Smart Card Reader Multi-Session Management via Logical Channels
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Smart card readers typically allow only one device to maintain an open session with a smart card at a time, preventing other devices from accessing the smart card until the first session is closed, which limits simultaneous use and functionality, especially when a handheld device and a PC are connected.
Innovation Solution
A card reader device with a processor and wireless communication interface that manages access by determining if multiple secure sessions can be supported, terminating existing sessions as needed to allow multiple devices to open sessions simultaneously, using commands like MANAGE_CHANNEL to create logical channels and prioritize commands for urgent operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a PC maintains an open session with the smart card for the duration of connection, then the PC can continuously access the smart card, but the handheld device cannot initiate a session with the smart card
Solution Approach 1:
The patent segments the single smart card resource into multiple logical channels, allowing different devices to access different channels simultaneously. The smart card reader is configured to support multiple logical channels, each capable of maintaining an independent session with a different accessing device, thus enabling both the PC and handheld device to access the smart card at the same time without interference.
Solution Approach 2:
The smart card reader acts as an intermediary between multiple accessing devices and the smart card. It manages session establishment, maintenance, and termination for multiple devices, and handles logical channel allocation. The reader mediates resource conflicts by directing different devices to different logical channels, enabling simultaneous access while maintaining security and session integrity.
2Reliability
If only one session is allowed at a time, then security is maintained, but multiple devices cannot simultaneously access the smart card
Solution Approach 1:
The patent divides the single secure session into multiple independent logical channels, each maintaining its own secure session with the smart card. The smart card reader supports multiple logical channels that can simultaneously maintain secure sessions, allowing multiple devices to access the smart card securely at the same time without compromising security integrity.
Solution Approach 2:
The patent adds a new dimension to session management by introducing logical channels as a separate layer. Instead of allowing only one session at a time, the system now operates in multiple dimensions simultaneously through different logical channels, each maintaining its own secure session. This dimensional expansion enables simultaneous secure access by multiple devices while preserving security constraints.
3Ease of operation
If the smart card session is held open by the PC, then the PC has continuous access, but the handheld device cannot perform operations such as signing or decrypting emails
Solution Approach 1:
The patent segments access rights by assigning different logical channels to different devices. The PC is assigned one or more logical channels for its operations, while the handheld device is assigned separate logical channels. This segmentation allows each device to independently access the smart card for its specific operations (email signing, decryption, authentication) without being blocked by the other device's session.
Data Source
AI summary
The described embodiments relate generally to devices, methods and systems for managing access to a memory card, such as a smart card, by a plurality of accessing devices. Certain embodiments relate to a smart card reader (SCR) for managing access to a smart card by a plurality of accessing devices. The SCR comprises: a processor; a channel manager responsive to the processor for interfacing with the smart card; and a communication interface responsive to the channel manager for communicating with the plurality of accessing devices.