Patent EA-001415-B1 (EA)
Title: Conditional access method and device
Inventor: SIRBU CORNEL
IPC: G06F3/0354
Filed: 1996-08-08
Abstract: 1. The conditional access device is intended to be used in liaison with host electronic equipment, is made up of a peripheral pointing device incorporating at least one microcircuit card coupler, characterized in that it incorporates as well as personal information acquisition means particular to each user and in that the aforementioned personal information is locally compared with information stored in the microcircuit card, without this aforementioned personal information being transitted to the host equipment, connected with at least one on-line networks. 2. The conditional access device according to claim 1, is characterized in that the personal information acquisition means particular to each user are constituted by a keyboard to key-in an alphanumerical identification code on a tablet with a sensitive zone for the capture of written personal information. 3. The conditional access device according to claim 1 or 2, is characterized in that the personal information capture means are constituted by a sensor for the capture of a biometrical identification signal, such as a fingerprint sensor and/or an eye image sensor and/or a sound sensor associated with vocal recognition means. 4. The conditional access device according to any one of the precedent claims herein, is characterized in that it comprises a keyboard to key-in the personal information and/or display means to control the transaction. 5. The conditional access device according to any one of the precedent claims herein, is characterized in that the personal information capture means are constituted by a particular means of invoking a display on the host equipment's screen, of a virtual keyboard comprising graphical representations whose layout varies in a random way with each activation of the aforesaid means, the personal information acquisition is carried out by graphical representation pointing and validation when the position of the pointer is on the sought- after graphical representation, the processing of the pointing information and the validation on the virtual screen being implemented exclusively in the conditional access device. 6. The conditional access device according to any one of the precedent claims herein, is characterized in that the personal information acquisition means are constituted by an acquisition module and the digitization of the user's voice. 7. The conditional access device according to any one of the precedent claims herein, is characterized in that it comprises vocal synthesis means and sound reproduction for the control of the transaction. 8. The conditional access device according to any one of the precedent claims herein, is characterized in that the personal information acquisition means are constituted by a tactile pointing zone (11) comprising a representation of the keyboard superposed onto the tactile surface. 9. The conditional access device according to any one of the precedent claims herein, is characterized in that it comprises a permanently working clock and the means of transmitting to the peripheral equipment, dated numerical data comprising a data sequence relative to the authorization calculated from stored data in the microcircuit card and the data keyed-in by the user and a sequence given by the clock. 10. The conditional access device according to any one of the precedent claims herein, is characterized in that it comprises the means of allowing it to execute in cooperation with the host equipment on on-line networks, all or a part of the following secured transactions involving an electronic wallet card or a credit card: a) payment, b) refunding, c) cancelling an operation, d) currency selection and/or all or a part of the following secured transactions involving on inserted electronic wallet card, e) loading on electronic wallet card from a bank account, f) transfer of a value from an electronic wallet card to a bank account, g) the transfer of a value from an electronic wallet card to another electronic wallet card, h) debeting electronic wallet card and crediting a credit card. 11 - The conditional access device according to any one of the precedent claims herein, is characterized in that it comprises the means of allowing it to execute independantly and/or in co-operation with host equipment, all or a part of the following operations involving an inserted electronic wallet card: a) a verification of the present value or the balance of the account, b) a reading of a list of recent transactions or collector journal. c) locking an electronic wallet card, d) a change of the identification code. 12. The conditional access device according to any one of the precedent claims herein, is characterized in that it comprises means of carrying out transactions between the resident financial applications on the same microcircuit card. 13. The conditional access device according to any one of the precedent claims herein, is characterized in that it comprises means including an electronic wallet application and- means allowing it to carry out all or part of the following operations between two cards successively inserted into a same connector: a) transfer of a value from the electronic wallet card to another electronic wallet card, b) transfer of a value from an electronic wallet card to the device itself, c) debit or credit an electronic wallet card and credit or debit the same value on a credit card, d) cancel the operation. 14. The conditional access device according to any one of the precedent claims herein, is characterized in that aforesaid means including the electronic wallet application are incorporated in a releasable microcircuit card (5). 15. The conditional access device according to any one of the precedent claims herein, is characterized in that it comprises in addition to an active digitization surface with a stylus and/or tactile, and a readout, the active surface and readout being superposed. 16. The securisation process of the access to host equipment, sets into operation a conditional access device in accordance with at least one of the precedent claims herein, characterized in that certain functions at least of the said host equipment are only accessible after capture, by the user, of personal information which is conform to information recorded on the microcircuit card and the verification of the conformity between the personal information and the information recorded on the microcircuit card is realized by a peripheral device linked to the host equipment, without the personal information being transitted to the host equipment. 17. The process of secured data processing transactions comprises a comparison stage between the user's personal information and the data contained in the microcircuit card, setting in operation a conditional access device which is in accordance with at least one of the precedent claims herein, characterized in that the control stage is carried out by the said conditional access device and forms a protective barrier against computer fraud. 18. Process for the management and execution of security applications within interactive electronic equipment equipped with peripheral equipment, the said electronic equipment comprises a screen and the means of allowing local and remote execution of applicative software and having a graphical user interface comprising visual objects which the user can act upon manually by means of the said peripheral device characterized in that the said process comprises a communication protocol between a part at least of the applicative software and secured means of storage, management and execution of a security application, co- operating with at least one coupler intended to receive, especially, a micro-circuit card(5) incorporating a distribution application of the security applications, this protocol being an extension of the communication protocol specific to the pointing means of the said peripheral device. 19. A process according to one of any of the claims from 16 to 18, characterized in that all the information and commands are transmitted in the framework of the said communication protocol in waveform comprising a whole, made up of fields each constituted by a coded sequence comprising a predetermined number of bits, each frame incorporating an identification field (FID) and at least one of the following fields: a pointing information field, a field of information relative to secured means. 20. A process according to claim 19, is characterized in that the information field relative to the secured means comprises all or a part of the following fields in quotation order: - control field (OPC), - field giving the length of the security application message (DLEN), - a field which includes all or a part of the security application message proper (CLG) or (RPL), - a control field of the integrity of the said message. (CRC). 21. A process according to claim 20, is characterized in that the control field (OPC) includes at least the following information: - the operation code (OPC. C) concerning one or several security applications, - the address of the security application concerned by frame (OPC. A), - the number (OPC. S) of bytes of the information field relative to a security application transmitted by extended frame this number (OPC. S) being at least equal to the field length (OPC). 22. A process according to the claims from 16 to 21 is characterized in that the distribution application of the security applications comprises a license counter (LCNT) for the control of multiple transfers of the same security application in the limit of a predefined number of installations or licenses. 23. A process according to the claims 18 and 22 is characterized in that the transfer operation of the security operation between local and remote secured means comprises all or a part of the following stages: - identification of the initiator of the transfer, - reciprocal authentification of secured means of the participants, - secured copy of the applica