Patent Application
20100258638
This application claims priority from European Patent Application No. 09005232.5 filed Sep. 4, 2009, the entire disclosure of which is incorporated herein by reference.
Bank cards with a switch that may have, in a general case, the function of actuating the card circuit and/or a digital display of the card or, in a particular case, the function of starting a given program implemented in the card, particularly a secure identification procedure, are already known. It will be noted that, in several applications, the general case and the particular case can be combined, since actuating the power supply of the electronic circuit incorporated in a card automatically starts a secure identification algorithm in order to perform a certain transaction, particularly a banking transaction.
A bank card is known, in particular from U.S. Pat. No. 5,627,355, which is incorporated herein by reference, that includes a switch actuatable by a sort of push-button or a deformable zone of the card, so that the exertion of pressure in the zone of the card containing the switch starts a specific secure identification algorithm. This card further includes at least one digital display for displaying in series various personal identification numbers, or PIN codes. This card also includes an electronic unit and an electric power source associated with a solar cell arranged on the surface of the card. This type of card can be used in various services, whether for making telephone calls from public telephones, a service for downloading films from the Internet, or accessing a bank or postal account, particularly so as to perform various transactions, such as the payment of bills.
The identification program provided in U.S. Pat. No. 5, 627,355 consists in storing a list of PIN codes in the card, generated uniquely for a given client, the same list being stored in the bank's server. Each time the card is actuated by the switch, a new personal code is selected in the list and displayed. This selection generally consists in taking the next unused code from the pre-established list. The user has to enter the code in the machine or computer that transmits it to the server. The server checks that the code is actually the next unused code in the list for the client in question. This is known as a “one time password” or OTP. The importance of maintaining synchronisation between the position in the card list and the position in the server's list is thus clear. If codes in the card list are used without being transmitted to the server, particularly when the card is inadvertently actuated, the code transmitted during the next transaction with the server will not match the next unused code in the server's list. U.S. Pat. No. 5,627,355 mentions a method for partially overcoming this problem, via comparison with a code sequence in the server's list so as to detect any loss of synchronisation and thus re-establish the match between the two lists. This method can only be limited to a short sequence, particularly for security reasons. Consequently, if several codes are wasted in the card, the system will no longer accept the codes supplied by the client. Then, even if the match is regularly updated, usable codes are wasted and there is thus a smaller number of possible transactions for a given list stored in the card. The card will thus be used up more quickly. Finally, another drawback connected to this problem arises from the fact that inadvertent actuations of the card result in a wasteful increase in the consumption of the electric energy stored in the card.
In general, a first switch actuation of a card of the type described above is for initialising the application. Next, each new cycle is started by each new actuation of the switch. The problem connected to inadvertent actuations of the switch and thus of the secure identification program concerns not only the card user, who, for example, places the card in a wallet in his back trouser pocket and who, when sitting down, may sometimes unintentionally actuate the card switch, but also production steps during which pressure is exerted on the card, particularly when outer layers are added by laminating or printing steps. Thus, when the client receives a new card, it may have already consumed a certain number of personal identification numbers. If this number is higher than that tolerated by the system that manages the application, the client then receives a defective card which does not work. This situation is evidently detrimental for the service supplier and causes difficulties for clients.
It is an object of the present invention to provide an electronic card with a switch that can be actuated by a user and that overcomes the aforementioned problem.
The present invention therefore concerns an electronic card including means for transmitting a signal to the electronic card user, an electronic unit, an electric energy source, a switch that can be actuated by a user of the electronic card and an application introduced into said electronic unit, characterized in that it further includes means for detecting actuation of said switch, arranged to determine whether the actuation ends within a first time interval from the start of actuation, the end of this first time interval occurring after transmission of a signal that is perceptible to the card user, or to determine whether the switch actuation ends within a second time interval from transmission of said user perceptible signal, said application being actuated or actuation thereof validated when said detection means have detected the end of said switch actuation within said first time interval or said second interval.
It will be clear that the aforementioned application actuation may consist in executing an end part of the program associated with the application, during which, in particular, the final application execution result is provided. Likewise, validated actuation of the application may only mean that an incremental counter, for defining which is the next OTP code to be provided to the user, has been incremented. If the actuation is not validated, the incremental counter is not incremented.
According to the invention, at least one determined time parameter of the user switch actuation signal is checked to authorise execution of the application or a cycle thereof to validate such execution in the electronic card. More specifically, in accordance with the invention, the card supplies the user with a signal after the user has actuated the switch. The signal gives the user information that indicates explicitly or implicitly that he can stop actuating the switch, in particular by releasing the pressure exerted on a push-button or deformable zone of the card associated with the switch. The user's brain, which receives this perceptible signal generated by the card, normally reacts within a certain, relatively short time interval.
The method of actuating a given application by actuating a switch of the electronic card checks whether the switch actuation ends either in a first time interval from the start of the switch actuation, inside which a user perceptible signal is transmitted, or in a second time interval from the start of transmission of said user perceptible signal. It will be noted that the operating principle of the two variants is equivalent, since the deadline for generating the return signal to the user, who is actuating the switch, is generally at least approximately determined. If this deadline is determined, the two variants are identical if the duration of the first interval is equal to that deadline plus the duration of the second interval.
It should be noted that this electronic card actuation method could also apply to powering some part of the electronic unit and to powering the display so as to limit as far as possible the electrical power consumption of the card. One could thus provide that only a standby circuit is permanently powered, and this circuit is arranged to detect at least a first actuation signal from the switch. One could also provide that actuation of the switch, after the card has entered inactive mode, actuates the power supply to one part of to the entire electronic unit which, as soon as it is powered, detects and processes the actuation signal from the switch to determine whether it corresponds to an actuation signal for said application as a function of a user perceptible signal.
The user perceptible signal, generated by the electronic card to inform the user that he can end the switch actuation, can be famed by a signal of various nature, in particular a visual or acoustic signal. The visual signal can be provided by a light emitting diode or by a digital display.
Owing to the features of the invention, prolonged pressure on the switch, particularly during laminating in manufacture, can be prevented from causing actuation of the application in question. Since the reaction time of a typical user of the card is relatively short, it is possible to validate only switch actuations that end within a short time interval after the user perceptible signal has been sent. Thus, at least most of the unintentional actuation signals linked to typical actions or behaviour of the conventional user will be ruled out. It is thus ensured that the application is only started essentially by deliberate actuation by the electronic card user.
Embodiments of the invention will be described below with reference to drawings, given by way of non-limiting examples, which are annexed to the present description and in which:
In particular, the application considered consists of a secure card user identification program associated with a system connected to the server of a service supplier. The program generates or reads personal one-time passwords (OTP) in a memory of the card. Each time the application is started, the application displays on display 4 a new code that the user must then introduce into an apparatus or computer connected to a service provider server.
The detection means are arranged for detecting actuation of said switch 12, particularly via the closure thereof, and for determining whether the actuation corresponds to a pulse that has a certain time relation with a user perceptible signal generated by the card in response to actuation of said switch. If this is the case, the application is actuated or the actuation thereof is validated. In particular, the application displays the personal identification code to be used for the next transaction, which forms said user perceptible signal. The electronic card starts the application (its initial actuation or execution of a cycle of said application or an algorithm for a program defining the application) as soon as the switch actuation starts and then displays a message or said code for the user. The initial actuation or said displayed code are only validated if the pulse from the switch (defining an actuation signal) ends shortly after digital display 4 of the card starts to display a message or code. In the opposite case, the display means are de-actuated quickly, and, where necessary, the displayed code is considered unused (not consumed). The display means are preferably actuated simultaneously with actuation of said application. They remain in an active state for a certain period, allowing the user to introduce the code displayed in the system associated with the card prior to being de-actuated again.
According to a first embodiment of the invention, which is described with reference to
Actuation of the switch starts at time t0. After a certain time period T1, a user perceptible signal is given at time t1. Time T1 must be of variable duration here. However, in practice, T1 is generally determined by internal operations whose duration is defined by the operation of the electronic card. As soon as said signal is displayed, a time counter measures the time that elapses until switch actuation ends at time t2. If the time interval exceeds a maximum duration T2max, the counter can stop measuring the time since the actuation signal received is not considered valid, i.e. as being deliberately given by the card user. If the switch actuation does not end before deadline T2max, the actuation is considered invalid by the electronic card, which does not therefore take it into account. According to a variant of the invention, a signal received from the switch is validated only if the corresponding pulse also ends after a minimum period T2min. T2min is selected to be less than the typical reaction time of a user seeing the visual signal via the digital display.
According to another embodiment of the invention described with reference to
According to a variant of this embodiment, the length of the actuation pulse is greater than a minimum duration Tmin, which is, however, greater than duration t1-t0 to guarantee that the user perceptible signal is emitted before Tmin.
Those skilled in the art can select other variants within the scope of the present invention, without departing from the basic principle of the invention.
| Number | Date | Country | Kind |
|---|---|---|---|
| 09005232.5 | Apr 2009 | EP | regional |
