Signing program data payload sequence in program loading

• US 8,121,955 B2
• Filed: 01/16/2003
• Issued: 02/21/2012
• Est. Priority Date: 01/16/2003
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Oracle America, Inc. (Oracle Corporation)
• Inventors: de Jong, Eduard
• Primary Examiner(s): Badii, Behrang
• Application Number:
  US10/346,230
• Publication Number:
  US 20040143551A1
• Time in Patent Office: 3,323 Days
• Field of Search: 726/20, 726/9, 726/7, 713/178, 713/200, 713/193, 713/189, 713/192, 709/250
• US Class Current: 705/64
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 21/608 Secure printing
• CPC Class Codes: G06F 9/445 Program loading or initiating bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

Communicating program data between a first device and a second device comprises disassembling a first program file comprising program data into at least one logical data unit, partitioning each of the at least one logical data unit into at least one protocol data unit and computing a first fingerprint over the payload portion of the at least one protocol data unit of the at least one logical data unit. The format of the at least one protocol data unit is defined by a communication protocol and includes a payload portion.

Claims

1. A method comprising:

receiving, on loading terminal from a host computer, an augmented converted applet file comprising (i) program data, and (ii) verification data including one or more members of the group comprising a first fingerprint and a first authentication code based at least in part on said first fingerprint, wherein said loading terminal is different from a smart card;

separating, on said loading terminal, the verification data from the program data in the augmented converted applet file;

disassembling, on said loading terminal, said program data into at least one logical data unit;

creating, on said loading terminal, at least one verification protocol data unit associated with one of said at least one logical data unit, said verification protocol data unit comprising verification data for said logical data unit, wherein the verification data for the logical data unit is generated using the verification data separated from the program data in the augmented converted applet file;

partitioning, on said loading terminal, each of said at least one logical data unit into at least one protocol data unit, the format of said at least one protocol data unit defined by a communication protocol used to communicate the at least one protocol data unit between the loading terminal and the smart card, wherein the format of the protocol data unit includes a payload portion; and

communicating, from the loading terminal to the smart card, said protocol data units of said at least one logical data unit and the at least one verification protocol data unit according to said communication protocol.

2. The method of claim 1 wherein said method further comprises:

creating at least one link protocol data unit associated with one of said at least one logical data unit, said link protocol data unit comprising link data for said logical data unit.

3. The method of claim 1 further comprising:

receiving, by said loading terminal from said smart card, an indication of whether said first fingerprint matches a second fingerprint computed over the payload portion of the protocol data units received by said smart card.

4. The method of claim 1 further comprising:

receiving, by said loading terminal from said smart card, an indication of whether said one or more members match a second authentication code based at least in part on a second fingerprint, said second fingerprint computed over the payload portion of the protocol data units received by said smart card.

5. The method of claim 1 wherein

said communication protocol comprises an application protocol data unit (APDU) protocol;

and

said protocol data units comprise application protocol data units (APDUs).

6. The method of claim 1, further comprising receiving, by said loading terminal from said smart card an indication of whether said one or more members matches a second fingerprint computed over the payload portion of the protocol data units received by said smart card, or a second authentication code based at least in part on said second fingerprint.

7. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method comprising:

receiving, on loading terminal from a host computer, an augmented converted applet file comprising (i) program data, and (ii) verification data including one or more members of the group comprising a first fingerprint and a first authentication code based at least in part on said first fingerprint, wherein said loading terminal is different from a smart card;

separating, on said loading terminal, the verification data from the program data in the augmented converted applet file;

disassembling, on said loading terminal, said program data into at least one logical data unit;

creating, on said loading terminal, at least one verification protocol data unit associated with one of said at least one logical data unit, said verification protocol data unit comprising verification data for said logical data unit, wherein the verification data for the logical data unit is generated using the verification data separated from the program data in the augmented converted applet file;

partitioning, on said loading terminal, each of said at least one logical data unit into at least one protocol data unit, the format of said at least one protocol data unit defined by a communication protocol used to communicate the at least one protocol data unit between the loading terminal and the smart card, wherein the format of the protocol data unit includes a payload portion; and

communicating, from the loading terminal to the smart card, said protocol data units of said at least one logical data unit and the at least one verification protocol data unit according to said communication protocol.

8. An apparatus comprising:

a loading terminal including;

a memory for storing program data; and

a processor configured to;

receive, from a host computer, an augmented converted applet file comprising (i) program data, and (ii) verification data including one or more members of the group comprising a first fingerprint and a first authentication code based at least in part on said first fingerprint;

separate the verification data from the program data in the augmented converted applet file;

disassemble said program data into at least one logical data unit;

create at least one verification protocol data unit associated with one of said at least one logical data unit, said verification protocol data unit comprising verification data for said logical data unit, wherein the verification data for the logical data unit is generated using the verification data separated from the program data in the augmented converted applet file;

partition each of said at least one logical data unit into at least one protocol data unit, the format of said at least one protocol data unit defined by a communication protocol used to communicate the at least one protocol data unit between the loading terminal and the smart card, wherein the format of the protocol data unit includes a payload portion; and

communicate, to a smart card, said protocol data units of said at least one logical data unit and the at least one verification protocol data unit according to said communication protocol, wherein said loading terminal is different from the smart card.