Method and arrangement in a database
OwnerJonas Perssoninventor
Life of this patent
Estimating the term…
Abstract
The present invention relates to a smart card based registry database and is a database in which mobile terminal applications, SIM card based applications, PDA applications etc all can gain access, create new entries, read already stored information or update old information etc. How the information is used is up to the application, the registry only stores the information The registry comprises security such as authentication and encryption and can be used to improve existing applications.
Claims19
A method for a user application (106) to get access to a registry (104) within a smart card,
- creating an entry in the registry (104), which entry is associated with a root certificate, and which root certificate is signed and issued by a Certification Authority (CA) (110);
- any user application (106) sending a request for access to the created entry in the registry (104), said request comprising a certificate issued and signed by said CA, said certificate including a public key, said public key corresponding to a private key that said any user application (106) owns;
- the registry (104) challenging said any user application (106) by means of the obtained public key;
- said any user application (106) responding said challenge by means of its said private key and returning it to the registry (104)
- if the challenge response is successful, said any user application (106) given access to the created entry.
The method according the previous claim, wherein said any user application is the first user application (106) that has got access to the created entry for storing a value within said entry.
The method according the previous claim, wherein said any user application is a second user application (108) that has got access to the created entry for storing a value within said entry.
The method according the any of the previous claims, wherein a first value is to be stored in the created entry of the registry (104) such that the value cannot be copied or manipulated, the method comprising the further step of:
- any user application (106) combining the first value to be stored with a certificate obtained from the registry (104),
- the any user application (106) signing said value-certificate combination;
- the any user application (106) sending said signed value-certificate combination to the registry to be stored in the created entry.
A smart card database registry (104) wherein any user application (106) may create an entry, which entry is accessible only for, by said any user application, selected user applications characterised in that the registry (104) comprises
- means for creating an entry, which entry is associated with a root certificate, and which root certificate is signed and issued by a Certification Authority (CA) (110);
- means for receiving a request for accessing the created entry in the registry (104) from any user. application (106), said request comprising a certificate issued and signed by the CA, said certificate including a public key, said public key corresponding to a private key that said any user application (106) owns;
- means for using the obtained public key for challenging said any user application (106);
- means for receiving a response of said challenge, encrypted by a private key of said any user application (106);
- means for giving said any user application (106) access if the challenge response is successful.
Dependencies are inferred from the claim text.