Smart card reader with a secure logging feature

A method for generating an electronic signature over data to be signed comprising the steps of:

• connecting a smart card reader to a host computer;
• inserting a smart card in the reader;
• the reader entering a secure logging mode;
• submitting to the reader data for review and approval by a user;
• presenting to the user by the reader using a user output interface on the reader the data for review and approval by a user;
• capturing by the reader using a user input interface on the reader the user's approval of the presented data;
• logging by the reader in a log on the reader the data for review and approval;
• submitting to the inserted smart card data to be signed, thereafter generating by the inserted smart card an electronic card signature over the submitted data to be signed, and thereafter obtaining from the inserted smart card the generated electronic card signature over the submitted data;
• generating by the reader an electronic reader signature over the log on the reader using a cryptographic data signing algorithm parameterized with a cryptographic key stored in the reader and thereafter obtaining the electronic reader signature over the log generated by the reader.

A method for securing a user's accessing an application comprising the steps of:

• providing a smart card for signing data to a user;
• providing a smart card reader to a user, the smart card reader comprising:
• a communication interface for communicating with a host computer;
• a smart card connector for communicating with the smart card;
• a first memory component for securely storing one or more cryptographic keys;
• a second memory component for storing a log;
• a user interface comprising a user output interface for presenting information to the user and a user input interface for receiving user indications;
• a data processing component for communicating with a host computer, communicating with the smart card and driving the user interface;
• said smart card reader adapted to exchange smart card commands with the smart card using the smart card connector;
• said smart card reader further adapted to operate in a secure logging mode in which the smart card reader logs in said log security related events relative to the reader or the reader's usage;
• and said smart card reader further adapted to generate a reader signature on said log using at least one of the one or more cryptographic keys stored in said first memory;
• providing the user interaction with the application from the host computer that the reader is connected to;
• assembling transaction data;
• assembling data to be reviewed and approved that are related to the assembled transaction data;
• assembling data to be signed that are related to the assembled transaction data;
• ensuring that the smart card is inserted into the smart card reader;
• ensuring that the reader enters a secure logging mode;
• submitting to the reader data for review and approval by a user;
• presenting to the user by the reader using a user output interface on the reader the data for review and approval by a user;
• capturing by the reader using a user input interface on the reader the user's approval of the presented data;
• logging by the reader in the log on the reader the data for review and approval;
• submitting to the inserted smart card data to be signed, thereafter generating by the inserted smart card an electronic card signature over the submitted data to be signed, and thereafter obtaining from the inserted smart card the generated electronic card signature over the submitted data;
• logging by the reader in the log on the reader the data to be signed submitted to the card or the electronic card signature generated by the inserted smart card;
• generating by the reader an electronic reader signature over the log on the reader using a cryptographic data signing algorithm parameterized with a cryptographic key stored in the reader and thereafter obtaining the electronic reader signature over the log generated by the reader;
• verifying the obtained electronic card signature;
• verifying the obtained reader signature over the log generated by the reader;
• and
• verifying the consistency between the log signed by the reader and the assembled transaction data.