METHOD OF LOADING DATA INTO A PORTABLE SECURE TOKEN

• US 20130305339A1
• Filed: 10/28/2011
• Published: 11/14/2013
• Est. Priority Date: 11/15/2010
• Status: Active Grant

• Current Assignee: Thales DIS France SA
• Original Assignee: Gemal To SA
• Inventors: Amiel, Patrice, Berard, Xavier, Preulier, Eric, Gallas, Frederic
• Granted Patent: US 9,621,527 B2
• Time in Patent Office: Days
• US Class Current: 726/9
• CPC Class Codes: G06F 21/77 in smart cards
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/086 using security domains

Abstract

The invention is a method for loading data into a portable secure token comprising a plurality of security domains. A first security domain comprises a first administration agent and a second security domain comprises a second administration agent. A remote application server comprises a first data to be provided to the second administration agent. A syndication server, which is distinct from the remote application server, contains a list which comprises a reference to the first data. The list is sent in response to a polling request that is sent by the first administration agent. This list is comprised in a polling response which is sent by the syndication server.

Claims

1. A method in a system comprising a portable secure token having a plurality of security domains including a first security domain comprising a first administration agent and a second security domain comprising a second administration agent, and a remote application server comprising a first data to be provided to the second administration agent, the method comprising:

in response to a polling request sent by the first administration agent, sending a polling response by a syndication server, the polling response comprising a list containing a reference to the first data, wherein said syndication server is distinct from the remote application server.

2. A method according to claim 1, wherein said method comprises the steps of:

sending said list from the first administration agent to the second administration agent,

retrieving said data by the second administration agent from the remote application server, by using the list.

3. A method according to claim 1, wherein said list is updated in the syndication server after the first data has been loaded into the secure token.

4. A method according to claim 1, wherein said syndication server comprises a second list targeting said first administration agent, wherein the second list comprises a reference to a second data which is stored in a second remote application server and wherein said polling response comprises the second list.

5. A method according to claim 1, wherein the second security domain comprises an application and wherein said first data is provided to the application by the second administration agent.

6. A method according to claim 1, wherein the polling request is sent through a first communication protocol and wherein said first data is loaded into the secure token through a second communication protocol which has security features superior to the first communication protocol.

7. A method according to claim 6, wherein said first communication protocol is HTTP and said second communication protocol is HTTPS.

8. A portable secure token intended to communicate with a system comprising a remote application server and a preset server, said portable secure token comprising a plurality of security domains in which a first security domain comprises a first administration agent, and in which a second security domain comprises a second administration agent, said first administration agent being configured to send a polling request to the preset server and to receive a polling response, said second administration agent being configured to retreive a first data from the remote application server,

wherein the preset server is a syndication server distinct from the remote application server,

and wherein the first security domain comprises first and second means, said first means being configured to identify a list comprising a reference to the first data in said polling response, and said second means being configured to send the list to the second administration agent.

9. A portable secure token according to claim 8, wherein said first administration agent is configured to send the polling request through a first communication protocol and wherein said second administration agent is configured to load the first data in the secure token through a second communication protocol which has security features superior to the first communication protocol.

10. A portable secure token according to claim 9, wherein said first communication protocol is HTTP and said second communication protocol is HTTPS.

11. A system comprising:

a portable secure token, said portable secure token comprising a plurality of security domains in which a first security domain comprises a first administration agent, and in which a second security domain comprises a second administration agent;

a remote application server comprising a first data to be provided to the second administration agent; and

a syndication server containing a list comprising a reference to the first data,

wherein the first administration agent is configured to send a polling request to the syndication server,

wherein the syndication server is configured to send a polling response comprising the list, in response to the polling request, and

wherein said syndication server is distinct from the remote application server.