Computer program product containing instructions for providing a processor the capability of executing an application derived from a compiled form

• US 9,400,668 B2
• Filed: 05/12/2014
• Issued: 07/26/2016
• Est. Priority Date: 10/25/1996
• Status: Expired due to Fees

• Current Assignee: Gemalto SA (Thales SA)
• Original Assignee: Gemalto SA (Thales SA)
• Inventors: Wilkinson, Timothy J., Guthery, Scott B., Krishna, Ksheerabdhi, Montgomery, Michael A.
• Primary Examiner(s): Chavis, John
• Application Number:
  US14/275,506
• Publication Number:
  US 20140245272A1
• Time in Patent Office: 806 Days
• Field of Search: 717/148
• US Class Current: 1/1
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/77 in smart cards
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: G06F 8/41 Compilation
• CPC Class Codes: G06F 8/443 Optimisation
• CPC Class Codes: G06F 8/52 Binary to binary
• CPC Class Codes: G06F 9/445 Program loading or initiating bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57
• CPC Class Codes: G06F 9/44557 Code layout in executable memory
• CPC Class Codes: G06F 9/45504 Abstract machines for programme code execution, e.g. Java virtual machine [JVM], interpreters, emulators
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors
• CPC Class Codes: G06F 9/54 Interprogram communication
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/3563 Software being resident on card
• CPC Class Codes: G06Q 20/3574 Multiple applications on card
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/131 Protocols for games, networked simulations or virtual reality
• CPC Class Codes: H04L 69/329 : in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 : Network security protocols
• CPC Class Codes: H04W 12/03 : Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/062 : Pre-authentication

Abstract

An integrated circuit card is used with a terminal. The integrated circuit card includes a memory that stores an interpreter and an application that has a high level programming language format. A processor of the card is configured to use the interpreter to interpret the application for execution and to use a communicator of the card to communicate with the terminal.

Claims

1. A method of programming a device having a memory and

a processor, the method comprising the steps of:

inputting an application program in a first programming language;

compiling the application program in the first programming language into a first intermediate code associated with the first programming language wherein the first intermediate code is interpretable by a first intermediate code virtual machine;

converting the first intermediate code into a second intermediate code by performing at least one operation to replace a construct in the first intermediate code with an equivalent construct in the second intermediate code, wherein the second intermediate code is interpretable by the second intermediate code virtual machine by renumbering a byte code for the first virtual machine with a value corresponding to the byte code in the second virtual machine; and

loading the second intermediate code into the memory of the device.

2. The method of programming a device of claim 1 wherein the first intermediate code comprises at least a first class file having defined therein a first constant pool which is a data structure containing constants used by the first class file and a second class file having defined therein a second constant pool which is a data structure containing constants used by the second class file, wherein the operation to replace a construct in the first intermediate code with an equivalent construct in the second intermediate code comprises coalescing the first and second class files into one resulting class file by merging the first constant pool from the first class file with the second constant pool from the second class file.

3. The method of programming a device of claim 2 wherein the resulting class file comprises a shared constant pool having constants from each of the first constant pool and the second constant pool.

4. The method of programming a device of claim 2 further comprising removing duplicates of information items found in the first and second constant pools such that the resulting shared constant pool lacks duplication of at least one information item occurring in both the first and second constant pools.

5. The method of programming a device of claim 4 wherein the at least one information item is a string.

6. The method of programming a device of claim 2, wherein the at least one operation to replace a construct in the first intermediate code with an equivalent construct in the second intermediate code comprises replacing a first string identifying an object, a class, a field or a method in the first constant pool with an identifier.

7. The method of programming a device of claim 2 further comprising compacting the first and second class files.

8. The method of programming a device of claim 7 wherein the step of compacting the first and second class files comprises mapping string identifiers for an object, class, field, or method of the constant pool with an identifier.

9. The method of programming a device of claim 1 wherein the converting step comprises converting byte codes of the first intermediate code from a first set of byte codes associated with a first machine architecture into a second set of byte codes associated with a second machine architecture.

10. The method of programming a device of claim 9 wherein the first machine architecture is a word stack architecture and the second machine architecture is an architecture other than a word stack architecture.

11. The method of programming a device of claim 9 wherein the second machine architecture is a byte stack architecture.

12. The method of programming a device of claim 9 wherein the first and second machine architectures are virtual machine architectures.

13. The method of programming a device of claim 9 wherein the first machine architecture is a Java Virtual Machine architecture and the second machine architecture is not a Java Virtual Machine architecture.

14. The method of programming a device of claim 13 wherein the first machine architecture is a Java Virtual Machine and the second machine architecture is a Card Java Virtual Machine.

15. The method of programming a device of claim 1 wherein the converting step comprises removal of program parts.

16. The method of programming a device of claim 15 wherein the step of removal of program parts comprises the removal of attributes.

17. The method of programming a device of claim 15 wherein the step of removal of program parts comprises the removal of program parts not necessary for interpretation by the second intermediate code virtual machine.

18. The method of programming a device of claim 15 wherein the step of removal of program parts comprises the removal of parts not necessary for interpretation.

19. The method of programming a device of claim 15 wherein the step of removal of program parts comprises the removal of program parts not supported by the second intermediate code virtual machine.

20. The method of programming a device of claim 1 wherein the second intermediate code comprises a converted form class file, the method further comprising:

receiving the converted form class file;

processing the converted form class file to produce an application interpretable by the second code virtual machine while the second code virtual machine executes on the device; and

storing the produced application interpretable by the second code virtual machine on the device.

21. The method of programming a device of claim 1 further comprising:

multiple applications for the device stored on the second memory of the device;

receiving, from an input device operable to produce an application selection indication, an application selection indicating which application to execute; and

using the second code virtual machine to execute the selected application.

22. The method of programming a device of claim 21 further comprising:

receiving an application selection indication from an input device connected to the device.

23. The method of programming a device of claim 22 wherein the input device connected to the processor and operable to provide an application selection indication is a device operable to communicate with the device.

24. The method of programming a device of claim 23 wherein the input device operable to communicate with the device comprises one or more of an automated teller machine, point-of-sale terminal, access control system, system that communicates with an integrated circuit card, or a system that communicates with a microcontroller.

25. The method of programming a device of claim 1, wherein the at least one operation to replace a construct in the first intermediate code with an equivalent construct in the second intermediate code comprises replacing a first bytecode associated with an instruction for the first virtual machine with a second bytecode associated with an instruction for the second virtual machine.

26. The method of programming a device of claim 1, wherein the at least one operation to replace a construct in the first intermediate code with an equivalent construct in the second intermediate code comprises replacing a first bytecode associated with a specific instruction for the first virtual machine with a second bytecode associated with a generic instruction for the second virtual machine.

27. The method of programming a device of claim 1, wherein the first intermediate code is Java byte code.

28. An electronic device, comprising:

a memory and a processor connected to the memory;

the memory storing;

a second intermediate code virtual machine configured to interpret applications in a converted form; and

an application for the device obtained by;

a compiler operable to compile an application program in a first programming language into a first intermediate code associated with the first programming language wherein the first intermediate code is interpretable by at least one first intermediate code virtual machine; and

a converter operable to convert the first intermediate code into a second intermediate code by performing at least one operation to replace a construct in the first intermediate code with an equivalent construct in the second intermediate code by renumbering a byte code for the first virtual machine with a value corresponding to the byte code in the second virtual machine, wherein the second intermediate code is interpretable by a second intermediate code virtual machine.

29. The electronic device of claim 28 wherein the first intermediate code comprises at least a first class file having defined therein a first constant pool which is a data structure of constants used by the first class file and a second class file having defined therein a second constant pool which is a data structure containing constants used by the second class file, wherein the converter is operable to convert the first intermediate code into a second intermediate code by performing at least one operation to replace a construct in the first intermediate code with an equivalent construct in the second intermediate code by performing an operation to coalesce the first and second class files into one resulting class file by merging the first constant pool from the first class file and merging the first constant pool from the first class file with the second constant pool from the second class file thereby producing a shared constant pool for the resulting class file in the second intermediate code.

30. The electronic device of claim 29 wherein the resulting class file comprises a shared constant pool having at least one constant from each of the first constant pool and the second constant pool.

31. The electronic device of claim 30 wherein the converter is further operable to compact the first and second class files.

32. The electronic device of claim 31 wherein to compact first and second class files the converter is operable to map string identifiers for an object, class, field, or method of the constant pool with an identifier.

33. The electronic device of claim 29 wherein the converter is further operable to remove duplicates of information items found in the first and second class files such that the resulting class file lacks duplication of at least one information item occurring in both the first and second class files.

34. The electronic device of claim 33 wherein the at least one information item is a string.

35. The electronic device of claim 29, wherein the at least one operation to replace a construct in the first intermediate code with an equivalent construct in the second intermediate code comprises replacing a first string identifying an object, a class, a field or a method, in the first constant pool with an identifier.

36. The electronic device of claim 28 wherein the converter is further operable to convert byte codes of the first intermediate code from a first set of byte codes associated with a first machine architecture into a second set of byte codes associated with a second machine architecture.

37. The electronic device of claim 36 wherein the first machine architecture is a word stack architecture and the second machine architecture is an architecture other than a word stack architecture.

38. The electronic device of claim 36 wherein the second machine architecture is a byte stack architecture.

39. The electronic device of claim 36 wherein the first and second machine architectures are virtual machine architectures.

40. The electronic device of claim 36 wherein the first machine architecture is a Java Virtual Machine architecture and the second machine architecture is not a Java Virtual Machine architecture.

41. The method of programming a device of claim 40 wherein the first machine architecture is a Java Virtual Machine and the second machine architecture is a Card Java Virtual Machine.

42. The electronic device of claim 28 wherein converter is further operable to remove program parts.

43. The electronic device of claim 42 wherein the program parts that the converter is operable to remove are attributes.

44. The electronic device of claim 42 wherein the program parts that the converter is operable to remove are program parts not necessary for interpretation by the second intermediate code virtual machine.

45. The electronic device of claim 42 wherein the program parts that the converter is operable to remove are parts not necessary for interpretation.

46. The electronic device of claim 42 wherein the program parts that the converter is operable to remove are parts not supported by the second intermediate code virtual machine.

47. The electronic device of claim 28 wherein the second intermediate code comprises a converted form class file, the converter is further operable to:

receive the converted form class file;

process the converted form class file to produce an application interpretable by the second code virtual machine while the second code virtual machine executes on the device; and

store the produced application interpretable by the second code virtual machine on the device.

48. The electronic device of claim 28 further comprising:

multiple applications for the device stored on the second memory of the device; and

wherein the device is operable to receive an application selection indication from an input device operable to receive an application selection and to produce an application selection indication indicating which application to execute, and the second code virtual machine is operable to execute the selected application.

49. The electronic device of claim 48 wherein the input device is connected to the device.

50. The electronic device of claim 49 wherein the input device connected to the processor and operable to provide an application selection indication is a device operable to communicate with the device.

51. The electronic device of claim 50 wherein the input device operable to communicate with the device comprises one or more of an automated teller machine, point-of-sale terminal, access control system, system that communicates with an integrated circuit card, or a system that communicates with a microcontroller.

52. The electronic device of claim 28, wherein the at least one operation to replace a construct in the first intermediate code with an equivalent construct in the second intermediate code comprises replacing a first bytecode associated with an instruction for the first virtual machine with a second bytecode associated with the same instruction for the second virtual machine.

53. The electronic device of claim 28, wherein the at least one operation to replace a construct in the first intermediate code with an equivalent construct in the second intermediate code comprises replacing a first bytecode associated with a specific instruction for the first virtual machine with a second bytecode associated with a generic instruction for the second virtual machine.

54. The electronic device of claim 28, wherein the first intermediate code is Java byte code.