Computer program product containing instructions for providing a processor the capability of executing an application derived from a compiled form

• US 20110126178A1
• Filed: 10/19/2010
• Published: 05/26/2011
• Est. Priority Date: 10/25/1996
• Status: Active Grant

• Current Assignee: Gemalto SA (Thales SA)
• Original Assignee: Gemalto SA (Thales SA)
• Inventors: Guthery, Scott B., Krishna, Ksheerabdhi, Montgomery, Michael A., Wilkinson, Timothy J.
• Granted Patent: US 8,726,247 B2
• Time in Patent Office: Days
• US Class Current: 717/139
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/77 in smart cards
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: G06F 8/41 Compilation
• CPC Class Codes: G06F 8/443 Optimisation
• CPC Class Codes: G06F 8/52 Binary to binary
• CPC Class Codes: G06F 9/445 Program loading or initiating bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57
• CPC Class Codes: G06F 9/44557 Code layout in executable memory
• CPC Class Codes: G06F 9/45504 Abstract machines for programme code execution, e.g. Java virtual machine [JVM], interpreters, emulators
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors
• CPC Class Codes: G06F 9/54 Interprogram communication
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/3563 Software being resident on card
• CPC Class Codes: G06Q 20/3574 Multiple applications on card
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/131 Protocols for games, networked simulations or virtual reality
• CPC Class Codes: H04L 69/329 : in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 : Network security protocols
• CPC Class Codes: H04W 12/03 : Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/062 : Pre-authentication

Abstract

An integrated circuit card is used with a terminal. The integrated circuit card includes a memory that stores an interpreter and an application that has a high level programming language format. A processor of the card is configured to use the interpreter to interpret the application for execution and to use a communicator of the card to communicate with the terminal.

Claims

1. A combination of computer program products, stored in computer readable memory, comprising:

a derivative application, stored in a computer readable memory, and derived from an application having a class file format wherein the application is derived from an application having a class file format by first compiling the application having a class file format into a compiled form and then converting the compiled form into a converted form; and

an interpreter, stored in a computer readable memory, and having computer executable instructions configured to cause a processor executing the instructions of the interpreter to interpret the derivative application in the converted form and derived from an application having a class file format thereby causing the processor to perform operations defined by the application.

2. The combination of computer program products of claim 1 wherein the derivative application and the interpreter are stored in the same computer readable memory.

3. The combination of computer program products of claim 1 wherein the derivative application and the interpreter are stored in different computer readable memories.

4. The combination of computer program products of claim 1 wherein the class file format comprises a Java class file format.

5. A computer program product loaded in memory and operable within a set of resource constraints, comprising:

at least one application to be interpreted by an interpreter, wherein the at least one application is generated by a programming environment comprising;

a) a compiler for compiling application source programs written in high level language source code form into a compiled form, and

b) a converter for post-processing the compiled form into a minimized form suitable for interpretation within the set of resource constraints by the interpreter.

6. The computer program product of claim 5 wherein the compiled form includes attributes, and the converter comprises a means for including attributes required by the interpreter while not including the attributes not required by the interpreter.

7. The computer program product of claim 5 wherein the compiled form is in a standard Java class file format and the converter accepts as input the compiled form in the standard Java class file format and produces output in a form suitable for interpretation by the interpreter.

8. The computer program product of claim 5 wherein the compiled form includes associating an identifying string for objects, classes, fields, or methods, and the converter comprises a means for mapping such strings to unique identifiers.

9. The computer program product of claim 8 wherein each unique identifier is an integer.

10. The computer program product of claim 8 wherein the compiled form includes associating an identifying string for objects, classes, fields, or methods, and the converter comprises a means for mapping such strings to unique identifiers.

11. The computer program product of claim 5 wherein the high level language supports a first set of features and a first set of data types and the interpreter supports a subset of the first set of features and a subset of the first set of data types, and wherein the converter verifies that the compiled form only contains features in the subset of the first set of features and only contains data types in the subset of the first set of data types.

12. The computer program product of claim 8 wherein the compiled form is in a byte code format and the converter comprises means for translating from the byte codes in the compiled form to byte codes in a format suitable for interpretation by the interpreter by:

using at least one step in a process including the steps;

a) recording all jumps and their destinations in the original byte codes;

b) converting specific byte codes into equivalent generic byte codes or vice-versa;

c) modifying byte code operands from references using identifying strings to references using unique identifiers; and

d) renumbering byte codes in the compiled form to equivalent byte codes in the format suitable for interpretation; and

relinking jumps for which destination address is effected by conversion step a), b), c), or d).

13. The computer program product of claim 5 wherein the application program is compiled into a compiled form for which resources required to execute or interpret the compiled form exceed those allocated to the interpreter.

14. The computer program product of claim 5 wherein the compiled form is designed for portability on different computer platforms.

15. The computer program product of claim 5 wherein at least one application program is generated by a process including the steps of:

prior to loading the application verifying that the application does not violate any security constraints; and

loading the application in a secure manner.

16. The computer program product of claim 15 wherein the step of loading in a secure manner comprises the step of:

encrypting the application to be loaded using a loading key.

28. The method of claim 15 wherein the step of loading in a secure manner comprises the step of:

encrypting the application to be loaded using a loading key.

17. A method for operating a portable device comprising:

using an interpreter, comprising processor-executable instructions and stored in computer readable memory of the portable device, to cause a processor of the portable device to interpret a derived application stored in computer readable memory of the portable device, wherein the derived application is derived from an application in a compiled form by converting the compiled form into a converted form.

18. The method of claim 17 wherein the compiled form includes attributes, and the converter comprises a means for including attributes required by the interpreter while not including the attributes not required by the interpreter.

19. The method of claim 17 wherein the compiled form is in a standard Java class file format and the converter accepts as input the compiled form in the standard Java class file format and produces output in a form suitable for interpretation by the interpreter.

20. The method of claim 17 wherein the compiled form includes associating an identifying string for objects, classes, fields, or methods, and the converter comprises a means for mapping such strings to unique identifiers.

21. The method of claim 20 wherein each unique identifier is an integer.

22. The method of claim 20 wherein the compiled form includes associating an identifying string for objects, classes, fields, or methods, and the converter comprises a means for mapping such strings to unique identifiers.

23. The method of claim 17 wherein the high level language supports a first set of features and a first set of data types and the interpreter supports a subset of the first set of features and a subset of the first set of data types, and wherein the converter verifies that the compiled form only contains features in the subset of the first set of features and only contains data types in the subset of the first set of data types.

24. The method of claim 20 wherein the compiled form is in a byte code format and the converter comprises means for translating from the byte codes in the compiled form to byte codes in a format suitable for interpretation by the interpreter by:

using at least one step in a process including the steps;

a) recording all jumps and their destinations in the original byte codes;

b) converting specific byte codes into equivalent generic byte codes or vice-versa;

c) modifying byte code operands from references using identifying strings to references using unique identifiers; and

d) renumbering byte codes in the compiled form to equivalent byte codes in the format suitable for interpretation; and

relinking jumps for which destination address is effected by conversion step a), b), c), or d).

25. The method of claim 17 wherein the application program is compiled into a compiled form for which resources required to execute or interpret the compiled form exceed those allocated to the interpreter.

26. The method of claim 17 wherein the compiled form is designed for portability on different computer platforms.

27. The method of claim 17 wherein at least one application program is generated by a process including the steps of:

prior to loading the application verifying that the application does not violate any security constraints; and

loading the application in a secure manner.

29. A combination of computer program products, stored in computer readable memory, comprising:

a derivative application, stored in a computer readable memory, and derived from an application having a class file format wherein the application is derived from an application having a class file format by first compiling the application having a class file format into a compiled form and then converting the compiled form into a converted form; and

a virtual machine, stored in a computer readable memory, and having computer executable instructions configured to cause a processor executing the instructions of the virtual machine to interpret the derivative application in the converted form and derived from an application having a class file format thereby causing the processor to perform operations defined by the application.

30. The combination of computer program products of claim 29 wherein the derivative application and the virtual machine are stored in the same computer readable memory.

31. The combination of computer program products of claim 29 wherein the derivative application and the virtual machine are stored in different computer readable memories.

32. The combination of computer program products of claim 29 wherein the class file format comprises a Java class file format.

33. A computer program product loaded in memory, comprising:

at least one application to be interpreted by a virtual machine, wherein the at least one application is generated by a programming environment comprising;

a) a compiler for compiling application source programs written in high level language source code form into a compiled form, and

b) a converter for post-processing the compiled form into a minimized form suitable for interpretation within the set of resource constraints by the virtual machine.

34. The computer program product of claim 33 wherein the compiled form includes attributes, and the converter comprises a means for including attributes required by the virtual machine while not including the attributes not required by the virtual machine.

35. The computer program product of claim 33 wherein the compiled form is in a standard Java class file format and the converter accepts as input the compiled form in the standard Java class file format and produces output in a form suitable for interpretation by the virtual machine.

36. The computer program product of claim 33 wherein the compiled form includes associating an identifying string for objects, classes, fields, or methods, and the converter comprises a means for mapping such strings to unique identifiers.

37. The computer program product of claim 36 wherein each unique identifier is an integer.

38. The computer program product of claim 36 wherein the compiled form includes associating an identifying string for objects, classes, fields, or methods, and the converter comprises a means for mapping such strings to unique identifiers.

39. The computer program product of claim 33 wherein the high level language supports a first set of features and a first set of data types and the virtual machine supports a subset of the first set of features and a subset of the first set of data types, and wherein the converter verifies that the compiled form only contains features in the subset of the first set of features and only contains data types in the subset of the first set of data types.

40. The computer program product of claim 36 wherein the compiled form is in a byte code format and the converter comprises means for translating from the byte codes in the compiled form to byte codes in a format suitable for interpretation by the virtual machine by:

using at least one step in a process including the steps;

a) recording all jumps and their destinations in the original byte codes;

b) converting specific byte codes into equivalent generic byte codes or vice-versa;

c) modifying byte code operands from references using identifying strings to references using unique identifiers; and

d) renumbering byte codes in the compiled form to equivalent byte codes in the format suitable for interpretation; and

relinking jumps for which destination address is effected by conversion step a), b), c), or d).

41. The computer program product of claim 33 wherein the application program is compiled into a compiled form for which resources required to execute or interpret the compiled form exceed those allocated to the virtual machine.

42. The computer program product of claim 33 wherein the compiled form is designed for portability on different computer platforms.

43. The computer program product of claim 33 wherein at least one application program is generated by a process including the steps of:

prior to loading the application verifying that the application does not violate any security constraints; and

loading the application in a secure manner.

44. The computer program product of claim 43 wherein the step of loading in a secure manner comprises the step of:

encrypting the application to be loaded using a loading key.

56. The method of claim 43 wherein the step of loading in a secure manner comprises the step of:

encrypting the application to be loaded using a loading key.

45. A method for operating a portable device comprising:

using a virtual machine, comprising processor executable instructions and stored in computer readable memory of the portable device, to cause a processor of the portable device to interpret the instructions of a derived application stored in computer readable memory of the portable device, wherein the derived application is derived from an application in a compiled form by converting the compiled form into a converted form.

46. The method of claim 45 wherein the compiled form includes attributes, and the converter comprises a means for including attributes required by the virtual machine while not including the attributes not required by the virtual machine.

47. The method of claim 45 wherein the compiled form is in a standard Java class file format and the converter accepts as input the compiled form in the standard Java class file format and produces output in a form suitable for interpretation by the virtual machine.

48. The method of claim 45 wherein the compiled form includes associating an identifying string for objects, classes, fields, or methods, and the converter comprises a means for mapping such strings to unique identifiers.

49. The method of claim 48 wherein each unique identifier is an integer.

50. The method of claim 48 wherein the compiled form includes associating an identifying string for objects, classes, fields, or methods, and the converter comprises a means for mapping such strings to unique identifiers.

51. The method of claim 45 wherein the high level language supports a first set of features and a first set of data types and the virtual machine supports a subset of the first set of features and a subset of the first set of data types, and wherein the converter verifies that the compiled form only contains features in the subset of the first set of features and only contains data types in the subset of the first set of data types.

52. The method of claim 48 wherein the compiled form is in a byte code format and the converter comprises means for translating from the byte codes in the compiled form to byte codes in a format suitable for interpretation by the virtual machine by:

using at least one step in a process including the steps;

a) recording all jumps and their destinations in the original byte codes;

b) converting specific byte codes into equivalent generic byte codes or vice-versa;

c) modifying byte code operands from references using identifying strings to references using unique identifiers; and

d) renumbering byte codes in the compiled form to equivalent byte codes in the format suitable for interpretation; and

relinking jumps for which destination address is effected by conversion step a), b), c), or d).

53. The method of claim 45 wherein the application program is compiled into a compiled form for which resources required to execute or interpret the compiled form exceed those allocated to the virtual machine.

54. The method of claim 45 wherein the compiled form is designed for portability on different computer platforms.

55. The method of claim 45 wherein at least one application program is generated by a process including the steps of:

prior to loading the application verifying that the application does not violate any security constraints; and

loading the application in a secure manner.