# US 8,789,195 B2 · Method and system for access control and data protection in digital memories, related digital memory and computer program product therefor

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 8,789,195 B2
- Document ID: US8789195B2
- Status: Granted
- Kind: B2
- Application number: 11/793,239
- Filed: 2004-12-22
- Published: 2008-04-17
- Granted: 2014-07-22
- Earliest claimed: 2004-12-22
- Assignees: Telecom Italia S.p.A.
- Applicants: Alberto Bianco; Laura Colazzo; Fabio Ricciato; Maura Turolla; Antonio Varriale
- Inventors: Alberto Bianco; Laura Colazzo; Fabio Ricciato; Maura Turolla; Antonio Varriale
- Web page: https://patentgrep.com/patent/US8789195B2

## CPC

- G06Q 20/3555: {Personalisation of two or more cards}
- G06F 12/1466: {Key-lock mechanism}
- G06F 12/1491: {in a hierarchical protection system, e.g. privilege levels, memory rings}
- G06F 21/78: to assure secure storage of data (address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00)
- G06Q 20/341: {Active cards, i.e. cards including their own processing means, e.g. including an IC or chip}
- G06Q 20/35765: {Access rights to memory zones}
- G07F 7/1008: {Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system}
- H04W 12/086: using security domains
- G06F 12/0223: {User address space allocation, e.g. contiguous or non contiguous base addressing}
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00})
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)

## Abstract

A digital memory such as a memory card for mobile communication equipment, is adapted to be accessed by a plurality of users and have protected data stored therein. The memory is dynamically partitionable in private memory areas for storing data therein and has associated therewith a secrecy tool for securely allocating to the users respective private areas and permitting the users to access the respective private areas via a secure session channel to perform read/write commands in the respective private areas. Typically, the memory/card includes: a card interface controller for managing a physical communication layer between the digital memory and external host equipment, an internal memory having associated therewith a hardware lock to control access to the internal memory, a set of cryptographic modules to manage the secure session channel between the users and the digital memory, and a memory certificate for certifying a public key associated with the digital memory.

## Claims

### Claim 1

A method of controlling access by a plurality of users to a digital memory accessible by a plurality of users, and protecting data in said digital memory, the method comprising:
generating a list of users that have allocated private areas in said digital memory;
making said list available to users in said plurality without opening a session;
receiving a request for self-allocation from at least one of said users in said plurality for a first private area in said digital memory;
allocating by said digital memory said first private area of a plurality of private areas for storing data in said digital memory in response to said request for self-allocation of a private area by at least one of said users in said plurality, said users in said plurality being an individual or a service provider which securely requested allocation of respective private areas in said digital memory;
opening a secure session channel for said first private area, whereby allocation of said respective private areas in said digital memory can be securely requested; and
permitting said at least one of said users in said plurality access to said first private area via said secure session channel to perform read/write commands; and
allowing at least one privileged user to perform a predetermined set of operations in said respective private areas allocated in said digital memory via a privileged personal identification number without opening a session.

### Claim 2 (depends on 1)

The method of claim 1, comprising the step of preventing users in said plurality from accessing data stored in respective private areas allocated to other users in said plurality.

### Claim 3 (depends on 2)

The method of claim 2, wherein said predetermined set of operations comprises at least one of deleting respective private areas allocated in said digital memory and changing said privileged personal identification number.

### Claim 4 (depends on 1)

The method of claim 1, comprising the step of managing communication between said users in said plurality and said digital memory by means of a cryptographic key mechanism.

### Claim 5 (depends on 4)

The method of claim 4, comprising the step of managing communication between said users in said plurality and said digital memory by means of a public key infrastructure.

### Claim 6 (depends on 5)

The method of claim 5, comprising the step of said users in said plurality communicating respective public keys by means of a user certificate.

### Claim 7 (depends on 1)

The method of claim 1, comprising the step of having respective user IDs assigned to said users in said plurality by said digital memory.

### Claim 8 (depends on 1)

The method of claim 1, comprising the steps of:
before permitting said at least one of said users in said plurality to perform said read/write commands, opening a session by generating at least one session key using at least one of:
providing a secure channel between said at least one of said users in said plurality and said digital memory by encrypting the data exchanged over said secure channel, and
signing said commands in order to authenticate said at least one of said users in said plurality issuing said read/write commands.

### Claim 9

A digital memory being accessible by a plurality of users and comprising protected data stored therein, said digital memory further comprising:
a first private area of a plurality of private areas allocated by said digital memory to at least one of said plurality of users in response to a request by said at least one of said plurality of users for self-allocation of a private area of said digital memory; and
a secrecy tool configured for securely allocating respective private memory areas to said users in said plurality by opening a secure session channel, whereby allocation of said respective private areas in said digital memory can be securely requested, said users in said plurality being an individual or a service provider;
a control unit permitting said at least one of said users in said plurality to access said first private area via said secure session channel to perform read/write commands in said first private area, and allowing at least one privileged user to perform a predetermined set of operations in said respective private areas allocated in said digital memory via a privileged personal identification number without opening a session,
wherein said memory is configured for generating a list of the users that have allocated private areas in said digital memory and for making said list available to users in said plurality without opening a session.

### Claim 10 (depends on 9)

The memory of claim 9, comprising a lock module configured for preventing users in said plurality from accessing data stored in respective private areas allocated to other users in said plurality.

### Claim 11 (depends on 9)

The memory of claim 9, wherein said secrecy tool comprises at least one cryptographic algorithm engine for managing communication between said users in said plurality and said digital memory by means of a cryptographic key mechanism.

### Claim 12 (depends on 11)

The memory of claim 11, wherein said at least one cryptographic algorithm engine is configured for implementing a public key infrastructure.

### Claim 13 (depends on 12)

The memory of claim 12, comprising a set of memory areas for managing communication between said users in said plurality and said digital memory, said set comprising memory areas storing at least one of:
a public keys table containing information about the users,
a user allocation table containing information about the private memory areas, and
a session keys table containing information about sessions in progress.

### Claim 14 (depends on 13)

The memory of claim 13, wherein said public keys table comprises information items as to:
a user ID,
an associated public key, and
an associated identification name.

### Claim 15 (depends on 13)

The memory of claim 13, wherein said user allocation table comprises information items as to:
user IDs,
the starting blocks of said respective private areas allocated in said digital memory, and
the number of allocated blocks in said respective private areas allocated in said digital memory.

### Claim 16 (depends on 13)

The memory of claim 13, wherein said session keys table comprises information items as to:
a session ID,
the correspondent user ID, and
a session key.

### Claim 17 (depends on 9)

The memory of claim 9, wherein said secrecy tool is configured for:
before permitting said at least one of said users in said plurality to perform said read/write commands, opening a session by generating at least one session key using at least one of:
providing said secure channel between said at least one of said users in said plurality and said digital memory by encrypting the data exchanged over said channel, and
signing said commands in order to authenticate said users in said plurality issuing said commands.

### Claim 18 (depends on 9)

The memory of claim 9, comprising a card interface controller for managing a physical communication layer between the digital memory and external host equipment for the digital memory.

### Claim 19 (depends on 9)

The memory of claim 9, comprising an internal memory having associated therewith a hardware lock to control access to said internal memory.

### Claim 20 (depends on 9)

The memory of claim 9, wherein said secrecy tool comprises a set of cryptographic modules selected from:
a random number generator for providing a random number to build a session key;
an asymmetric algorithm engine for encoding data by a private key and decoding them by a correspondent public key or vice versa;
a symmetric algorithm engine for encoding data by a same key used to decode said data; and
a hash module for signing data by a key.

### Claim 21 (depends on 9)

The memory of claim 9, comprising a memory certificate for certifying a public key associated with said digital memory.

### Claim 22 (depends on 9)

The digital memory of claim 9, comprising a memory card.

### Claim 23 (depends on 9)

The digital memory of claim 9, comprising a memory card for being hosted by mobile communication equipment.

### Claim 24

A non-transitory computer-readable storage medium encoded with a computer program product, stored in the memory of at least one computer and comprising software code portions for performing a method comprising:
generating a list of the users that have allocated private areas in said digital memory;
making said list available to users in said plurality without opening a session;
receiving a request for self-allocation from at least one of said users in said plurality for a first private area in said digital memory;
allocating by said digital memory said first private area of a plurality of private areas for storing data in said digital memory in response to said request for self-allocation of a private area by at least one of said users in said plurality, said users in said plurality being an individual or a service provider which securely requested allocation of respective private areas in said digital memory;
opening a secure session channel for said first private area, whereby allocation of said respective private areas in said digital memory can be securely requested; and
permitting said at least one of said users in said plurality access to said first private area via said secure session channel to perform read/write commands; and
allowing at least one privileged user to perform a predetermined set of operations in said respective private areas allocated in said digital memory via a privileged personal identification number without opening a session.