METHOD OF MANAGING A SECURE ELEMENT

• US 20190311155A1
• Filed: 06/14/2017
• Published: 10/10/2019
• Est. Priority Date: 07/13/2016
• Status: Active Grant

• Current Assignee: Thales DIS France SA
• Original Assignee: Gemalto SA (Thales SA)
• Inventors: COURTIADE, Fabien, ZAITI, Reda
• Granted Patent: US 10,956,620 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 21/77 in smart cards
• CPC Class Codes: H04W 12/00 Security arrangements; Authentication; Protecting privacy or anonymity
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A method for managing a secure element embedded in an equipment comprising an NFC controller. The secure element comprises a security indicator. The method comprises the steps of: on receipt of a triggering command sent by the NFC controller, the secure element switches in a test context; on receipt of a restore command sent by an application, the secure element sets the security indicator, such as a counter of unusual events, to a predefined value only if the secure element is in test context; and on receipt of an ending command sent by the NFC controller, the secure element switches in a Live context. The secure element keeps a track of the switch in the test context and denies any further triggering commands. The method enables reset of security indicator after manufacturing and test where the security indicator may have been affected.

Claims

1. A computer-implemented method for managing a secure element embedded in an equipment comprising an NFC controller, said secure element comprising a security indicator,

wherein said method comprises the steps:

on receipt of a triggering command sent by the NFC controller, the secure element switches in a test context in which the secure element may accept to reset the security indicator,

on receipt of a restore command sent by an application, the secure element sets the security indicator to a predefined value only if the secure element is in test context,

on receipt of an ending command sent by the NFC controller, the secure element switches in a Live context in which the secure element denies any attempt to reset the security indicator, said secure element keeping a track of the switch in the test context and denying any further triggering commands.

2. A method according to claim 1, wherein the secure set the security indicator to the predefined value only if the application successfully authenticated to the secure element.

3. A method according to claim 1, wherein the secure element sends a specific message to the NFC controller when the security indicator has been set to the predefined value and wherein the NFC controller sends the ending command in response to the receipt of the specific message.

4. A method according to claim 1, wherein on receipt of a switch command sent by an administration equipment, the NFC controller switches in a test mode and sends the triggering command to the secure element and wherein the NFC controller automatically switches in a Live mode after sending the ending command.

5. A method according to claim 1, wherein the application is hosted by either the equipment or an external computer.

6. A secure element comprising a security indicator, wherein on receipt of a triggering command received from an NFC controller, the secure element is configured to switch in a test context in which the secure element may accept to reset the security indicator, wherein on receipt of a restore command received from an application, the secure element is configured to set the security indicator to a predefined value only if the secure element is in test context, wherein on receipt of an ending command received from the NFC controller, the secure element is configured to switch in a Live context in which the secure element denies any attempt to reset said security indicator and wherein said secure element is configured to keep a track of the switch in said test context and to deny any further triggering commands.

7. A secure element according to claim 6, wherein the secure element is configured to set the security indicator to the predefined value only if the application successfully authenticated to the secure element.

8. An equipment comprising a secure element according to claim 6 and an NFC controller which is configured to send the triggering command to the secure element requesting that said secure element switches in the test context, and wherein said NFC controller is configured to send the ending command to the secure element for requesting that said secure element permanently switches in the Live context.

9. An equipment according to claim 8, wherein said equipment comprises an application configured to both authenticate to the secure element and to send a restore command to the secure element to request that the secure element sets the security indicator to a predefined value.

10. An equipment according to claim 8, wherein the NFC controller is configured to send the ending command in response to the receipt of a specific message received from the secure element.

11. An equipment according to claim 8, wherein the NFC controller is configured to switch in a test mode and to send the triggering command to the secure element on receipt of a switch command sent by an administration equipment and wherein the NFC controller is configured to automatically switch in a Live mode after sending the ending command.

12. An equipment according to claim 11, wherein the NFC controller is configured to keep a track of the switch in said Live mode and to deny any further triggering commands.

13. An equipment according to claim 8, wherein the equipment is a mobile phone, a connected watch, a tablet or an electronic device embedded in a computer.