WO1997008929A2 - Smart card with a chip, contact field, coils and/or capacitors and a storage element for galvanic or non-galvanic energy and data exchange with a read and/or write device - Google Patents

Abstract

The invention pertains to a smart card provided with an electronic chip, a contact field with galvanically contacted contacts, coils and/or capacitors, and at lest one storage element for galvanic or non-galvanic energy and data exchange with a read and/or write device. At least one chip is connected both to the contacts and to the coils and/or capacitors; the plastic card exchanges energy and/or data with the read/write device either via the contacts or via the coils and/or capacitors and can thus operate with or without contact. The choice of operating mode can be influenced by additional logical criteria as well as by the availability at any given moment of a power supply. Power supply from the non-galvanic path for the choice of operating mode is preferably subject to at least one logical condition.

Description

 Chip card with chip. Contact field. Coils and / or capacitors and a memory for either galvanic or non-galvanic

Energy and data exchange with a reading and / or writing device

Technical field:

The invention relates to a chip card (smart card) which has at least one electronic chip, a contact field with contacts to be galvanically contacted within an external reading and / or writing device (terminal), coils and / or capacitors and at least one memory, either for galvanic or non-galvanic energy and data exchange with the reading and / or writing device, contains at least one chip connected to the contacts as well as to the coils and / or to the capacitors, the plastic card either via the contacts or the coils and / or the capacitors with the reading and / or writing device enters into energy and data exchange and is thereby able to work either in contact or in a contactless manner, according to the preamble of claim 1.

State of the art:

Chip cards are known which exchange energy and data in a contact-free or contact-related manner with their read / write devices. The cards are used for telephone or health or access control cards. An overview of such cards and their applications is compiled in three editions of the German specialist magazine electronics year 93.

A plastic or chip card according to the preamble of claim 1 has become known from DE-C-39 35 364, which contains further components such as contacts and coils as component groups and on which a chip connected to a contact field is arranged and the additional coils for Has voltage supply of the chip and for data exchange. A diode-capacitor network is used to rectify and smooth the voltage induced in the coils, which is also used to supply the chip and is connected to a circuit which uses two logic levels to control another circuit, which in turn controls the contact field and its outputs is connected to the chip, with either the signals from the coils or from the contact field being switched through to the chip.

EP 0534 559 AI discloses a plastic card that has galvanic contacts in accordance with IOS standard 7816 and coils in accordance with the draft ISO standard 10536 contains. In one operation mode, the data can be read out from at least one memory of the chip or a part of the chip via the electromagnetic coupling link with low energy consumption, by activating only a part of the integrated electronic circuit, so that a contactless energy supply over a certain distance is possible. In the other standardized operation mode, the data of the same memory can be read and written via the contacts via the microprocessor contained in the electronic circuit.

DE 39 35 364 Cl thus made early use of the logical mapping of the supply voltages arriving in the card from the various application cases. EP 0 534 559 AI is based on the same principle for a modified task, but without describing it.

Technical task:

The invention has for its object to improve a chip card (smart card) of the type mentioned in its electrical function and handling, in particular in the contactless mode to protect sensitive data against attacks from a distance that are not authorized by the holder of the card; the card should also consume as little energy as possible in the contactless mode.

Disclosure of the invention and its advantages:

The solution to the problem is that the selection of the respective operating mode can be influenced by additional logical conditions in addition to the instantaneous presence of a respective energy supply.

The invention advantageously provides a kit of measures which, in addition to the previously known basic benefits, opens up additional benefits from other areas, namely a great freedom of design in optimizing the card and a security potential for critical applications. In contact-free mode, sensitive data can be protected from remote attacks that are not authorized by the card holder. Furthermore, the chip card consumes less energy in the contactless operating mode than cards of the prior art.

That card as an information carrier according to IS 7810, which combines features according to IS 7816 and IS 10536, i.e. energy and information flow on the one hand Galvanic contacts and, on the other hand, used via non-galvanic paths (inductive, capacitive, optical, acoustic ...) are contained in DE 39 35 364 with various configurations of the operating mode position, ie influenced by a stepped actuator.

In addition to the positioning options described and - unspoken - assumed by supplying the respective energy supply (ie in each case to the part according to IS 7816 or to those according to IS 10536), according to the invention there is the qualification (based on the existence of the energy supply) (encryption selimg, pre-operation) - in particular to facilitate or hinder access to or change the information contained in the card.

Because the energy supply from the non-galvanic path for the selection of the operating mode is linked to at least one logical condition, a pre-operation is applied to the part according to IS 10536 so that the operating mode controller 19 does not only make the function of this part dependent on the energy supply , but additional measures are required.

A very special case is that the measure just mentioned is a multiplication by zero. In the case of binary logic, general multiplication becomes a Boolean AND operation. The AND link specifically with the NULL (logic FALSE, logical UNWAHR) means to ignore the linked information. This is exactly what is to be achieved: The existence of the power supply on this side (IS 10536) should not have any influence on the position of the mode selector - a very special effect that may be desirable. The circuit "sleeps" and "awakes" immediately when the energy is supplied. The influence of the energy supply on the position of the mode selector has not disappeared - it only comes from the other side (IS 7816). Therefore, the logical condition for the selection of the operating mode can be, in particular, a logical ZERO.

Because the power supply from the galvanic path for the selection of the operating mode can be linked to at least one logical condition, a precondition is created here for the part according to IS 7861 so that the operating mode selector does not only depend on the power supply for the function of this part makes, but requires additional measures. The essence of this statement thus corresponds to that of claim 2. The logical condition for the selection of the operating mode can be an information combination as an access key. In particular, the card user can be expected to enter a password or a personal identification number (PIN, “secret number”) at the terminal in order to gain access to the information or processes contained or expected in the card.

The operating mode selector can assume such a state, which can be used, without a functionless rest position in the rest position which inevitably sets in without any energy supply.

If you think of the mode selector - logically abstracted - as a switch with three possible positions, of which the middle one has no output (this is a changeover switch with a separator in the middle), then the middle position could be omitted if the changeover switch in one of the two remaining positions is forced. A semiconductor switch (especially a FET switch) does not have to completely disconnect when in a de-energized state (like a bipolar switch), but can use the so-called self-conducting channel of the field effect transistor (FET) as a "normally closed contact" but as a (sequential micro-programmed) switchgear or as firmware in a microcontroller, the number of actuator positions is no longer dependent on the explicit disconnector.

To cover the countless implementation possibilities, claim 6 expresses a logical abstraction. Moreover, the claimed choice of the state of rest anticipates that the “awakening” according to claim 3 takes place with minimal delay.

The operating mode controller can achieve its intended function by applying the energy supply to the chip card part affected by this function and vice versa. It has just been decided that the desired part of the device is “armed by the appropriate selection of the idle state of the mode selector; it only has to be "ignited". This is done by applying the power supply to this part of the installation, in particular the non-galvanic one according to IS 10536. The purpose of this configuration is in particular to accelerate boarding and alighting on buses and trains in that the Card is inserted into a (high-frequency) magnetic field for the according to communication. The reference to the reverse effect is intended to make it clear that the mere termination of the energy supply is sufficient to render the previously supplied part of the device ineffective.

Without any energy supply, the operating mode controller can assume a state that serves no further function. The choice of the idle state ("idle state") turns out here in such a way that the relevant part of the device, in particular that according to IS 7816, is not directly effective through the supply of energy. This is - to the extent that it is logically abstracted - particularly the complement to the definition in claim 6 .

The purpose-defined function can be set in that a logical condition in the form of an information combination is required as an access key. According to claim 8, the operating mode switch is at rest (i.e. without energy) already unfavorable for the part of the facility concerned here (in particular that according to IS 7816): simply supplying energy does not yet make this part effective. After the energy has been applied, the password (or similar key) coming from the user must also be compared with the password stored in the card. Only when the comparison mechanism known in the art has been overcome can the only logical bit occurring thereby make the affected part of the device effective.

This does not mean that with this measure the complementary part of the device (in particular that according to IS 10536) must be excluded from an actual or possible function. The implementing contributor is entitled to this stipulation.

The mode controller can return to its idle state, provided the power supply ends and no additional command (s) are required. The mere termination of the power supply is sufficient to render the previously supplied part of the device ineffective. The logical abstraction of this embodiment of the mode selector is the bistable switch.

The purpose-defined function may require the creation of an information combination as an access key. As an ergonomic complement to claim 7, secrecy is more important than speed. The user must have the card within range of the terminal in order to be able to have a password compared before going on, for example particularly protect worthy, can access information on the map. The termination of the functionality does not require an explicit claim here, because it corresponds to the effect of claim 10 without further action.

The setup part of the card can be made permanently inaccessible when certain circumstances so require. Simple phone cards are single-use items because of certain constraints of the security concept. This mode of action does not have to be excluded in the claimed mode of action. For any reason, one can load the card with information, in particular after the production process, seal the galvanically accessible part of the device (i.e. according to IS 7816) and deliver the card. If the electrical seal (in particular disconnection or short-circuiting) is not penetrating enough, mechanical sealing (on the contact field) can be placed (gluing, welding, laminating; screen printing, punching).

In contrast to the conventional (galvanic) telephone card, the card claimed here is not used galvanically after sealing, but not galvanically.

WAYS OF IMPLEMENTING THE INVENTION:

The various system states of the circuit blocks can be selectively effective or shut down. This allows sensitive data to be protected from remote attacks in contact-free mode of operation that are not authorized by the card holder. Furthermore, as little energy as possible is consumed in the contactless operating mode, the full functionality being produced in the operating mode according to IS 7816 because no energy has to be saved. Such cards cannot be changed in their memories unnoticed by distance since they have to be inserted into a terminal. When a card is inserted into a specific environment, some function blocks are put into operation and others are shut down or remain shut down. By inserting the card into a reader, reliable working conditions of the card are to be created.

The figure presents a solution according to the invention in a block diagram. The card has on the right side in the picture such a contact field 3 (corresponding to DE-C-39 35 364, part 3) of contacts, as is customary according to IS 7816. On the left side of the picture, a magnetic antenna 4 (corresponding to DE-C-39 35 364, part 4 or 5) is shown as it is the subject of the IS 10536 standard or IS 14443. Another magnetic antenna 5 (according to DE-C-39 35 364, part 5 or 4) can be operated as an option according to IS 1056. Another option is an electrical antenna 6, also according to IS 10536, which is provided in pairs for reasons of symmetry. The signals at the antennas 4, 5, 6 can be converted by function blocks 1 (corresponding to DE-C-39 35 364, part 2.1.4) in such a way that they conform to the IS standard at the, possibly also only virtual, interface 7 Meet 7816; the interface 8 opposite meets the standard IS 7816 anyway.

The result of the conversion in the AC / DC converter 1, in particular a rectifier with buffer and limiter, is a direct voltage (according to DE-C-39 35 364, Ul) on line 9 and a, in part bidirectional, data / Control bus 10 (according to DE-C-39 35 364, K1 ... K5).

At the interface 8, these lines correspond to the line 11 of the DC voltage Vcc according to IS 7816 (corresponding to DE-C-39 35 364, U2) and in turn a bus 12 (corresponding to DE-C-39 35 364, II .. .15). The buses 10 and 12 do not have to consist of five lines: the standard 7816 also allows more or less.

As indicated in EP 0534 559 A1 without obligation, the option with the antenna 4 in particular can also occur twice, as a result of which the interface 7 can also occur twice. All other combinations of options should be able to be represented at one interface (s) 7, which is why a single interface 7 is sufficient for the description of the inventive concept.

Between the interfaces 7 and 8 there are function blocks, in particular together with the blocks 1 and 2 and their connecting lines 9, 10, 13, 14 etc. on a single chip (in accordance with DE-C-39 35 364, part 2 ) or different chips can be implemented. In accordance with the nature of the chip construction, the functional blocks shown need not be understood as physically existing hardware. It makes more sense to see them as conceptual functional elements for solving the task.

The typical task of such a card - from which the invention is based - is in particular to keep data in memories 15, 16 ready. As intended, these memories retain their content even if they are not included Energy is supplied, possible implementations for this are in particular EEPROMs or FRAMs. Access to this data is managed by control units 17, 18, which can in particular be microprogrammed switching units and / or microcomputers or other data processing functions.

The memories 15, 16 and control units 17, 18 consume auxiliary energy in order to be effective. As already mentioned, it can make sense to save energy when operating the card from the left side in the image, while it is not necessary from the right side in the image. The card now has a further control unit 19 in the sense of an operating mode selector which regulates the access of the control units 17, 18 together with their memories 15, 16 depending on the introduction of the card mentioned above into a communication-capable environment (terminal). The concept of the control-related actuator in “mode controller” 19 (English MODE MANAGER) is intended to associate that physical influence is exerted on the route by means of the logical manipulated variable. The mode controller 19 not only switches logic states but also energy. In its most general form it is Operating mode controller is an abstract structure, the specific shape of which is determined by the current technical requirements.

The mode controller 19 uses the lines 20, 21 to supply the blocks 15, 16, 17, 18. The line 22 supplies the modulator / demodulator (MODEM) 2. This line is not part of the interface 7 according to IS 7816. The mode controller 19 not only supplies the blocks 15, 17 via the line 21, but also the lines 15 via the line 22 Signal pre / post processing instructed by auxiliary power 2.

The data link 23 is still located between the control units 17 and 18, so that the entire device can also move data back and / or forth in the respective operating mode in accordance with the regulations. Together with the outer data lines of the buses 10 and 12, in this arrangement, in particular data from the contact field 3 can be written into the memory 16 via the line 12 and the control unit 18, in particular with a time delay from the memory 16 through the control unit 18 and the data connection 23 and the control unit 17 move to block 15 and again in particular time-shifted from block 15 through control unit 17 via connecting line 10, MODEM 2 and AC / DC converter 1 to magnetic antenna 4. The tapping of buses 10 and 12 is now essential to the invention for the purpose of influencing operating mode selector 19. An arbitrary example is to serve here: the cardholder enters a password at 3, this is checked in 19. If it is correct, the mode selector 19 supplies energy via 21, 17 and 15. Then the 18 can transport data from 3 to 23 and 17 to 15. In this operating mode, it makes no sense to supply the 22 via the 2. This is the reason for the individual existence of line 22. However, it should not be ruled out that the potential of line 22 may be identical to that of line 9 if the implementer considers this to be correct.

Or: The card is inserted into a high-frequency magnetic field, whereby 1 over 9 wakes up the mode selector 19 and supplies it via 22 the 2. The cardholder now enters a password at 4. This is routed via 13, 2 and 10 to 19 and checked in 19. In accordance with the target word, 19 supplies 21 to 17 and 15 with energy. The cardholder can now use the data in 15. In order to save energy in this operating mode, the 19 will not supply the 18 and 16.

The invention is now not satisfied with the fact that all these possible and numerous operating modes fall back into the idle state due to failure of the energy source at either 7 or 9 or 11. This is claimed in a category of possible configurations. Another category also claims that the operating mode once set can be retained even after the power failure until the operating mode can be changed after renewed energy supply and input of information about 3 or 4. Together with the above-mentioned tapping of the data, the operating mode selector 19 becomes so versatile that the implementer has a considerable choice of design options for the card for its respective purpose.

Industrial applicability:

The invention can be used with great advantage in chip cards (smart cards) which operate either with contacts or without contacts. The card is advantageously largely error-proof and "bug-proof". In contact-free mode, sensitive data is protected from remote attacks that are not authorized by the card holder.

Claims

Claims: 1. Smart card, the at least one electronic chip, a contact field with contacts to be galvanically contacted within an external reading and / or writing device (terminal), coils and / or capacitors, and at least one memory, either for galvanic or non-galvanic energy and data exchange with the reading and / or writing device, contains at least one chip connected to the contacts as well as to the coils and / or to the capacitors, the plastic card either via the contacts or the coils and / or the capacitors with the reading and / or writing device enters into energy and data exchange and is thereby able to work either in contact or in a contact-free manner, characterized in that the choice of the respective operating mode goes beyond the instantaneous presence of a respective energy supply by additional logic Conditions can be influenced. 2. Chip card according to claim 1, characterized in that the energy supply from the non-galvanic path for the selection of the operating mode is linked to at least one logical condition; 3. Chip card according to claim 2, characterized in that the logical condition for the selection of the operating mode is in particular a logical ZERO. 4. Chip card according to claim 1, characterized in that the energy supply from the galvanic path for the selection of the operating mode is linked to at least one logical conditions. 5. Chip card according to claim 4, characterized in that the logical condition for the selection of the operating mode is an information combination as an access key. 6. Chip card according to claim 1, characterized in that the mode selector assumes such a state, which can be used, without a functionless rest position in the rest position which inevitably occurs without any energy supply. 7. Chip card according to claim 6, characterized in that the mode selector achieves its intended function in that the power supply is applied to the chip card part affected by this function and vice versa. 8. Chip card according to claim 4, characterized in that the mode selector assumes such a state without any energy supply that serves no further function. 9. Chip card according to claim 8, characterized in that the intended function arises in that a logical condition in the form of an information combination is required as an access key. 10. Chip card according to claim 9, characterized in that the mode selector falls back into its idle state, provided the power supply ends and no (e) additional (r) command (s) are required. 11. Einrichting according to claim 6 and 8, characterized in that the mode selector for the fall back to its idle state in addition to the termination of the power supply requires at least one additional command. 12. The device according to claim 6, characterized in that the dedicated function requires the creation of an information combination as an access key. 13. Chip card according to claim 8, characterized in that the furnishing part can be made permanently inaccessible as soon as certain circumstances require it.