Privacy and security for smart cards

    公开(公告)号:GB2367937A

    公开(公告)日:2002-04-17

    申请号:GB0109697

    申请日:2001-04-20

    Applicant: IBM

    Abstract: A central database on a server 504, accessible to registered users only, contains a full set of personal information on an individual. A smart card 500 stores a unique identifier (avatar) which may be used to gain access to information held on the server 504. Identity information may be retrieved by smart card readers 502 issued to registered users if smart card validity is confirmed by an authentication service. Alternatively, a full set of personal information on an individual is contained within a smart card 502. An access list may be used to ensure that only smart card readers with the highest levels of access can retrieve the most sensitive information. At least two avatars, horizontal and vertical, are used. The former provides a changeable identity and the latter a non-changeable. Very low levels of identification are contained in memory on the smart card 500.

Patent Agency Ranking