System for accessing virtual smart cards for smart card application and data carrier

• US 6,516,357 B1
• Filed: 08/26/1999
• Issued: 02/04/2003
• Est. Priority Date: 08/26/1998
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Sulzmann, Robert, Schaeck, Thomas, Hamann, Ernst-Michael
• Primary Examiner(s): Gaffin, Jeffrey
• Assistant Examiner(s): Mai, Rijue
• Application Number:
  US09/383,282
• Time in Patent Office: 1,258 Days
• Field of Search: 710/2, 710/15, 710/62, 710/63, 710/64, 710/65, 710/68, 710/100, 710/101, 710/102, 710/201, 710/73, 710/104, 710/36, 709/202, 709/229, 709/225, 713/200, 713/201, 711/6, 711/203
• US Class Current: 710/2
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

The present invention describes an improved communication architecture for smart card systems and an improved procedure for communication of the smart card applications using protected data carriers, particularly in the case where smart cards or smart card readers cannot be used. The improved communication architecture has a common virtual smart card interface between the respective smart card applications and the modules which facilitate access to the protected data carriers (smart cards). The modules allow access to either physical smart cards, virtual software smart cards or hardware smart cards. The common virtual smart card interface means that the application is completely independent of the respective module or the respective data carrier. Alternatively, the improved communication architecture additionally contains a virtual smart card adapter which communicates over the common virtual smart card interface with the respective smart card application. The different modules are attached to the smart card adapters and selected statically or dynamically by the smart card application. Virtual software smart cards which functionally imitate true physical smart cards can be linked over the virtual smart card adapter to communicate with a smart card application. This procedure is then particularly suited for when the smart card is lost or defective, the smart card reader cannot function, or for testing new smart card technologies.

Claims

1. A computer readable medium containing instructions for simulating communications with a smart card comprising:

instructions for creating a virtual smart card adapter which links a smart card application to one of a plurality of smart card modules;

instructions for creating a plurality of smart card modules having access routines for communication with a protected smart card data carrier in response to commands from said virtual smart card adapter; and

instructions for creating a software smart card which simulates a smart card, said instructions allocating memory space on a hard drive of said computer for storing public and private objects of a smart card, and which establish a communications session with said application through said smart card modules.

2. The computer readable medium of claim 1, wherein said instructions for creating said smart card modules provide access routines for smart cards connected through a reader to a computer executing said instructions.

3. The computer readable medium according to claim 2, further comprising:

instructions for creating a common virtual smart card interface which describes functions executed by said smart card adapter for accessing data on said smart cards.

4. The computer readable medium according to claim 2, wherein said instructions which create said smart card adapter create a list of readers which receive said smart cards prior to linking an application to one of said smart cards.

5. The computer readable medium according to claim 3, wherein said common virtual smart card interface includes a dispatcher, which in response to a request from said application, selects an access routine in said virtual smart card adapter for establishing a connection with a selected smart card.

6. Communication architecture for the exchange of information between a smart card application and a protected data carrier with public data objects, and private data protected against access, comprising:

a) a virtual smart card adapter for linking said smart card application to one of a plurality of smart card modules which access said protected smart card data carriers; and

b) a plurality of smart card modules having, access routines for communicating with a protected smart card data carrier in response to commands from said virtual smart card adapter.

7. Communication architecture in accordance with claim 6, wherein the smart card module is statically connected to the smart card adapter.

8. Communication architecture in accordance with claim 6, wherein the smart card module is connected dynamically to the smart card adapter.

9. Communication architecture in accordance with claim 8, wherein the smart card module is connected dynamically with the smart card adapter over the internet.

10. Communication architecture in accordance with claim 8, wherein the smart card module has an identity which is checked by the smart card adapter.

11. Communication architecture in accordance with claim 8, wherein the authenticity of the smart card module is checked by a digital signature.

12. Communication architecture in accordance with claim 6, wherein the smart card adapter is connected statically with the smart card application.

13. Communication architecture in accordance with claim 6, wherein the smart card adapter is connected dynamically to the smart card application.

14. Communication architecture in accordance with claim 13, wherein the smart card adapter is connected dynamically over the internet to the smart card application.

15. Communication architecture in accordance with claim 13, wherein the smart card adapter has its identity and/or authenticity checked by the smart card application.

16. Communication architecture in accordance with claim 13, wherein the authenticity of the smart card adapter is checked using a digital signature.

17. Communication architecture in accordance with claim 6, wherein the smart card module is connected to the smart card adapter by instructions in the smart card application program.

18. Communication architecture in accordance with claim 6, wherein the protected data carrier is one of a physical smart card, a virtual software smart card or a hardware smart card with the functionality of a smart card.

19. Communication architecture in accordance with claim 13, wherein the virtual software smart card is initialized and personalized.

20. Communication architecture in accordance with claim 6, wherein said data objects stored on the data carrier as a virtual software smart card, and access to the data objects by the smart card module are through the virtual smart card.

21. Communication architecture in accordance with claim 20, wherein cryptographic functions for coding and encoding data are included on the virtual software smart card.

22. Communication architecture for the exchange of information between a smart card application and a smart card comprising:

a) a virtual software smart card having a data carrier on which data objects with private and public data can be stored, and having cryptographic functions for filing, reading and writing data objects on said data carrier whereby private data can be protected against access using the virtual software smart card; and

b) a module having access routines for communicating with said protected data carrier and said smart card application.

23. Communication architecture in accordance with claim 22, wherein the smart card module is able to be connected statically or dynamically to the smart card application.

24. Communication architecture in accordance with claim 23, wherein in the case of dynamic connection of the smart card module with the smart card application, its identity and/or authenticity is checked using a digital signature.

25. Communication architecture in accordance with claim 24, wherein the virtual software smart card is connected statically or dynamically to the smart card module.

26. Communication architecture in accordance with the claim 25, wherein the virtual software smart card checks the identity and/or authenticity of the smart card module using a digital signature.

27. Communication architecture in accordance with claim 26 further comprising a virtual smart card adapter is integrated with an interface common to all smart card applications.

28. Communication architecture in accordance with claim 27, wherein the smart card adapter is connected dynamically to the smart card application.

29. Communication architecture in accordance with claim 28, wherein the smart card adapter is connected dynamically over the internet to the smart card application.

30. Communication architecture in accordance with claim 28, wherein the smart card adapter identity and/or authenticity is checked by the smart card application.

31. Communication architecture in accordance with claim 27 that modules which can be connected to the smart card adapters are able to be interrogated, selected and connected over the smart card application program.

32. A method for implementing virtual software smart cards which functionally imitate physical smart cards, comprising:

a) selecting a virtual software smart card from a plurality of different virtual software smart cards stored in a storage medium;

b) entering a password to personalize the selected virtual software smart card; and

c) generating private and public data objects on said storage medium using functions provided by said virtual software smart cards so that said private data objects are protected from unauthorized access.