Koninklijke Kpn N.v.

Koninklijke Ptt Nederland N.v.

Michel Marco Drupsteen

Frank Muller

In a smart card (1) electronic tickets (20) are securely stored. Ticket data is written into the fields (21, 22, 23) of a ticket (20) in a protected manner using a special code. Tickets (20) may comprise several fields, such as an entitlement field (21), a validation field (22), and a verification field (23). Different keys (K1, K2, K3) are used for each type of field at issuing, validation, and verification terminals (81, 82, 83). A further protection of the integrity of the tickets (20) is obtained by using a first storage command (UPDATE) to prepare a field when issuing the ticket (20) at the issuing terminal (81), and, a different, second storage command (WRITE) when validating the ticket (20) at the validation terminal (82). Thus, the fraudulent modification of an issued ticket (20) is prevented.

Method and system for storing tickets on smart cards

A method of securely loading and validating commands (COM) in a smart card (SC) is disclosed. Especially in the case where application-specific commands are loaded by an application provider (AP), that is off-line with respect to the card issuer (CI), it must be ensured that the commands are valid. The invention provides a method involving the protection of the commands (COM) by means of authentication codes, these codes (MAC1, MAC2) being produced using two different keys: one key (K1) is stored by the card issuer (CI), the other (K2) by a trusted third party (TTP). A further authentication code (MAC3), produced using a key from a set of keys (K3*), may be utilized to selectively validate commands for individual applications (e.g. AP1, AP2).

Method of securely loading commands in a smart card

An efficient way of storing multiple tickets on smart cards. A ticket comprises a validation count field for registering by way of a validation count the number of times the ticket may be used. Preferably, the validation count is lowered each time the ticket is validated, the validation being effected by writing validation data in the validation field of the ticket. In this way a single ticket can thus be used as a multiple ticket, thus saving memory space. The validation count is also effective in limiting the number of tickets validated, thus limiting the extent of possible fraud.

Multiple tickets on smart cards

A method of securely transferring data, such as program data, to a smart card (1) is disclosed. In order to be applicable in non-secure environments, the method of the invention involves a one-way authentication mechanism, comprising the use of a series of interrelated authentication values (R0, R1, R2, . . . ). Further security is achieved by using commands (INIT, TRAN) which are each provided with an authentication code (MAC0, MAC1, . . . ). In order to transfer data only to selected cards, the card may accept transfer commands only if a card profile (CP) matches a distribution profile (DP).

Growing community of inventors

Ouderkerk a,d Amstel, Netherlands

Michel Marco Drupsteen