METHOD AND TOKEN FOR MANAGING ONE PROCESSING RELATING TO AN APPLICATION SUPPORTED OR TO BE SUPPORTED BY A TOKEN

• US 20110296521A1
• Filed: 11/24/2009
• Published: 12/01/2011
• Est. Priority Date: 12/17/2008
• Status: Active Grant

• Current Assignee: Thales DIS France SA
• Original Assignee: Gemalto SA (Thales SA)
• Inventors: Bernabeu, Gil
• Granted Patent: US 9,582,955 B2
• Time in Patent Office: Days
• US Class Current: 726/19
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/35765 Access rights to memory zones
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits

Abstract

The invention relates to a method 30 for managing at least one processing relating to an application supported or to be supported by a token. The token comprises means for processing data, means for storing data and means for communicating with outside.

According to the invention, the method comprises steps in which at least one token user is required to give or not to give her/his authorization 38 before executing the at least one processing relating to an application supported or to be supported by the token; and the token verifies 316 whether the at least one token user gives or does not give her/his authorization.

The invention relates also to a corresponding token likely to cooperate with a terminal.

Claims

1. A method for managing at least one processing relating to an application supported or to be supported by a token, the token comprising means for processing data, means for storing data and means for communicating externally of the token,

wherein the method comprises the following steps:

the token sends data for requesting at least one token user to give her/his authorization before executing the at least one processing relating to an application supported or to be supported by the token;

the token verifies whether the at least one token user gives her/his authorization; and

if the at least one token user gives her/his authorization, then the token authorizes the execution of the at least one processing relating to an application supported or to be supported by the token.

2. Method according to claim 1, wherein, before a first step, of sending data for requesting at least one token user to give her/his authorization before executing the at least one processing relating to an application supported or to be supported by the token, the token generates data to send to externally, the data being relative to a pre-authorization number, the data being used to generate rights for authorizing the token to process a request for executing the at least one processing relating to an application supported or to be supported by the token.

3. Method according to claim 1, wherein, to give her/his authorization, the at least one token user enters a password, such as a Personal Identification Number, and/or personal biometric data, so as to authenticate the at least one token user.

4. Method according to claim 1, wherein the at least one processing relating to the application supported or to be supported comprises at least one element belonging to a group comprising:

a downloading of the application into the means for storing data;

a loading of the application into the means for storing data;

a moving of the application within the means for storing data;

an installation of the application within the means for storing data;

an execution of the application by the means for processing data;

a modification of the application by the means for processing data;

a deletion of the application within the means for storing data.

5. Method according to claim 1, wherein, before the first step of sending data for requesting at least one token user to give her/his authorization, the at least one token user enters an authorization number based upon data originating from a token issuer, the token issuer issuing the token.

6. Method according to claim 1, wherein the application supported or to be supported by the token is associated with one secure memory area of the token under one and the same control of the at least one token user, the secure memory area being included within the means for storing data.

7. Method according to claim 1, wherein the first step of sending data for requesting at least one token user to give her/his authorization before executing the at least one processing relating to an application supported or to be supported by the token, is carried out through a page relating to a web server embedded within the token.

8. Method according to claim 1, wherein, the token cooperates with a terminal, and the first step of sending data for requesting at least one token user to give her/his authorization before executing the at least one processing relating to an application supported or to be supported by the token, is carried out through a graphical application supported by the terminal, the graphical application being authenticated by the token.

9. Method according to claim 1, wherein, before the first step of sending data for requesting at least one token user to give her/his authorization before executing the at least one processing relating to an application to be supported by the token, the token receives data originating externally, the data comprising a request for creating one secure memory area of the token under one and the same control of the at least one token user, one secure memory area of the token being created under one and the same control of the at least one token user and associated with an application issuer, the application issuer issuing the application to be supported by the token.

10. A token for managing at least one processing relating to an application supported or to be supported by a token, the token comprising means for processing data, means for storing data and means for communicating externally of the token,

wherein the token is adapted to:

send data for requesting to at least one token user to give her/his authorization before executing the at least one processing relating to an application supported or to be supported by the token;

verify whether the at least one token user gives her/his authorization; and

authorize, if the at least one token user gives her/his authorization, the execution of the at least one processing relating to an application supported or to be supported by the token.