Remote card content management using synchronous server-side scripting

• US 8,793,651 B2
• Filed: 06/06/2012
• Issued: 07/29/2014
• Est. Priority Date: 05/24/2012
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Jin Eo, Young, Lee, Hyeongki, Lee, Jin Ho, Lee, JooHo
• Primary Examiner(s): Dao, Thuy
• Assistant Examiner(s): Wang, Ben C
• Application Number:
  US13/489,505
• Publication Number:
  US 20130318142A1
• Time in Patent Office: 783 Days
• Field of Search: None
• US Class Current: 717/115
• CPC Class Codes: G06F 9/44 Arrangements for executing specific programs
• CPC Class Codes: G06F 9/45512 Command shells
• CPC Class Codes: H04L 67/025 for remote control or remote monitoring of applications
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

Remote card content management using synchronous server-side scripting is provided. A method includes parsing a script configured to perform a card content management operation as a sequence of operations for a secure element based on receiving a request from a mobile device located remotely from a computer processor. The method also includes creating an execution context for the script to identify the sequence of operations in the script as non-flushing and flushing nodes. A flushing node is identified as an operation that sends a response to the request and expects a subsequent request from the mobile device for the secure element. The method further includes pausing execution of the script upon sending the response at the flushing node.

Claims

1. A method, comprising:

parsing, by a computer processor of a server system, a script configured to perform a card content management operation as a sequence of operations for a secure element based on receiving a request from a mobile device located remotely from the computer processor, the mobile device including the secure element;

creating, by the computer processor, an execution context for the script to identify the sequence of operations in the script as non-flushing and flushing nodes, a flushing node identified as an operation that sends a response to the request and expects a subsequent request from the mobile device for the secure element; and

pausing execution of the script upon sending the response at the flushing node to establish synchronous server-side scripting for remote card content management of the secure element.

2. The method of claim 1, wherein pausing execution of the script further comprises:

marking the flushing node as a current node in the execution context;

storing the execution context; and

halting execution of the script until the subsequent request is received.

3. The method of claim 1, further comprising:

upon receiving the subsequent request, identifying the current node in the execution context; and

continuing execution of the script until a next flushing node is reached.

4. The method of claim 1, further comprising:

associating a plurality of card content management scripts with the card content management operation; and

identifying and retrieving a current script using a current script identifier.

5. The method of claim 4, further comprising:

invoking an instance of a card content management processor associated with the card content management operation in an application container, the card content management processor comprising;

a script interpreter, the plurality of card content management scripts associated with the card content management operation, and the current script identifier.

6. The method of claim 5, further comprising:

accessing a map based on a unique identifier associated with the card content management operation to determine which instance of the card content management processor is associated with the card content management operation for the secure element.

7. The method of claim 6, wherein a plurality of instances of the card content management processor is associated with a plurality of card content management operations for a plurality of secure elements located remotely from the computer processor, and each of the instances of the card content management processor has a separate entry in the map and each of the instances of the card content management processor is a separate component in the application container.

8. The method of claim 1, wherein the secure element is a smart card in the mobile device.

9. The method of claim 8, wherein the request is for an application protocol data unit for the smart card, and further comprising:

based on receiving the request, responding with the application protocol data unit at the flushing node.

10. The method of claim 9, further comprising:

only sending the application protocol data unit in response to the request for the application protocol data unit.

11. The method of claim 1, wherein the parsing further comprises converting a text representation of the script into an interpretable list of nodes, and further comprising:

mapping a node to each line of the script to form the interpretable list of nodes identified as the non-flushing and flushing nodes.