BRPI0409234A - entidade eletrÈnica tornada segura que compreende meios para memorizar um número máximo permitido de utilizações de um dado secreto e processo de modificação de um número máximo permitido de utilizações de um dado secreto memorizado por uma entidade eletrÈnica tornada segura - Google Patents

entidade eletrÈnica tornada segura que compreende meios para memorizar um número máximo permitido de utilizações de um dado secreto e processo de modificação de um número máximo permitido de utilizações de um dado secreto memorizado por uma entidade eletrÈnica tornada segura

Info

Publication number
BRPI0409234A
BRPI0409234A BRPI0409234-1A BRPI0409234A BRPI0409234A BR PI0409234 A BRPI0409234 A BR PI0409234A BR PI0409234 A BRPI0409234 A BR PI0409234A BR PI0409234 A BRPI0409234 A BR PI0409234A
Authority
BR
Brazil
Prior art keywords
secret data
electronic entity
secure electronic
maximum
modifying
Prior art date
Application number
BRPI0409234-1A
Other languages
English (en)
Inventor
Sylvestre Denis
Jean-Bernard Fischer
Original Assignee
Oberthur Card Syst Sa
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Oberthur Card Syst Sa filed Critical Oberthur Card Syst Sa
Publication of BRPI0409234A publication Critical patent/BRPI0409234A/pt
Publication of BRPI0409234B1 publication Critical patent/BRPI0409234B1/pt

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/321—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving a third party or a trusted authority
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
    • G06F21/75—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information by inhibiting the analysis of circuitry or operation
    • G06F21/755—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information by inhibiting the analysis of circuitry or operation with measures against power attack
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
    • G06F21/77—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information in smart cards
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/341—Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
    • G07F7/1008—Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
    • G07F7/1025—Identification of user by a PIN code
    • G07F7/1083—Counting of PIN attempts
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/10—Integrity
    • H04W12/106—Packet or message integrity
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2115—Third party
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2135—Metering
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/80—Wireless
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0853—Network architectures or network communication protocols for network security for authentication of entities using an additional device, e.g. smartcard, SIM or a different communication terminal
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/12—Applying verification of the received information
    • H04L63/126—Applying verification of the received information the source of the received data

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Software Systems (AREA)
  • Mathematical Physics (AREA)
  • General Engineering & Computer Science (AREA)
  • Signal Processing (AREA)
  • Business, Economics & Management (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Accounting & Taxation (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Storage Device Security (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Credit Cards Or The Like (AREA)

Abstract

"ENTIDADE ELETRÈNICA TORNADA SEGURA QUE COMPREENDE MEIOS PARA MEMORIZAR UM NúMERO MáXIMO PERMITIDO DE UTILIZAçõES DE UM DADO SECRETO E PROCESSO DE MODIFICAçãO DE UM NúMERO MáXIMO PERMITIDO DE UTILIZAçõES DE UM DADO SECRETO MEMORIZADO POR UMA ENTIDADE ELETRÈNICA TORNADA SEGURA". Essa entidade eletrónica tomada segura compreende um módulo (16) para memorizar um número máximo permitido de utilizações de um dado secreto memorizado pela entidade eletrónica tomada segura e compreende por outro lado um módulo para modificar esse número máximo depois da colocação em serviço da dita entidade eletrónica, por recepção de um comando predeterminado (CMD), a entidade eletrónica compreendendo um módulo (17) de recepção do comando predeterminado que é adaptado para verificar que esse comando provém de um terceiro autorizado. Aplicação notadamente nos cartões com microcircuito.
BRPI0409234A 2003-04-09 2004-03-24 entidade eletrônica tornada segura que compreende meios para memorizar um número máximo permitido de utilizações de um dado secreto e processo de modificação de um número máximo permitido de utilizações de um dado secreto memorizado por uma entidade eletrônica tornada segura BRPI0409234B1 (pt)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
FR0304403A FR2853785B1 (fr) 2003-04-09 2003-04-09 Entite electronique securisee avec compteur modifiable d'utilisations d'une donnee secrete
PCT/FR2004/000728 WO2004093019A1 (fr) 2003-04-09 2004-03-24 Entite electronique securisee avec compteur modifiable d'utilisations d’une donnee secrete

Publications (2)

Publication Number Publication Date
BRPI0409234A true BRPI0409234A (pt) 2006-03-28
BRPI0409234B1 BRPI0409234B1 (pt) 2017-04-25

Family

ID=33041738

Family Applications (1)

Application Number Title Priority Date Filing Date
BRPI0409234A BRPI0409234B1 (pt) 2003-04-09 2004-03-24 entidade eletrônica tornada segura que compreende meios para memorizar um número máximo permitido de utilizações de um dado secreto e processo de modificação de um número máximo permitido de utilizações de um dado secreto memorizado por uma entidade eletrônica tornada segura

Country Status (4)

Country Link
CN (1) CN100375984C (pt)
BR (1) BRPI0409234B1 (pt)
FR (1) FR2853785B1 (pt)
WO (1) WO2004093019A1 (pt)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
FR2880149B1 (fr) 2004-12-23 2007-03-30 Oberthur Card Syst Sa Procede de traitement de donnees et dispositif associe
CN102499430B (zh) * 2011-12-13 2013-10-23 卧龙电气集团股份有限公司 用于密集烤房控制器的烤次自动修改装置及其方法
JP7327349B2 (ja) * 2020-10-23 2023-08-16 大日本印刷株式会社 Ｉｃカード，ｉｃカードのコマンド管理方法およびｉｃカード用のマイクロコントローラ

Family Cites Families (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPS60207957A (ja) * 1984-03-31 1985-10-19 Toshiba Corp デ−タ保護方式
FR2765985B1 (fr) * 1997-07-10 1999-09-17 Gemplus Card Int Procede de gestion d'un terminal securise
FR2786006B1 (fr) * 1998-11-17 2001-10-12 Schlumberger Systems & Service Dispositif pour la limitation de fraudes dans une carte a circuit integre
FR2786007B1 (fr) * 1998-11-18 2001-10-12 Gemplus Card Int Procede de controle d'utilisation d'une carte a puce
DK174672B1 (da) * 1999-11-09 2003-08-25 Orange As System til elektronisk udlevering af en personlig identifikationskode
JP3997052B2 (ja) * 2000-12-13 2007-10-24 株式会社エヌ・ティ・ティ・ドコモ Ｉｃカード及びｉｃカードの情報保護方法並びにｉｃカード発行装置

Also Published As

Publication number Publication date
BRPI0409234B1 (pt) 2017-04-25
FR2853785B1 (fr) 2006-02-17
WO2004093019A1 (fr) 2004-10-28
CN1771519A (zh) 2006-05-10
FR2853785A1 (fr) 2004-10-15
CN100375984C (zh) 2008-03-19

Similar Documents

Publication Publication Date Title
AU7691801A (en) Computer physical security device
WO2006090172A3 (en) Identification systems
NO20030711L (no) Interaktiv og/eller sikker aktivering av et verktöy
WO2004053618A3 (en) System and method of owner control of electronic devices
DE69507278D1 (de) Zugangskontrollsystem mit autorisierten und mittels eines tragbaren speicherträgers erneuerbaren stundenbereichen
WO2007143397A3 (en) Pin creation system and method
BR0015445A (pt) Sistema para cessão eletrônica de um código de identificação pessoal
WO2008049032A3 (en) System and method for secure transaction
BR0212117A (pt) Método e aparelho para autentificação de artigo
ZA200401491B (en) Compact hardware identification for binding a software package to a computer system having tolerance for hardware changes.
GB2430525A (en) Electronic lock system and method for providing access thereto
WO2006107777A3 (en) Dynamic encryption of payment card numbers in electronic payment transactions
WO2004032462A3 (en) Identification based operational modification of a portable electronic device
AU2001276020A1 (en) Methods and systems for electronic receipt transmission and management
PT1004101E (pt) Terminal e sistema para a realizacao de transaccoes electronicas protegidas
EP0768775A3 (en) Method and apparatus for mutual authentication according to the challenge/response principle
ATE536601T1 (de) Individuelles zertifikationsverfahren
GB0504573D0 (en) Traceability and authentication of security papers
BR0113327A (pt) Método e sistema para transferir dados de verificação de um primeiro suporte para um segundo suporte
WO2008055268A3 (en) Security feature rfid card
WO2004034180A3 (en) Processes and systems for enabling secure and controlled distribution and use of information
WO2009066271A3 (en) Virtual security access module
WO2006096548A3 (en) Systems and methods for authorization credential emulation
WO2004036380A3 (en) System and method of protecting data
DE50202651D1 (de) Initialisieren einer chipkarte

Legal Events

Date Code Title Description
B08F Application dismissed because of non-payment of annual fees [chapter 8.6 patent gazette]

Free format text: PAGAR RESTAURACAO.

B08H Application fees: decision cancelled [chapter 8.8 patent gazette]

Free format text: REFERENTE AO 8.6 DESPACHO PUBLICADO NA RPI 2307 DE 24/03/2015.

B07A Application suspended after technical examination (opinion) [chapter 7.1 patent gazette]
B15K Others concerning applications: alteration of classification

Free format text: AS CLASSIFICACOES ANTERIORES ERAM: G07F 7/10 , H04Q 7/32

Ipc: G06F 21/55 (2013.01), G06F 21/77 (2013.01), G06Q 2

B09A Decision: intention to grant [chapter 9.1 patent gazette]
B25G Requested change of headquarter approved

Owner name: OBERTHUR CARD SYSTEMS SA (FR)

B25D Requested change of name of applicant approved
B16A Patent or certificate of addition of invention granted [chapter 16.1 patent gazette]
B25D Requested change of name of applicant approved
B25G Requested change of headquarter approved