Patent ID: 6662151
Filing Date: 2003-12-09
Classification: G06Q,G07F

Abstract:
A system for the secure reading and modification of data on an intelligent data carrier, the data carrier storing information to be read out or modified, the system comprising:a terminal allocated to a higher-level computer center, the terminal having an interface for providing temporary communication with the data carrier; a first key stored on the data carrier and available to the terminal for authentication of the data carrier using a symmetrical key process; a certificate stored on the data carrier, the certificate formed, using a global signature function, from data that is specific to the data carrier, the data that is specific to the data carrier including an individual verification function, the certificate being used for the certification of the carrier; a first arrangement for verifying the certificate in the terminal using a global verification function stored in the terminal, the first arrangement further for temporarily storing the data specific to the data carrier in the terminal; a second arrangement in the terminal for deriving a second key from the data specific to the data carrier and from at least one master key stored in the terminal; a third arrangement for exchanging data between the data carrier and the terminal including a transfer of a data-modification command from the terminal to the carrier using the symmetrical key process, the symmetrical key process including a challenge and response process; a fourth arrangement for creating and transferring to the terminal a data set, the data set documenting data to be read out from the data carrier, the data set being in the form of a cryptogram formed using an individual signature function; and a fifth device verifying the cryptogram using the individual verification function temporarily stored in the terminal, the fifth device further deleting in the terminal the temporarily stored data specific to the data carrier.