Legic Identsystems Ag

Kaba Schliesssysteme Ag

Klaus Ulrich Klosa

Marcel Plüss

Peter Plüss

Urs Andrin Lampe

Roman Eppenberger

Guy Petignat

Peter Pluess

The invention is directed to an authentication system comprising a reader and a first and a second authentication media and a meta authentication media foreseen as a carrier between different authentication media and the reader.

Authentication system

An authorization system () includes a reader () for a reader-card interaction () with a card (), and a logic module configured to assign the reader () and the card () to each other and to make operable the reader-card interaction () based on authorization data comprising reader data and card data. The logic module is further configured to read via a non-contact interface () device data from an authorization storage device () and to assign the reader () to the card () based on the device data for making operable the reader-card interaction (). The authorization storage device () is arranged spaced apart from the non-contact interface () at an essentially fixed distance (), for example during the reader-device interaction (). Using the device data makes it possible to enable efficiently the reader-card interaction () in case the reader data does not match the card data, for example.

Authorization system with a card and a reader

A method of writing data into identification media of various types (IM-X, IM-Y) via assigned write/read stations WR in accordance with an embodiment of the present application includes a step wherein, a virtual, identification media-independent reference file system RFS is defined. All access keys RKi are replaced by a file system key FSK and all access rights ACi of subsections Bi are suspended and a file system FS, corresponding to the reference file system RFS, is initialized or written into the identification media: (FS(IM-X), FS(IM-Y)). In doing so, a file system starting point (FS-S(IM-X), FS-S(IM-Y)) is defined in the identification media (IM(FS) and in the assigned read/write stations WR(RFS) so that applications (App(RFS) corresponding to the virtual reference file system RFS can be written into the identification media and executed. The method allows for the writing into or execution of generally defined applications (App(RFS) into initialized identification media of various types (IM-X(FS), IM-Y(FS)) without adapting them.

Method for writing data and applications into identification media

With the method, mobile data carriers (IM) are initialized at assigned decentralized read and write stations (WR) within the framework of an authorization system (A). At an authorization authority (HA) in a secure environment (g) initialization data (DI, A-I, I-I) are generated by authorization means (AM) and are sent to a decentralized authorized read and write station (A-WR) over a network (N) in a secure communication and with security rules in correspondence with the authorization system (A), where the mobile data carriers (IM) are initialized with the initialization data (DI), and/or wherein the initialization data are sent to a decentralized read and write station (WR) over the network, by means of which the read and write station is initialized. This initialization method enables new possibilities for the application and exploitation of systems of this kind.

Method for the initialisation of mobile data supports

For operation of contact-less identification media in a system with contact applications for contact cards, an initialized converter module is connected in series as a read/write station. This converter module, on the one hand, executes a contact-less communication with initialized contact-less identification media and, on the other hand, a contact communication at a contact card interface to a host computer or to an application computer for the communication with a contact application of the system and the converter module translates the contact-less communication with respect to communication rules and information into a contact communication with contact information and vice versa and the initialization of the converter module is defined in a hierarchic authorization system. This makes possible a particularly simple and efficient introduction of contact-less identification media into existing contact card systems and&#x2014;installations.

Growing community of inventors

Grüningen, Switzerland

Klaus Ulrich Klosa