System and method for configuring and managing resources on a multi-purpose integrated circuit card using a personal computer

A computer to configure and manage a plurality of resources of an integrated circuit (IC) card, the computer comprising:

• a processor;
• a display;
• and
• a card manager user interface (UI) executing on the processor, the card manager UI presenting at least one graphical dialog screen on the display which enables a user to reconfigure the IC card and to manage the resources on the IC card.

An integrated circuit (IC) card comprising:

• a processor;
• a data I/O port controlled by the processor to receive and output data;
• a data memory coupled to the processor, the data memory being partitioned into a public storage and a private storage;
• the processor being configured to access the private storage of the data memory only following receipt and verification of an externally supplied passcode from the data I/O port;
• and
• the processor being configured to access the public storage and output contents stored in the public storage to the data I/O port without requiring receipt and verification of the passcode.

A method to provide cryptographic function support to a requesting application, the method comprising the following steps:

• storing at least one cryptographic key on a portable integrated circuit (IC) card;
• supplying a request for a cryptographic function from the application to an application-independent application interface;
• establishing data communication between the application-independent application interface and the IC card;
• and
• performing the cryptographic function requested by the application cooperatively between the application-independent application interface and the IC card using the cryptographic key stored on the IC card and without exposing the cryptographic key from the IC card.

A method for personalizing contents on an integrated circuit (IC) card from a computer according to a user's preferences, the method comprising the following steps:

• interfacing the IC card to the computer with an application-independent application interface executing on the computer;
• presenting a user interface on the computer to the user as part of the execution of the application interface;
• initializing the IC card using the user interface;
• configuring the IC card, using the user interface, to include cryptographic resources and non-cryptographic resources;
• and
• managing the cryptographic and non-cryptographic resources that are maintained on the IC card using the user interface.

A method for conducting secure electronic transactions comprising the following steps:

• configuring, at a first computing site, a portable multi-purpose integrated circuit (IC) card with resources that enable the IC card to be used for multiple purposes, the resources including a cryptographic key and a certificate which can be used for at least one of the multiple purposes;
• transporting the multi-purpose IC card from the first computing site to a second computing site;
• interfacing the multi-purpose IC card with an application interface executing at the second computing site, the application interface supporting an application which is executing at the second computing site to process data for a designated purpose, the application requiring transformation of at least a portion of the data according to a cryptographic function, the application having a certificate;
• exchanging certificates between the application and the IC card to verify authenticity to each other;
• establishing data communication between the application and the IC card through the application interface;
• supplying a request for the cryptographic function from the application to the application interface;
• performing the cryptographic function cooperatively between the application interface and the IC card using the cryptographic key stored on the IC card without exposing the cryptographic key from the IC card;
• transporting the IC card from the second computing site to a third computing site;
• interfacing the IC card with an application interface executing at the third computing site, the application interface at the third computing site supporting an application which is executing at the third computing site and requires access to a non-cryptographic resource on the IC card for another designated purpose;
• establishing data communication between the application and the IC card through the application interface;
• making a request from the application for the non-cryptographic resource on the IC card;
• and
• fulfilling the request for the non-cryptographic resource.