Patent ID: 8789753

Claim:
A method for maintaining and using user data stored on a smart card, including: receiving an indication from a user that a terminal is to be configured as a home terminal for a smart card, including issuing by the terminal, a query to the user requesting an indication that the terminal should be made the home terminal, and receiving at the terminal from the user, the indication that the terminal should be made the home terminal; communicating, from the smart card to the terminal, an encrypted key, for use in configuring the terminal as the home terminal; receiving the encrypted key at the terminal, and persistently storing the encrypted key at a location accessible to the terminal, so as to configure the terminal as the home terminal with respect to the smart card; subsequently receiving by the home terminal a data maintenance request which includes a password, using the password and the encrypted key to form an authenticated data maintenance request and forwarding the authenticated data maintenance request to the smart card; subsequently receiving, by the smart card from the terminal, said authenticated data maintenance request, wherein the authenticated data maintenance request is a request to modify data on the smart card, by the end-user of the smart card, and included with the data maintenance request, is information derived from the encrypted key persistently stored at the location accessible to the terminal, which indicates that the authenticated data maintenance request originates from the home terminal; determining, by said smart card, whether said authenticated data maintenance request was received from the home terminal and whether the end-user is an authorized end-user of the smart card; and authorizing, by said smart card, said authenticated data maintenance request only if said authenticated data maintenance request was received from said home terminal and from said authorized end-user.