Multi-mode smart card, system and associated methods

[0001] The present invention relates to information processing and storage, and more particularly, to smart card systems.

[0002] Smart cards (SC) are plastic cards having an embedded Integrated Circuit (IC). That IC may be a logic circuit with its associated memories or a microcontroller with its associated memories and software, or a microcontroller with its associated memories and software coupled to a custom block.

[0003] To use the computing power given by the IC, a SC makes use of a full set of packaging technologies. The die size varies from 1 mm² to 30 mm². The die size is limited for mechanical aspects going with the plastic nature of the SC. The IC is attached to a lead frame and wire-bonding techniques are used to connect the IC pads to the lead frame contacts. Potting and other strengthening methods protect the IC against chemical and mechanical stresses. Contacts are located on one side of the card and their number is limited to eight. Ultimately SC performs transactions with a SC reader using a serial protocol. All the mechanical and electrical specifications of SC are published by the International Standard Organization (ISO). The ISO7816-X standards have allowed the simple and massively produced magnetic stripe cards to evolve toward the SC. SC, depending of the IC complexity, may perform pre-paid accounting, cryptographic scheme, personal authentication using PIN code or biometrics and run java scripts to name few.

[0004] ISO documents ISO 7816-1 Physical Characteristics, ISO 7816-2 Dimensions and Locations of the contacts, ISO 7816-3 Electronic signals and transmission protocols and, ISO 7816-10 Electronic signals and answer to reset for synchronous cards are incorporated herein by reference.

[0005] Today all the SC readers have to be recognized by the infrastructure prior to perform any transaction involving a SC. The infrastructure is running an application in which the SC is involved. The SC reader expects a SC. The half duplex protocol between the SC and the SC reader, in which, either the SC sends information to the SC reader or vice versa, cannot start until a SC is detected in place into the SC reader. The infrastructure manages authentication or transactions for pre-paid cards in public telephony, for Bank cards in Point Of Sale (POS) terminals and Automatic Teller Machines (ATM), for Pay TV providers in set top boxes and for wireless telecom operators in Subscriber Identification Modules (SIM) in Global System for Mobile (GSM) terminals. Except for SIM cards, all others applications use a physical sensor to detect the SC. This sensor tells the SC reader when a SC is in place that is when the SC lead frame contacts are able to mate with the SC reader contacts. Two sorts of SC reader contacts can be used, contacts that remain in place and because of their elasticity can slide over the SC when inserted in the SC reader or mobile contacts which descend to touch the lead frame contacts once the card has been detected in place. When the SC reader has established that a SC is in place the power up sequence can start at the SC reader convenience. After the power up sequence, the SC reader will provide first a clock to the SC and then will release its reset signal. The SC is then able to execute the stored Operating System (OS). The SIM card is particular since it is put in place only once with the power off and used constantly subsequently to its positioning.

[0006] The first application ever to have deployed the SC technology more than 20 years ago is the public telephone system. The die size used in this application is less than 1 mm². Just memories and logic circuits are integrated in the IC. In 1999, Pre-paid SC accounted for more than ⅔ of the 1.3 billion SCs produced worldwide. The SC reader utilizes all eight contacts to interface properly with the different SC generations. When a SC is inserted in the payphone, the telephone infrastructure authenticates the SC and the telephone remove units out of the SC. It is worth noting that the SC developed for Banking applications can be utilized in a payphone. The payphone does not remove units out of a Bank card but bills the SC carrier.

[0007] The second largest application using the SC has been deployed by the Banking industry. The ATM and POS infrastructures have been installed in most countries other than the USA. The die size used in this application is about 10 mm². A microcontroller and its associated memories and software are integrated in the IC. The SC reader utilizes up to six contacts to interface properly with the different SC generations. When a SC is inserted in the ATM or the POS, the SC carrier is asked to authenticate himself with a PIN code. The SC can store anything like the balance of cash the owner got out of an ATM on a per week basis, the details of purchases he has done since the last closing date, etc. Based on this information, the authorization can be issued on the spot once the PIN has authenticated the debtor without any telephone calls to the bank. Ultimately Banks and Businesses perform the equalization using the telephone, private communication networks and some day the Internet. While performing the equalization, a black list of fraudulent SC may be stored in the POS or ATM. This scheme has been able to reduce the fraud level down to 0.02% of all the transactions equivalent money done with the SC from 0.2% when no IC was embedded in the card. The level of fraud using SC has been reduced by ten fold compared to the regular credit cards.

[0008] The third largest application using SCs has been deployed by GSM manufacturer. The die size used in a SIM is about 30 mm². A microcontroller and its associated memories and software are integrated in the IC. The SIM reader utilizes five contacts to interface properly with the SC. The most sophisticated SC applications are performed in GSM using Java applets.

[0009] A whole new market for the SC is now emerging with the Internet accessed from a Personnel Computer. Secure message, Public Key Infrastructure, Authentication and Electronic Payment are the new SC hot areas. The SC can be an e-commerce facilitator. The differentiation of the smartcard compared to other solutions is to have the PIN in the memory that is never communicated in any transaction.

[0010] Up to now, the SC is used in a SC reader connected to the computer. Two protocols are involved in supporting transactions between the SC and the application run by the computer. The first protocol complies with the ISO-7816-3. This standard provides detailed requirements for the serial interface between SC and SC reader. The reader is connected to the computer by via a Serial Port, a Parallel Port or even the Universal Serial Bus [USB] using a second protocol. The SC reader contains electronic circuits and embedded software that enable communication between the SC using the first protocol and the computer using the second protocol. The computer is loaded with the appropriate driver to support the SC reader. Many countries have started to use the SC in the PC environment. The die size used in this application will be anywhere from 5 mm² to 30 mm². A microcontroller and its associated memories and software are integrated in the IC with a cryptocontroller. Sometimes, a bio-sensor will be also integrated. The SC reader utilizes at least five contacts to interface properly with the SC.

[0011] Closed infrastructures enabling all kinds of transactions like Healthcare, Public phone, parking, Loyalty programs, Cash payments, Credit payments are using millions of ISO compliant SC readers around the world. Europe has lead the development of these technologies back in the late 1970's. In these proprietary infrastructures, every single SC reader is designed to carry many transactions each hour. The many users share the cost of the SC reader.

[0012] The extreme growths of the e-commerce and Internet transactions have highlighted the huge needs to secure transactions. Fraud is booming. False credit card numbers are used, credit card numbers are stolen and eavesdropping on the Internet is well established. Dotcom companies search for the device having the best cost/performance ratio. The SC is an excellent contender if the SC reader price can be reduced.

[0013] The USB has recently become firmly established and has gained wide acceptance in the Personal Computer (PC) marketplace. The USB has been developed in response to a need for a standard interface that extends the concept of “plug and play” to devices external to a PC. It has enabled users to install and remove external peripheral devices without having to open the PC case or to remove power from the PC. The USB provides a low-cost, high performances, half-duplex serial interface that is easy to use and readily expandable. The USB can be seen as a set of four wires carrying the power supply with two wires and data with the two other wires. The USB is currently defined by the Universal Serial Bus Specification written and controlled by USB Implementers Forum, Inc., a non-profit corporation founded by the group of companies that developed the USB Specification.

[0014] In particular, Chapter 5 USB Data Flow Model, Chapter 7 Electrical, Chapter 8 Protocol Layer and Chapter 9 USB Device Framework of Universal Serial Bus Specification are incorporated herein by reference. The increasingly widespread-use of the USB in computers has led SC reader manufacturers to develop USB interfaces for connection of their products to computers to complement the existing serial and parallel interfaces.

[0015] We are now in a situation where the brick and mortar companies and the Banks have been using the SC technology for more than 15 years. On the other hand, the Internet, a formidable arena to enhance commerce and Banking activities, does not use the SC technology. Most of the Internet transactions are done from a PC and despite PC manufacturer efforts, the PC industry has failed to install on each PC a cost effective SC reader meeting the specific needs of web related applications. A comprehensive solution, servicing the needs of both the one already engaged in the SC technologies and those wishing to benefit from it, is to be found. These two fields should share a common authentication platform in the best interests of the customers and the service providers.

[0016] An example of a conventional approach may be found in published PCT application WO 99/49415 and entitled “Versatile Interface Smart Card.” The system discloses a smart card system which can be used with different protocols. Specifically, the system provides a mode signal at one of the non-ISO standard contacts to indicate the protocol of the device that the card is communicating with. However, the mode signal is not checked until after the smart card is powered up and the reset signal has been applied. In other words, the smart card is already operating in the ISO 7816 protocol, and upon detection of the mode signal, may have to switch to a non-ISO protocol.

[0017] In view of the foregoing background, it is therefore an object of the invention to provide an integrated circuit which can selectively operate in accordance with more than one protocol.

[0018] It is a further object of the invention to provide a smart card system that can determine whether the smart card is communicating with an interface using the ISO 7816 protocol or non-ISO protocol, and configure the smart card in such a protocol.

[0019] This and other objects, features and advantages in accordance with the present invention are provided by a multi-mode IC for operating in an ISO mode in accordance with International Standards Organization 7816 (ISO 7816) protocol, and a non-ISO mode, such as a USB mode in accordance with Universal Serial Bus (USB) protocol. The multi-mode IC includes a microprocessor and an external interface. The external interface includes a voltage supply pad, a ground pad, a first set of pads in accordance with the first protocol, such as a reset pad, a clock pad and an input/output pad in accordance with the ISO 7816 protocol, and a second set of pads in accordance with the non-ISO protocol, such as a D-plus pad and a D-minus pad in accordance with the USB protocol. The IC also includes a mode configuration circuit comprising a mode detector connected to one of the pads of the first set of pads, e.g. the clock pad, a USB voltage detector connected to the voltage supply pad, a latching circuit connected to the switching block and an receiving output from the mode detector. The IC may also include a control register connected to the latching circuit for storing a mode configuration indicator.

[0020] Also, if the non-ISO mode is the USB mode, then the IC may include a USB cable detector connected to D-plus and D-minus pads. Here, the mode configuration circuit configures the IC to operate in one of the ISO and USB modes while disabling the other of the ISO and USB modes, such that the reset, clock and input/output pads are disabled when the switching block is configured in the USB mode, and the D-plus and D-minus pads are disabled when the switching block is configured in the ISO mode. Since an ISO transaction may occur while the power supply voltage is within the range of 2.7 to 5.5 Volts, and a USB transaction may occur while the power supply voltage is within the range of 4.01-5.5 Volts, a voltage detector may be provided to detect whether a power supply voltage on the voltage supply pad can support USB transactions.

[0021] A system using such an IC in accordance with the present invention includes an ISO-compliant reader and a non-ISO-compliant reader. Of course the ISO-protocol reader would provide the necessary clock signal at the clock pad of the IC. However, the non-ISO-compliant reader includes a mode indication circuit which provides one of the first set of pads, e.g. the clock pad, with a mode indication signal.

[0022] A method aspect of the present invention includes operating a multi-mode smart card in an ISO mode in accordance with International Standards Organization 7816 (ISO 7816) protocol, and a non-ISO mode in accordance with a non-ISO protocol. The multi-mode IC includes an external interface having a voltage supply pad, a first set of pads in accordance with the ISO protocol, and a second set of pads in accordance with the non-ISO protocol. The method comprises detecting whether one of an ISO-mode condition and a non-ISO-mode condition exists on one pad of the first set of pads during a power-on-reset of the multi-mode IC; configuring the multi-mode IC in the ISO mode and disabling the second set of pads when the ISO-mode condition is detected; and configuring the multi-mode IC in the non-ISO mode and disabling the first set of pads when the non-ISO-mode condition is detected. The method may also include verifying the non-ISO mode, when the non-ISO-mode condition is detected, by detecting a non-ISO-mode voltage on the voltage supply pad.

[0023] Preferably, the first set of pads comprises a reset pad, a clock pad and an input/output pad in accordance with the ISO 7816 protocol, and detecting whether the ISO-mode or non-ISO-mode condition exists comprises detecting if a signal from one of an ISO-compliant interface and a non-ISO-compliant interface is present on one of the first set of pads, e.g. the clock pad. The non-ISO protocol may comprise the Universal Serial Bus (USB) protocol. Also, the method may include storing a mode configuration indicator for indicating whether the multi-mode IC is configured in the ISO or non-ISO mode.

[0024] In the present invention, the IC is configured in the ISO mode if an ISO condition is detected on one pad of the first set of pads, such as the clock pad. A mode indication signal may be provided on the clock pad from a non-ISO-compliant reader. If so, then the IC is configured in the non-ISO mode, such as the USB mode. If the non-ISO mode is detected via the clock pad during the power-on reset sequence, then the USB voltage is verified on the voltage supply pad, then a detection for USB connections to a host may be performed before the IC is configured in the USB mode. The IC is either configured in the ISO or non-ISO mode depending on the signal level at the clock pad during the power-on reset sequence. Once the IC is configured in one mode, it can only operate in that mode and it cannot be changed except via another power-on reset sequence.

[0053] The present invention will now be described more fully hereinafter with reference to the accompanying drawings, in which preferred embodiments of the invention are shown. This invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the invention to those skilled in the art. Like numbers refer to like elements throughout.

[0054] Referring to FIG. 1, a smart card 10 in accordance with the present invention will now be described. The smart card 10 is made of plastic, for example, and has a plurality of electrical contacts or pads 12 on an outer surface thereof, as would be appreciated by those skilled in the art. As shown, the card 10 includes eight pads 12, for example. The pads 12 are the external interface for the integrated circuit (IC) 11 which is embedded within the card 10 and typically beneath the pads. The size of the card 10 and the position of the pads 12 are determined by appropriate standards such as ISO 7816 discussed above. Of course the IC 11 can also be embedded in other media such as the Subscriber Identity Module (SIM) for mobile phones.

[0055] A personal computer (PC) 20, as shown in FIG. 9 typically includes a central processing unit (CPU) and various input/output devices such as a monitor, keyboard and a mouse. Additionally, the PC 20 includes a smart card reader 22 which may, for example, be used to control access to the PC. As shown, the smart card reader 22 is a separate peripheral device; however, the smart card reader could also be incorporated into the CPU housing or the keyboard, for example.

[0056] The smart card reader 22 may conform to the ISO 7816 protocol or a non-ISO protocol such as the Universal Serial Bus (USB) protocol as discussed above. The ISO 7816 protocol is the conventional standard for use in smart cards and includes a M4 voltage supply pad VCC, a ground pad GND, an input/output pad I/O, a reset pad RST and a clock pad CLK. The ISO protocol is characterized by an Answer-to-Reset (ATR) sequence when a power-on-reset or hardware reset is applied to the IC 11.

[0057] The USB protocol is currently being used to replace the different PC 20 interfaces for peripheral devices such as the mouse, keyboard, serial I/O port etc. As discussed above, the USB protocol can be hot plug and play which means that a USB protocol device can be connected or disconnected from the PC 20 without necessitating a reboot. The USB cable includes a voltage supply wire VBUS, a ground wire GND, a D-plus wire D+ or DP and a D-minus wire D− or DM. The differential signal on D+ and D− is a data stream in NRZI coding. The USB 1.1 specification requires the power supply of a USB device to be between 4.01V and 5.5V.

[0058] As set forth previously, it is desirable to provide a smart card system that can operate in the ISO 7816 protocol and another non-ISO protocol, such as the USB protocol, depending on the type of reader the card is communicating with. Thus, referring to FIG. 3, an embodiment of the present invention will be described. A multi-mode IC 11 is capable of operating in first mode such as an ISO mode in accordance with International Standards Organization 7816 (ISO 7816) protocol, and a second non-ISO mode such as a USB mode in accordance with Universal Serial Bus (USB) protocol. The multi-mode IC 11 operates selectively in one mode or the other, but not both simultaneously.

[0059] The multi-mode IC 11 is preferably in the smart card 10 and includes a microprocessor 14, a switching block 16, and the external interface 12. The external interface 12 comprises a voltage supply pad VCC, a reference voltage/ground pad GND, a first set of pads for the ISO mode, and a second set of pads for the non-ISO mode. The first set of pads preferably include a reset pad RST, a clock pad CLK and an input/output I/o pad in accordance with the ISO 7816 protocol. The second set of pads preferably includes a D-plus pad D+ and a D-minus pad D− in accordance with the USB protocol.

[0060] Because the IC 11 can only operate in one of the two modes which have different external interfaces, the IC will need to determine in which mode to operate. Thus, the IC 11 includes a mode configuration circuit 18 comprising a mode detector 49 connected to one of the ISO pads, such as the clock pad CLK. The mode configuration circuit 18 may also include a USB voltage detector 30 connected to the voltage supply pad VCC for detecting a non-ISO mode voltage supply such as the USB voltage, a latching circuit 40 connected to the switching block and receiving outputs from the mode detector 49 and a USB host connection detector 35, for storing a mode configuration indicator and the USB_RST starting signal.

[0061] At least for the case where the non-ISO mode is the USB mode, the mode configuration circuit 18 may include the USB host connection detector 35 connected to the D-plus and D-minus pads, and providing an output to the latching circuit 40. The USB host connection detector 35 may be used to verify that the medium including the IC 11 is actually connected to a USB port once the IC has been configured in the NISO mode.

[0062] During the start-up or power-on sequence of the IC 11, the mode configuration circuit 18 configures the IC 11 to operate in one of the ISO and non-ISO modes while disabling the other mode. For example, the reset pad RST, clock pad CLK and input/output I/O pad are disabled when the IC 11 is configured in the USB mode, and the D-plus pad D+ and D-minus D− pad are disabled when the IC 11 is configured in the ISO mode. To prevent any glitches, the detected mode is latched by the latching circuit 40. The operating system of the IC 11 will then check this bit during the reset routine to access the appropriate code for the latched mode.

[0063] Accordingly, if the smart card 10 including the multi mode IC 11 is used with a typical smart card reader, it will operate as specified in the ISO 7816 protocol while the USB interface, i.e. the D-plus D+and D-minus D− pads, is disabled to consume less power. However, because the IC 11 includes a USB interface, ISO 7816-like transactions can be performed using a low-cost USB device rather than an ISO-compliant smart card reader. Here, the ISO mode interface, i.e. the reset RST, clock CLK and input/output I/O pads, is disabled. Once the IC 11 is configured in one of the modes, it must stay in that mode until another power-on-reset.

[0064] Preferably, the mode detector 49 detects whether a signal on the clock pad CLK is less than about 30% of a voltage supply signal on the voltage supply pad VCC, and the mode configuration circuit 18 configures the IC 11 in the ISO mode if the signal on the clock pad CLK is less than about 30% of the voltage supply signal on the voltage supply pad VCC. Alternatively, the mode configuration circuit 18 configures the IC 11 in the USB mode if the signal on the clock pad CLK is not less than about 70% of the voltage supply signal on the voltage supply pad. If so, then the USB voltage detector 30 detects whether a power supply on the voltage supply pad VCC is greater than about 3.5 volts or preferably between about 4.01 and 5.5 volts to verify that the multi-mode IC 11 can communicating with a USB interface.

[0065] A system using such an IC 11 in accordance with the present invention includes a ISO-protocol reader and a USB-protocol reader. The ISO-protocol reader may be a conventional smart card reader that would provide the necessary clock signal at the clock pad of the IC. Thus, when a smart card 10 including the multi mode IC 11 is inserted into a conventional smart card reader, the mode configuration circuit 18 configures the IC 11 in the ISO mode because the signal on the clock pad CLK would be less than about 30% of the voltage supply signal on the voltage supply pad VCC. However, a USB-protocol reader in accordance with the present invention includes a USB-mode indication circuit 70 which provides the clock pad CLK with a USB-mode indication signal, such as a fixed voltage level, which will be discussed in detail below. So, when the smart card 10, or other medium, is connected to such a USB-protocol reader, the mode configuration circuit 18 configures the IC 11 in the NISO mode because the signal on the clock pad CLK would not be less than about 70% of the voltage supply signal on the voltage supply pad VCC.

[0066] A method aspect of the present invention will now be discussed while referring to FIG. 4. The method includes operating a multi-protocol smart card 10 in a first mode in accordance with an ISO protocol, and a second mode in accordance with a non-ISO protocol, such as the USB protocol. As discussed above, the multi-protocol smart card 10 includes an external interface 12 having a voltage supply pad VCC, a reference voltage/ground pad GND, a first set of pads Clk, RST, I/O in accordance with the ISO protocol, and a second set of pads, e.g. D+, D-, in accordance with the non-ISO protocol such as USB.

[0067] The method begins (block 120) and a power-on-reset sequence of the IC 11 is started at block 122. Then, at block 124, the method includes detecting whether an ISO mode condition exists on one pad of the first set of pads during the power-on-reset of the multi-mode IC, or whether a non-ISO mode condition exists on the one pad of the first set of pads during the power-on-reset of the multi-mode IC. For security and integrity of the IC 11, the mode should be detected as soon as possible. In a preferred embodiment, it is detected whether a signal on the clock pad CLK is less than about 30% of a voltage supply signal on the voltage supply pad VCC. If the signal on the clock pad CLK is less than about 30% of the voltage supply signal on the voltage supply pad VCC, the IC 11 is configured in the ISO mode and the second set of pads, e.g. D+, D-, in accordance with the non-ISO protocol such as USB, is disabled (block 130) by connecting them to GND, for example. Alternatively, if the signal on the clock pad CLK is not less than about 70% of the voltage supply signal on the voltage supply pad VCC, the IC 11 is configured in the non-ISO or USB mode, and the first set of pads, i.e. Clk, RST, I/O, in accordance with the ISO protocol is disabled (block 128) by connecting them to GND, for example.

[0068] Again, the method may include verifying the non-ISO mode, when the non-ISO mode condition is detected at block 124, by detecting a non-ISO mode voltage, e.g. a USB mode voltage, on the voltage supply pad VCC (block 126) and detecting a USB host connection (block 136). The method may include storing a mode configuration indicator for indicating whether the multi-mode IC is configured in the ISO or non-ISO mode (block 132) before ending at block 134.

[0069] For example, the IC 11 is configured in the ISO mode if an ISO condition is detected on the clock pad CLK. A mode indication signal may be provided on the clock pad CLK if the IC 11 is communicating with a virtual USB reader 22. If so, then the IC 11 is configured in the USB mode. Also, if a USB interface is detected via the clock pad CLK during the power-on reset sequence, then a detection for a USB cable may be performed, and the USB voltage is verified on the voltage supply pad VCC before the IC 11 is configured in the USB mode.

[0070] The IC 11 is either configured in the ISO or USB mode depending on the signal level at the clock pad CLK during the power-on reset sequence. To identify the non-ISO mode, such as USB, a fixed voltage level is applied to the clock pad CLK. This may be done at the reader and/or on the IC 11 using a pull-up resistor between VCC and CLK. The ISO 7816 power-on-reset sequence begins by applying the voltage supply to VCC and the reference voltage/ground to GND while the signals on RST and CLK are kept low or at “0”. Then the I/O pad receives a signal from a pull-up resistor at the reader or on the IC 11 to put the IC in a receiving mode. Then a clock signal is provided on CLK and after a certain amount of time, the signal on RST is set high or at “1”. This starts the IC's reset sequence. The signal is provided on RST when the reader is sure the IC 11 is in the power-on reset state and waiting for the reset sequence.

[0071] So, in sum, the clock signal on CLK begins at “0” and then is activated at a minimum time of 400 cycles before the signal on RST rises. Since a fixed voltage level is applied on CLK when the IC 11 is communicating with a USB device, if the signal detected on CLK is fixed at “1” (greater than 70% of VCC), then the IC is configured in the USB mode. If the signal on CLK is a clock signal alternatively greater than 70% of VCC and less than 30% of VCC, then the IC 11 is configured in the ISO mode. This detection at block 124 can be a test of whether the signal on CLK is less than 30% of the signal on VCC. If so, then ISO mode. If not, then USB mode. Then, for USB detection, at block 126, the voltage supply signal on VCC is checked to ensure it is greater than 4.01 Volts. According to the USB protocol, the voltage supply on VCC in the USB mode should be between about 4.01V and 5.5V.

[0072] Of course, other ISO pads, such as the reset pad RST, variable supply voltage VPP, and the input/output pad I/O, may also be used with varying degrees of complexity. Once the IC 11 is configured in one mode, it can only operate in that mode and it cannot be changed except via another power-on-reset sequence. To prevent any glitches, the detected mode is preferably latched and a mode indicator/bit is set. The operating system of the IC 11 will then check this bit during the microcontroller reset routine to access the appropriate code for the latched mode.

[0073] Thus, a multi-mode IC 11, smart card 10, system and associated method of operation in the ISO 7816 protocol and another non-ISO protocol, such as the USB protocol, have been described in accordance with the present invention. A medium, such as the smart card 10, incorporating the multi-mode IC 11 can be used in a typical ISO compliant smart card reader or in a lower-cost virtual USB reader, such as a personal computer.

[0074] More specifically, the present invention will be described with reference to FIGS. 5-28. The present invention establishes a bridge between the brick and mortar field and the Internet. This is the Universal Serial Bus and ISO Smart Card (USIC) 110. The USIC 110 is able to perform either transactions on an ISO SC reader 120 (FIG. 11) or transactions directly on a USB port 124 (FIG. 18). In the latter case the USIC 110 is really a USB device supporting amongst other USB characteristics the suspend state. The very same USIC 110 may be used in a POS or in an ATM and also in surfing the web because the ISO SC reader burden has disappeared. For example, one person carrying a USIC 110 can use it to shop on his favorite Internet sites through the USB protocol and use it to get cash from the ATM with the ISO protocol. The same portable device services two needs. To furthermore embrace possible applications dedicated to the PC environment a SC with only a USB interface 120′ (FIG. 26) is also available (USC).

[0075] The USB SC reader interface is partly included in the USC or the USIC and partly included in the PC. The IC 1100 used in a USIC 110 can handle either the USB protocol or the ISO protocol while performing the same application. Both USC and USIC interface with the USB with a simple passthrough connector. Beside the passthrough connector and few decoupling capacitors, USC and USIC does not required any other electronic circuits to be seen as a bus powered device 143 on the USB by the USB host controller 121. When a USIC reader 140 is connected to a USB port without the USIC being inserted, the application does not see the reader. This is a virtual USIC reader 140. The USIC reader connected on the USB accepts also USC.

[0076] The passthrough connector establishes electrical links between the USB signals on the USB port 124 and the USC or USIC contacts in the virtual reader 140. When there is no card in this virtual reader 140 the system does not see any SC reader. When the USC or the USIC is inserted into the virtual reader 140, the system sees the virtual reader once the USB device has been enumerated.

[0077] This invention relates to methods and devices enabling USB transactions when a USIC or a USC is used in a virtual USB SC reader and at the same time these methods and devices enable ISO transactions when a USIC is used in an ISO SC reader. The field of the invention is that of authentication devices and more specifically SC, Token and IC carrying more than one serial interface such as USB and ISO and authentication devices and more specifically SC, token and IC carrying USB interface only.

[0078] An ISO reader 120 (FIG. 9) is recognized by the hardware platform using it even when no SC is inserted. The SC needs to be inserted in order for the protocol to start. No electrical signals are applied to the SC until the SC turns on a position switch, which tells the platform that a SC is mechanically in place. A reader used in Payphone, POS or in ATM must comply with all the protocols used by different SC generations to insure legacy. Different SCs can be used in a reader. Both synchronous and asynchronous SCs have obliged reader manufacturer to design interface transceiver on each ISO contacts except the power supply contacts (FIG. 8). The ISO 7816-2 requires up to eight connections between the SC reader and the ISO SC lead frame. Contact C1 is assigned to the Supply voltage VCC, contact C2 is assigned to the Reset signal RST, contact C3 is assigned to the Clock signal CLK, contact C5 is assigned to the GND reference voltage, contact C6 is assigned to the Variable supply voltage VPP and contact C7 is assigned to Data input/output I/O. In synchronous ISO7816-10 applications, under type 2 operating conditions, contact C4 is assigned to function code FCB and contact CB may also be used for other synchronous applications. An asynchronous SC under class B operating conditions does not require VPP voltage on C6. An asynchronous SC under class A operating conditions does require VPP voltage on C6. A synchronous SC under specific operating conditions may assign CB to a fuse zapping capability. Furthermore, each reader contacts, beside VCC and GND, may have passive networks equipped with anti Electro-Static Discharge (ESD) circuits to VCC and GND to protect the IC against ESD during the SC insertion phase. Then, all eight ISO 7816-2 interface contacts have been assigned specific characteristics with active or passive networks.

[0079] Once the SC is in place, a switch informs the reader interface that the SC is in place. The powering up sequence may start. As described in the ICO7816-3, the SC reader interface circuit applies VCC and then, at the SC reader earliest convenience, the interface circuit applies the Clock (CLK) signal and after no less than 400 CLK cycles the Reset (RST) signal is released. The SC answers to the reader RST signal by sending an Answer To Reset (ATR) after 400 CLK cycles and before 40000 CLK cycles to the reader. The link is established and any transactions may start.

[0080] The SC of the present invention is compatible for use in USB applications. The USB requires four wires. For a USIC or USC, VBUS and GND can be dispatched respectively to the lead frame contacts C1 and C5. This is a minor change since in ISO7816-2, C1 is dedicated to VCC and C5 is dedicated to GND. The signals D+ and D− can also be dispatched respectively to the lead frame contacts C4 and C8. These two contacts were reserved for future use in asynchronous SC as per ISO7816-2. Lead frame contacts C3, C6 and C7 are available for USB mode selection or other uses.

[0081] The SC reader compatible with USIC or USC is not recognized by the hardware platform when no USIC nor USC is inserted. The USB SC reader is a virtual USB reader. The reader is recognized by the hardware platform when a USIC or a USC is attached to the USB and behaves like a USB device. When USIC or a USC is inserted in a virtual USB reader 140 it has to select NISO mode until the power is removed.

[0082] When the USIC or a USC is inserted in the virtual USB reader 140 there is no switch to detect that the lead frame contacts are well positioned under the reader contacts before the interface applies any signals. The insertion process may take a long time with rebounds of milliseconds. When the SC is inserted into the cost-effective virtual USB reader 140, the lead frame contacts are hot plugged. The power is applied during the process of SC insertion. The SC should detect that it is used in USB and attaches itself to the USB once the insertion process is completed until the next power off sequence. The USB virtual reader 140 mating a USIC or a USC behaves as a USB bus powered device 143. The host 121 will detect that a USB device has been attached and it will reset it before starting its enumeration by sending a single ended zero (SE0) signal. When inserted in a USB virtual reader 140, a SC will not be damaged but will not work.

[0083] When inserted in a USB virtual reader 140, a USIC needs to select its NISO mode until a power off sequence comes, and support USR transactions including suspend mode. When inserted in a USB virtual reader 140, a USC will support USB transactions including suspend mode.

[0084] To summarize, SC, USIC and USC devices have to comply with the following rules:

• [0085] 1. A USIC has to select the ISO mode of operation when inserted in an ISO reader.
• [0086] 2. A USIC has to select the NISO mode of operation when inserted in an USB virtual reader.
• [0087] 3. A USC is by default in NISO mode and will support USB transactions when inserted in a USB virtual reader.
• [0088] 4. A USC is not damaged when inserted in an ISO reader.
• [0089] 5. A SC is not damaged when inserted in an USB virtual reader.

[0090] The mode selection process uses at least one contact. C2 is used at two logic levels in ISO, C3 is driven at zero or by a clock in ISO, C4 may be connected to zero by the interface in ISO and is not available in USB, C6 should be forced to zero by the USB interface, since it may be forced at V?P by the ISO interface, C7 should be forced to zero by the USB interface, since it may be pulled up by the ISO interface and C8 may be connected to zero by the ISO interface and is not available in USB. C3, C6 and C7 may be used to select the mode in which a USIC is going to perform.

[0091] Because of the nature of the smart card, inserted and removed once the transaction is complete many times a day for example, there is a need for USIC or USC to detect if it is properly inserted before starting the CPU when used in an USB virtual reader 140. Not only the proper voltage must be applied to the IC 1100 but the link between the device C4 and C8 and the host D+ and D− established. Once the device is physically connected to the host 121, it may attach itself to the USB.

[0092] The present invention is implemented to solve the foregoing tasks. It includes a method or a device, which sets the USIC, and more generally the IC used in a USIC device in the mode matching the reader characteristics in which it is inserted. When an USIC is inserted in an ISO reader the USIC is working in ISO and the RST signal supplied by the SC reader interface starts the microcontroller. When an USIC is inserted in a USB virtual reader 140, the USIC is working in a non-ISO (NISO) and the reset signal for the microcontroller is generated using D− or D+signals in conjunction with a Low Voltage Detection. When an USC is inserted in a USB virtual reader 140, the USC is working in NISO and the reset signal for the microcontroller is generated using D− or D+signals in conjunction with a USB voltage detector.

[0093] The control logic of the IC 1100 used in USIC performs the following tasks in a first preferred embodiment:

• • [0094] detects if an appropriate first power supply voltage is applied to the IC;
  • [0095] detects if any CLK is applied to the C3 pin of the IC while it is pulled up by a load to C1, if the CLK is applied or stays at zero, the mode is ISO else the mode is NISO;
  • [0096] stores the result in a MODE register;
  • [0097] if the IC is latched in the ISO mode, the pin RST starts the microcontroller, which check the MODE register content and all transactions are performed as specified in ISO-7816 standards;
  • [0098] if the IC is latched in the NISO mode, the voltage present on C1 is checked to be greater than a second minimum power supply voltage specified by the USB specification greater than the first voltage and if it is so, the control logic detects if the pins D− or D+ are pulled down by the USB host 15 kΩ pull down resistors after a defined settling delay, else nothing happens until the voltage becomes greater than the acceptable limit;
  • [0099] if the pins D− or D+ are pulled down by the USB host 15 kΩ pull down resistors this information is stored in a USB_RST register and the control logic of the IC authorizes the microcontroller to start, The microcontroller reads MODE register content and the program enters the USB subprogram;
  • [0100] the subprogram waits an appropriate time such that the attachment of the device may be effective before 100 ms after the good supply voltage has been detected, as described in the USB specification, the microcontroller checks if the pins D− or D+ are pulled down by the USB 15 kΩ loads by reading the actual status of the connections. If the connections are established the device attach itself to the USB by connecting a pull up resistor on D− for a low speed device and D+for a full speed device on one side and to an internal 3.3 Volt voltage reference on the other side in compliance with the USB specifications and all transactions are performed as specified in USB specifications. If this is not the case the microcontroller goes in MUTE and waits for a new power up sequence.

[0101] When a USIC or a USC is inserted into an USB virtual reader 140, the Smart Card interface must be able to detect that it is used in USB and start an adapted power up sequence compliant with the USB specification. When a USIC is inserted into an ISO reader 120, the Smart Card interface must be able to detect that it is used in ISO and start an adapted power up sequence compliant with the ISO specification.

[0102] When a SC 110 (FIG. 5) equipped with a module 120 having contacts 115, and possibly a magnetic strip 112 and an embossed area 114, is inserted in a SC reader (FIG. 6) guided by 131 a switch 130 stops the SC and signals that a SC is inserted. The SC 110 is carrying a module 120 (FIGS. 7A and 7B) where all eight ISO contacts C1-C8 are at the opposite of a lead frame 111. An IC 1100 is attached to the lead frame 111. Electrical connections between the IC 1100 and the lead frame contacts are done using wire bonding techniques 109. A mechanical and chemical protection will complete the packaging of this less than 200 μm-thickness structure.

[0103] Turning now to FIG. 8, there is a table listing which contacts synchronous and Asynchronous applications are using. I1 application are still in use for prepaid SC. On the same table we have listed the present applications USIC and USC and how are assigned the contacts described in ISO7816-2 to the module embedded in these cards.

[0104] Turning now to FIG. 9, it represents the prior art where the ISO SC reader 120 handles ISO SC only. A computer 121 has three main interfaces: parallel 122, series 123 and USB 124. The ISO SC reader 120 is having a Computer to ISO 2^nd interface 125, a ISO driver 1^st interface 126 and a passthrough connector 127.

[0105] Turning now to FIG. 10, module contacts have been given names compliant with ISO and USB applications.

[0106] Turning now to FIG. 11, there is shown an ISO SC reader 120 handling ISO SC, or USB compliant SC such as USIC or USC.

[0107] FIG. 12 represents the action of the SC insertion in the SC reader 120 on the switch 130.

[0108] Passthrough contacts 180 mate with module contacts. Turning now to FIG. 13, it represents the signals generated by the ISO SC interface once the switch 130 has been detected on. VCC is applied first than VPP if any, and up to the interface the clock may appear followed by a RST. It is important to note that in ISO, the contact C3 (RST) is at “0” or shortly at “1” and never permanently at “1”.

[0109] FIG. 14 represents a preferred embodiment of the invention where the IC 1100 has a pull up resistor 190 on C3 inside the IC 1100. 192 is an inverting Schmitt trigger. The USIC is in an ISO SC reader.

[0110] FIG. 15 represents another embodiment of the invention where the IC 1100 has a pull up resistor 190 on C7 inside the IC 1100. 192 is a non inverting Schmitt trigger. The USIC is in an ISO SC reader.

[0111] FIG. 16 represents another embodiment of the invention where the IC 1100 has a pull up resistor 190 on C6 inside the IC 1100. 192 is a non inverting Schmitt trigger. The USIC is in an ISO SC reader.

[0112] FIG. 17 summarizes what is happening in the three above embodiments. Embodiment of FIG. 14, when VCC is set on C1 a signal Badpwr is set to “1” until the voltage VCC is above a certain limit, example 0.8 Volt, for at least a certain period of time, example 500 μs. Badpwrwd is the same signal which ast approximately 4 μs (dt) more. The CLK type 1 signal is applied, and if during dt the signal at the input of 192 goes to “0” the latch 195 is reset and MODE is forced to “0” by the set on 196. If the CLK type 2 signal is applied, during dt the signal at the input of 192 goes to “0” the latch 195 is reset and MODE is forced to “0” by the set on 196. For both clock signals, dt must be greater than the half period of the largest period, 1 μs, allowed on C3.

[0113] The embodiment of FIG. 15, when VCC is set on C1 a signal Badpwr is set to “1” until the voltage VCC is above a certain limit, example 2.8 Volt, for at least a certain period of time, example 500 μs. Badpwrwd is the same signal which last approximately 4 μs more. The C7 contact is having a weak pull up resistor outside because of the ISO protocol but also inside to be sure that there is a pull up. If during dt, the signal at the input of 192 stays at “1” the latch 195 is reset and MODE is forced to “0” by the set on 196. The embodiment of FIG. 16, when VCC is set on C1 a signal Badpwr is set to “1” until the voltage VCC is above a certain limit, example 2.8 Volt, for at least a certain period of time, example 500 vs. Badpwrwd is the same signal which last approximately 4 μs more. The C6 contact is having a voltage VPP driving it because of the ISO protocol but is having also a pull resistor 190, if during dt the signal at the input of 192 stays at “1” the latch 195 is reset and MODE is forced to “0” by the set on 196.

[0114] Turning now to FIG. 18, it represents a virtual USB reader 140 with its passthrough connector 127′, its USB cable 142 and the USB series A plug connector 141. USC and USIC are compliant with this reader. The virtual reader 140 is connected to the USB port 124 of the host PC 121. The SC 1200 inserted in the virtual reader 140 forms a USB device 143. Turning now to FIG. 19, passthrough contacts 180 mate with module contacts. There is no action of the SC telling the SC reader to apply voltages. The embarqued system on the chip 1100 not only must select the mode NISO but it must be sure also to start the microcontroller in an appropriate manner since there is no reset signal. The pin C6 and I/O are connected to GND since that is the only possibility for them if they are used to detect the mode NISO, and the pin C3 may be connected to VBUS. The internal pull-up resistor is preferable since it avoids any rebounce between the contact and the pin.

[0115] Turning now to FIG. 20, is represented all the signals involved in a NISO detection. VCC is applied to the USIC or USC at t0. Badpwr will set CUSBPD at t2. By the time being the card insertion process is ongoing and at some point the contact C4 and CB will be connected to the pull down resistors 1122 and 1123 in the host. Signals “D− in place” and “D+ in place” represent the fact that the SC contacts are touching the interface contacts while bouncing. The CUSBPD FIG. 21 signal delivers a current to the resistors 1122 and 1123 calibrated by 1103 and 1104.

[0116] The resulting voltages on D− and on D+ are monitored by comparators 1112, 1113, 1114 and 1115. The voltage divider is such that when both the voltage on D- and on D+ are below the voltage on the upper side of the resistor 1110 and above the voltage on the lower side of that same resistor the AND 1116 delivers USBPD t5 and resets 1119 to generate USB_RST at t7. The generated voltages across resistors 1122 and 1123 are less than a VIH of 2.8 Volts such that it is not interpreted by the host as an attachment which occurs at t12. The RST of the CPU 1121 is released because the switching block is as per MODE=1. The CPU has started and initializes itself, reads MODE and performs transactions in USB until there is a power off sequence. Later, but before the 100 ms limit set by the USB specification, the CPU check if the USBPD at t8 is at “l”. If so the device disables CUSBPD. The device attaches itself on the USB by ATTACH at t12 by connecting the pull up device 1101 to the 3.3 Volt using 1102. The host drives the USB with the single ended zero (SE0) signal after t13. During t14 the enumeration of the device starts.

[0117] Turning now to FIG. 24, it summarizes what is happening in the three embodiments. The preferred embodiment of FIG. 21, when VCC is set on C1 a signal Badpwr is set to “1” until the voltage VCC is above a certain limit, example 2.8 Volt, for at least a certain period of time, example 500 is. Badpwrwd is the same signal which last approximately 4 as more. The contact C3 is at “1” because of the routing inside the virtual reader FIG. 19, not connected, and because of the pull up resistor 190. Bouncing on C3 does not disturb this embodiment. If during dt the signal at the input of 192 stays to “1” the latch 196 is reset by Q 195 and MODE=1=NISO. In the embodiment of FIG. 22, when VCC is set on C1 a signal Badpwr is set to “1” until the voltage VCC is above a certain limit, example 2.8 Volt, for at least a certain period of time, example 500 μs. Badpwrwd is the same signal which last approximately 4 μs more. The C7 contact is connected to the ground outside the virtual reader, if during dt the signal at the input of 192 stays at “0” the latch 196 is reset by Q 195 and MODE=1=NISO. In the embodiment of FIG. 23, when VCC is set on C1 a signal Badpwr is set to “1” until the voltage VCC is above a certain limit, example 2.8 Volt, for at least a certain period of time, example 500 μs. Badpwrwd is the same signal which last approximately 4 μs more. The C6 contact is connected to the ground outside the virtual reader, if during dt the signal at the input of 192 stays at “0” the latch 196 is reset by Q 195 and MODE=1=NISO.

[0118] Turning now to FIG. 25, a flow diagram of a USIC process is depicted. In FIG. 26, a USC module is =w represented. In that case the MODE is forced at 1. When this module is used in an ISO reader nothing happens. In an USB virtual reader, the IC will start in USB following the procedure described on FIG. 20.

[0119] FIG. 27 shows a SIM card 1400 ready to be removed from the SC. The SIM card 1400 may embed a USIC or a USC module 110. Turning now to FIG. 28, a different form factor for the USB virtual reader depicted in FIG. 18 is shown. 1500 is a token reader. The SIM card 1400 is inserted in a passthrough connector 127′ but not using any cable. The series A plug 141 is directly connected to the passthrough connector.

[0120] Many modifications and other embodiments of the invention will come to the mind of one skilled in the art having the benefit of the teachings presented in the foregoing descriptions and the associated drawings. Therefore, it is understood that the invention is not to be limited to the specific embodiments disclosed, and that modifications and embodiments are intended to be included within the scope of the appended claims.