Method and system for the distributed creation of a program for a programmable portable data carrier

• US 20040148502A1
• Filed: 02/18/2004
• Published: 07/29/2004
• Est. Priority Date: 02/22/2001
• Status: Abandoned Application

• Current Assignee: Giesecke & Devrient GmbH
• Original Assignee: Giesecke & Devrient GmbH
• Inventors: Gollner, Michael, Ciesinger, Daniel
• Application Number:
  US10/467,334
• Publication Number:
  US 20040148502A1
• Time in Patent Office: Days
• US Class Current: 713/167
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: G06F 8/41 Compilation

Abstract

A method is proposed for distributed creation of a program for a programmable portable data carrier (10) e.g. a smart card. Program source text (Q) is created on a user computer (20), compiled and linked into executable program code (C) on a spatially separate compiler server (30), and the executable program code (C) loaded into data carrier (10) again via the user computer (20). A secure end-to-end link is set up for the data exchange between data carrier (10) and compiler server (30). For this purpose, the data carrier (10) is provided, in a precompletion step, with software tools for final processing that permit a transport code (U, C_SSL, UC_SM) provided in a transient format to be converted into executable program code (C). the transport code (U, C_SSL, UC_SM) is secured by encryption mechanisms. The transfer of the executable program code (C) generated by the compiler server (30) to the data carrier (10) is effected in the transient format (U, C_SSL, UC_SM).

Claims

1. A method for distributed creation of an executable program for a programmable portable data carrier, a program source text being created on a first computer located with a user, the program source text being compiled and linked into an executable program code, after transfer, on a second computer located with the issuer of the data carrier, and the executable program code being loaded into the data carrier after reverse transfer via the first computer, characterized in that

in a precompletion step, software tools for final processing are created on the data carrier (10) that allow an executable program code (C) to be obtained from a transport code (U, UC_SM, C_SSL) present in a transient format,

executable program code (C) generated in the second computer (30) is converted into transport code (U, UC_SM, C_SSL) for reverse transfer, and

transport code (U, UC_SM, C_SSL) retransferred to the first computer (20) for incorporation in the data carrier (10) is reconverted into executable program code (C) by means of the software tools.

2. A method according to claim 1, characterized in that the program source text (Q) created on the first computer (20) is given a transport security mechanism for transfer to the second computer (30) by being encrypted.

3. A method according to claim 1, characterized in that the software tools comprise identification information (114) designating a data carrier (10), and a signature key (124).

4. A method according to claim 1, characterized in that the software tools comprise a program for carrying out an SSL handshake protocol (122) and/or a program for carrying out Secure Messaging (120).

5. A method according to claim 1, characterized in that the software tools comprise a private data carrier key (130) and a program for testing a signature with the public key (128) of a second computer (30).

6. A method according to claim 1, characterized in that executable program code (C) to be loaded into the portable data carrier (10) is executed with the involvement of the second computer (30) to determine possible errors.

7. A method according to claim 6, characterized in that executable program code (C) to be loaded into the portable data carrier (10) is executed on the second computer (30) with the involvement of the first computer (20).

8. A method according to claim 1, characterized in that the executable program code (C) is stored in the memory (113) of the data carrier (10).

9. A programmable portable data carrier with an integrated circuit having a processor and a memory for receiving program code executable by the processor, characterized in that software tools for final processing are created in the integrated circuit (12) that permit a transport code (U, UC_SM, C_SSL) supplied in a transient format to be converted into executable program code (C).

10. A data carrier according to claim 9, characterized in that it has at least one sequence counter (136).

11. A data carrier according to claim 9, characterized in that it contains identification information (114) designating the data carrier (10), and a key (124) for forming a data protection code, which associate it with a defined second computer (30).

12. A computer for carrying out a distributed creation of an executable program for a programmable portable data carrier, containing at least a compilation program and a linking program (312), characterized in that it has means for recovering a program source text (Q) from a received transport code (T, TQ, TQ_SSL) present in a transient format.

13. A computer according to claim 12, characterized in that it has means for detecting and checking the identity of a data carrier (10) to be programmed.

14. A computer according to claim 12, characterized in that it maintains a table (340) storing identification information (114) designating the data carrier for each portable data carrier (10) that is programmable by means of the computer (30).

15. A computer according to claim 12, characterized in that it has means (321) for formal verification of a program code (C) generated by compilation.

16. A computer according to claim 12, characterized in that it has means (316) for checking a generated program code (C) by direct execution as to whether it contains errors.

19. A system for distributed creation of an executable program for a programmable portable data carrier, comprising a portable data carrier according to claim 9 and a computer according to claim 12.

17. A computer for carrying out a distributed creation of an executable program for a programmable portable data carrier, containing at least a first interface for data exchange with a data carrier and a second interface to a data link, characterized in that

it has means for executing an editing program (22) for creating a program source text (Q) not executable by the computer (20) itself,

and it has means permitting, via the first and second interfaces (24, 26), direct data transfer between a portable data carrier (10) and a second computer (39) connected via the data link (28).

18. A computer according to claim 17, characterized in that it has means for executing an SSL protocol.

20. A system according to claim 20, characterized in that it further comprises a computer according to claim 17.