METHOD OF PERSONALIZING AN APPLICATION EMBEDDED IN A SECURED ELECTRONIC TOKEN

• US 20120254394A1
• Filed: 11/29/2010
• Published: 10/04/2012
• Est. Priority Date: 12/17/2009
• Status: Active Grant

• Current Assignee: Gemalto SA (Thales SA)
• Original Assignee: Gemalto SA (Thales SA)
• Inventors: Barras, Cyril
• Granted Patent: US 8,914,489 B2
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: G06F 9/546 Message passing systems or structures, e.g. queues
• CPC Class Codes: G06Q 20/355 Personalisation of cards for use
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 67/025 for remote control or remote monitoring of applications
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/18 Multiprotocol handlers, e.g. single devices capable of handling multiple protocols
• CPC Class Codes: H04M 2203/053 remote terminal provisioning, e.g. of applets
• CPC Class Codes: H04M 3/387 using subscriber identification cards
• CPC Class Codes: H04M 3/42178 by downloading data to substation equipment
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning

Abstract

The invention is a method of personalizing an application embedded in a secured electronic token which is able to manage first and second channels that allow to convey personalization data exchanged with a distant machine. Said first and second channels are of different types. The application is of Javacard™ type and comprises at least a function which is invoked when personalization data is received from the distant machine regardless of the channel used for conveying the personalization data.

Claims

1. A method of personalizing an application embedded in a secured electronic token, said token being configured to manage first and second channels for conveying personalization data exchanged with a distant machine, said first and second channels being of different types, said application being of the Javacard™

type and comprising at least a function,

wherein said function is invoked when a personalization data is received from the distant machine irrespective of the channel used for conveying said personalization data and wherein said first channel is the I/O mode as defined by the ISO7816 standard and in that said function is the Process(APDU) method as defined in the Javacard™

standard.

2. A method according to claim 1, wherein said personalization data is comprised in a message and wherein said message comprises an identifier which causes said function to be invoked.

3. A method according to claim 1, wherein said second channel is an SMS over Card Application Toolkit Transport Protocol.

4. A method according to claim 3, wherein said message comprises a TP-PID field and wherein said TP-PID field comprises the identifier.

5. A method according to claim 2, wherein said second channel is one of HTTP or HTTPs over Bearer Independent Protocol or Internet Protocol.

6. A method according to claim 5, wherein said message comprises a content type field and wherein said identifier is a preset value of the content type field.

7. A secure electronic token configured to manage first and second channels for conveying personalization data exchanged with a distant machine, said first and second channels being of different types, said token comprising an application of the Javacard™

type, said application comprising at least a function,

wherein said secure electronic token comprises a means configured to invoke said function when a personalization data is received from the distant machine irrespective of the channel used for conveying said personalization data, said first channel is the I/O mode as defined by ISO7816 standard and said function is the Process(APDU) method as defined in the Javacard™

standard.

8. A secure electronic token according to claim 7, wherein said second channel is an SMS over Card Application Toolkit Transport Protocol.

9. A secure electronic token according to claim 8, wherein said personalization data is comprised in a message, wherein said message comprises a TP-PID field and wherein said token comprises a second means configured to check the value of a preset bit of the TP-PID field.

10. A secure electronic token according to claim 7, wherein said second channel is one of HTTP or HTTPs over Bearer Independent Protocol or Internet Protocol, wherein said personalization data is comprised in a message, wherein said message comprises a content type field and wherein said token comprises a second means configured to check the value of the content type field.