公开(公告)号：CA2568990A1

公开(公告)日：2005-12-15

申请号：CA2568990

申请日：2004-05-28

Applicant: IBM

Inventor： DI LUOFFO VINCENZO VALENTINO ,  FELLENSTEIN CRAIG WILLIAM ,  REILLY DYLAN MAXWELL

IPC: G07F7/10

公开(公告)号：CA2568990C

公开(公告)日：2011-09-27

申请号：CA2568990

申请日：2004-05-28

Applicant: IBM

Inventor： DI LUOFFO VINCENZO VALENTINO ,  FELLENSTEIN CRAIG WILLIAM ,  REILLY DYLAN MAXWELL

IPC: G07F7/10

Abstract: A smart card system is disclosed for secure transmission of post issuance data to a embedded chip using a chip relay module, a plurality of hardware security modules, a first communication system having two security layers and a second communication system having four security layers. The first communication system may be considered a server side system and comprises a chip management system, a security server having a first hardware security module, a distribution server having a second hardware security module and a computer system connected by a network. The first communication system has a first security layer and a second security layer. The first security layer comprises mutual authentication that makes each component of the first communication system a trusted node to the others through client mutual authentication. The second security layer comprises system keys for secure communication between the hardware security modules. The second communication system may be considered a client side system and comprises the computer system connected to the distribution server by a network, a PC/SC card reader driver, a Web browser application, and a chip relay module and is for secure communication between the distribution server and the chip of a smart card inserted in the card reader/writer. The second communication system has a third, fourth, fifth and sixth security layer.