Patent ID: 8191164

Claim:
A method of managing access rights associated with smart card data so as to subordinate execution of a command (Cmd 1 , . . . , Cmd k ) such as a command to read said data, to a logical combination of a plurality of events (Evt 1 ′, . . . , Evt k ′) detected by the card being valid, such as authentication by verifying a code; wherein the validation state of each event (Evt 1 , . . . , Evt N ) is kept up to date in a security state register of the card ({Evt a , Evt b , . . . , Evt x }); wherein the access rights to a data set are stored in a command list (List_Cmd) that is associated with an event list (List_Evt) that gives, for each event it includes, an identifier for that event; the command list being made up of couples (Cpl 1 , . . . , Cpl k ), each associating a command (Cmd 1 , . . . , Cmd k ) with a logical combination of events that must be valid, which combination is defined by the rank in the event list (List_Evt) of each of the events making up said combination; wherein on receiving a request to execute a command (C) on a data set, the authorization or refusal to execute said command is established: by searching in the command list (List_Cmd) associated with said data for the couple (Cpl 1 , . . . , Cpl k ) including the requested command (C), and refusing execution if the search is unsuccessful; and if the search is successful, by determining from a security state register of the card whether the combination of events (Evt 1 ′, . . . , Evt k ′) associated with the command (C) is or is not valid in order to authorize or refuse execution of the command (C).