Ecebs Limited

Mondex International Limited

Ecebs Group Limited

Barry Sim Hochfield

Anthony Breslin

Michael Peters

David Anthony Roberts

John Beric

Dimitrios Markakis

In a value transfer scheme, users are provided with programmable devices, for example, smart cards, capable of carrying data representing at least one available commodity value. Data representing user accounts is held at a remote processing station. Transactions between users are effected by the off-line exchange of data between users'respective smartcards, the exchanged data containing a record of each transaction entered into. The user account data for each user's account held at the remote processing station is updated only subsequently when the user's smartcard is on-line to the remote processing station and data therefrom is uploaded to the remote processing station. The scheme of the invention can, conveniently, be based around the ITSO scheme which is used to govern the secure transfer of data. The scheme is capable of providing a secure multi-commodity value transfer system.

Smartcard-based value transfer

A programmable smartcard device () carries a file system () and operating software enabling the on-device file system to interface with at least one off-device file and/or application. It also has a script engine () capable of running one or more Application Protocol Data Units (1APDUs') associated with a particular form of transaction so as to modify the structure and/or content of the file system, or the commands to be used for accessing the file system or any security conditions associated therewith. The smartcard device () is provided with comparator means () configurable by a security APDU run by the script engine () so that it operates in use to compare the commands carried out in implementing the transaction with one or more reference commands and to restrict or prevent further access or modifications to the on-device data, file system, commands or security conditions in dependence on the outcome of the comparison carried out by the comparator means (). Thus, the smartcard device can, because the comparator () is configured for each different kind of transaction to be carried out, provide improved security within the contraints of memory storage and processing power available on the smartcard device itself.

Smartcard system

A programmable device carries an on-device file. An interface device is provided to interface with the programmable device, the interface device having an off-device file. Web (Internet) standard language operating software is stored in the programmable device in a compressed format, that software containing at least some of the file system and commands for accessing the file system which enable the on-device file and off-device file to interface with each other. The interface device further includes an upgrade file. The system operates to compare the upgrade file to the on-device file and upgrade the on-device file to the newer upgrade file. The system is further provided with a web (Internet) standard language file containing a configurable Security Environment. The system is further provided with a file including a data model ('virtual card') corresponding to a programmable device and adapted for downloading to the programmable device.

A smartcard comprises a substrate having a smartcard chip formed on it as well as a secondary memory device, for example, a FLASH ROM, operatively connected to the smartcard chip. The secondary memory device is capable of storing a plurality of pages of data, each having associated with it a unique sequence number, the sequence number being stored separately from the data page so that when the page is to be read, the sequence number retrieved with the page can be compared with the stored sequence number to authenticate the page.

Smartcard with protected memory access

In a multiple application card system including an IC card comprising a microprocessor, a read-only memory, a random access memory and an electronically erasable programmable read only memory, a system for controlling access to one or more sets of programming instructions embedded in said read-only memory comprising means for storing on said IC card for at least one application loaded onto said card at least one access flag having a value indicating whether or not access by the at least one application to the at least one set of programming instructions shall be granted and means dependent on said value for allowing access to one or more sets of programming instructions.

Growing community of inventors

Glasgow, United Kingdom

Barry Sim Hochfield