Patent ID: 7395435
Filing Date: 2008-07-01
Classification: G06F,G06Q,G07F,H04L

Abstract:
1. A secure memory device for a smart card, characterized by the absence of a microprocessor on the smart card, comprising: a bidirectional I/O terminal for transmitting data to and receiving data from an external host card reader; an EEPROM data storage unit having a plurality of memory zones, the data storage unit storing a number of READ access passwords and a number of WRITE access passwords; and a stream-encrypted authentication, encryption and certification (AEC) unit, located between the bidirectional I/O terminal and the EEPROM data storage unit, the stream-encrypted AEC unit having means for controlling access to data received at and transmitted from the bidirectional I/O terminal and including a hash function means for implementing a stream encryption technique to certify the authentication of a transaction between the smart card and the external host card reader, said stream-encrypted hash function means receiving an initialization vector which includes a secret key, and producing a card reader authentication value, a card authentication value and a session encryption key which changes after each authentication between the smart card and card reader, wherein the host card reader has means for supplying a stream-encrypted READ access password to the stream-encrypted AEC unit, the stream-encrypted AEC unit having means for verifying the stream-encrypted READ password from the store of READ access passwords and sending stream-encrypted data to the host card reader, the host card reader having means for accepting the stream-encrypted data, the host card reader having means for sending a stream-encrypted WRITE password to the smart card memory device and the smart card memory device having means for verifying the stream-encrypted WRITE password from the store of WRITE passwords and accepting stream-encrypted data.