WO2004081851A1

WO2004081851A1 - Portable data carrier that can be used as an entrance ticket and method for managing the same

Info

Publication number: WO2004081851A1
Application number: PCT/EP2004/002521
Authority: WO
Inventors: Daniel Ciesinger
Original assignee: Giesecke & Devrient Gmbh
Priority date: 2003-03-12
Filing date: 2004-03-11
Publication date: 2004-09-23
Also published as: EP1604326A1; DE10311123A1

Abstract

The invention relates to a method for managing electronic entrance tickets. An electronic entrance ticket (12) is first obtained via a public data network (80) using an output terminal and said ticket is saved on a portable data carrier (10). The ticket is obtained via a first interface (S2) of the portable data carrier (10) using a first data transmission protocol (P2) that is tailored to the public data network (80). The portable data carrier (10) is then fed to a verification terminal for checking, in order to gain access to an event that is designated on the electronic entrance ticket (12). The ticket is checked via a second interface (S1) of the portable data carrier (10) using a second data transmission protocol (P1) that is designed for a rapid exchange of data.

Description

USEABLE PORTABLE DATA CARRIERS AS AN ENTRY TICKET AND METHOD FOR ITS HANDLING

The invention relates to an entry system which is based on the use of electronic entry cards stored on 5 portable data carriers. From DE 19956 359 an admission ticket system is known in which a customer initially obtains an electronic admission ticket on a PC via the Internet and stores it on a chip card. When visiting the associated event, the customer presents the chip card in front of them

10 place-installed card reader, which reads the electronic admission ticket, grants admission and makes the admission ticket unusable. The system eliminates paper tickets. In addition to chip cards, other portable media can also be used, such as magnetic cards or optically readable cards. However, all variants are based on the principle

15 that the electronic admission ticket is stored on the medium used in the same way and according to the same protocol as the readout at the event location. When using a chip card that complies with the current ISO standards as a medium, this means that the customer receives a standard card when purchasing the electronic admission ticket.

20 chip card readers must be available. The same applies to the use of a different medium, with the handling generally deteriorating, in particular due to a slower protocol, or security against manipulation.

25 A similar method is known from US Pat. No. 6,119,945 which is designed with a view to increased security. Another comparable method is known from CA 2,345,391, in which a smart card is used as a boarding pass in air traffic. With regard to data transmission, both solutions are also based on the use of similar read and write inputs.

30 directions. In a pilot project in Bremen, the local transport company is also testing chip cards with money card functionality, so-called money cards, which also allow electronic tickets to be stored in the money card chip. All transactions, ie loading, paying and checking an electronic ticket, take place via the contact field of the money card chip, and thus via the same interface. An electronic ticket can therefore only be purchased at terminals that have a standard chip card reader.

In the ZKA (Central Loan Committee), the union of the central associations of the German banking industry, suggestions for standardizing the use of electronic tickets as an additional application for cash cards have already been made.

A chip card is also known from US Pat. No. 5,420,412, which is capable of carrying out data transmissions to a card reader in accordance with various protocols. For this purpose, there are several protocol converters and a protocol selection unit on the card. However, all protocols are processed via the same interface, which is always used in the same way. The interface is a standard phone card interface. The purpose of the solution is to provide a telephone card that is suitable for communication with different reading devices, in order not to have to adapt the reading devices to a large number of possible different card types.

The object of the invention is to create an electronic admission ticket system based on the use of portable data carriers, which has the lowest possible requirements with regard to the usage environment to be provided. The object is achieved by a method having the features of claim 1. The object is also achieved by a portable data carrier having the feature of claim 6.

According to the invention, an electronic admission ticket system is set up in that a portable data carrier equipped with two or more physically different interfaces is provided and the purchase of an electronic admission ticket takes place via a first interface using a protocol coordinated with the data network used, while the subsequent control presentation for admission via a second interface using a second protocol that is matched to the test terminal used in the control presentation. The use of two different protocols and two physically different interfaces makes it possible to work with standard components when purchasing an electronic admission ticket. The customer only has to provide a simple reader, such as a device with a USB interface that is suitable for executing a TCP / IP protocol. Despite user-friendliness on the part of the customer, the inspection of admission tickets can be carried out quickly and securely using test terminals, for example contactless according to IEEE 14443. The use of a standard interface and a standard protocol on the customer side enables a user to obtain electronic admission tickets from a multiplicity of stations using the same data carrier. In a particularly advantageous embodiment, the portable data carrier used offers the functionality of a network server and can be accessed by a PC as a normal network subscriber using a conventional network access program. In this case, there is also the possibility to set up a variety of other applications on the portable data carrier. The first interface, which is matched to the data network used, is designed in a particularly expedient embodiment as a USB or FIREWIRE interface.

An exemplary embodiment of the invention is explained in more detail below with reference to the drawing. Show it

1 shows the schematic structure of a portable data carrier,

Fig. 2 shows the structure of the communication area of a portable data carrier and

3 shows a flow diagram of a typical use of a portable data carrier.

1 shows a simplified top view of a portable data carrier 10 with a communication device for data exchange with an accessing device 70. The portable data carrier shown has the form of a standard chip card. Its essential elements are a contact field 20, an integrated circuit 30, which is usually arranged under the contact field in the card body, and a coil 50. All elements are known per se and u.a. in the manual of chip cards, W. Rankl, W. Effing, 4th edition, 2002, in particular chapter 2. The accessing device 70 can also be connected to a data network 80.

The portable data carrier 10 does not necessarily have to have the shape of a chip card, but can also have other suitable shapes and for example as a pin-like plug-in element or as a component of clothing, etc. wa be designed as a watch or as an intelligent glove. The design of the contact field 20 and the coil are then adapted to the respective embodiment.

The contact field 20 indicated in FIG. 1 is a standard chip card contact field for contact-related data transmission to an accessing device with eight fields, the fields 21 to 26 according to ISO standard 7816-2 with the supply voltage, the reset input, the clock input, the ground, the programming voltage and the input / output are assigned for this real combination.

In addition to or instead of the contact field 20, a coil 50 can be provided to implement contactless data transmission to an accessing device 70. It is also connected to the integrated circuit 30.

The contacts 21 to 26 of the contact field 20 and the coil 50 form a first physical interface SI, which is referred to below as a special interface. It is optimized for fast and secure data transmission with an accessing device 70 and is oriented towards using a special data transmission protocol P1. The special SI interface is typically used to transfer APDU commands in accordance with ISO 7816-3.4 and IEEE 14443.

The contacts 27 and 28 of the contact field are occupied with the data lines D ⁺ and D- for setting up a USB bus. The entirety of all contact fields 21 to 28 of the contact field 20 physically forms a second interface S2, here called the standard interface, which is particularly suitable for wide use in connection with a public data network 80 and Using a simple, interface-oriented data transmission protocol P2. The public data network 80 is typically the Internet, the standard interface S2 is a USB or FIREWIRE interface and the data transmission protocol P2 is the HTTP protocol, including TCP, IP and SLIP or PPP.

The integrated circuit 30 is designed in the usual way and contains a microcontroller with all the essential elements of a conventional computer for carrying out data processing in accordance with specified application and operating programs. The integrated circuit 30 receives or transmits input and output signals via the interfaces SI, S2.

The accessing device 70 is a terminal based on a conventional computer with an interface corresponding to the interface SI and / or S2 for carrying out data communication with a chip card 10. The accessing device 70 exists in various types. A first type is an output terminal, which typically takes the form of a personal computer (PC) that is installed at a customer and is connected to a public data network 80, in particular the Internet. A second type are test terminals for checking electronic admission tickets, which are typically set up at the event location that corresponds to an electronic admission ticket. Another type are security terminals for executing security-critical applications, such as bank or cash card terminals.

FIG. 2 shows the structure of the communication device of the portable data carrier 10. The integrated circuit 30 is connected to the special interface SI and to the standard interface via a recognition device 32. place S2, ie connected to the contact field 20 and / or, if present, to the coil 50. The detection device 32 is assigned an operating program selection device 34, which is connected to applications set up in an application area 38 via a first, open-application operating program 36.

Furthermore, the operational program selection device 34 is connected to a command converter 40. This evaluates commands that are transmitted when the special data transmission protocol Pl is used. The command converter 40 is followed by a second operating program 42, which is also assigned an application area 48 with associated applications. The second operating program 42 is set up to execute special commands. The second operating program 42 is also connected to the first operating program 36 via an application program interface 46

The detection device 32 is formed by a circuit which, at the start of a data transmission to an accessing device 70, determines which physical interface SI, S2 is used for the data transmission. Here, the recognition device 32 checks whether ^" the contacts 27 and 28 of the contact field 20 are used in the data transmission, whether only the contacts 21 to 26 are used or whether data are received via the coil 50.

On the basis of the recognized data interface SI or S2, the operating program selection device 34 stops the further processing of transmitted data in the integrated circuit 30. If the detection device 32 has a use of the contacts 27 and 28 of the contact field 20, thus the use of the second interface S2, recognized, the operating program selection device 34 activates the first, open application operating program 36.

If the recognition device 32 has determined that data is transmitted either only via the contacts 21 to 26 of the contact field 20 or only via the coil 50, so that the first interface SI is therefore used, the operating program selection device 34 activates the command converter 40.

The open-ended operating program 36 is used to implement applications which can be reached by means of a common data transmission protocol P2, for example the HTTP protocol, which can be transmitted via a widespread, open interface S2, for example a USB or a FIREWIRE interface. In an expedient implementation, the application-open operating program 36 is based on the programming language FORTH.

Based on the open application program 36, a large number of applications can be implemented in the application area 38. An application expediently realizes the functionality of a network server, so that it is possible to remove the portable data carrier 10 from an accessing device 70 by means of a conventional network access program using a common data transmission protocol, in particular the HTTP protocol, such as a conventional one, via the data network 80 address accessible network participants.

A functionality for handling electronic admission tickets 12 is also set up in the application area 38. In particular, the application comprises a procedure for the secure storage of electronic admission tickets 12 in the application area 48 of the second operating program. To initiate gramms 42 and procedures for displaying an electronic admission ticket 12 on an output terminal.

If the functionality of a network server is set up, the admission ticket application is expediently reached via the network server. In this case, as indicated by the arrow 44, the open application program 36 preferably also offers the possibility of directly using the admission ticket application in a special transmission mode, i.e. can be reached without switching on the network server. The special transmission mode can be implemented in that the operating program takes the form of an interpreting operating system, for example based on FORTH, which immediately executes interpretable commands supplied in the programming language.

The second operating program 42 is a closed operating program and is used to implement safety-critical applications or operator applications. The closed operating program 42 is typically a chip card operating system which, for example, realizes a cash card functionality. The functionalities are stored in the application area 48 of the closed operating program 42. Furthermore, there is a functionality in the application area 48 for storing and managing electronic admission tickets 12.

The closed operating program 42 does not allow applications to be reloaded at all, or at most with restrictions. It can be reached via special commands using a special data transmission protocol Pl. The special commands when the portable data carrier is designed as a chip card are, in particular, APDU commands. The special data transmission protocol Pl includes extensive security measures, especially cryptographic techniques and condition monitoring.

The application-open operating program 36 can communicate with the closed operating program 42 via the application program interface 46. The application program interface 46 enables the use of applications set up on the closed operating program 42 for the open operating program 36. In particular, the application program interface 46 provides the application-open operating program 36 with functionalities for paying via a data network and for storing and accessing electronic admission tickets 12. It is implemented as an API (Application Programming Interface). The application program interface 46 is designed in such a way that the open-ended operating program 36 cannot gain access to the internal data structures of the closed operating program 42.

As an alternative to the application interface 46, communication between the open application program 36 and the closed operating program 42 can also take place via the command converter 40 using special commands.

The use of the prescribed system is explained below on the basis of the flow chart according to FIG. 3. It is assumed that the portable data carrier 10 has the shape of a chip card. There is a first open application program 36 on which an application for realizing a network server and an application for handling an electronic admission ticket 12 are placed. Furthermore, a second operating program 42 is set up which offers the functionality of a cash card and which securely stores and manages an electronic card. tronic ticket 12 allow. The network server 36 can be reached via a USB interface using a conventional network browser using a conventional network data transmission protocol P2, the function cash card 40 via a standard chip card interface using APDU commands.

In order to obtain an electronic entry card 12 by means of a chip card 10 equipped in this way, the customer first presents the chip card 10 at a cash card terminal, step 60, in order to bring a cash value onto the card 10 by using the cash card functionality. The transfer of the monetary value from the cash card terminal to the chip card 10 takes place using the contacts 21 to 26 of the contact field 20 via the interface SI. The operating program selection device 34 accordingly forwards the commands received from the cash card terminal to the command converter 40, which forwards them to the closed operating system 42 with the cash card functionality.

If the chip card 10 is loaded with a monetary value, the customer presents it at a later point in time at an output terminal, step 62. To the same public data network 80, i.e. the internet is also connected to a provider of electronic entry tickets.

When using the chip card 10 on the PC, the data transfer between the PC and the chip card 10 takes place via a USB interface using the contacts 27 and 28 of the contact field 20. Common Internet protocols, such as HTTP or TCP / IP via SLIP or PPP, are used. The incoming and outgoing data and commands are Grarrtmauswahleinrichtung 34 directed to the open application program 36 and the applications implemented thereon.

The customer acquires the electronic admission ticket 12 in a dialog with an admission ticket provider via the Internet 80. Using the network browser, he sets this by entering a corresponding data network address, i.e. by entering a corresponding URL (Uniform Resource Locator), a connection to the provider is established, step 64. A certificate of the provider is expediently checked with rules and keys stored on the chip card 10, so that only designated providers are accepted by the chip card 10 , Step 66. The check can be carried out, for example, according to the “CRL” (Certificate Revocation List) concept, according to which a revocation list for certificates is stored on the chip card 10.

Using techniques known per se, the open-ended operating program 36 further establishes a connection to the entry card provider or an associated payment point, secured via cryptographic measures, via the Internet 80, step 68. The secured connection expediently takes the form of an SSL - Encryption set up tunnels for the transmission of special commands, e.g. from APDUs in accordance with the ZKA's money card specification.

The provider now displays the admission tickets available for selection on the user PC's user interface. The customer then selects the admission tickets he wants, step 71, and confirms the purchase price, which is registered by the open application operating program 36, step 72. With the confirmation, the network browser transmits the open application program located on chip card 10 36 the payment amount due for the tickets together with an order to execute the payment.

Upon receipt of the confirmation and the amount of the payment, the open-ended operating program 36 transmits to the closed operating program 42 the amount to be paid as well as accompanying information about the requested electronic entry card 12 and the communication path to be used, for example an SSL tunnel for APDUs, step 74.

The closed operating program 42 then processes the payment process via the secure connection provided by the open-ended operating program 36 using the cash card functionality, step 76.

In return, the provider transmits the electronic admission cards 12 in data form to the chip card 10, step 78. The transmission to the closed operating program 42 also takes place via the previously established secure connection. The electronic admission ticket 12 obtained is stored in the application area 48 of the closed operating program 42.

After the completion of the purchase process, the closed operating program 42 transmits a receipt to the open-ended operating program 36 which is reproduced to the customer and which indicates the status of the transaction, step 81.

If an electronic admission ticket 12 has been stored in the application area 48, the customer can subsequently open it at any time for a visual inspection display it on his PC or other output terminal. To do this, he requests a list of the electronic admission tickets via the open application program of the chip card, for example using a CGI script. In order to generate the list of electronic admission tickets, the application-open operating program 36 requests a list of the elective admission tickets 12 from the closed operating program 42 via the application program interface 46. The list obtained is brought into a format suitable for display and presented to the customer.

Provision can be made for the payment of the elective entry card 12 in a separate dialog regardless of the reference. In a variant of the admission card purchase it can further be provided that an admission card 12 placed on the chip card 10 is only made valid after payment has been made.

Finally, the customer presents the valid electronic entry card 12 created on the chip card 10 at a test terminal at the event location corresponding to the entry card, step 82. The test terminal uses the special data transfer protocol Pl for communication with the chip card 10 and uses only the contacts 21 to 26 of the contact field 20. It is particularly advantageously provided that the data transmission takes place contactlessly using a coil 50. In any case, the operating program selection device 34 transmits the special commands received under the special data transmission protocol P1 to the command converter 40.

The latter determines the data and commands contained therein from the special commands received and forwards them to the closed operating program 42. In accordance with the data and commands received, the closed operating program 42 accesses the electronic admission ticket 12. In this way, the test terminal first prompts the operating program 42 to inform it of the electronic admission ticket 12. If it is recognized as valid, the test terminal of the chip card 10 transmits validation information which the operating program 42 adds to the electronic entry card 12 and stores in the application area 48. The entry card 12 can then no longer be used again. The devaluation information can, for example, be a time stamp in a simple manner. In order to inform the customer, the cancellation is expediently given an acoustic or visual indication that the ticket 12 has been canceled.

To increase the security during the control presentation of the electronic admission ticket 12, additional security measures can be provided, in particular mutual authentication of the test terminal and chip card and / or the establishment of a connection between the chip card and the test terminal, which is protected, for example, by Secure Messageing.

The system described above is particularly suitable for electronic admission tickets due to its security properties, but is not limited to this application. With the improvement of the possibility of establishing secure end-to-end connections via public data networks, in particular the Internet, the system can also be used in the future, for example, for handling elective tickets for public transport or for operating prepaid credit cards, such as telephone cards.

Claims

Patent claims

1. A method for handling electronic admission tickets, wherein an elective admission ticket is first obtained from a public data network using an output terminal and stored on a portable data carrier, and the portable data carrier is then presented to a test terminal for control purposes in order to gain access to receive an event designated by the electronic admission ticket. characterized in that the elective entry card (12) is obtained at the output terminal via a first interface (S2) using a first data transmission protocol (P2) which is matched to the public data network, and the elective entry card (12) is checked via a second Interface (SI) takes place using a second data transmission protocol (Pl) which is geared towards fast data exchange.

2. The method according to claim 1, characterized in that the control of the electronic admission ticket (12) is carried out using a data transmission protocol (Pl) aligned with data exchange with a closed operating program (42).

3. The method according to claim 1, characterized in that the control of the electronic admission ticket (12) is carried out using APDU commands.

4. The method according to claim 1, characterized in that on the portable data carrier (10) a functionality for paying for an electronic admission ticket is set up and using this functionality, the payment of an electronic admission ticket in return for its receipt via the public data network.

5. The method according to claim 1, characterized in that data and commands for an application-open operating program (36) are transmitted in the data part of certain APDU commands.

ό.Method according to claim 1, characterized in that the reference of the elective admission ticket (12) is carried out using a data transmission protocol used in the Internet (P2).

7. Tiagable data carrier that can be used as an electronic entry card

- A communication device for data exchange with an output terminal for obtaining an electronic admission ticket or with a. Test terminal for their control,

an integrated circuit set up for executing at least two different data transmission protocols, and

- An operating program selection device for selecting a data transmission protocol to be used for data exchange, characterized in that the communication device has at least two different interfaces (SI, S2) and a recognition device (32) for recognizing the respectively used interface (SI, S2), and the operating program selection device (34) sets a data transmission protocol (P1, P2) to be used in each case as a function of the detected interface (SI, S2).

8. Portable data carrier according to claim 7, characterized in that the integrated circuit (30) has the functionality of a network server.

9. Portable data carrier according to claim 7, characterized in that it has a contact field (20) via which different interfaces (SI, S2) are realized by different assignment of the individual contacts (21 to 28).

10. A portable data carrier according to claim 7, characterized in that the operating program selection device (34) is followed by a command converter (40) for evaluating special commands.