SYSTEM AND METHOD FOR MANAGING RESOURCES OF PORTABLE MODULE RESOURCES

• US 20090149209A1
• Filed: 12/31/2008
• Published: 06/11/2009
• Est. Priority Date: 05/06/2002
• Status: Active Grant

• Current Assignee: Nagravision SA (Kudelski SA)
• Original Assignee: Swisscom Mobile AG (Government of Switzerland), Nagracrad S.A. (Kudelski SA)
• Inventors: Lagadec, Roger, Cantini, Renato, Busch Lauper, Karin
• Granted Patent: US 7,801,492 B2
• Time in Patent Office: Days
• US Class Current: 455/509
• CPC Class Codes: G06F 9/5011 the resources being hardware resources other than CPUs, Servers and Terminals
• CPC Class Codes: G06F 9/5016 the resource being the memory

Abstract

Proposed are a method and a system for management of resources of portable resource modules, each connected to a communication terminal, which modules comprise electronic memory units and are designed in particular as chipcards. A first resource management instruction comprising a module identification is transmitted to a resource management centre. A second resource management instruction is transmitted from the resource management centre via a communication network to the resource module identified through the module identification. In the particular resource module, resources are made ready or released by a resource control mechanism corresponding to the received second resource management instruction. A resource management confirmation is transmitted by the particular resource module via the communication network to the resource management centre, and in the resource management centre information about the resources made ready or released is stored assigned to the module identification.

Claims

1. A method of managing resources of chipcards connected in each case to a communication terminal, the method comprising:

storing in a data store of a resource management centre, arranged externally to the chipcards and the communication terminals, information about resources available in each of the chipcards;

receiving in the resource management centre via a telecommunication network a first resource management instruction for making ready resources in one or more than one selected chipcards identified in the instruction;

checking by the resource management centre in the data store whether sufficient resources are available in the selected chipcards to meet requirements of the first resource management instruction, before transmitting a second resource management instruction;

transmitting the second resource management instruction from the resource management centre via the telecommunication network to the selected chipcards having sufficient resources, the second resource management instruction including data about the resources to be made ready in the selected chipcards;

making ready the resources in the selected chipcards, in accordance with the received second resource management instruction, through a resource control mechanism in the chipcard;

transmitting a resource management confirmation from the selected chipcards via the telecommunication network to the resource management centre; and

storing in the data store of the resource management centre information about the resources made ready in the selected chipcards, based on the resource management confirmation received from the selected chipcards.

2. The method according to claim 1, wherein the first resource management instruction comprises a module identification identifying one or more than one selected chipcards;

the method further comprises determining in each case a communication address assigned to the communication terminal to which the respective chipcard identified by the module identification is connected; and

the second resource management instruction is transmitted to the selected chipcards using in each case the respective communication address.

3. The method according to claim 1, wherein the resources of the chipcards include at least one of hardware resources and software resources;

making ready the resources in the selected chipcards includes at least one of reserving memory areas, occupying memory areas, and loading software resources; and

storing information about the resources made ready in the selected chipcards includes for a respective chipcard information about at least one of memory areas reserved, memory areas occupied, memory areas free, and software resources loaded.

4. The method according to claim 1, wherein the information stored in the data stare includes information about software resources and hardware resources available in each of the chipcards, the information about software resources including information about at least one of cryptographic keys, cryptographic functions, and other software programs available in the respective chipcard, and the information about hardware resources including information about at least one of memory size, interfaces, and processors available in the respective chipcard.

5. The method according to claim 1, wherein an application request and a module identification identifying one or more than one selected chipcards are transmitted by a communication terminal to an application management unit;

the first resource management instruction includes a resource user identification and is transmitted by the application management unit to the resource management centre, based on the received application request; and

the resource user identification is stored, assigned to the module identification, in the resource management centre.

6. The method according to claim 5, wherein a resource preparation confirmation is transmitted from the resource management centre to the application management unit;

an application installation request is transmitted from the application management unit via the telecommunication network to one or more than one selected chipcards;

an application is installed in the selected chipcards through the resource control mechanism in accordance with the application installation request using the prepared resources; and

the information about the installed application is stored in the application management unit, the information being stored assigned to the module identifications.

7. The method according to claim 1, wherein in the resource management centre an application installation request is inserted into the second resource management instruction;

an application is installed in one or more selected chipcards through the resource control mechanism in accordance with the application installation request, and the information about the installed application is stored in the resource management centre, the information being stored assigned to the respective chipcards.

8. A system comprising a plurality of chipcards, each connected to a communication terminal, wherein the system further comprises

a resource management centre, arranged externally to the chipcards and the communication terminals, the resource management centre comprising a data store for storing information about resources available in each of the chipcards;

the resource management centre comprises a receiving module configured to receive in the resource management centre via a telecommunication network a first resource management instruction for making ready resources in one or more than one selected chipcards identified in the instruction;

the resource management centre comprises a management instruction module configured to check in the data store whether sufficient resources are available in the selected chipcards to meet requirements of the first resource management instruction, before transmitting a second resource management instruction, and to transmit the second resource management instruction via the telecommunication network to the selected chipcards having sufficient resources, the second resource management instruction including data about the resources to be made ready in the selected chipcards;

the selected chipcards each comprise a resource control mechanism for making ready resources in the respective chipcard, in accordance with the received second resource management instruction;

the selected chipcards each comprise a confirmation module configured to transmit a resource management confirmation via the telecommunication network to the resource management centre; and

the resource management centre comprises a management module configured to store in the data store information about the resources made ready in the selected chipcards, based on the resource management confirmation received from the selected chipcards.

9. The system according to claim 8, wherein the first resource management instruction comprises a module identification identifying one of the chipcards;

the system further comprises an address mapping module configured to determine in each case a communication address assigned to the communication terminal to which the chipcard identified by the module identification is connected; and

the management instruction module is configured to transmit the second resource management instruction to the selected chipcards using in each case the respective communication address.

10. The system according to claim 8, wherein the resources of the chipcards include at least one of hardware resources and software resources;

the resource control mechanism is configured to make ready the resources in the selected chipcards by at least one of reserving memory areas, occupying memory areas, and loading software resources; and

the management module is configured to store in the data store for a respective chipcard information about at least one of memory areas reserved, memory areas occupied, memory areas free, and software resources loaded.

11. The system according to claim 8, wherein the data store is configured to store information about software resources and hardware resources available in each of the chipcards, the information about software resources including at least information about one of cryptographic keys, cryptographic functions, and other software programs available in the respective chipcard, and the information about hardware resources including at least information about one of memory size, interfaces, and processors available in the respective chipcard.

12. The system according to claim 8, wherein the system includes an application management unit configured to receive from a communication terminal an application request and a module identification identifying one or more than one selected chipcards, and to transmit the first resource management instruction to the resource management centre, based on the received application request, the first resource management instruction including a resource user identification;

and the management module includes means for storing in the data store the resource user identification in a way assigned to the module identification.

13. The system according to claim 12, wherein the resource management centre includes a confirmation module configured to transmit a resource preparation confirmation to the application management unit;

the application management unit includes an application instruction module configured to transmit an application installation request via the telecommunication network to one or more than one selected chipcards;

the resource control mechanism includes means for installing an application in the selected chipcards in accordance with the application installation request and using the prepared resources; and

the application management unit includes an application management module configured to store information about the installed application, the information being stored assigned to the module identifications.

14. The system according to claim 8, wherein the management instruction module includes means for inserting an application installation request into the second resource management instruction;

the resource control mechanism includes means for installing an application in the respective chipcard in accordance with the application installation request; and

the management module includes means for storing information about the installed application, the information being stored in the data store, assigned to the respective chipcards.