Device for controlling communication between electronic information cards and host computer to be kept in secret

CA 02028751 2000-01-21

-1DEVICE FOR CONTROLLING COMMUNICATION

BETWEEN ELECTRONIC INFORMATION

CARDS AND HOST COMPUTER TO BE KEPT

IN SECRET

BACKGROUND OF THE INVENTION

The invention relates generally to a device for controlling communication between a host computer and a plurality of electronic information cards, e.g. the so-called IC-cards to be connected therewith intermediately therethrough, and more particularly to such intermediate device adapted to encipher data to be communicated therebetween and readily renew a communication algorithm for enciphering said data.

The so-called IC-card or integrated circuit card comprises, as shown in Fig. 3 of the accompanying drawings, a card-like substrate SUB having e.g. a microcomputer MC as a data processor and a semiconductor memory MEM embedded therein, and a plurality of contact points CP which are each connected with the above MC and MEM, and arranged exposedly flush with the outer surface of the substrate SUB.

Recently an IC-card having no electric contacts has been proposed in which a plurality of coils or light receptors are provided instead thereof so as to receive information in the form of high-frequency signals or from a light emitter so as to be stored in the memory.

The IC-card may be electrically connected with the host computer provided with a card connector having contact pins of the number and arrangement corresponding to those of the contact points CP of the card so as to read data stored in the MEM thereof and write new data in the

MEM. In general the IC-card is, however, loaded in the intermediate device

CA 02028751 2000-01-21

-2having the card connector as referred to above through a slit formed in the casing wall thereof so that the communication for reading-out and writingin of the data may be made between the card and the host computer which is linked with the communication control device through a cable.

Such intermediate devices as the IC-card reader/writer are described in many literatures, e.g. in U.S. Patents 4,724,030, 4,833,310, and 4,835,375 given to the applicant or assignee of this patent application, and have been in actual use.

There is a fear, however, particularly in the latter case that the data stored or to be stored in the IC-card is stolen by any third party making access to the communication cable. In order to protect the data, various countermeasures have been proposed, among which there is a method where the intermediate device or the IC-card is provided with a ROM storing an algorithm for communication so as to encipher the data which is deciphered in the host computer, or vice versa to be read or written. Such process and apparatus are described in many literatures, e.g. U.S. Patents 4,544,833 to Michel Ugon in France, and 4,453,074 to Stephen B. Weinstein in U.S.A.

Since such ROM is generally combined in the IC-card or the card connector when assembled, the algorithm to be kept in secret may be leaked to the third party through the manufacturer or assembler. Furthermore, when one algorithm is used for a long time, the algorithm may be illuminated to the third party tapping the communication cable in order to decipher the enciphered data.

Thus, it is necessary to often renew the communication algorithm.

For that purpose, however, the ROM must be removed from IC-card or the card connector to be exchanged with a new one storing another communication algorithm, which necessitates a troublesome work by a skilled person and consequently a considerably high cost.

CA 02028751 2000-01-21

-3SUMMARY OF THE INVENTION

The invention, thus, intends to provide an intermediate device adapted to readily renew the algorithm for communication between the ICcard loaded therein and the host computer, without necessity of exchanging the ROM storing thereof.

This object can be attained according to the invention fundamentally by providing at least two card connectors in the device one for the IC-card to be connected with the host computer for the communication, while the other is for an IC-card having a ROM stored with a communication algorithm for enciphering the data, which may be renewed only by exchanging the IC-card with a new one containing any other communication algorithm. When a plurality of IC-cards respectively storing various algorithms have been prepared in advance, the algorithms may be very readily renewed at any time when it comes to be necessary.

The device according to the invention may be used as it is for communication between at least two IC-cards for the purpose of exchanging the data therebetween.

In a further aspect, the present invention provides a system for controlling communication between an electronic information card including contacts and a host computer for reading and writing data to and from the electronic information card via a communication cable, said system comprising: a first terminal connector, connected to the communication cable for receiving information including data and signals transmitted from the host computer; a second terminal connection, connected to the communication cable for transmitting information including data and signals on the electronic information card to the host computer; at least two card connectors, each having contacts corresponding to the contacts of the electronic information card and each having a card detector for generating signals representing a presence and absence of a card therein, wherein one

CA 02028751 2000-01-21

-4of the card connectors receives a card storing at least one fixed communication algorithm, and the other receives the electronic information card such that data stored in the electronic information card is enciphered and deciphered according to the at least one fixed communication algorithm by passing the data through the card storing the at least one fixed communication algorithm; means for controlling the communication in response to the signals from the at least two card connectors so as to connect and disconnect circuits between the first and second terminal connectors and the at least two card connectors and between the means for controlling and the at least two card connectors; and switching means, between the at least two card connectors, and also between each of the at least two card connectors and each of the first and second terminal connectors, and also between each of the at least two card connectors and the means for controlling, so that the means for controlling turns predetermined switches ON and OFF in response to a signal from each of the at least two card connectors and the host computer.

Thus, the other end of the invention is to provide a device allowing exchange of data between at least two IC-cards loaded therein.

BRIEF DESCRIPTION OF THE DRAWINGS

Other features and advantages will be appreciated by studying the following description with reference to the accompanying drawings in which:

Fig. 1 is a sketch schematically showing an embodiment of the intermediate communication control device according to the invention and a host computer linked therewith via a communication cable.

Fig. 2 is a block diagram showing arrangement and connection of essential elements for the device according to the invention, and

CA 02028751 2000-01-21

-5Fig. 3 is a perspective view of a typical IC-card as one example of electronic information cards to be used for the invention, partly cut off for illustrating the inner arrangement.

DESCRIPTION OF THE PREFERRED EMBODIMENT

Now in reference to Fig. 1, an intermediate device for communication control according to the invention is represented generally by 10, which is provided with a key-board 11, an indicator 12 and at least two slits 13, 14 respectively for IC-cards IC-1, IC-2 to be inserted therethrough as explained at the beginning of the specification in reference to Fig. 3.

The inserted card IC-1 or IC-2 is automatically driven to be positioned on a concerned card connector in the device which has contact pins of the number and arrangement corresponding to the contact points CP thereof so as to establish electric connection of the card with the host computer HC via the cable CB for the communication therebetween, and the card is automatically ejected so that an end of the card is exposed out of the slit to be taken out by the card owner.

Mechanism or arrangement itself for carrying out the above operation has no direct connection with the invention so that further illustration thereof is omitted here.

In reference to Fig. 2, the communication control device 10 encircled by phantom lines therein comprises following elements linked to one another.

The cable CB from the host computer HC is linked with a signal receiving connector 21 and a signal transmitting connector 22, which are then linked with means 23 for controlling communication, which is then linked with a key-board 11 and an indicator 1 2 for the intermediate device itself.

CA 02028751 2000-01-21

-6There are further provided card at connectors 26, 27, as shown at the right side in Fig.2, each having contact pins (not shown) as referred to above for the cards IC-1, IC-2 and accompanied with card detectors 26 27 ' which are linked with the communication control means 23 so that a signal generated by each of the detectors actuates the control means.

The card connectors 26 and 27 are linked with each other by switching means 31, and with the control means 23 respectively via switching means 32, 33 and further with the signal receiving and transmitting connectors 21, 22 respectively via switching means 34, 35; 36, 37.

The communication control means 23 actuated by the signal from the card detectors 26 27 ' regulates the switching means 31-37 and output data from the key-board 11, the host computer HC and the cards IC-1, IC-2 to be displayed on the indicator 12 as well as data from the keyboard 11 to be given to the host computer HC and the card connectors 26, 27.

Now in operation, when the first card IC-1 storing communication algorithm is positioned on the card connector 26, the card detector 26 ' generates a signal for actuating the control means 23 so as to supply electric energy for driving the card IC-1 as well as a clock signal.

The communication control means 23 also outputs a switch control signal P1 so as to turn switching means 32 ON, whereby the control means 23 is electrically connected with the card connector 26 and consequently with the card IC-1. When a reset release signal is outputted by the control means 23 at this stage, the card IC-1 may itself generate an answer to reset (A.T.R.) signal showing properties thereof, such as a transfer rate. This A.T.R. signal is inputted in the host computer HC via the switching means 32, control means 23, transmitting connector 22 and the cable CB.

CA 02028751 2000-01-21

-7When receiving the A.T.R. signal from the card IC-1, the communication control means 23 outputs switch control signals P2, P3 so as to turn the switching means 34, 36 respectively ON, whereby communication circuits of the card IC-1 with the control means 23 and with the host computer HC are established in addition to that between the control means 23 and the host computer HC.

When a command signal is outputted from the host computer to demand for a pass word or code number of the card IC-1 at this stage, the command is inputted in the control means 23 via the receiving connector 21 so as to display INPUT PASS WORD or the like on the indicator 12.

When the code number or pass word of the card IC-1 is inputted by operating the key-board 11 at this stage, the card compares the code number stored in itself with that inputted by means of the key-board 11. When both code numbers are in agreement, there is caused a signal by the card to be inputted in the host computer HC through the switching means 36 and the transmitting connector 22 so that access to the data region of the card IC-1 is now made possible.

Meanwhile, when the second card IC-2 to be communicated with the host computer is positioned on the second card connector 27, the card detector 27 ' generates a signal for actuating the communication control means 23 so as to supply electric energy for driving the concerned card and a clock signal to the card connector 27.

Concurrently the control means 23 generates a signal P4 so as to turn the switching means 33 ON, whereby the control means 23 is connected with the card connector 27 and consequently with the card IC2, when the control means 23 outputs a reset release signal at this stage, the second card outputs an A.T.R. signal to be inputted in the host computer HC through the switching means 33, control means 23, transmitting connector 22 and cable CB.

CA 02028751 2000-01-21

-8When receiving the A.T.R. signal, the communication control means 23 outputs switch control signals P5, P6 so as to turn the switching means 35, 37 respectively ON, whereby a communication circuit between the control means 23 and the card IC-2 may be established in addition to the already established circuits between the control means 23 and the host computer HC; the control means 23 and the card IC-1 ; the host computer HC and the card IC-1.

When a command signal is outputted from the host computer to demand for a pass word or code number of the card IC-2 at this stage, the command is inputted in the control means 23 via the receiving connector 21 so as to display INPUT PASSWORD or the like on the indicator 12.

When the code number or pass word of the card IC-2 is inputted by operating the key-board 11 at this state, the card compares the code number stored in itself with that inputted by means of the key-board 11. When both code numbers are in agreement, there is caused a signal by the card to be inputted in the host computer HC through the switching means 37 and the transmitting connector 22 so that access to the data region of the card IC-2 is now made possible.

Meanwhile, when it is necessary to read-out the data or write-in a new data in the card IC-2 by the host computer HC, a signal demanding for data transfer is generated thereby so as to let the control means 23 to generate a signal P7 for turning the switching means 31 ON, whereby the first card connector 26 and the second card connector 27 are connected with each other. In reply to a request made at this stage, the data stored in the card IC-2 positioned on the connector 27 are inputted in the card ΙΟΙ positioned on the connector 26 via the switching means 31. The card IC-1 enciphers the inputted data according to the communication algorithm stored therein to be outputted. The enciphered data is inputted in the host computer HC through the switching means 36, transmitting connector 22 and communication cable CB.

CA 02028751 2000-01-21

-9ln cases where new data are to be written-in the card IC-2, the data are similarly enciphered at the side of the host computer HC to be sent to the device 10 according to the invention via the cable CB, the enciphered data are inputted in the card IC-1 through the receiving connector 21 and the switching means 34 to be deciphered according to the algorithm stored therein and then stored in the card IC-2 via the switching means 31.

It is noted, in this connection, that the communication control device according to the invention, which comprises at least two card connectors, may be used for the IC-cards to exchange data stored therein with each other, only by turning the switching means 31 ON according to the concerned command from the host computer HC through the control means 23. The communication between the IC-cards may be made at a higher transfer speed without intervening one after another by the host computer.

When the card IC-2 is taken out of the concerned connector 27 after the communication with the host computer via the card IC-1 storing the communication algorithm is finished, a signal showing absence of the card is generated from the detector 27 in reply to which the control means 23 turns the switching means 31, 33, 35 and 37 respectively OFF, whereby the communication circuits for the second card connector 27 with the host computer HC and first card connector 26 via the control means 23 are disconnected.

The first card IC-1 remains to be on the card connector 26 so that the communication circuits between the control means 23 and the host computer; the control means 23 and the card IC-1 ; the card IC-1 and the host computer HC are still kept, whereby any other card to be communicated with the host computer may be loaded at any time.

If the communication algorithm must be renewed, it is necessary only to take the card IC-1 out of the connector 26 to be exchanged with any other card storing any other algorithm and positioned thereon.

CA 02028751 2000-01-21

-10The communication control device in the illustrated embodiment comprises only two card connectors, but if necessary, of course three or more card connectors may be provided. There will be no necessity for further explaining on the arrangement and operation in such cases.

In the specification inclusive of the Claims the terms contacts is used under the promise that the IC-card has exposed electric contact points as illustrated in Fig. 1. It should be noted that the no-contact ICcard, which may be of high-frequency signal or optical signal as referred to at the beginning, may be of course used for the invention. In this case, the 10 term contacts should be replaced with or interpreted as light receptors or coils