Data Processing Method and Device

• US 20070220603A1
• Filed: 08/12/2005
• Published: 09/20/2007
• Est. Priority Date: 08/17/2004
• Status: Abandoned Application

• Current Assignee: Oberthur Technologies SA (Advent International Corporation)
• Original Assignee: Oberthur Card Systems, S.A. (Advent International Corporation)
• Inventors: Chamberot, Francis
• Application Number:
  US11/660,218
• Publication Number:
  US 20070220603A1
• Time in Patent Office: Days
• US Class Current: 726/22
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/60 Protecting data

Abstract

The invention concerns a data processing method comprising a step (E308) which consists in verifying a criterion indicative of the normal running of the method and a step (E320) which consists in processing performed in case of negative verification. The processing step (E230) is separated from the verifying step (E308) by an intermediate step (E312, E314) of non-null duration. The intermediate step (E312, E314) and/or the processing step (E320) includes at least one action (E314) performed in case of positive verification. The invention also concerns a corresponding device.

Claims

1. Data processing method comprising:

a step of verification of a criterion indicative of the normal running of the method; and

a processing step (E528) effected in the case of negative verification,

characterized in that, a first action (E512) being effected in the case of positive verification, the processing step entails effecting at least one second action (E528) having a first characteristic in common with the first action (E512).

3. Method according to claim 1, wherein the second action is different from the first action.

5. Method according to claim 1, wherein, the method being implemented in electronic apparatus (10), the first or second common characteristic is the electrical consumption or the electromagnetic radiation of the apparatus generated by the first, respectively the third, action and by the second, respectively the fourth, action.

6. Method according to claim 1 any, wherein the first or second common characteristic is the number of instructions used in the first, respectively the third, action and in the second, respectively the fourth, action.

7. Method according to claim 1, wherein the first or second common characteristic is the type of instruction used by the first, respectively the third, action and by the second, respectively the fourth, action.

8. Method according to claim 1 wherein the first or second common characteristic is the type of data processed by the first, respectively the third, action and by the second, respectively the fourth, action.

9. Method according to claim 1, wherein the first, respectively the third, action entailing access to a first area of a memory, the second, respectively the fourth, action entails access to a second area of said memory different from the first area.

10. Method according to claim 1, wherein the first or second common characteristic is communication with an external device.

11. Method according to claim 10, wherein the external device is a cryptoprocessor.

12. Method according to claim 10, wherein the external device is a memory (2, 6).

13. Method according to claim 10, wherein the external device is a rewritable semiconductor memory (6).

14. Method according to claim 10, wherein the external device is a user terminal.

15. Method according to claim 1, wherein the first action entails a secure step.

16. Method according to claim 15, wherein the secure step entails a cryptographic algorithm.

17. Method according to claim 1, wherein the processing step (E320, E528) entails writing blocking data into a physical memory (6).

18. Method according to claim 17, wherein the writing (E528) of blocking data is effected in accordance with a chronology identical to writing (E512) data into the physical memory (6) in the case of normal running of the method.

19. Method according to claim 18, wherein the data represents a pecuniary value.

20. Method according to claim 1, wherein the criterion is negative if an erroneous signature is provided.

21. Method according to claim 1, wherein the criterion is negative if an anomaly is detected.

22. Method according to claim 1, wherein the criterion is negative if an attack is detected.

23. Method according to claim 1, wherein the criterion is negative if a functional error is detected.

25. Method according to claim 1, executed by a microprocessor (2) of a microcircuit card (10).

2. Data processing method comprising:

a step (E308;

E406, E410, E416) of verification of a criterion indicative of the normal running of the method; and

a processing step (E320;

E458;

E528) effected in the case of negative verification,

wherein the processing step (E320;

E458;

E528) is separated from the verification step (E308;

E406, E410, E416) by an intermediate step (E312, E314;

E450, E452, E454, E456;

E520, E522, E524, E526) of non-null duration, characterized in that, a first action (E314;

E408, E412, E414;

E504, E506, E508, E510) being effected in the case of positive verification, the intermediate step entails effecting at least one second action (E314;

E450, E454, E456;

E520, E522, E524, E528) having at least one first characteristic in common with the first action.

4. Method according to claim 2, wherein, a third action (E418;

E512) being effected in the case of positive verification, the processing step entails effecting at least one fourth action (E458;

E528) having at least one second characteristic in common with the third action (E418;

E512).

24. Method according to claim 2, wherein the intermediate step entails at least one instruction determined during the execution of the method.

26. Data processing device comprising:

means for verification of a criterion indicative of the normal operation of the device;

processing means used in the case of negative verification; and

separation means for separating the operation of the verification means from the operation of the processing means by a non-null duration,

characterized in that, first action means being used in the case of positive verification, the separation means have at least one first characteristic in common with the first action means.

27. Device according to claim 26, wherein, second action means being used in the case of positive verification, the processing means have at least one second characteristic in common with the second action means.

29. Device according to claim 26, the device being a microcircuit card.

28. Data processing device comprising:

means for verification of a criterion indicative of the normal operation of the device; and

processing means used in the case of negative verification,

characterized in that, first action means being used in the case of positive verification, the processing means have at least one first characteristic in common with the first action means.