Portable data carrier and method for using the same in a plurality of applications
View Patent ↗Proposed is a portable data carrier for use in a plurality of applications having a memory device containing at least one data field ( 21, 31 ) which can be accessed in several modes by applications realized in a card application device, and an access control device ( 15 ) for controlling the accesses to the data fields ( 21, 31 ). Each data field ( 21, 31 ) has a table ( 23, 24, 33, 34 ) assigned thereto which assigns an access right to each possible access mode. Each application accordingly has at least one access right assigned thereto. In the case of an access intent the access control device ( 15 ) checks whether the application intending the access has the access right necessary for the intended access.
1. A portable data carrier for use in a plurality of applications comprising:
a memory device containing at least one data field which can be accessed in several modes by at least one user application realized in a card application device, and
an access control device which checks the authority of applications intending to access a data field, said data field having assigned thereto a table which assigns to each of the possible access modes an access right to be defined basically without;
wherein the access control device is configured to ascertain the mode of an access to a data field intended by an application, derive an access right assigned to the ascertained access mode from the table of the data field to which an access is intended, and ascertain whether an application intending an access has a certain access right;
wherein at least the access modes of read, write, mask out, and restore have separate access rights assigned thereto.
2. A method for controlling the access of an application realized in a card application device to a data field of a portable data carrier usable for a plurality of applications, comprising the following steps:
assigning to each possible access mode for each data field an access right to be defined basically without reference, the access rights being assigned to an application and to a data carrier independently of each other;
wherein in the case of an access intent, the method further includes the steps of:
ascertaining the mode of the intended access,
determining the access right assigned to the ascertained access mode for the data field concerned,
ascertaining whether the application intending the access has the assigned access right.
3. A method according to claim 2 , wherein an access right is assigned to an access mode upon loading of a data field onto the data carrier.