System for communicating program data between a first device and a second device

• US 7,484,095 B2
• Filed: 01/16/2003
• Issued: 01/27/2009
• Est. Priority Date: 01/16/2003
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: de Jong, Eduard
• Primary Examiner(s): Vu; KimYen
• Assistant Examiner(s): Dada; Beemnet W
• Application Number:
  US10/346,581
• Publication Number:
  US 20040143641A1
• Time in Patent Office: 2,203 Days
• Field of Search: 713164-167, 713/80, 713/189, 713/180, 713/170, 713/176, 705/65, 705/66, 709/213, 709/229, 709/236
• US Class Current: 713/170
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3672 initialising or reloading thereof
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A system for communicating program data between devices includes a first device configured to disassemble a program file comprising program data into at least one logical data unit, partition each logical data unit into at least one protocol data unit and compute a first fingerprint over the payload portion of the protocol data units. The first device is also configured to send the protocol data units and at least one member of the group comprising the first fingerprint and a first authentication code based on the first fingerprint to a second device. The second device is configured to compute a second fingerprint over the payload portion of the protocol data units and to commit the program to a memory based on whether the at least one member matches the second fingerprint or a second authentication code based on the second fingerprint.

Claims

1. A system for communicating program data between a first device and a second device, the system comprising:

a first device configured to;

disassemble a first program file comprising program data into a first at least one logical data unit;

partition each of said first at least one logical data unit into a first at least one protocol data unit, the format of said first at least one protocol data unit defined by a communication protocol and including a payload portion;

compute a first fingerprint over the payload portion of said first at least one protocol data unit of said first at least one logical data unit; and

send a second program file comprising said program data and one or more members of the group comprising said first fingerprint and a first authentication code based at least in part on said first fingerprint;

a second device configured to;

receive said second program file and at least one of said group;

disassemble said program data into a second at least one logical data unit; and

partition each of said second at least one logical data unit into a second at least one protocol data unit; and

a third device comprising a memory, said third device configured to;

receive at least one of said group and said second at least one protocol data unit;

compute a second fingerprint over the payload portion of said second at least one protocol data unit; and

commit said program to said memory based at least in part on whether said one or more members match said second fingerprint or a second authentication code based at least in part on said second fingerprint.

2. The system of claim 1 wherein said first device comprises a host computer;

said second device comprises a loading terminal; and

said third device comprises a smart card.

3. The system of claim 2 wherein said smart card comprises a Java Card™

technology-enabled smart card.

4. The system of claim 2 wherein said smart card comprises a CDMA (Code Division Multiple Access) technology-enabled smart card.

5. The system of claim 2 wherein said smart card comprises a SIM (Subscriber Identity Module) card.

6. The system of claim 2 wherein said smart card comprises a WIM (Wireless Interface Module).

7. The system of claim 2 wherein said smart card comprises a USIM (Universal Subscriber Identity Module).

8. The system of claim 2 wherein said smart card comprises a UIM (User Identity Module).

9. The system of claim 2 wherein said smart card comprises a R-UIM (Removable User Identity Module).

10. The system of claim 1 wherein said program data comprises a class file.

11. The system of claim 1 wherein said first program file comprises a JAR file;

and said second program file comprises a JAR file.

12. The system of claim 1 wherein said first program file comprises a CAP file;

and said second program file comprises a CAP file.

13. The system of claim 1 wherein said first authentication code further comprises at least one loading device authentication code for use by said second device in authenticating said second program file received from said first device.

14. The system of claim 1 wherein said first authentication code further comprises at least one target device authentication code for use by a third device in authenticating data received from said second device, said received data based at least in part on said first program file.

15. The system of claim 1 wherein

said protocol comprises an application protocol data unit (APDU) protocol;

and

said protocol data units comprise application protocol data units (APDUs).

16. The system of claim 15 wherein said protocol further comprises using a trailer APDU to indicate a last APDU associated with a program unit.

17. The system of claim 15 wherein said protocol further comprises using a header APDU to indicate an expected sequence of one or more logical program APDUs to follow said header APDU.

18. The system of claim 1 wherein

said first fingerprint comprises a checksum;

and

said second fingerprint comprises a checksum.

19. The system of claim 1 wherein

said first fingerprint comprises a cyclic redundancy code (CRC);

and

said second fingerprint comprises a CRC.

20. The system of claim 1 wherein

said first fingerprint comprises a message digest;

and

said second fingerprint comprises a message digest.

21. The system of claim 1 wherein

said first fingerprint comprises a keyed hash-based message authentication code (HMAC);

and

said second fingerprint comprises a HMAC.

22. A system for communicating program data between a first device and a second device, the system comprising:

a first device configured to;

disassemble a first program file comprising program data into at least one logical data unit;

partition each of said at least one logical data unit into at least one protocol data unit, the format of said at least one protocol data unit defined by a communication protocol and including a payload portion;

compute a first fingerprint over the payload portion of the protocol data units of said at least one logical data unit; and

send said protocol data units of said at least one logical data unit and one or more members of the group comprising said first fingerprint and a first authentication code based at least in part on said first fingerprint to said second device according to said protocol; and

a second device comprising a memory, said second device configured to;

receive at least one of said group and said protocol data units;

compute a second fingerprint over the payload portion of said protocol data units; and

commit said program to said memory based at least in part on whether said one or more members match said second fingerprint or a second authentication code based at least in part on said second fingerprint.

23. The system of claim 22 wherein said second device comprises a smart card.

24. The system of claim 23 wherein said smart card comprises a Java Card™

technology-enabled smart card.

25. The system of claim 23 wherein said smart card comprises a CDMA (Code Division Multiple Access) technology-enabled smart card.

26. The system of claim 23 wherein said smart card comprises a SIM (Subscriber Identity Module) card.

27. The system of claim 23 wherein said smart card comprises a WIM (Wireless Interface Module).

28. The system of claim 23 wherein said smart card comprises a USIM (Universal Subscriber Identity Module).

29. The system of claim 23 wherein said smart card comprises a UIM (User Identity Module).

30. The system of claim 23 wherein said smart card comprises a R-UIM (Removable User Identity Module).

31. The system of claim 22 wherein said program data comprises a class file.

32. The system of claim 22 wherein said program file comprises a JAR file.

33. The system of claim 22 wherein said program file comprises a CAP file.

34. The system of claim 22 wherein

said protocol comprises an application protocol data unit (APDU) protocol;

and

said protocol data units comprise application protocol data units (APDUs).

35. The system of claim 34 wherein said protocol further comprises using a trailer APDU to indicate a last APDU associated with a program unit.

36. The system of claim 34 wherein said protocol further comprises using a header APDU to indicate an expected sequence of one or more logical program APDUs to follow said header APDU.

37. The system of claim 22 wherein

said first fingerprint comprises a checksum;

and

said second fingerprint comprises a checksum.

38. The system of claim 22 wherein

said first fingerprint comprises a cyclic redundancy code (CRC);

and

said second fingerprint comprises a CRC.

39. The system of claim 22 wherein

said first fingerprint comprises a message digest;

and

said second fingerprint comprises a message digest.

40. The system of claim 22 wherein

said first fingerprint comprises a keyed hash-based message authentication code (HMAC);

and

said second fingerprint comprises a HMAC.

41. A system for communicating program data between a first device and a second device, the system comprising:

a first device configured to;

disassemble a first program file comprising program data into a first at least one logical data unit;

partition each of said first at least one logical data unit into a first at least one protocol data unit, the format of said first at least one protocol data unit defined by a communication protocol and including a payload portion, the order of protocol data units within said first at least one protocol data unit determined according to a predetermined order;

compute a first fingerprint over the payload portion of said first at least one protocol data unit of said first at least one logical data unit; and

send a second program file comprising said program data and one or more members of the group comprising said first fingerprint and a first authentication code based at least in part on said first fingerprint;

a second device configured to;

receive said second program file and at least one of said group;

disassemble said program data. into a second at least one logical data unit; and

partition each of said at second least one logical data unit into a second at least one protocol data unit, the order of protocol data units within said second at least one protocol data unit identical to the order of protocol data units within said first at least one protocol data unit, the content of said first at least one protocol data unit identical to the content of said second at least one protocol data unit; and

a third device comprising a memory, said third device configured to;

receive said one or more members and said second at least one protocol data unit;

compute a second fingerprint over the payload portion of said second at least one protocol data unit; and

commit said program to said memory based at least in part on whether said one or more members match said second fingerprint or a second authentication code based at least in part on said second fingerprint.

42. The system of claim 41 wherein

said first device comprises a host computer;

said second device comprises a loading terminal; and

said third device comprises a smart card.

43. The system of claim 42 wherein said smart card comprises a Java Card™

technology-enabled smart card.

44. The system of claim 42 wherein said smart card comprises a CDMA (Code Division Multiple Access) technology-enabled smart card.

45. The system of claim 42 wherein said smart card comprises a SIM (Subscriber Identity Module) card.

46. The system of claim 42 wherein said smart card comprises a WIM (Wireless Interface Module).

47. The system of claim 42 wherein said smart card comprises a USIM (Universal Subscriber Identity Module).

48. The system of claim 42 wherein said smart card comprises a UIM (User Identity Module).

49. The system of claim 42 wherein said smart card comprises a R-UIM (Removable User Identity Module).

50. The system of claim 41 wherein said program data comprises a class file.

51. The system of claim 41 wherein said program file comprises a JAR file.

52. The system of claim 41 wherein said program file comprises a CAP file.

53. The system of claim 41 wherein said first authentication code further comprises at least one loading device authentication code for use by said second device in authenticating said second program file received from said first device.

54. The system of claim 41 wherein said first authentication code further comprises at least one target device authentication code for use by a third device in authenticating data received from said second device, said received data based at least in part on said first program file.

55. The system of claim 41 wherein

said protocol comprises an application protocol data unit (APDU) protocol;

and

said protocol data units comprise application protocol data units (APDUs).

56. The system of claim 55 wherein said protocol further comprises using a trailer APDU to indicate a last APDU associated with a program unit.

57. The system of claim 55 wherein said protocol further comprises using a header APDU to indicate an expected sequence of one or more logical program APDUs to follow said header APDU.

58. The system of claim 41 wherein

said first fingerprint comprises a checksum;

and

said second fingerprint comprises a checksum.

59. The system of claim 41 wherein

said first fingerprint comprises a cyclic redundancy code (CRC);

and

said second fingerprint comprises a CRC.

60. The system of claim 41 wherein

said first fingerprint comprises a message digest;

and

said second fingerprint comprises a message digest.

61. The system of claim 41 wherein

said first fingerprint comprises a keyed hash-based message authentication code (HMAC);

and

said second fingerprint comprises a HMAC.