SYSTEMS AND METHODS FOR UPDATABLE APPLETS

• US 20150193222A1
• Filed: 01/05/2015
• Published: 07/09/2015
• Est. Priority Date: 01/03/2014
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Pirzadeh, Kiushan, Kekicheff, Marc, Wong, Hendy, Summers, Kuen
• Granted Patent: US 10,108,409 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

Embodiments of the invention relate to a device comprising an updatable applet and a static applet. For some embodiments, a device is disclosed comprising a processor, one or more memories storing an updatable applet, and a static applet in communication with the updatable applet, wherein the device is configured to receive updates to the updatable applet. The updatable applet and static applet may be executed through an access control software element that may prevent unrestricted access between the applets.

Claims

1. A method for processing data using application code including a static applet comprising a first plurality of software functions and an updatable applet comprising a second plurality of software functions stored on a computing device, and an access control software element, the method comprising:

a) determining, by a data processor, that the application code needs to be updated;

b) updating, by the data processor, the updatable applet;

c) updating, by the data processor, a function map comprising addresses for the software functions in the updatable applet and the static applet; and

d) executing, by the data processor, the updatable applet and the static applet, through the access control software element, using the updated function map, to perform a process.

2. The method of claim 1 further comprising:

storing the updated updatable applet in a trusted execution environment.

3. The method of claim 2, wherein the trusted execution environment is a secure element.

4. The method of claim 1, wherein the access control software element is a firewall.

5. The method of claim 1, wherein the process comprises conducting a payment transaction using the computing device.

6. The method of claim 1, wherein the updatable applet communicates with the static applet by accessing a plurality of shared interfaces in the static applet, wherein each shared interface comprises one or more functions in the first plurality of software functions.

7. The method of claim 1, wherein the static applet communicates with the updatable applet by accessing a plurality of shared interfaces in the updatable applet, wherein each shared interface comprises one or more functions in the second plurality of software functions.

8. The method of claim 1, wherein the static applet comprises personalization data and the updatable applet comprises no personalization data.

9. The method of claim 1, further comprising:

receiving, by the data processor, updated code for a first function in the first plurality of software functions; and

storing, by the data processor, the updated code in the updatable applet, wherein updating the function map comprises updating an address of the first function to reflect a location in the updatable applet of the updated code.

10. The method of claim 1, wherein the static applet verifies the source and authenticity of the updatable applet.

11. The method of claim 10, wherein the verification of the source and authenticity of the updatable applet utilizes public key cryptography.

12. A computing device comprising:

a processor; and

a computer readable medium coupled to the processor, the computer readable medium comprising code, executable by the processor to implement a method for processing data using application code including a static applet comprising a first plurality of software functions and an updatable applet comprising a second plurality of software functions stored on a computing device, and an access control software element, the method comprising

a) determining, by a data processor, that the application code needs to be updated,

b) updating, by the data processor, the updatable applet,

c) updating, by the data processor, a function map comprising addresses for the software functions in the updatable applet and the static applet, and

d) executing, by the data processor, the updatable applet and the static applet, through the access control software element, using the updated function map, to perform a process.

13. The computing device of claim 12, wherein the method further comprises:

storing the updated updatable applet in a trusted execution environment.

14. The computing device of claim 12, wherein the trusted execution environment is a secure element.

15. The computing device of claim 12, wherein the access control software element is a firewall.

16. The computing device of claim 12, wherein the process comprises conducting a payment transaction using the computing device.

17. The computing device of claim 12, wherein the updatable applet communicates with the static applet by accessing a plurality of shared interfaces in the static applet, wherein each shared interface comprises one or more functions in the first plurality of software functions.

18. The computing device of claim 12, wherein the static applet communicates with the updatable applet by accessing a plurality of shared interfaces in the updatable applet, wherein each shared interface comprises one or more functions in the second plurality of software functions.

19. The computing device of claim 12, wherein the static applet comprises personalization data and the updatable applet comprises no personalization data.

20. The computing device of claim 12, wherein the method further comprises:

receiving, by the data processor, updated code for a first function in the first plurality of software functions; and

storing, by the data processor, the updated code in the updatable applet, wherein updating the function map comprises updating an address of the first function to reflect a location in the updatable applet of the updated code.