Patent EA-001837-B1 (EA)
Title: Chip card and method for its use
Inventor: ENGELHARDT HOLGER
IPC: G07B15/02
Filed: 1997-12-19
Abstract: 1. Chip card for performing transactions in which monetary units or other value data representing non-monetary entitlements are transferred between the cardholder and at least one transaction partner (service provider) or are presented to the service provider for verification of entitlements, wherein the chip card includes a storage, in which data required for performing the transactions are stored and the chip card is characterised in that it comprises the following: a means for loading one or more card applications (VAS-applications) which are assigned to a certain service provider, respectively, onto the card which each permits the performance of transactions between the cardholder the service provider assigned to the application; a transfer memory portion (EF_TRANSFER) which is not proprietory to a service provider for accomodating data which in the performance of a transaction between different service providers are to be interchanged or presented and which represent the monetary units or non-monetary entitlements; and a means for writing data into the transfer storage by reaction to a write command (Transfer). 2. Chip card according to claim 1, in which the means for loading comprise: a data structure (DF_VAS, VAS-container) stored therein which includes; a partial structure (DF_PT, DF_AD, VAS-application) into which the data required (VAS-data) for making possible the performance of a transaction between the cardholder and a service provider can be loaded; a definition data set which contains information concerning the nature and/or structure of the data stored in the partial structure (VAS-application); and wherein the definition data set further comprises: a denotation (container-ID) which identifies the data structure (VAS-container) and/or the chip card; and at least one system key (KSO) which secures the integrity of the definition data set and/or the data structure (VAS-container) against modifications. 3. Chip card according to claim 1 or 2, characterised in that it comprises at least one of the following features: a means for loading data necessary for the performance of transactions into the partial structure with the aid of at least one system key; a means for the writing of data into the definition data set for adapting the data of the definition data set to the data loaded into the partial structure; a means for generating a further partial structure into which data required for performing a transaction can be loaded in the database of the card; and/or a means for dynamic memory administration on the card. 4. Chip card according to any one of the preceding claims, characterised in that the partial structures (VAS-applications) are represented by mutually independent partial structures each being assigned to a particular service provider, the definition data set is protected against modification by the at least one system key (KSO) and can only be modified by means of this key, and that loading of the partial structures (VAS-applications) can proceed only with the use of the system key contained in the definition data set. 5. Chip card according to any one of the preceding claims, characterised in that the definition data set comprises at least one of the following features: at least one authentication key (KAUT) for authenticating the entitlement of the chip card in relation to a terminal and/or for authentication of the entitlement of a terminal in relation to the chip card; at least one signature key (KSIG-VASC) for signing data removed from the transfer storage; a key generating key (KGKDEC) for generating terminal and application specific keys for the verification of the authorisation for a writing procedure into the transfer storage and/or a invalidation of value data; a PIN for the verification of the authorisation of a transaction procedure by the cardholder, that the system key (KSO), the authentication key (KAUT), the signature key (KSIG-VASC) and the key generating key (KGKDEC) are keys individual to the cards or specific to the data structure (DF_VAS), and that the partial structure (VAS-application) comprises at least one of the following features: at least one value storage (EF_VALUE) for the storage of value data; at least one internal storage (EF_INTERNAL) for the storage of internal data relating to the partial structure; at least one information storage (EF_INFO) for the accommodation of non-internal data relating to the partial structure; a key storage (EF_KEY) for accommodating at least one key (KLVASP, KRVASP), which provides security for the writing and/or information retrieval procedure into or from the value storage and/or the internal storage and/or the information storage and that the chip card further includes:a means for writing and/or retrieving data into or from the  value storage, the internal storage or the information storage and that the means for loading includes: a means for writing the key into the key storage, protected by the at least one system key. 6. Chip card according to any one of the preceding claims, characterised in that the partial structure comprises at least one of the following integers: a key (KLVASP) for checking the authorisation to write data in the partial structure: a key (KRVASP) for checking the authorisation to retrieve data from the partial structure. 7. Chip card according to any one of the preceding claims, characterised in that keys stored in the key storage are specific for the respective partial structure and that the at least one partial structure (VAS-application) protects the performance of transactions by means of at least one of the specific keys (KLVASP, KVASP) which is specific to the respective partial structure (VAS-application) and is independent of the keys for other partial structures (VAS-applications). 8. Chip card according to any one of the preceding claims, characterised in that the card comprises a plurality of partial structures (VAS-applications) which each serve for the performance of transactions between a particular service provider and the cardholder and that the performance of transactions includes the writing and/or retrieval of data into, respectively from the transfer field and/or the writing and/or retrieval of data into, respectively out of the value storage. 9. Chip card according to any one of the preceding claims, characterised in that it further includes: a means for performing transactions both between individual partial structures (VAS-applications) as well as between a partial structure and a service provider. 10. Chip card according to any one of the preceding claims, characterised in that the system key (KSO) is known only to the system operator (SO) and is a key individual to a card and/or specific to a data structure (VAS-container), and that the further keys contained in the definition data set are keys individual to the card and/or specific to the data structure (VAS-container). 11. Chip card according to any one of the preceding claims, characterised in that the definition data set includes one or more of the following integers: an identification number (EF_ID) specifying the data structure a directory of partial structures (EF_DIR) contained in the data structure, the directory containing partial structure specific identification numbers of partial structures (VAS-applications) loaded into the data structure (VAS-container), as well as information containing that part of the data structure (VAS-container) in which the partial structures (VAS-applications) are physically stored; a version number of the data structure (EF_VERSION). 12. Chip chard according to any one of the preceding claims, characterised in that it includes at least one of the following features: a means for performing a withdrawal procedure (Take) by means of which data can be removed and/or value-cancelled from the transfer storage; a means for generating one or more authenticity features of the data during withdrawal or cancellation of data from the transfer storage. 13. Chip card according to any one of the preceding claims, characterised in that the chip card for generating the authenticity features comprises the following: a signature key (KSIG-VASC) for generating a digital signature having the data withdrawn; a means for generating a transaction number characterising the transaction which is also used in the generation of the digital signature. 14. Chip card according to any one of the preceding claims, characterised in that the signature key (KSIG-VASC) is a private key, derived from a private key generating key and that for checking the signature by the service provider, public keys are employed. 15. Chip card according to any one of the preceding claims, characterised in that it at least comprises one of the following integers: a means for generating terminal and partial structure-specific keys (KDEC) by means of the key generating key (KGK DEC); a means for verifying the authorisation and/or the protection of a transaction by using at least one of the following integers: the terminal and partial structure-specific key (KDEC), the at least one authentication key (KAUT), the at least one system key (KSO), the at least one partial structure specific key (KLVASP, KRVASP), the signature key (KSIG-VASC), the PIN, the identification of a partial structure, the identification of a terminal.  16. Chip card according to any one of the preceding claims, characterised in that the chip card includes at least one of the following integers: a means for authentication of the authority and/or the terminal by means of the authentication key prior to starting a data retrieval or writing procedure, a means for performing data retrieval or writing procedures which are protected by a digital signature and/or key formation. 17. Chip card according to any one of the preceding claims, characterised in that the chip card further includes at least one of the following integers: a means for activating and deactivating the PIN-prote