Secure use of externally stored data
AssigneeResearch In Motion Limited
InventorsRavi Singh, Neil Patrick Adams, Richard Paul Sibley
Life of this patent
Estimating the term…
Abstract
A smart card reader is adapted to extract and store authentication data from a response APDU received from a smart card before generating a filtered response APDU, wherein the filtered response APDU does not include the authentication data. Beneficially, when the smart card reader transmits the filtered response APDU toward a destination, the biometric template data is less susceptible to interception, thereby providing a more secure solution.
Claims21
At a smart card reader, a method of making secure use of authentication data stored on a smart card read by said smart card reader, said method comprising:
- receiving a response Application Protocol Data Unit (APDU) from said smart card, said response APDU including authentication data from said smart card, said response APDU indicating a destination;
- extracting said authentication data from said smart card from said response APDU;
- storing said authentication data from said smart card;
- generating a filtered response APDU, wherein said filtered response APDU does not include said authentication data from said smart card;
- and
- transmitting said filtered response APDU toward said destination.
A smart card reader comprising:
- a storage component interface adapted to communicate with a smart card to receive a response Application Protocol Data Unit (APDU) from said smart card, said response APDU including authentication data from said smart card, said response APDU indicating a destination;
- a processor for executing a filter to extract said authentication data from said smart card from said response APDU and generate a filtered response APDU, wherein said filtered response APDU does not include said authentication data from said smart card;
- a memory adapted to store said authentication data from said smart card;
- and
- a short range communication subsystem adapted to transmit said filtered response APDU toward said destination.
A computer-readable medium containing computer-executable instructions that, when performed by processor in a smart card reader, cause said processor to:
- receive a response Application Protocol Data Unit (APDU) from a smart card, said response APDU including authentication data from said smart card, said response APDU indicating a destination;
- extract said authentication data from said smart card from said response APDU;
- store said authentication data from said smart card;
- generate a filtered response APDU, wherein said filtered response APDU does not include said authentication data from said smart card;
- and
- transmit said filtered response APDU toward said destination.
Dependencies are inferred from the claim text.