System and method for obtaining an authorization key to use a product
A system and method for obtaining an authorization key to use a product utilizes a secured product identification code, which includes a serial number and at least one code that is generated based on a cryptographic algorithm.
1. A method for obtaining an authorization key to use a smart card integrated circuit (IC), the method comprising:
providing a secured smart card IC identification code to the smart card IC by a smart card IC manufacturer, wherein the secured smart card IC identification code comprises a smart card IC serial number and at least one cryptographic code that is derived from the smart card serial number using a cryptographic algorithm, wherein the cryptographic code includes information about the smart card IC manufacturer;
extracting the secured smart card IC identification code from the smart card IC by a trusted service provider, the trusted service provider comprising a processor external to the smart card IC and its packaging; transmitting the secured smart card IC identification code from the trusted service provider to the smart card IC manufacturer over a data connection; and
authenticating the secured smart card IC identification code using the cryptographic algorithm by the smart card IC manufacturer and transmitting a copy of the authorization key from the smart card IC manufacturer to the trusted service provider over the data connection after the authenticating by the smart card IC manufacturer, wherein transmitting the secured smart card IC identification code to the smart card IC manufacturer over a data connection comprises transmitting the smart card IC serial number from the trusted service provider to the smart card IC manufacturer and where transmitting the smart card IC serial number is independent of transmitting the at least one cryptographic code.
2. The method of claim 1 , wherein the cryptographic algorithm is only known to the smart card IC manufacturer.
3. The method of claim 1 , wherein the cryptographic algorithm has at least one parameter that is only known to the smart card IC manufacturer.
4. The method of claim 1 , wherein the smart card IC serial number includes sufficient identification information about the smart card IC so that the smart card IC can be individually identified through the smart card IC serial number only.
5. The method of claim 1 , wherein the secured smart card IC identification code includes more than one cryptographic code, wherein each cryptographic code includes information that is used for a unique purpose.
6. The method of claim 1 , wherein the cryptographic code of the secured smart card IC identification code is a checksum, a signature or a hash value of the smart card IC serial number.
7. The method of claim 1 further comprising destroying the authorization key to use the smart card IC by the smart card IC manufacturer after transmitting the copy of the authorization key to the trusted service provider.
8. The method of claim 1 , wherein the transmitting the secured smart card IC identification code to the smart card IC manufacturer comprises choosing a target smart card IC manufacturer and verifying whether the target smart card IC manufacturer is the smart card IC manufacturer that produced the smart card IC.
9. The method of claim 8 , wherein the transmitting the secured smart card IC identification code to the smart card IC manufacturer further comprises transmitting the secured smart card IC identification code to the target smart card IC manufacturer only after the target smart card IC manufacturer is confirmed to be the smart card IC manufacturer that produced the smart card IC.
10. The method of claim 1 further comprising
installation by the smart card IC trusted service provider of at least one application to the smart card IC with the authorization key to use the smart card IC by the smart card IC trusted service provider.
11. A smart card IC identification and authentication system for a smart card IC manufacturer that produces a smart card IC, the smart card IC identification system comprising:
a smart card IC identification code generator configured to generate a secured smart card IC identification code for the smart card IC, wherein the secured smart card IC identification code includes a smart card IC serial number and at least one cryptographic code that is derived from the smart card serial number using a cryptographic algorithm, wherein the cryptographic code includes information about the smart card IC manufacturer; and
a smart card IC identification code authenticator configured to authenticate the secured smart card IC identification code that is received from a trusted service provider, comprising a processor external to the smart card IC and its packaging, using the cryptographic algorithm and to transmit a copy of an authorization key to use the smart card IC to the trusted service provider after authentication, wherein the smart card IC identification and authentication system is configured for receiving the secured smart card IC identification code from the trusted service provider over the data connection where receiving the secured smart card IC identification code includes receiving the smart card IC serial number from the trusted service provider and receiving the at least one cryptographic code from the trusted service provider and receiving the smart card IC serial number is independent from receiving the at least one cryptographic code.
12. The smart card IC identification and authentication system of claim 11 further comprising a smart card IC identification code destroyer configured to destroy the authorization key to use the smart card IC after the copy of the authorization key to use the smart card IC is transmitted to the trusted service provider.