Server authentication in non-secure channel card pin reset methods and computer implemented processes

US7617390B2 · kind B2 · utility

Assignee

• Sun Microsystems Inc. · US

Inventors

• Aseem Sharma · Fremont, US
• Ellen H. Siegel · Redwood City, US
• Tanjore S. Ravishankar · Los Altos, US
• Joe T. Wei · Daxi District, TW

Key dates

• Filing date: Jun 25, 2004
• Grant date: Nov 10, 2009
• Expiry date: Feb 7, 2027

Classification

• Technology area (CPC G): Physics
• CPC primary: G06Q20/40975
• WIPO field: IT methods for management
• WIPO sector: Electrical engineering

Abstract

A method for resetting a pin on an access card is disclosed. The method includes generating a server authentication (SA) public key and an SA private key and attempting a write of the SA public key to the access card over a non-secure channel. The method further includes determining if the access card currently contains an existing SA public key. The attempted write of the SA public key is handled by one of: (i) completing the attempted write of the SA public key to the access card over the non-secure channel if it is determined that the access card did not contain an existing public key; (ii) denying the attempted write of the SA public key to the access card over the non-secure channel if it is determined that the existing SA public key matches the SA public key that is attempted by the write; and (iii) denying the attempted write of the SA public key to the access card over the non-secure channel if it is determined that the existing SA public key does not match the SA public key that is attempted by the write.