Patent · US Expired

Payment smart cards with hierarchical session key derivation providing security against differential power analysis and other attacks

US7941666B2 · kind B2 · utility

22Cited by
193References
22Claims
0Family size

Assignee

Inventor

Key dates

Filing dateMar 24, 2003
Grant dateMay 10, 2011
Priority date
Expiry dateNov 12, 2024

Classification

  • Technology area (CPC G)Physics
  • CPC primaryG06F2207/7219
  • WIPO fieldDigital communication
  • WIPO sectorElectrical engineering

Abstract

Chip cards are used to secure credit and debit payment transactions. To prevent fraudulent transactions, the card must protect cryptographic keys used to authenticate transactions. In particular, cards should resist differential power analysis and/or other attacks. To address security risks posed by leakage of partial information about keys during cryptographic transactions, cards may be configured to perform periodic cryptographic key update operations. The key update transformation prevents adversaries from exploiting partial information that may have been leaked about the card's keys. Update operations based on a hierarchical structure can enable efficient transaction verification by allowing a verifying party (e.g., an issuer) to derive a card's current state from a transaction counter and its initial state by performing one operation per level in the hierarchy, instead of progressing through all update operations performed by the card.

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.