专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO0025278A9 DELEGATED MANAGEMENT OF SMART CARD APPLICATIONS 审中-公开
标题翻译：代理智能卡应用程序的管理
公开(公告)号：WO0025278A9
公开(公告)日：2000-09-28
申请号：PCT/US9925103
申请日：1999-10-26
申请人： VISA INT SERVICE ASS , WENTKER DAVID C , GUNGL KLAUS P
发明人： WENTKER DAVID C , GUNGL KLAUS P
IPC分类号： G07F7/10
CPC分类号： G07F7/1008 , G06F8/60 , G06Q20/341 , G06Q20/3552 , G06Q20/3576
摘要： A smart card architecture (10) includes a run-time environment (102), a card manager (104), one or more security domains (106, 108), a provider application (114) and an issuer application (112). One or more APIs (110, 122) provide communication. The life cycle (200) of the card and card manager includes states: Pre-production, Ready, Initialized, Secured, Locked and Terminated. The life cycle (220) of an application includes states: Installed, Selectable, Personalized, Blocked, Locked and Deleted. A card registry (250) keeps track of card manager and application data elements. The functionality of a security domain on a smart card is extended to allow it to perform delegated management of smart card applications: delegated loading, installation (figures 7A-7D) and/or deletion of an application. A provider of an application is assured of more direct control and management of their application, yet an issuer still maintains some control over the management of the card. The card issuer empowers application providers to initiate changes to the issuer's smart cards that are pre-approved by the card issuer. A method of delegated loading of an application onto a smart card (604) first receives a load command (500) from an application provider via a card acceptance device. The load command includes an indication of an application to be loaded (516) an an appended command authentication pattern (514). Next, the load command is verified using the command authentication pattern. Then, an application (564) is received from an application provider via the card acceptance device; the application also includes an appended application authentication pattern (562) which is used to verify the application. Finally, the application is loaded into memory of the smart card (604).
摘要翻译：智能卡架构（10）包括运行时环境（102），卡管理器（104），一个或多个安全域（106,108），提供者应用（114）和发行者应用（112）。一个或多个API（110,122）提供通信。卡和卡管理器的生命周期（200）包括以下状态：预生产，就绪，初始化，安全，锁定和终止。应用程序的生命周期（220）包括以下状态：已安装，可选，个性化，已阻止，已锁定和已删除。卡注册表（250）跟踪卡管理器和应用程序数据元素。智能卡上安全域的功能已扩展到允许它执行智能卡应用程序的委托管理：授权加载，安装（图7A-7D）和/或删除应用程序。应用程序提供商可确保对其应用程序进行更直接的控制和管理，但发行人仍对卡的管理保持一定的控制权。发卡机构授权应用提供商发起对发卡机构的智能卡进行更改，发卡机构已预先通过发卡机构的批准。将应用委托加载到智能卡（604）上的方法首先通过卡接受设备从应用提供商接收加载命令（500）。加载命令包括将被加载（516）附加命令认证模式（514）的应用的指示。接下来，使用命令认证模式验证加载命令。然后，经由卡接受装置从应用程序提供商接收应用程序（564）该应用程序还包括用于验证应用程序的附加应用程序认证模式（562）。最后，该应用程序被加载到智能卡的存储器中（604）。

IPRDB

热门服务

关于我们

友情链接

联系方式