Patent ID: 7805611
Filing Date: 2010-09-28
Classification: G06F,H04L

Abstract:
1. A method for securing a data transmission from a chip card to an off-card entity, comprising: performing a mutual authentication process to establish a secure channel between the chip card and the off-card entity, wherein establishment of the secure channel includes generation of a session key, wherein the generated session key is known to both the chip card and the off-card entity; generating a transport key at the off-card entity, wherein the transport key is generated from the session key; using the session key to encrypt the transport key at the off-card entity; transmitting the encrypted transport key from the off-card entity to the chip card, wherein the transmitting is performed in a secure manner; using the session key to decrypt the transport key received at the chip card; using the transport key at the chip card to encrypt data to be sent from the chip card to the off-card entity; and transmitting the data having been encrypted using the transport key from the chip card to the off-card entity, wherein both the chip card and the off-card entity execute respective counterpart applications that each include common capabilities with regard to how the transport key is generated, transmitted, extracted, and utilized.