Method and system for confidentially processing information registered on a portable carrier recording track with optical reading.
Abstract
L'invention a pour objet un procédé et un système pour traiter de façon confidentielle des informations stockées sur une piste d'enregistrement à lecture optique d'un support portatif. Une carte (1) possède des circuits de traitement (11) et un ensemble mémoire (12) ayant au moins une zone de mémoire (12Al) inacessible de l'extérieur. La carte (1) possède également une piste d'enregistrement (13) à lecture optique et à écriture optique ou magnétique. Les données avant d'être écrites sur la piste (13) sont chiffrées par les circuits de traitement (11) au moyen d'une clé secrète (KC) préenregistrée dans la zone mémoire (12A1). L'invention s'applique notamment aux cartes de crédit.

Term
Term ended
Projected expiry passed 28 December 2004, 21.7 years ago.
- Priority
- Filed
- Published
- Projected expiry
- Today
16 claims: 13 independent, 3 dependent
- 1Procédé pour traiter des informations sur une piste d'enregistrement à lecture optique d'un support portatif tel qu'une carte, caractérisé en ce qu'il consiste, pour sauvegarder la confidentialité des informations à enregistrer sur la piste :- à transférer ces informations à l'intérieur d'une mémoire électronique (12B) du support portatif (1), - à chiffrer ces informations à l'intérieur du support portatif (1) au moyen de circuits de traitement (11) et d'une clé de chiffrement secrète (KC) préenregistrée dans une zone de mémoire (12A1) inaccessible en externe, - à transférer les informations chiffrées à un dispositif externe d'écriture/lecture (23) par exemple à laser pour les écrire sur la piste d'enregistrement à lecture optique (13) du support portatif (1).
- 2Procédé selon la revendication 1, caractérisé en ce qu'il con iste à utiliser un dispositif externe d'écriture optique (23) à laser.
- 3Procédé selon la revendication 1, caractérisé en ce qu'il consiste à utiliser une piste d'enregistrement magnéto-optique (13) à lecture optique et un dispositif externe d'écriture magnétique (23) à laser.
- 4Procédé selon la revendication 1, caractérisé en ce qu'il consiste à utiliser une piste d'enregistrement magnéto-optique (13) à lecture optique et un dispositif externe d'écriture magnétique (23) par exemple à enregistrement perpendiculaire.
- 5Procédé selon l'une des revendications précédentes, caractérisé en ce qu'il consiste, pour exploiter les informations chiffrées stockées sur la piste d'enregistrement à lecture optique (13) du support portatif (1) :- à lire optiquement ces informations par le dispositif externe de lecture (23) par exemple à laser, - à transférer ces informations à l'intérieur de la mémoire (12B) du support portatif (1), - à déchiffrer ces informations à l'intérieur du support portatif (1) au moyen des circuits de traitement (11) et d'une clé de déchiffrement secrète (KC) préénregistrée dans la zone de mémoire (12A1) inaccessible en externe, et - à rendre accessible en externe les informations déchiffrées.
- 6Support portatif du type comprenant au moins une piste d'enregistrement à lecture optique (13), caractérisé en ce qu'il comprend une mémoire électronique (12) et des circuits de traitement (11) tels qu'un microprocesseur et en ce que la piste d'enregistrement (13) est une piste à écriture/lecture optique par exemple à laser.
- 7Support portatif du type comprenant au moins une piste d'enregistrement à lecture optique (13), caractérisé en ce qu'il comprend une mémoire électronique (12) et des circuits de traitement (11) tels qu'un microprocesseur, et en ce que la piste est une piste magnéto-optique (13) à écriture magnétique par laser.
- 8Support portatif du type comprenant au moins une piste d'enregistrement (13) à lecture optique, caractérisé en ce qu'il comprend une mémoire électronique (12) et des circuits de traitement (11) tels qu'un microprocesseur, et L'invention propose à cet effet un procédé pour traiter des informations sur une piste d'enregistrement à lecture optique d'un support portatif tel qu'une carte, caractérisé en ce qu'il consiste, pour sauvegarder la confidentialité des informations à enregistrer sur la piste :- à transférer ces informations à l'intérieur d'une mémoire électronique du support portatif, - à chiffrer ces informations à l'intérieur du support portatif au moyen de circuits de traitement et d'une clé de chiffrement secrète préenregistrée dans une zone de mémoire inaccessible en externe, - à transférer les informations chiffrées à un dispositif externe d'écriture/lecture par exemple à laser pour les écrire sur la piste d'enregistrement à lecture optique du support portatif.
- 9Selon un avantage important de l'invention, les informations chiffrées enregistrées sur la piste optique restent confidentielles bien que lisibles de l'extérieur. Pour sauvegarder cette confidentialité il est indispensable que la clé de chiffrement reste secrète. Cette sauvegarde du secret de la clé de chiffrement est rendue possible par l'utilisation d'une zone de mémoire uniquement accessible par les circuits de traitement de la carte.
- 10Le principe de l'invention est illustré par un système représenté de façon schématique en référence à la figure unique annexée.
- 11Ce système est constitué par un objet portatif tel qu'une . carte (1) accouplable temporairement à un terminal (2).
- 12La carte (1) a par exemple une structure conforme à celle décrite dans le brevet français n° 2 461 301 de la demanderesse. Elle se compose essentiellement de circuits de traitement (11) tels qu'un microprocesseur et d'un ensemble mémoire (12).
- 13Pour la mise en oeuvre de l'invention, l'ensemble mémoire (12) comprend une mémoire non volatile (12A) et une mémoire volatile (12B). La mémoire (12A) est elle-même divisée en trois zones :une zone secrète (12A1) inaccessible de l'extérieur en écriture/lecture, une zone. (12A2) accessible sous condition préalable, et une zone (12A3) accessible de l'extérieur en écriture/lecture.
- 14Le microprocesseur (11) accède à l'ensemble mémoire (12) par l'intermédiaire d'un bus (blO).
- 15La carte possède une piste d'enregistrement à lecture optique (13) et éventuellement une piste magnétique (14).
- 16Le terminal (2) comprend au moins :- un dispositif d'entrée manuelle de données, comme par exemple un clavier (21), - un dispositif (22) assurant au moins le transfert des informations entre la carte (1) et le terminal (2), - un dispositif d'écriture-lecture (23) de la piste optique (13), - un dispositif d'écriture-lecture magnétique (24) de la piste magnétique (14), et - accessoirement une unité d'affichage (25).
Independent claims16
38 paragraphs, as filed
The present invention generally relates to improvements to portable media such as maps, and more particularly to a method and system for processing confidential information stored on a machine readable recording track of a portable media .
to magnetic recording strip cards are well known and widely used in many applications, especially consumer. These cards, however, have limited opportunities because they can not handle themselves the information they passively support.
To increase the possibilities of these cards, we turned to the technique of integrated circuits including in the cards processing circuits, including a microprocessor to process information internally and to ensure exchange of information with an apparatus operation which the card is temporarily coupled. Such a map is described in particular in French Patent No. 2,337,381 of the applicant. The card also includes a ROM of the ROM type or PROM which stores or prerecorded information to process and programs that drive the microprocessor. Generally, this memory replaces the magnetic strip, but the co-existence of these two types of memory is entirely possible.
A microprocessor card has two important advantages. The first advantage is the possibility of internal processing by the CPU and the second benefit is an increase in the storage capacity offered by the ROM compared to a memory constituted by a piece of tape.
The development of cards, including credit cards, required the confidentiality of certain information to counter the fraud. This problem is solved in microprocessor cards, particularly in the French Patent No. 2,401,459 of the applicant where a ROM contains at least an area inaccessible from outside read / write, only the microprocessor having access to this area containing confidential or secret information.
Given the cost of microcircuits, the ability ROMs used is limited. In addition, we must not forget that an important part of this memory is used to store en- most current information specific applications envisaged programs, which limits the memory available for the current management.
To increase low-cost storage capacity of a card, it was made use of optical recording media. If the evidence storage capacity is greatly increased, the information recorded on optical tracks are readable at any time from the outside, that is to say they can not keep any confidential vis-à -vis any person in possession of the card. Such a card is particularly described in US Patent No. 4,360,728.
The invention aims to overcome this drawback by considering an optical stripe card to increase storage capacity and microprocessor to treat confidentially all or only part of the information to be written on the optical track. in that the track is a magneto-optical track (13) in perpendicular recording.
9. Support tool according to claim 7 or 8, characterized in that the memory (12) contains at least one secret encryption key (KC) and decryption stored in a region (12A1) of the inaccessible memory from the outside.
10. portable medium according to one of Claims 7 to 9, characterized in that it also includes a magnetic stripe (14).
11. A system for processing information on an optical readable record track (13) of a portable medium (1) such as a card of the type comprising a treatment device (2) which is temporarily coupled to the support ( l), characterized in that the carrier (1) comprises at least one electronic memory (12) including at least one memory area (12A1) is inaccessible from the outside and in which is recorded at least a key encryption / decryption secret (KC), processing circuitry (11) such as a microprocessor with said key to encrypt the information to be written on the optical track (13) and to decrypt with said key information recorded on the optical track (13), and in that the processing device (2) comprises at least one optical device for reading information stored on the optical track (13), an information writing device (23) on the optical track (13) and a device transfer information (22) between the optical track (13) and the processing circuits (11) of the support (1).
12. The system of claim 11, characterized in that the writing device (23) is an optical laser device.
13. The system of claim 11, characterized in that the optically readable track (13) is a magneto-optical track.
14. The system of claim 11 or 13, characterized in that the writing device (23) is a magnetic device by laser.
15. The system of claim 11 or 13, characterized in that the writing device (23) is a magnetic device with perpendicular recording.
The device (22) is connected:<ul><li>- The keyboard (21) by a connection (b20), and</li><li>- The write / read devices (23, 24) and the display unit (25) by a bus (b21).</li></ul>
The card (1) is temporarily coupled to the terminal (2) by an interface (C) for example series as described in the French patent application No. 2483713 of the Applicant. This interface (C) is connected to the microprocessor (11) by a link (bll) and the device (22) by a connection (b22).
The terminal (2) can be connected to another terminal (not shown) by a transmission line (L) vector.
Under the name "terminal" shall mean generally any apparatus that is capable of processing data, transfer data and perform write / read operations in any medium such as a magnetic carrier , optics, paper ....
Let the information or data (D) to write on the optical path (13) of the card (1). These data (D), for example in plain, entered the keyboard (21) or reached by the transmission line (L).
These data are received in the transfer device (22) having a function of routing in the card (1) for temporary storage in the memory area (12B) of the memory (12) of the card (1 ). It is possible, depending on the applications envisaged, that these data (D) are pretreated with the transfer device (22).
Confidential or secret information is prerecorded in the secret memory area (12A1) of the card (1). This information comprises for example by:<ul><li>- An encryption key (KC),</li><li>- An encryption algorithm stored as a program (P) to encrypt data from the key (KC)</li><li>- A secret code (S) unknown to the cardholder, and</li><li>- An identification code (IN) (PIN-NUMBER in English) known to the card holder.</li></ul>
The data (D) stored in the memory area (12B) of the card (1) is encrypted following the execution of the program (P) by the microprocessor (11). This program (P) performs data encryption (D) from the encryption key (KC). The data (D), once encrypted, are transmitted by the transfer device (22) of the terminal (2), the write / read device (23) whose function is to record on the optical track (13) of the card (1) in a per se known manner by conventional techniques.
These encrypted data stored on the optical path (13) are readable by any suitable device, but they remain unusable the moment we do not know the key that allowed to encrypt data.
These data will be even more unusable the key (KC) encryption is not accessible from the outside as recorded in the protected area (12A1) of memory (12) of the card (1).
Conversely, the encrypted data stored on the optical path (13) can be read by the device (23). The read data are then again transmitted in the card (1) to be decrypted by the processing circuits (11) using a decryption key for example identical to the encryption key (KC). Once the data decrypted by the card (1), they are broadcast clear to the terminal (2) for exploitation. This operation may be a display on the unit (25) or a transmission to another terminal via the transmission line (L).
As stated earlier, it is already known a writing device / laser optical reading according to patent No. 4 360 728. The material constituting the optical track must be temperature sensitive reflector for writing and for reading.
The invention provides a variant which consists in using a magneto-optical track consisting for example garnet (Fe-TR) (SI: rare earth such as Fe-GB, Fe-TB).
These magneto-optical tracks are scanned and they essentially differ from the slopes optical writing by a magnetic writing or by laser or by a conventional magnetic method.
The laser writing mode is a mode of thermo-magnetic writing of using the thermal effect due to the impact of a laser electromagnetic radiation beam on the magnetic material constituting the electro-optical track. This radiation is such that the surface of the magneto-optical track on which focused the laser beam undergoes heating such that the temperature of the magnetic layer at this point becomes higher than the Curie temperature of the magnetic material, temperature at which it loses its magnetization. If this place is subjected to a magnetic field whose direction is opposite to the magnetization in the magnetic layer on cooling of the magnetic material (the beam is removed), the magnetic material will then take a magnetization direction opposite to magnetization of the remainder of the magnetic layer.
Another mode of usable magnetic writing can be perpendicular to the record type.
Under these conditions, the write / read device (23) can be:<ul><li>- An optical scanning device and optical laser writing,</li><li>- An optical reading device for laser and conventional magnetic writing, including perpendicular recording, or</li><li>- An optical reading device and magnetic writing laser.</li></ul>
Finally, it should be noted that the reading mode information recorded on a magneto-optical layer based on the principle of interaction of polarized light with the magnetic state of the layer interaction which results in the rotation of the vector field power in the plane perpendicular to the direction of propagation of the laser beam.
This detection is done either by "Kerr effect", using a reflection phenomenon, or by "Faraday effect" where the laser beam passes through the magneto-optical layer). Advantageously, to improve the reading, one may use the combination of the two above effects. It is not necessary to further describe these well-known effects of skill in the art.
Of course, encryption algorithms will be more or less sophisticated depending on the degree of security desired and the decryption key is not necessarily identical to the encryption key as in the case of public key algorithms.
The secret nature of the encryption algorithm is based on the type of the chosen algorithm, so it can be stored in the memory area (12A3) accessible from the outside especially in the case of a key algorithm where only the public decryption key must remain secret.
It is important that encryption is done inside the card and not in the terminal where it is not possible -.de ensure one hundred percent of the secret information such as encryption / decryption key. According to the invention, the terminal that should be accessible to the public is completely trivialized since it contains in itself no infor confidential training.
Finally, in a simplified embodiment of the invention, the encryption / decryption key may simply be constituted by the secret (S). In a more complex embodiment, the encryption algorithm may consider an encryption key (KC) different secret or not secret (S) and an additional secret key (SI) prerecorded in the memory area (12A2) . This key (SI) is only accessible by the microprocessor only if an identification code (IN) type on the keyboard (21) of the terminal (2) is identical to the identification code (IN) prerecorded in the memory area (12A1) of the card (1).
2 sheets
Sheet 1 Sheet 2
Every citation, both ways
| Document | Relation | Office | Cited during |
|---|---|---|---|
| EP0321325A1 | Cited by | European Patent Office (EPO) | Search report |
| EP0993645A1 | Cited by | European Patent Office (EPO) | Search report |
| WO9624912A1 | Cited by | World Intellectual Property Organization (WIPO) | International search |
| US5744792A | Cited by | United States of America | Search report |
| EP0275657A1 | Cited by | European Patent Office (EPO) | Examiner |
| FR2730331A1 | Cited by | France | Search report |
| EP0330404A2 | Cited by | European Patent Office (EPO) | Search report |
| EP0422230A4 | Cited by | European Patent Office (EPO) | Search report |
| FR2618002A1 | Cited by | France | Search report |
| US5514856A | Cited by | United States of America | Search report |
| EP0993645A4 | Cited by | European Patent Office (EPO) | Search report |
| EP0528275A2 | Cited by | European Patent Office (EPO) | Search report |
| EP0275657B1 | Cited by | European Patent Office (EPO) | Examiner |
| EP0422230A1 | Cited by | European Patent Office (EPO) | Search report |
| EP0330404A3 | Cited by | European Patent Office (EPO) | Search report |
| EP0528275A3 | Cited by | European Patent Office (EPO) | Search report |
| EP0393784A1 | Cited by | European Patent Office (EPO) | Search report |
| FR2624633A1 | Cited by | France | Search report |
| EP0347897A1 | Cited by | European Patent Office (EPO) | Search report |
| FR2613856A1 | Cited by | France | Search report |
| EP0299826A1 | Cited by | European Patent Office (EPO) | Search report |
| EP0321325A1 | Cited by | European Patent Office (EPO) | Search report |
| EP0029894A2 | Cites | European Patent Office (EPO) | Search report |
| EP0030381A2 | Cites | European Patent Office (EPO) | Search report |
| EP0138219A2 | Cites | European Patent Office (EPO) | Examiner |
| GB2069201A | Cites | United Kingdom | Search report |
| FR2337381A1 | Cites | France | Examiner |
| FR2417141A1 | Cites | France | Search report |
| FR2496294A1 | Cites | France | Search report |
| FR2536928A1 | Cites | France | Search report |
| US4094462A | Cites | United States of America | Search report |
| US4360728A | Cites | United States of America | Examiner |
8 members in 5 offices
Priority claims5
| Document | Office | Kind | Date |
|---|---|---|---|
| 8321063 | France | A | |
| 8321063 | France | A | |
| 8321063 | France | – | |
| 8321063 | – | – | – |
| FR19830021063 | – | – | – |
Members8
| Document | Office | Kind | |
|---|---|---|---|
| EP0147337A2This record | European Patent Office (EPO) | A2 | |
| FR2557715A1 | France | A1 | |
| EP0147337A3 | European Patent Office (EPO) | A3 | |
| JPS60157683A | Japan | A | |
| FR2557715B1 | France | B1 | |
| CA1236576A | Canada | A | |
| EP0147337B1 | European Patent Office (EPO) | B1 | |
| DE3474077D1 | Germany | D1 |
39 legal events, as 3 offices reported them to INPADOC
Over the term
Point at a mark for the eventEvents
| Event | Code | Office | |
|---|---|---|---|
| Amendments to the register in respect of changes of name or changes affecting rights (sect. 32/1977)732E | 732E | GB | |
| Nl: ceased due to reaching the maximum lifetime of a patentCeasedNLV7 | NLV7 | EP | |
| Se: european patent has lapsedLapsedEUG | EUG | EP | |
| Se: european patent has lapsedLapsedEUG | EUG | EP | |
| Patent expired after termination of 20 yearsExpiredPE20 | PE20 | GB | |
| Lapsed in a contracting state [announced via postgrant information from national office to epo]LapsedPG25 | PG25 | EP | |
| Lapsed in a contracting state [announced via postgrant information from national office to epo]LapsedPG25 | PG25 | EP | |
| Change of addressCA | CA | FR | |
| Change of name or company nameCD | CD | FR | |
| Transmission of propertyTP | TP | FR | |
| Annual fee paid to national office [announced via postgrant information from national office to epo]GrantedPGFP | PGFP | EP | |
| Annual fee paid to national office [announced via postgrant information from national office to epo]GrantedPGFP | PGFP | EP | |
| Annual fee paid to national office [announced via postgrant information from national office to epo]GrantedPGFP | PGFP | EP | |
| Annual fee paid to national office [announced via postgrant information from national office to epo]GrantedPGFP | PGFP | EP | |
| Annual fee paid to national office [announced via postgrant information from national office to epo]GrantedPGFP | PGFP | EP | |
| Nl: assignments of ep-patentsNLS | NLS | EP | |
| Nl: assignments of ep-patentsNLS | NLS | EP | |
| Nl: modifications of names registered in virtue of documents presented to the patent office pursuant to art. 16 a, paragraph 1NLT1 | NLT1 | EP | |
| European patent in force as of 2002-01-01IF02 | IF02 | GB | |
| Se: european patent in force in swedenEAL | EAL | EP | |
| It: last paid annual feeITTA | ITTA | EP | |
| No opposition filedOpposition26N | 26N | EP | |
| No opposition filed within time limitOppositionORIGINAL CODE: 0009261PLBE | PLBE | EP | |
| Information on the status of an ep patent application or granted ep patentGrantedSTATUS: NO OPPOSITION FILED WITHIN TIME LIMITSTAA | STAA | EP | |
| Gb: translation of ep patent filed (gb section 77(6)(a)/1977)GBT | GBT | EP | |
| Corresponds to:REF | REF | EP | |
| It: translation for a ep patent filedITF | ITF | EP | |
| It: translation for a ep patent filedITF | ITF | EP | |
| Designated contracting statesAK | AK | EP | |
| (expected) grantORIGINAL CODE: 0009210GRAA | GRAA | EP | |
| Party data changed (applicant data changed or rights of an application transferred)RAP1 | RAP1 | EP | |
| First examination report despatched (deleted)D17Q | D17Q | EP | |
| First examination report despatched17Q | 17Q | EP | |
| Request for examination filed17P | 17P | EP | |
| Designated contracting statesAK | AK | EP | |
| Information on inventor provided before grant (corrected)RIN1 | RIN1 | EP | |
| Designated contracting statesAK | AK | EP | |
| Search report despatchedORIGINAL CODE: 0009013PUAL | PUAL | EP | |
| Public reference made under article 153(3) epc to a published international application that has entered the european phaseORIGINAL CODE: 0009012PUAI | PUAI | EP |
Numbers
- Publication
- 0147337
- Publication, DOCDB
- 0147337
- Publication, EPODOC
- EP0147337
- Application
- 84402764
- Application, DOCDB
- 84402764
- Application, EPODOC
- EP19840402764
Titles3
- German
- Verfahren und System zur vertraulichen Verarbeitung von Daten die auf einer Aufnahmespur mit optischer Ablesung eines Datenträgers aufgezeichnet sind
- English
- Method and system for confidentially processing information registered on a portable carrier recording track with optical reading
- French
- Procédé et système pour traiter de façon confidentielle des informations stockées sur une piste d'enregistrement à lecture optique d'un support portatif
Classification
- IPC, 9
- G06K17 00
- B42D15 10
- G06K7 00
- G06K7 08
- G06K19 07
- G06K19 073
- G06K19 08
- G06K19 10
- G07F7 10
Designated states1
- Contracting states, 1
- Sweden