart card device including;

a card reader arranged to read from and to write to the smart card when inserted into the card reader;

a memory coupled to the card reader, the memory including a card identification number corresponding to the smart card and a password corresponding to the card identification number;

an input element configured to receive a lock or an unlock request to lock or unlock the selected application on the smart card when the smart card is inserted into the card reader; and

a microprocessor coupled to the card reader and responsive to the input element, the microprocessor arranged to issue a lock command or an unlock command along with the password to lock or unlock the selected application on the smart card in response to the input device receiving the lock or unlock request and when the smart card provides identifying information matching the card identification number.

2. The system of claim 1, wherein the smart card device further comprises a display configured to display the status of the smart card when inserted into the card reader.

3. The system of claim 1, wherein the memory is a cache arranged to hold a plurality of card identification numbers and a corresponding plurality of passwords.

4. The system of claim 3, wherein the microprocessor is further configured to delete the oldest pair of the corresponding card identification number and password when the cache is full.

5. The system of claim 1, wherein the smart card device is a bank terminal, a personal computer, a telephone, or an automated teller machine.

6. A method of providing a smart card system comprising:

providing a smart card defining one or more applications; and

providing a smart card device configured to selectively lock or unlock a selective one of the applications on the smart card, the smart card device including;

a card reader arranged to read from and to write to the smart card when inserted into the card reader;

a memory coupled to the card reader, the memory including a card identification number corresponding to the smart card and a password corresponding to the card identification number;

an input element configured to receive a lock or an unlock request to lock or unlock a selected one of the applications on the smart card when the smart card is inserted into the smart card reader; and

a microprocessor coupled to the card reader and responsive to the input element, the microprocessor arranged to issue a lock command or an unlock command along with the password to lock or unlock the selected application on the smart card in response to the input device receiving the lock or unlock request and when the smart card provides identifying information matching the card identification number.

7. The method of claim 6, wherein the step of providing the smart card device further comprises the step of providing a display configured to display the status of the smart card when inserted into the card reader.

8. The method of claim 7, wherein the step of providing the memory further comprises the step of providing a cache arranged to hold a plurality of card identification numbers and a corresponding plurality of passwords.

9. The method of claim 8, wherein the step of providing the microprocessor further comprises the step of configuring the microprocessor to delete the oldest pair of the corresponding card identification number and password from the cache when the cache is full.

10. A smart card device configured to receive a smart card having one or more applications, the smart card device comprising:

a card reader configured to receive the smart card;

an application selection element configured to select one of the applications contained on the smart card when the smart card is inserted into the card reader;

a lock and unlock element that enables the selective locking and unlocking of the selected application on the smart card when the smart card is inserted into the smart card reader; and

a microprocessor coupled to the lock and unlock element, the microprocessor arranged to issue a lock command or an unlock command to the smart card when the lock and unlock element is activated and when the smart card has been identified by the smart card device.

11. The smart card device of claim 10, wherein the smart card device further comprises a input device configured to receive the lock or unlock request.

12. The smart card device of claim 10, wherein the smart card device further comprises a display configured to display the status of the smart card when inserted into the card reader.

13. The smart card device of claim 10, wherein the smart card device further comprises a memory arranged to hold a plurality of card identification numbers and a corresponding plurality of passwords associated with the smart cards inserted into the smart card device.

14. The smart card of claim 13, wherein the microprocessor is further configured to delete the oldest pair of the corresponding card identification number and password from the memory when the memory is full.

15. The smart card device of claim 10, wherein the smart card device is a bank terminal, a personal computer, a telephone, or an automated teller machine.