Configuration of IC card

• US 6,761,319 B2
• Filed: 10/30/2001
• Issued: 07/13/2004
• Est. Priority Date: 01/22/1998
• Status: Expired due to Term

• Current Assignee: Mondex International Ltd. (MasterCard Incorporated)
• Original Assignee: Mondex International Ltd. (MasterCard Incorporated)
• Inventors: Peachman, Anthony David, Simmons, Ian Stephen
• Primary Examiner(s): ST CYR, DANIEL
• Application Number:
  US10/021,370
• Publication Number:
  US 20020053600A1
• Time in Patent Office: 987 Days
• Field of Search: 235/380, 235/379, 235/382, 235/441, 235/487, 235/492, 902/1, 902/2
• US Class Current: 235/492
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/3576 Multiple memory zones on card
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A secure multiple application card system including an IC card having a microprocessor, a ROM and an EEPROM, wherein program instructions are stored in the ROM at time of manufacture, and at time of personalization, an address table is stored in the EEPROM. Upon operation of the IC card, the operating system calls the program instructions, including codelets and primitives, in accordance with the addresses indicated in the address table.

Claims

1. A secure multiple application card system including an IC card comprising a microprocessor, a read-only memory and an electrically erasable programmable read only memory, said system comprising:

means for manufacturing said IC card and for storing at the time of manufacture in said read-only memory an operating system and programming instructions without an address table with memory addresses of at least one of said programming instructions, said programming instructions not being operational until subsequent storing of said address table at the time of personalization; and

means for personalizing said IC card after said manufacturing step and for storing at the time of personalization in said electrically erasable programmable read only memory said address table with memory addresses of at least one of said programming instructions,

wherein the operating system will only access the programming instructions in accordance with the addresses indicated in the address table.

2. The system of claim 1, wherein said programming instructions comprise at least one primitive.

3. The system of claim 1, wherein said programming instructions comprise at least one codelet.

4. The system of claim 1, wherein said means for personalizing said IC card and for storing in said electrically erasable programmable read only memory further stores additional programming instructions.

5. The system of claim 4, wherein said additional programming instructions comprise at least one primitive.

6. The system of claim 5, wherein said address table comprises a listing of the primitives'"'"' names to be accessed and memory addresses containing the primitives.

7. The system of claim 4, wherein said additional programming instructions comprise at least one codelet.

8. The system of claim 7, wherein said address table comprises a listing of the codelets'"'"' names to be accessed and memory addresses containing the codelets.

9. A process for providing a secure multiple application card system including an IC card comprising a microprocessor, a read-only memory and an electrically erasable programmable read only memory, said process comprising the steps of:

manufacturing said IC card and storing at the time of manufacture in said read-only memory an operating system and programming instructions without an address table with memory addresses of at least one of said programming instructions, said programming instructions not being operational until subsequent storing of said address table at the time of personalization; and

personalizing said IC card after said time of manufacture by storing in said electrically erasable programmable read only memory said address table with memory addresses of at least one of said programming instructions,

wherein the operating system will only access the programming instructions in accordance with the addresses indicated in the address table.

10. The process of claim 9, wherein said programming instructions comprise at least one primitive.

11. The process of claim 9, wherein said programming instructions comprise at least one codelet.

12. The process of claim 9, wherein said step of storing in said electrically erasable programmable read only memory further includes storing additional programming instructions.

13. The process of claim 12, wherein said additional programming instructions comprise at least one primitive.

14. The process of claim 13, wherein said address table comprises a listing of the primitives'"'"' names to be called and memory addresses containing the primitives.

15. The process of claim 12, wherein said additional programming instructions comprise at least one codelet.

16. The process of claim 15, wherein said address table comprises a listing of the codelets'"'"' names to be called and memory addresses containing the codelets.

17. A process for providing a secure multiple application card comprising a microprocessor, a first memory and a second memory, said process comprising the steps of:

manufacturing said card and storing at the time of manufacture in said first memory an operating system and programming instructions without an address table with memory addresses of at least one of said programming instructions, said programming instructions not being operational until subsequent storing of said address table at the time of personalization; and

personalizing said IC card after said storing step by storing in said second memory said address table with memory addresses of at least one of said programming instructions;

wherein said operating system will only access the programming instructions in accordance with the addresses indicated in the address table.

18. The process of claim 17, wherein said programming instructions comprise at least one primitive.

19. The process of claim 17, wherein said programming instructions comprise at least one codelet.

20. The process of claim 17, wherein said step of storing in said electrically erasable programmable read only memory further includes storing additional programming instructions.

21. The process of claim 20, wherein said additional programming instructions comprise at least one primitive.

22. The process of claim 21, wherein said address table comprises a listing of the primitives'"'"' names to be called and memory addresses containing the primitives.

23. The process of claim 20, wherein said additional programming instructions comprise at least one codelet.

24. The process of claim 23, wherein said address table comprises a listing of the codelets'"'"' names to be called and memory addresses containing the codelets.

25. A secure multiple application card system including an IC card comprising a microprocessor, a read-only memory and an electrically erasable programmable read only memory, said system comprising:

means for manufacturing said IC card and for storing at the time of manufacture in said read-only memory an operating system and programming instructions, said programming instructions not being operational until subsequent storing of an address table with memory addresses of at least one of said programming instructions at the time of personalization; and

means for personalizing said IC card after the time of manufacture and for storing at the time of personalization in said electrically erasable programmable read only memory said address table with memory addresses of at least one of said programming instructions,

wherein the operating system will only access the programming instructions in accordance with the addresses indicated in the address table;

and wherein said means for personalizing said IC card can be operated to store additional programming instructions in said read-only memory and includes means for inserting addresses for said additional programming instructions in said address table.

26. The system of claim 25, wherein said additional programming instructions correspond to updated versions of previously stored programming instructions and the means for inserting addresses in the address table overwrites existing addresses with addresses of the corresponding updated programming instructions.

27. The system of claim 26, wherein said programming instructions comprise at least one primitive.

28. The system of claim 27, wherein said additional programming instructions comprise at least one primitive.

29. The system of claim 27, wherein said address table comprises a listing of the names of the primitives to be accessed and memory addresses containing the primitives.

30. The system of claim 26, wherein said programming instructions comprise at least one codelet.

31. The system of claim 30, wherein said additional programming instructions comprise at least one codelet.

32. The system of claim 30, wherein said address table comprises a listing of the names of the codelets to be accessed and memory addresses containing the codelets.

33. A process for providing a secure multiple application card system including an IC card comprising a microprocessor, a read-only memory and an electrically erasable programmable read only memory, said process comprising the steps of:

manufacturing said IC card and storing at the time of manufacture in said read-only memory an operating system and programming instructions, said programming instructions not being operational until subsequent storing of an address table with memory addresses of at least one of said programming instructions at the time of personalization;

personalizing said IC card after said time of manufacture by storing in said electrically erasable programmable read only memory said address table with memory addresses of at least one of said programming instructions,

wherein the operating system will only access the programming instructions in accordance with the addresses indicated in the address table;

storing additional programming instructions in said read-only memory; and

inserting addresses for said additional programming instructions in said address table.

34. The process of claim 33, wherein said additional programming instructions correspond to updated versions of existing programming instructions and the step of inserting addresses in said address table comprises overwriting existing addresses with the addresses of the corresponding updated programming instructions.

35. The process of claim 34, wherein said programming instructions comprise at least one primitive.

36. The process of claim 35, wherein said address table comprises a listing of the names of the primitives to be called and memory addresses containing the primitives.

37. The process of claim 34, wherein said programming instructions comprise at least one codelet.

38. The process of claim 37, wherein said address table comprises a listing of the names of the codelets to be called and memory addresses containing the codelets.

39. A process for providing a secure multiple application card comprising a microprocessor, a first memory and a second memory, said process comprising the steps of:

a. storing in said first memory an operating system and programming instructions, said programming instructions not being operational until subsequent storing of an address table with memory addresses of at least one of said programming instructions at the time of personalization;

b. personalizing said IC card after said storing step by storing in said second memory said address table with memory addresses of at least one of said programming instructions,

wherein said operating system will only access the programming instructions in accordance with the addresses indicated in the address table;

c. storing additional programming instructions in said read-only memory, and

d. inserting addresses for said additional programming instructions in said address table.

40. The process of claim 39, wherein said additional programming instructions correspond to updated versions of existing programming instructions and the step of inserting addresses in said address table comprises overwriting existing addresses with the addresses of the corresponding updated programming instructions.

41. The process of claim 40, wherein said programming instructions comprise at least one primitive.

42. The process of claim 40, wherein said programming instructions comprise at least one codelet.

43. A multiple application card system including an IC card having an operating system, said system comprising:

means for manufacturing said IC card and for storing at the time of manufacture in said IC card a first set of programming instructions having a first address, without an address table with a second memory address of a second set of programming instructions;

means for storing in said IC card the second set of programming instructions; and

means for storing in said IC card, at a time of personalization, said address table with the second memory address, wherein after the time of personalization, the first set of programming instructions is rendered inaccessible to the operating system.

44. A process for providing a multiple application card system including an IC card having an operating system, comprising the steps of:

manufacturing said IC card and storing at the time of manufacture in said IC card a first set of programming instructions having a first address, without an address table with a second memory address of a second set of programming instructions;

storing in said IC card the second set of programming instructions; and

storing in said IC card, at a time of personalization, said address table with the second memory address, wherein after the time of personalization, the first set of programming instructions is rendered inaccessible to the operating system.