US 5,544,246 A · Smartcard adapted for a plurality of service providers and for remote installation of same

Abstract

A smartcard that allows different Service Providers to coexist on the smartcard with none of the Service Providers, nor the owner of the smartcard, having access to the files created for, or by, each of the resident Service Providers. The operating system of the smartcard includes a root directory that is owned by the smartcard's issuer/owner, and each Service Provider is a "user" that is installed by the issuer/owner. Each such user is provided with a subdirectory of the root directory, and within the subdirectory the user creates files and subdirectories with files, as the user deems necessary. The operating system prevents all users of the smartcard, including the smartcard's issuer/owner and the smartcard's holder, from accessing any files that are owned by any other user, when that user chooses to prevent such access. This power to exclude is effected through a password file that is owned by the user and which cannot be altered by any other user, including the smartcard's issuer/owner. Optionally, the smartcard's issuer/owner is given the power to erase all files of a given user. Connection is effected with a protocol which authenticates all parties to the connection. Thus, in a connection between the smartcard and a user, the smartcard determines whether the user should be granted access, and the user determines whether the smartcard is a valid smartcard. Authentication of the possessor of the smartcard may also be effected.

Claims9

Dependent claims

A multiple-application smartcard in connection with which there is a party that is an issuer/owner of the smartcard, a party that is a holder of the smartcard, and a service provider that accesses the smartcard, the smartcard comprising:

a microprocessor,
a memory coupled to the microprocessor,
a plurality of files in said memory which combine to form an operating system for the microprocessor, which operating system includes a tree-like file structure;
a plurality of executable files executed in said microprocessor, forming part of the tree-like structure and each having file characteristics that are controlled solely by said issuer/owner, which files are executable in the sense that, when referenced, they access at least one other file in said memory;
a first password file in said memory that is accessible only to said issuer/owner, which contains data and which is accessed by said issuer/owner prior to said issuer/owner gaining access to said plurality of executable files;
a second password file that is accessible only to said holder, which contains data and which is accessed by said holder prior to said holder gaining access to files in said plurality of executable files;
and
a third password file that is accessible only to said service provider, which contains data and which is accessed by said service provider prior to said service provider gaining access to files in said plurality of executable files.

5 more elements

In connection with a smartcard issued by a first party, where the smartcard includes an operating system having a tree-like file structure that begins with a directory-file with attributes that are controlled solely by said party, a plurality of files, forming part of the tree-like structure and each having file attributes that are controlled solely by said first party, which files are executable files in the sense that, when referenced, they access, or access and alter, data in a file in said memory, and a password file that is accessible only to said first party and is used to confirm identity of said first party before granting access by said first party to said executable files, a method for installing in said smartcard a second party interaction means to allow a second party access to at least some of said files, the method comprising the steps of:

establishing communication between the smartcard and said first party;
executing a log-in protocol between the smartcard and said first party, employing the data contained in said password file;
communicating to said first party a request for installation of a said second party interaction means on said smartcard;
said first party establishing a user password file in said smartcard, with said user password file arranged to form part of said tree-like structure;
said first party inserting data into said user password file;
and
said first party changing file attributes of said user password file to make it accessible to said second party.

4 more elements

Dependencies are inferred from the claim text.

Smartcard adapted for a plurality of service providers and for remote installation of same

Life of this patent

Smartcard adapted for a plurality of service providers and for remote installation of same

Life of this patent

Abstract

Claims9