International Business Machines Corporation

Robert Sulzmann

Martin Welsch

Dirk Herrendoerfer

Ernst-Michael Hamann

Klemens Klaffke

Thomas Schaeck

The present invention allows program specific configuration of several physical or logical readers, or other I/O devices, by using a configuration tool and a reader access layer. In an example embodiment, a configuration tool allows, a specifying access rights and priority rights for each single reader in conjunction with each single program. A reader access layer communicates with each program directly, calls up the reader access list for the requesting program, checks the access rights and the priority order for the available readers and returns a response to the requesting program containing information for accessing the active reader with the highest available priority. It secures previously defined access rights and access priorities between readers and programs defined in the reader access list remain unchanged independently when new readers are added.

System and method for accessing readers and other I/O devices by programs

Virtual smart cards (VSC) are generated by a VSC control program with each VSC addressable by a unique identifier (ID). Using the VSC control program, personalized VSC data is accessed via a secure channel using the ID and a password. A real smart card is personalized by a personalization program that reads data from the VSC. Personalization data contained in the VSC may be tested in an application environment before a personalized real smart card is available.

System and method for personalization of smart cards

An Extended SmartCard file system is proposed which resides in one flat file within the ISO file system of a SmartCard. A second file containing user information like size of the file system, owner information, and key fields is used to configure the file system driver dynamically. However, this file may be omitted if the file system driver is statically initialized. The nested file system of the present invention has the advantage that files can be fully dynamically accessed and edited without affecting the underlying ISO file layout, i.e. the outer fixed structure of the outer file system. Further, data integrity and consistency are achieved by a transaction oriented commit concept. Additionally, all security mechanisms of the underlying SmartCards in terms of data protection are fully maintained and are enhanced in cases of power loss or unexpected card removal as two distinct directories are provided for data management.

Extended card file system

The present invention describes an improved communication architecture for smart card systems and an improved procedure for communication of the smart card applications using protected data carriers, particularly in the case where smart cards or smart card readers cannot be used. The improved communication architecture has a common virtual smart card interface between the respective smart card applications and the modules which facilitate access to the protected data carriers (smart cards). The modules allow access to either physical smart cards, virtual software smart cards or hardware smart cards. The common virtual smart card interface means that the application is completely independent of the respective module or the respective data carrier. Alternatively, the improved communication architecture additionally contains a virtual smart card adapter which communicates over the common virtual smart card interface with the respective smart card application. The different modules are attached to the smart card adapters and selected statically or dynamically by the smart card application. Virtual software smart cards which functionally imitate true physical smart cards can be linked over the virtual smart card adapter to communicate with a smart card application. This procedure is then particularly suited for when the smart card is lost or defective, the smart card reader cannot function, or for testing new smart card technologies.

System for accessing virtual smart cards for smart card application and data carrier

A system and method for processing information contained in a smart card ( ) uses a local computer ( ) on which a proxy server ( ) is installed. The local computer is connected to a data communication network ( ), such as the Internet, and comprises a network browser which is used to generate access requests to data stored on a smart card and in a local storage ( ). The requests are received by an HTTP server ( ) and passed to request brokers ( ). In response to a request parsing operation access functions ( ) are activated for accessing the local storage and a smart card ( ). Data read from a smart card may be inserted into a HTML document accessed in the local storage, and data from the local storage or from remote sources may be uploaded to a smart card. Data modifier means ( ) are provided to translate data read from the smart card into a data format corresponding to a user interface, and for translating data to be uploaded to said smart card into a predetermined smart card data format. The proxy server may be readily adapted to any smart card data format, and it may provide data security functions and data compression/decompression facilities.

System method and article of manufacture for accessing and processing smart card information

Java methods contained in a Java class and method database are accessed by a non-Java application running on a local machine or a remote machine. The non-Java application generates a standard TCP/IP communication call for a method of a Java class in the database. A Java service server running on a Java VM on the local machine receives the method call and related parameter data and performs their processing including a conversion of the call and of related parameter data from a transport format into Java native data types. The converted data is used for invoking a Java method for execution by applying the method to the converted parameter data. The result data of the method execution is converted from the Java format into the transport format in which they are transmitted to the non-Java application.

Growing community of inventors

Holzgerlingen, Germany

Robert Sulzmann