Back to results
US 7,925,892 B2Granted
Method to grant modification rights for a smart card
AssigneeNXP B.V.
InventorHenrik Przybilla
Life of this patent
Estimating the term…
Abstract
A Modification device (5) is designed to modify an application (A1, A2, A3, A4) run by a data carrier (S), wherein a first key information item (K1) is stored in the data carrier (S) and an associated second key information item (K2) is stored in the modification device.
Claims17
A granting method to grant a modification device a modification right to modify an application in a data carrier, the method comprising:
- generation of a first key information item and of an associated second key information item for a data carrier identified by a data carrier identification information item;
- generation of a first master key information item and an associated second master key information item in addition to the first key information item and the associated second key information item;
- checking of the association of the first key information item stored in the data carrier with the second key information item from the modification device;
- allowing of the modification of the application in the data carrier by the modification device in response to a determination that the first key information item is associated with the second key information item;
- checking of the association between the first master key information item stored in the data carrier with the second master key information item from the modification device;
- and
- allowing a modification by the modification device of access rights to at least one interface of the data carrier in response to a determination that the first master key information item is associated with the second master key information item, wherein the at least one interface of the data carrier is for contactless and/or contact communication of information items.
4 more elements
A data carrier for running at least one application, the data carrier comprising:
- at least one interface for contactless and/or contact communication of information items,
- a computer processing device for running the at least one application, where information items communicated via the interfaces or information items stored in the data carrier are processed,
- a storage device for storing a first key information item, a first master key information item separate from the first key information item, and an associated data carrier identification information item that identifies the data carrier,
- wherein the computer processing device is further configured to check a modification right of a modification device to modify an application in the data carrier via the at least one interface, and to check the association of the first key information item stored in the storage device with a second key information item output to the data carrier by the modification device, and
- wherein, following confirmation of the modification right of the modification device, the computer processing device is further configured to enable modification of the application in the data carrier by the modification device;
- wherein the computer processing device is further configured to check an association of the first master key information item stored in the storage device with a second master key information item from the modification device;
- wherein the computer processing device is further configured, upon confirmation of the association of the first master key information item with the second master key information item, to enable modification of access rights to the at least one interface for the contactless and/or contact communication.
4 more elements
A modification device for modifying an application in a data carrier, the modification device comprising:
- at least one interface for contactless and/or contact communication of information items to a data carrier identified by a data carrier identification information item,
- a storage device for storing at least one data carrier identification information item that identifies a data carrier, an associated second key information item, and a second master key information item, and
- a computer processing device for modifying applications in data carriers via the interface where, in the course of communication with a data carrier identified by a stored data carrier identification information item, the modification right of the modification device is output to the data carrier by communication of the second key information item associated with this data carrier identification information item, whereupon, following confirmation of the modification right by the data carrier, the modification device is authorized and designed to modify the application in the data carrier, wherein the computer processing device is further configured to modify access rights to the at least one interface of the data carrier in response to a determination that the second master key information item is associated with a first master key information item stored on the data carrier.
Dependencies are inferred from the claim text.