This invention relates to testing of smart cards.
Within the technological field of contactless smart card as well as combi-cards having both contact and contactless functionality, the term “inlay” denotes a layer that supports an antenna coil and a chip on board. In use, the chip stores data as well as a program that permits data transfer, typically in both directions, with a card reader when the card is brought into proximity to the reader. All the functionality of the smart card is contained within the inlay: the only difference between the inlay and the final smart card is the lamination and artwork that is applied to opposing surfaces of the inlay. However, before this is done, the inlay is tested to ensure is compliance with the relevant standards. The tests include functionality testing of the antenna and chip. Current approaches to testing inlays require that each inlay be tested separately. Those that pass are conveyed to a subsequent stage of manufacture where the outer lamination and artwork are applied; those that fail are discarded
US 2005/274794 disclose a smart electronic personal identification document, including a smart identification module that includes a contactless chip module and an antenna. The smart identification module is operative to store and exchange personal identification information contactlessly with an external reader. An automated anti-skimming element is configured for preventing unauthorized theft of the information. In an initial test phase, the chip functionality is tested, resulting in the storage (registration) of a chip serial number (CSN) and a chip operating system serial number (OSSN) in a computer database. The database allows a unique logical link to be established between the CSN and the OSSN. In a second test phase, the complete circuit of the smart inlay including the antenna is functionally tested and the results registered in the database.
During manufacture, the antenna coils are commonly formed by copper etching using a subtractive manufacturing process similar to PCB manufacture. Alternatively, the antenna coils may be screen printed or ink-jet printed using conductive inks. In either case, multiple antenna coils are typically formed on a common insulating layer, which is then cut so as to separate the antennas prior to connection to the chip module.
Test tools of the kind described in US 2005/274794 test only the functionality of a single chip. When mass-manufacturing chips on a common inlay, it may be assumed that all chips on the same inlay will have identical functionality. But they may nevertheless be adapted to different end-users. This will be the case, for instance, when the chip is destined to serve as a credit or security card or an electronic passport that must be given a unique identity that will, upon issue to an end-user, be associated with an ID of the end-user. For example, contactless smart cards that are destined to serve as credit cards must store unique data and/or a key that is issued by the credit card company and that must be completely secure. The unique data or key (referred to generally as “data/key”)is generated using a Hardware Security Module (HSM) located in a secured facility of the credit card issuer company and is conveyed during card personalization to the chip in a highly secure manner that precludes any possibility of eavesdropping and thus being able to ascertain the unique data/key by an external party. Indeed, so secure must this be that also the smart card manufacturer must have no way to obtain this information. When the card is subsequently issued to an end-user, the end-user's ID is loaded to a database of the credit card company, so that the credit card company knows the identity of each card and the corresponding authorized owner. It is critical that the unique data/key remains secure, in order to prevent fraudulent copying of a false data/key to a chip either prior or subsequent to the card's issuance to an end-user, since the unique data/key can be verified in the credit card issuer company secured facilities to identify the user ID and thus which bank account, for example to debit against a charge to the identified credit card.
U.S. Pat. No. 6,902,107 (Shay) corresponding to US2003/201317 entitled “Card personalization system and method” discloses a system and method for personalizing cards and other secure identification documents. It is noted therein that for large volume, batch production of cards, institutions often utilize systems that employ multiple processing stations or modules to process multiple cards at the same time to reduce the overall per card processing time. Examples of such systems include the DataCard 9000 series available from DataCard Corporation of Minneapolis, Minn., the system disclosed in U.S. Pat. No. 4,825,054, and the system disclosed in U.S. Pat. No. 5,266,781 and its progeny. Personalization and production operations that are typically performed on the cards include the programming of data onto a magnetic stripe of the card, monochromatic and/or color printing, programming an integrated circuit chip in the card, embossing, and applying various topcoat and protective layers. A controller is typically employed to transfer data information and instructions for operating the input, the personalization/production stations, and the output.
The card personalization system includes an input at one end of the system that holds a supply of cards and inputs the cards for personalization by the system. The input delivers each of the cards to a plurality of card processing modules arranged in sequence, where one module is downstream from a previous module. An output is disposed at an end of the card personalization system, and collects cards that have been personalized by the card processing modules. In use, a card is picked from an input hopper and transferred to a processing module which begins personalization of the card. Upon completion, the personalized card is fed to an output hopper. It thus emerges that each card is personalized one at a time and the throughput of such a system is therefore limited.
U.S. Pat. No. 6,283,368 (Ormerod) discloses a high speed customizing machine which has a device for transferring portable objects and incorporates an integrated circuit having at least one memory, and a rotary surface equipped with a plurality of hybrid connection devices, positioned transversely to the transfer device and each linked to an electronic card enabling customization of each chip card and positioned in front of each connection device. Such a machine may be used with smart cards having contact or contactless interfaces, as well as with hybrid or so-called combi-cards having both contact and contactless interfaces. To this end, each electronic card may have an interface circuit with an antenna linked by a bus to a microprocessor which executes a customizing program, the bus also allowing the microprocessor to access the contact connection device of an associated hybrid connection device.
The rotary surface includes multiple connection devices each linked to an electronic customization card which manages customization of a chip card inserted by transfer belt into a respective hybrid connection device to which the customization card is linked. Each of the customization cards is networked to a computer dedicated to customization and including software for management of card customization.
In use, after initial testing, cards are conveyed on a transfer belt and picked up by the customization head that is closest to the transfer belt. The rotary drum then rotates while the conveyor belt advances so that the next card is picked up by the next customization head until all customization heads are filled. When this happens, a plurality of smart cards are coupled to respective customization cards that receive commands from the computer and customize the respective chips in each of the smart cards according to the customization data in the respective customization cards.
The customization program recognizes the type of cards and in its algorithm has the instructions necessary for addressing via bus respective connector which corresponds to the type of contact card or contactless card. In the case of hybrid cards, the customization program provides access to the card by a contact interface for customization of certain “non-security” parts and accesses the card via a connector coupled to the antenna for transmitting security information by the contactless interface. Thus the customization program includes means for selectively addressing and selectively controlling the addressing of information on one or more of the connectors.
The system described in U.S. Pat. No. 6,283,368 operates on cards that are fully manufactured. Moreover, before customization, the cards are first tested so as to avoid subsequent customization of faulty cards. The testing is done by a test station into which cards are distributed one at a time by an unstacking device. So although U.S. Pat. No. 6,283,368 allows for simultaneous customization of multiple smart cards, it is to be noted that during the initial testing phase each card is tested one at a time and this introduces a bottleneck into the complete process, even though the testing phase is fast compared with the customization phase. Moreover, since any cards that fail the test are discarded, this results in the final manufacturing stages having been performed in vain. This is wasteful of resources, time and money.
In this connection, it is to be noted that smart card manufacture involves a number of separate operations after fabrication of the chip, assembly on the smart card substrate and connection to the contact pad and/or antenna coil. As noted above, multiple antenna coils may be printed using conductive inks on a common insulating layer, which is then cut so as to separate the antennas prior to connection to the chip module. In accordance with one known approach used by the present applicant, contactless smart cards are produced by layering multiple inlays each supporting an antenna coil and a chip on an inlay sheet. Conventionally, the inlay sheet is then cut in order to separate the constituent inlays, which are mounted between thin PVC sheets to form an ISO standard card.
When chip cards are manufactured individually, it is relatively straightforward to stamp each card with a unique manufacturer's ID, and it is clear from the above discussion that the art addresses this need. It is also known, when mass-producing multiple smart card inlays on a common inlay sheet, to stamp each card with a unique ID and to register the ID of each card together with its x, y coordinates on the inlay sheet. But no suggestion has been made in the art to use this information to add secure data during manufacture substantially simultaneously, let alone to do so in a completely secure manner that preserves confidentiality.
Contactless smart cards operate when brought into proximity with an interrogation field. Different contactless smart card communications standards are known having different ranges of sensitivity. For example, contactless cards complying with ISO/IEC 14443 are known as proximity cards and have a range of up to 10 cm, while cards complying with ISO/IEC 15693 are known as vicinity cards and have a range of up to 1 meter. Clearly, if inlays conforming to either standard are mass-produced on a common backing sheet, it is desirable to place them as close to each other as possible in the interest of increasing packing density and thus reduce waste and manufacturing costs. But close packing of contactless smart card inlays with the resultant small inter-inlay spacing will result in adjacent inlays being susceptible to mutual interference when interrogated by a reader antenna. In order to permit discrete testing and addressing of individual smart card chips, this must be avoided.
In one aspect, the present invention provides a method for simultaneously communicating with multiple smart card devices supported on a common platform so that each device has a respective chip coupled to a respective communication interface, said method comprising:
positioning said platform on a support surface of a multi-head reader so that the respective communication interface of each device is aligned with a respective head of the reader; and
simultaneously energizing multiple heads of the reader so as to effect communication with respective devices.
According to another aspect of the invention there is provided a method for simultaneously communicating with multiple smart card devices during production, said method comprising:
mounting said devices on a common platform so that each device has a respective chip coupled to a respective communication interface;
positioning said common platform on a support surface of a multi-head reader so that the respective communication interface of each device is aligned with a respective head of the reader; and
simultaneously energizing multiple heads of the reader so as to effect communication with respective devices.
According to yet another aspect of the invention there is provided a reader for communicating simultaneously with multiple smart card devices formed on a common platform so that each device has a respective chip coupled to a respective communication interface, said reader comprising:
a support surface for placing the common platform thereon, a plurality of spaced apart reading heads fixedly supported relative to said support surface each for communicating with a respective communication interface of one of the devices on said common platform, and
a communication port coupled to the plurality of reading heads for coupling to a controller that is configured to energize selected reading heads simultaneously so as to effect communication with the respective device.
According to a still further aspect of the invention there is provided a system for communicating simultaneously with multiple smart card devices formed on a common platform so that each device has a respective chip coupled to a respective communication interface, said system comprising:
a reader comprising:
a controller coupled to the communication port and configured to energize selected reading heads of the reader simultaneously so as to effect communication with the respective device.
In order to understand the invention and to see how it may be carried out in practice, embodiments will now be described, by way of non-limiting example only, with reference to the accompanying drawings, in which:
In the description, components that are common to, or serve a common function in, different embodiments will be referenced by identical reference numerals.
Each reader 21 comprises a microprocessor denoted generally as 22 having one or two output ports to each of which is connected to a respective coil antenna 23. Thus, in accordance with one embodiment, a reader 21a comprises microprocessor 22a connected to a pair of coil antennas 23a, 23b via respective output ports; a reader 21b comprises microprocessor 22a connected to a pair of coil antennas 23c, 23d via respective output ports; and so on. Each of the coil antennas 23 forms part of a respective reading head that is fixedly supported relative to a support surface 25 of the inlay tester 11 (shown in
Obviously, in order to minimize wastage and thereby render the production process more economical, the inlays 16 should be packed as densely as possible. However, in the case where the inlays are provided with contactless communication interfaces as described above, there is an increased likelihood of crosstalk whereby a reader coil antenna may be sufficiently close to multiple inlay coil antennas so as to communicate with more than one inlay. This, of course, must be avoided. One way to avoid the risk of crosstalk is simply to space the mutually adjacent inlays sufficiently far from each other that each reader coil antenna is able to effect contactless communication with only one inlay. But in practice this is wasteful of material since more space in the inlay sheet 16 must be left vacant. An alternative approach is to provide each reader with multiple coil antennas, each in respect of a single designated inlay and to energize the reader coil antennas at alternating times so that adjacent inlays are addressed in a staggered relationship and are never addressed at the same time. By such means, the mutual spacing between inlays can be optimized along both their widths and heights so as to remove any possibility of crosstalk while maximizing the number of inlays that can be accommodated on each inlay sheet. This may require that the spacing between adjacent columns of inlays be different than that between adjacent rows thereof, depending on how many reader coil antennas can be independently addressed by each reader, this being determined by the number of output ports in the microprocessor. Of course, yet another approach is to provide one reader coil antenna for each reader and then to operate the readers in staggered relationship, but this is wasteful of readers since not all are employed at the same time. By configuring each reader to address only a designated one of multiple coil antennas coupled to separate output ports thereof, two advantages are thus achieved. First, there is no risk that a reader will be able to address multiple coil antennas and thereby communicate with two or more inlays simultaneously. Secondly, since each reader serves multiple inlays, fewer readers are required and the cost is thereby reduced.
It should be understood in this context that the unique data/key read from the HSM 14 is used by the credit card company to identify the credit card as bona fide and is not the same as the manufacturer's data/key that, as noted above, is stamped to the card memory during manufacture. The manufacturer's data/Key is not secure and is therefore not amenable for use as a secure credit card. In contrast, the credit card data/key is securely generated in the HSM 14 and is read via a completely secure communication channel that prevents eavesdropping and is likewise written to a designated card in an equally secure manner. In practice, the credit card unique data/key may be generated from the manufacturer's data/key using a digital signature algorithm based on a private key stored in the HSM or by a diversified key algorithm, so that only signed cards are maintained in the database of the credit card company. Thus, even if a hacker were to obtain or forge inlay sheets bearing the manufacturer's data/keys, without access to the HSM he would be unable to sign the cards and therefore the forged cards would not be usable as credit cards.
In saying this, it is to be understood that the exact manner in which cards are rendered secure is not itself a feature of the invention other than to remark that secure interaction between a card of known manufacturer's data/key and the HSM is required. The invention achieves this requirement by means of software that creates a secure communication object between the controller and a designated inlay and runs a custom script that is formatted by the controller for each inlay. The script typically includes data that is read from the HSM for the designated inlay and, to this end, the controller feeds the manufacturer's data/key of the designated inlay to the HSM using a secure communication channel and receives from the HSM via a communication channel data that is encapsulated as part of the script and used to write secure data to the inlay chip. As noted, the data may be a digital signature or any other secure data that enables the credit card company to identify the card as genuine.
The software has the following main features:
The software comprises the following modules:
The communication with the HSM 14 and/or the database 15 is done by the script module.
It will be appreciated that while the inlay sheet 16 has been described with particular regard to inlays having a contactless communication interface, the IC chips 18 may be coupled instead or additionally to a contact field and the readers 21 may likewise be provided with reading heads having contacts for engaging contact fields of the corresponding inlays.
It will also be appreciated that since the invention allows for testing multiple inlays during manufacture by testing in situ while the inlays are mass-produced on a common inlay sheet, any inlay found to be defective can be fixed prior to lamination of the complete inlay sheet. For example, faulty connections can be repaired or defective chips can be replaced. Obviously this applies also where no special customization is required. Once testing and customization, if required, are complete, the inlay sheet is laminated and the laminate inlay sheet is then cut to separate the cards.
It will also be understood that while the invention has been described with particular regard to simultaneous testing and customizing of inlays, the principles of the invention are equally applicable to testing and customizing of finished articles containing an IC chip and a smart card interface. For example, IL 179187 corresponding to PCT/IL2006/001452 and entitled “Fob having a clip and method for manufacture thereof” filed Dec. 18, 2006 in the name of the present applicant, describes in one embodiment a key fob containing a PCB having a contactless smart card mounted thereon. After manufacture, such key fobs are typically transported in a molded plastic tray rather like chocolates are often presented in selection boxes. The tray thus contains multiple smart card devices each having a respective contactless interface that may be addressed by a respective reading head of the inlay tester. Such a tray is thus analogous to the inlay sheet 16 and the individual smart card devices mounted therein are analogous to the inlays 17 as described above with reference to
It has already been noted that the controller 13 according to the invention is typically a suitably programmed computer. Likewise, the invention contemplates a computer program being readable by a computer for executing the method of the invention. The invention further contemplates a machine-readable memory tangibly embodying a program of instructions executable by the machine for executing the method of the invention.
Filing Document | Filing Date | Country | Kind | 371c Date |
---|---|---|---|---|
PCT/IL07/00027 | 1/9/2007 | WO | 00 | 7/9/2009 |