System for secured reading and processing of data on intelligent data carriers
AssigneeDeutsche Telekom AG
InventorFrank Schaefer-Lorinser
Life of this patent
Estimating the term…
Abstract
A system for the secure reading and processing of data on intelligent data carriers, such as chipcards, is described. Process executable in this system, in which the stored data and the authorizations or values associated with the data are especially well protected against access by unauthorized persons are also described. This is achieved by a useful combination of encryption processes. In particular, the risk involved with the spying out of master keys stored in autonomously operating terminals, such as vending machines or cardphones, is eliminated or at least reduced, thus counteracting the misuse of cash-reloadable chipcards increasingly used today.
Claims16
A system for the secure reading and modification of data on an intelligent data carrier, the data carrier storing information to be read out or modified, the system comprising:
- a terminal allocated to a higher-level computer center, the terminal having an interface for providing temporary communication with the data carrier;
- a first key stored on the data carrier and available to the terminal for authentication of the data carrier using a symmetrical key process;
- a certificate stored on the data carrier, the certificate formed, using a global signature function, from data that is specific to the data carrier, the data that is specific to the data carrier including an individual verification function, the certificate being used for the certification of the carrier;
- a first arrangement for verifying the certificate in the terminal using a global verification function stored in the terminal, the first arrangement further for temporarily storing the data specific to the data carrier in the terminal;
- a second arrangement in the terminal for deriving a second key from the data specific to the data carrier and from at least one master key stored in the terminal;
- a third arrangement for exchanging data between the data carrier and the terminal including a transfer of a data-modification command from the terminal to the carrier using the symmetrical key process, the symmetrical key process including a challenge and response process;
- a fourth arrangement for creating and transferring to the terminal a data set, the data set documenting data to be read out from the data carrier, the data set being in the form of a cryptogram formed using an individual signature function;
- and
- a fifth device verifying the cryptogram using the individual verification function temporarily stored in the terminal, the fifth device further deleting in the terminal the temporarily stored data specific to the data carrier.
A process for securely reading and modifying data on an intelligent data carrier in a system including a terminal allocated to a higher-level computer center equipped with an interface for temporary communication with the data carrier, the process comprising:
- transferring to the terminal a certificate stored on the data carrier, the certificate being formed, using a global signature function, from data that is specific to the data carrier, the data that is specific to the data carrier including an individual verification function, the certificate being used for certification of the data carrier;
- verifying the certificate in the terminal using a global verification function stored in the terminal;
- temporarily storing in the terminal the data specific to the data carrier;
- deriving a first key from the data specific to the data carrier and from at least one master key stored in the terminal;
- exchanging data between the data carrier and the terminal including transferring a data modification command from the terminal to the data carrier using a symmetrical key process, the first derived key and a second key stored on the data carrier being used in the symmetrical key process, the symmetrical key process including a challenge and response process;
- creating and transferring to the terminal a data set, the data set documenting data to be read out from the data carrier and being in the form of a cryptogram formed by an individual signature function;
- and
- verifying the cryptogram using the individual verification function temporarily stored in the terminal;
- and
- after the verifying step, deleting in the terminal the individual data temporarily stored in the terminal.
A process for securely reading data on an intelligent data carrier in a system including a terminal allocated to a higher-level computer center and equipped with interfaces for temporary communication with the data carrier, the process comprising:
- transferring to the terminal a certificate stored on the data carrier, the certificate being formed, using a global signature function, from data that is specific to the data carrier, the data that is specification to the data carrier including an individual verification function, the certificate for certifying the data carrier;
- verifying the certificate in the terminal using a global verification function stored in the terminal;
- temporarily storing in the terminal the data that is specific to the data carrier;
- deriving at least one key from the data specific to the data carrier and from at least one master key stored in the terminal;
- exchanging data between the data carrier and the terminal including transferring a data-modification command from the terminal to the data carrier using a symmetrical key process, the first derived key and a second key stored on the data carrier being used in the symmetrical key process, the symmetrical key process including a challenge and response process;
- creating and transferring to the terminal a data set, the data set documenting the data modification, the data set being in the form of a cryptogram formed by an individual signature function;
- and
- verifying the cryptogram using the individual verification function temporarily stored in the terminal;
- and
- after the verifying step, deleting in the terminal the temporarily stored data specific to the data carrier.
A process for securely processing data on an intelligent data carrier in a system including a terminal allocated to a higher-level computer center and equipped with interfaces for temporary communication with the data carrier, the process comprising:
- authenticating the data carrier via the terminal using a symmetrical key process, the symmetrical key processing including a challenge and response process;
- transferring to the terminal selected data that is specific to and is stored on the data carrier;
- transferring an additional key of an additional key pair individually allocated to the data carrier, the additional key being used for verification;
- transferring a data of a data-modification command, secured by a symmetrical key process, from the terminal to the data carrier, the symmetrical key process simultaneously authenticating the terminal in relation to the data carrier;
- executing the data-modification command as a function a correct authentication of the terminal;
- generating and transferring a data record documenting the data modification;
- determining an electronic signature using an asymmetrical key process using a first key of the additional key pair;
- and
- verifying the electronic signature and the data record by the terminal using the additional key of the additional key pair.
A process for securely reading data on an intelligent data carrier in a system including a terminal allocated to a higher-level computer center and equipped with interfaces for temporary communication with the data carrier, the process comprising:
- transferring to the terminal selected data that is specific to the data carrier and is stored on the data carrier;
- transferring a second key of an additional key pair individually allocated to the data carrier, the second key of the additional key pair being used for verification, and the data specific to the data carrier being secured by an electronic signature of the computer center using a first key of a further key pair, the first key of the further key pair being stored at a central location, the first key of the further key pair satisfying an asymmetrical algorithm, the electronic signature being verified by a second key of the further key pair, and the second key of the further key pair being stored on the data carrier;
- transferring a readout command, secured by a symmetrical process, from the terminal to the data carrier, the symmetrical process including a challenge and response process, simultaneously authenticating the terminal in relation to the data carrier;
- transferring data to be read, together with an electronic signature generated on the data carrier using an asymmetrical key process using a first key of the additional key pair individually allocated to the data carrier;
- and
- verifying by the terminal of the electronic signature generated on the data carrier, using the second key of the additional key pair.
A process for securely processing data on an intelligent terminal in a system including a terminal allocated to a higher-level computer center and equipped with interfaces for temporary communication with the data carrier, the process comprising:
- transferring to the terminal selected data that is specific to the data carrier and is stored on the data carrier;
- transferring a second key of an additional key pair individually allocated to the data carrier, the second key of the additional key pair being used for verification, and the data specific to the data carrier being secured by electronic signature of the computer center using a first key of a further key pair, the first key of the further key pair being stored at the central location and satisfying an asymmetrical key algorithm, the electronic signature being verified by the second key of the further key pair, and the second key of the further key pair being stored in the terminal;
- transferring a data-modification command, secured by a symmetrical key process, from the terminal to the data carrier, the symmetrical key process including a challenge and response process, simultaneously authenticating the terminal in relation to the data carrier;
- executing the data modification in the data carrier as a function of correct authentication of the terminal;
- generating and transferring a data record documenting the data modification, together with an electronic signature generated on the data carrier using an asymmetrical key process using the first key of the additional key pair;
- and
- verifying by the terminal of the electronic signature generated on the data carrier and of the data record, using the second key of the additional key pair.
Dependencies are inferred from the claim text.