Patent ID: 6694436
Filing Date: 2004-02-17
Classification: G06Q,Y10S

Abstract:
A terminal that enables a user to execute secure electronic transactions in conjunction with at least one application installed on an electronic unit, said terminal comprising:(a) a terminal module comprising: (a1) first interface means for interfacing with said application and for receiving from said application high-level requests relating to said transactions, (a2) second interface means for interfacing with said user, (a3) third interface means for interfacing with a personal security device, and (a4) first data processing means comprising (a4i) at least first software means for controlling said first, second and third interface means; and (b) a personal security device comprising (b1) second data processing means comprising at least (b1i) second software means for executing elementary commands, (b1ii) means for executing cryptographic computations, and (b1iii) first means for securing said second data processing means against physical access and logical access by an unauthorized entity, wherein,(c) said terminal module receives said high-level requests from said application installed on said electronic unit, said high level requests being independent of said personal security device, (d) at least one of said terminal module and said personal security device comprises: (d1) at least one programmable memory for storing at least one filter program for translating said high-level requests into at least one of either: (d1i) of at least one elementary command or a sequence of elementary commands for being executed by said second software means of said second data processing means, or (d1ii) at least one sequence of data exchanges between said terminal module and said user via said second interface means, said data exchanges being executed by said first software means of said first data processing means, and (d2) means for protecting said filter program to prevent an unauthorized entity from either reading or modifying said filter program, and (e) at least one of said first data processing means of said terminal module and said second data processing means of said personal security device comprise (e1) a first data processing device for executing said filter program.