Microsoft Technology Licensing, LLC

Shivaram H Mysore

Stefan Thom

Carl Melvin Ellison

Erik Lee Holt

Valerie Kathleen Bays

Dan Sledz

Systems, methods, and technologies for configuring a conventional smart card and client machine, and for performing a smart card authorization using the configured smart card and client. Further, the combination of methods provides for mutual authentication&#x2014;authentication of the client to the user, and authentication of the user to the client. The authentication methods include presenting a specified token to the user sufficient to authenticate the client to the user and thus protect the user-provided PIN. Security is strengthened by using an integrity key based on approved client system configurations. Security is further strengthened by calculating a PIN' value based on a user-specified PIN and a modifier and using the PIN&#x2032; value for unlocking the smart card.

Integrity protected smart card transaction

Systems, methods, and technologies for configuring a conventional smart card and a client machine, and for performing a smart card authorization using the configured smart card and client. Further, the combination of methods provides for mutual authentication&#x2014;authentication of the client to the user, and authentication of the user to the client. The authentication methods include presenting a specified token to the user sufficient to authenticate the client to the user and thus protect the user-provided PIN. Security is strengthened by using an integrity key based on approved client system configurations. Security is further strengthened by calculating a PIN' value based on a user-specified PIN and a modifier and using the PIN&#x2032; value for unlocking the smart card.

A data and management framework of a smart card terminal functions to provide interoperability between the smart card terminal and a smart card, and in particular between applications of the terminal and the card. An application program interface (API) is written to the data and management framework, which is part of a smart card terminal infrastructure that accesses and processes, by the smart card terminal, a smart card application contained on the smart card. The API provides information related to the smart card application to the terminal in order to allow a corresponding terminal application to incorporate the information for communication between the two applications. Additionally, a security model and policies related to the smart card may be enforced by the smart card terminal.

Smart card terminal side data and management framework

A hybrid resource manager is provided for use in a computing environment. The hybrid resource manager serves as the single resource manager that cooperates with an operating system to manage each of the individual device drivers associated with the various functions of a multifunction hardware device. In one example the hybrid resource manager implements a consistent management and policy framework to prevent conflicts from arising when multiple functions are simultaneously requested by various applications.

Hybrid resource manager

A cryptographic device protocol provides a generic interface allowing pre-OS applications to employ any of a variety of cryptographic devices within the pre-OS environment. The generic interface can be used independent of the specific cryptographic devices and is independent of the cryptographic or hashing algorithms used by each device. Cryptographic functions may be performed in the pre-OS environment by pre-OS applications communicating with cryptographic device drivers using the cryptographic device protocol that is independent of the cryptographic devices. Each cryptographic device may be identified by a unique device identifier and may have a number of keys available to it, with each key being identified by a unique key identifier.

Growing community of inventors

Kirkland, WA, United States of America

Shivaram H Mysore