Back to results
US 7,266,695 B2Granted
Data updating method and data updating system
AssigneeSystemneeds Inc.
InventorKeisuke Nakayama
Life of this patent
Estimating the term…
Abstract
The present invention provides a data updating method and a data updating system, which can update data of an IC card through a network without mistaking the IC card targeted for updating. When each of issuer client authentication, personal authentication, issuer server authentication and device authentication is performed, a server transmits update data encrypted by a public key used for the device authentication to a client. Then, the client outputs the encrypted update data to an IC card. In the IC card, the update data is decrypted by a secret key used for the device authentication. Based on the decrypted update data, rewriting is carried out in the IC card.
Claims14
A data updating method comprising steps of:
- storing a first secret key used for device authentication and a first common key or public key used for issuer authentication in a device;
- outputting an issuer authenticator encrypted by the first common key or public key from the device to a client computer;
- outputting a device authenticator encrypted by using the first secret key from the device to the client computer, decrypting the encrypted update data inputted from the client computer by the first secret key and updating data therein based on the decrypted update data;
- transmitting the encrypted issuer authenticator in the client computer to a server, transmitting the encrypted device authenticator inputted from the device to the server, receiving the encrypted update data transmitted from the server and outputting the encrypted update data to the device;
- storing a second common key or a second secret key used for the issuer authentication in the server, decrypting the encrypted issuer authenticator received from the client computer by the stored second common or secret key, obtaining an issuer identifier, comparing and collating the obtained issuer identifier with a stored issuer identifier, performing issuer server authentication, decrypting the encrypted device authenticator received from the client computer by a second public key corresponding to the device authenticator, obtaining a device identifier, comparing and collating the obtained device identifier with a stored device identifier, performing the device authentication, and transmitting the update data encrypted by using the second public key corresponding to the first secret key to the client computer,
- wherein said issuer authenticator and issuer identifier are unique to identify an issuer of the device, and said device authenticator and device identifier are unique to identify the device.
3 more elements
A data updating system comprising:
- a computer device including a central processing unit to store a first secret key used for device authentication, and a first common key or public key used for issuer authentication;
- a client computer including a central processing unit connected to the device;
- a computer server including a central processing unit connected the client computer by a network;
- wherein the device outputs an issuer authenticator encrypted by the first common key or public key to the client computer, outputs a device authenticator encrypted by using the first secret key to the client computer, decrypts the encrypted update data inputted from the client computer by the first secret key, and updates data therein based on the decrypted update data;
- the client computer transmits the encrypted issuer authenticator to the server, transmits the encrypted device authenticator inputted from the device to the server, receives the encrypted update date transmitted from the server, and outputs the encrypted update data to the device;
- the server stores a second common key or a second secret key used for the issuer authentication, decrypts the encrypted issuer authenticator received from the client computer by the stored second common or secret key to obtain an issuer identifier, and compares and collates the obtained issuer identifier with a stored issuer identifier to perform issuer server authentication, decrypts the encrypted device authenticator received from the client computer by a second public key corresponding to the device authenticator, obtains a device identifier, compares and collates the obtained device identifier with a stored device identifier to perform the device authentication, and transmits the update data encrypted by using the second public key corresponding to the first secret key to the client computer,
- wherein said issuer authenticator and issuer identifier are unique to identify an issuer of the device, and said device authenticator and device identifier are unique to identify the device.
4 more elements
Dependencies are inferred from the claim text.