EP3204850A1 - Verfahren zum laden von ausführbaren programminstruktionen in eine chipkarte im wirkbetrieb - Google Patents
Verfahren zum laden von ausführbaren programminstruktionen in eine chipkarte im wirkbetriebInfo
- Publication number
- EP3204850A1 EP3204850A1 EP15778904.1A EP15778904A EP3204850A1 EP 3204850 A1 EP3204850 A1 EP 3204850A1 EP 15778904 A EP15778904 A EP 15778904A EP 3204850 A1 EP3204850 A1 EP 3204850A1
- Authority
- EP
- European Patent Office
- Prior art keywords
- chip card
- smart card
- operating system
- program instructions
- nvm
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/4401—Bootstrapping
- G06F9/4406—Loading of operating system
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F12/00—Accessing, addressing or allocating within memory systems or architectures
- G06F12/14—Protection against unauthorised use of memory or access to memory
- G06F12/1408—Protection against unauthorised use of memory or access to memory by using cryptography
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F12/00—Accessing, addressing or allocating within memory systems or architectures
- G06F12/14—Protection against unauthorised use of memory or access to memory
- G06F12/1458—Protection against unauthorised use of memory or access to memory by checking the subject access rights
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
- G06F3/06—Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
- G06F3/0601—Interfaces specially adapted for storage systems
- G06F3/0602—Interfaces specially adapted for storage systems specifically adapted to achieve a particular effect
- G06F3/062—Securing storage systems
- G06F3/0622—Securing storage systems in relation to access
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F3/00—Input arrangements for transferring data to be processed into a form capable of being handled by the computer; Output arrangements for transferring data from processing unit to output unit, e.g. interface arrangements
- G06F3/06—Digital input from, or digital output to, record carriers, e.g. RAID, emulated record carriers or networked record carriers
- G06F3/0601—Interfaces specially adapted for storage systems
- G06F3/0628—Interfaces specially adapted for storage systems making use of a particular technique
- G06F3/0629—Configuration or reconfiguration of storage systems
- G06F3/0632—Configuration or reconfiguration of storage systems by initialisation or re-initialisation of storage systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F8/00—Arrangements for software engineering
- G06F8/60—Software deployment
- G06F8/65—Updates
- G06F8/654—Updates using techniques specially adapted for alterable solid state memories, e.g. for EEPROM or flash memories
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2212/00—Indexing scheme relating to accessing, addressing or allocation within memory systems or architectures
- G06F2212/40—Specific encoding of data in memory or cache
- G06F2212/402—Encrypted data
Definitions
- the invention relates to a method for loading executable program instructions into a chip card, which is in operative operation, and a corresponding chip card and an electronic system with a chip card terminal.
- boot loader also referred to as a "boot loader”
- the bootloader can send the smart card operating system to the appropriate memory address of the changeable non-volatile memory (also abbreviated to NVM of "non-volatile memory”).
- the boot loader is located in the non-changeable fixed memory of the smart card (usually referred to as ROM, of "read only memory”), which usually also contains the program of the hardware test for the chip of the chip card, the boot loader in the ROM using a ROM Mask is introduced (compare Handbook of smart cards, Wolfgang Rankl, Wolfgang Effing, Carl Hanser Verlag Kunststoff, 2008, p. 493 at 13.5.1 and p. 622 at 14.3.3).
- the bootloader is used in the prior art only for the initial loading of the smart card operating system in the NVM during production or initialization of the smart card in a secure environment use and is then disabled for the entire life of the smart card.
- Changing or updating the smart card operating system or reloading executable program instructions into the NVM of the smart card by means of the bootloader in the ROM is not provided in the prior art (mostly for security reasons) since prior art boot loaders do not have sufficiently secure mechanisms for the smart card Incorporation of program instructions in the operative operation of the smart card operating system included and thus for example would no longer be sufficiently certified for government applications and / or the introduction of malicious software would allow.
- the invention is the object of the invention to provide a method for loading executable program instructions in a smart card, which is in operative operation, without that the security of the smart card, as it is required, for example, for sovereign applications and / or payments , in question.
- the object underlying the invention is achieved in each case with the features of the independent claims. Embodiments of the invention are indicated in the dependent claims.
- the "effective operation" of a chip card is understood to mean the state of a chip card which has left a production environment after personalization, in particular the loading of the chip card operating system and other data, and which for example has already moved from the so-called first-use status to the used status for example DE 10 2007 041370 A1.
- a “personalization system” here means a device of a chip card production to which chip card blanks are supplied in order to personalize them, in particular by initial loading of the chip card operating system by means of the bootloader of the chip card and storage of further personalization data , Image data, biometric data of the future owner of the smart card, such as fingerprint data or iris scan data, cryptographic keys and other sensitive data, that is, in particular attributes related to the owner, the publisher of the smart card or the smart card itself.
- Embodiments of the invention are particularly advantageous because the loading of executable program instructions in the operative operation of the chip card is made possible, without thereby questioning the security of the chip card, as is essential in particular for governmental applications.
- boot loader itself does not have to have an authentication function for authentication of the chip card terminal.
- This has the particular advantage of being able to adapt the authentication function of the chip card operating system, for example, to the respective application and / or increased security requirements, for example by the executable program instructions to be reloaded updating the authentication function of the chip card operating system, for example for later chip card operating system updates.
- this authentication function is variable and can change the circumstances or Security requirements are adjusted.
- the executable program instructions are an update of the chip card control system, that is to say a so-called operating system update.
- the executable program instructions replace or deactivate corresponding program instructions of the previously loaded chip card operating system.
- the executable program instructions form an updated or alternative smart card operating system which overwrites the initially loaded smart card operating system or which is stored in the NVM in addition to the currently active smart card operating system.
- this process can be carried out repeatedly within the useful life, for example the period of validity, of a chip card in order, for example, to carry out operating system updates at regular or irregular intervals.
- the executable program instructions to be reloaded may implement a cryptographic protocol such that a higher level of security is ensured in the execution than the implementation by the existing and to be replaced program instructions allows.
- the length of the keys used can be increased or another cryptographic method or another cryptographic algorithm can be defined.
- Embodiments of the invention make it possible during this period of validity to perform one or more updates of the smart card operating system by reloading program instructions in order to take into account the current security requirements, the user does not need a new ID document, because on the one hand all data from the personalization of the On the other hand, the functional behavior of the smart card operating system meets the expectations of the respective readers.
- the chip card is designed as a document, in particular as a value or security document, wherein the document has a secure memory area for storing at least one attribute and a communication interface for reading out the attribute, wherein the smart card operating system has a cryptographic function for performing a Cryptographic access log, the successful implementation of which is a necessary condition for an external read access to the attribute.
- this cryptographic function is implemented by the same authentication function of the chip card operating system, which is thus used both for the authentication of the chip card terminal for reloading program instructions and for the authentication of a chip card terminal for reading out the attributes, for example in the case of border control.
- the document is a paper-based and / or plastic-based document, such as an electronic identity document, in particular a passport, identity card, visa, driver's license, vehicle registration document, vehicle registration document, company card, health card or other ID document or a chip card, a means of payment, in particular a banknote, bank card or credit card, a bill of lading or other proof of entitlement, with an integrated data memory for storing the at least one attribute.
- an electronic identity document in particular a passport, identity card, visa, driver's license, vehicle registration document, vehicle registration document, company card, health card or other ID document or a chip card
- a means of payment in particular a banknote, bank card or credit card
- a bill of lading or other proof of entitlement with an integrated data memory for storing the at least one attribute.
- the loading of the executable program instructions from a smart card terminal having a mechanical feeder for inserting the smart card into the smart card terminal even if the smart card and the smart card terminal via a wireless interface, such as an RFID or have an NFC interface.
- a wireless interface such as an RFID or have an NFC interface.
- Figure 1 is a block diagram of an embodiment of an inventive
- FIG. 2 shows a block diagram of an embodiment of an inventive device
- FIG. 3 shows a flowchart of an embodiment of an inventive device
- FIG. 1 shows a chip card 100 with a ROM 102 and a non-volative memory (NVM), for example an EEPROM, in particular a so-called flash EEPROM 104, which has a content that can be changed by a write operation.
- NVM non-volative memory
- the ROM 102 includes a boot loader 106 which has been inserted in the production of the chip including the ROM 102 by means of a so-called ROM mask.
- the boot loader 106 includes an authentication function 108 for Authentication of a personalization system 1 10 to initially store the smart card operating system in the NVM can.
- the authentification function 108 includes a symmetric key 12, which must also be stored in the personalization system 110 so that it can authenticate itself to the boot loader 106.
- the key 1 12 may be wholly or partially stored in the ROM 102 and / or in whole or in part in the flash 104. The latter has the advantage that different keys can be used for authentication for the same ROM masks.
- the boot loader 106 also has an interface function 1 14 for controlling an interface 1 16 of the chip card 100 for the communication and data transmission between reader and smart card.
- the interface 16 can be a wireless interface, for example an NFC or RFID standard, in particular a contactless interface in accordance with ISO 14443, preferably with Very High Bit Rate (VHBR) support.
- VHBR Very High Bit Rate
- the boot loader 106 further has a memory function 118 which is used to access the NVM 104 with, for example, the required hardware functionalities for addressing, erasing, writing and / or reading changeable nonvolatile memory, optionally with the aid of a memory management unit (MMU). (see manual of chip cards, page 106 under 5.4.1 1).
- MMU memory management unit
- the boot loader 106 is adapted to process commands in the form of command APDUs, in particular according to ISO / IEC 7816-4.
- the chip card 100 has a processor 126, wherein the processor 126 includes logic circuits which may be implemented in one or more discrete components or modules integrated on the same chip, and which serve, inter alia, for executing the boot loader 106.
- the chip card 100 is initially a non-personalized or pre-personalized chip card blank without chip card operating system.
- the initial loading of a smart card operating system 128 is done in a production environment that is specially secured by an access control system using the personalization tool 1 10. Due to the inherently secure production environment that is protected against access by the access control system to unauthorized third parties, the authentication function 108 of the authentication function 108 of FIG Bootloaders 106 a lower level of security can be selected, as for the recharging in active mode.
- the key 1 12 is also stored in a memory 130 of the personalization system 1 10.
- the personalization system 110 has an interface 132 corresponding to the interface 1 16 in order to communicate with the chip card 100.
- the personalization system 110 initially sends an authentication command 134 to the smart card 100 in order to start the boot loader 106, that is to say its authentication function 108.
- the personalization system 1 10 then sends, for example, the key 1 12 to the smart card 100.
- the personalization system 1 10 By executing the authentication function 108 by the processor 126, it is then checked whether the key 1 12 received from the personalization tool 1 10 matches the key 1 12 of the authentication function 108 included in the ROM mask. If this is the case, the personalization system 1 10 is considered authenticated. In the next step, the personalization system 1 10 then sends a load command 136 to the smart card 100, reads the smart card operating system 128 from its memory 130 and transmits it to the smart card 100, from which the smart card operating system 128 by the memory function 1 18 of the boot loader 106 then into the NVM 104 is written.
- the chip card operating system 128 with the key 1 12 is symmetrically encrypted, and the chip card operating system 128 is then decrypted by the authentication function 108. Since decryption is only possible if the encryption of the chip card operating system was carried out with the appropriate symmetric key, a separate authentication step can be dispensed with in this case since it is inherent to the decryption of the chip card operating system 128 by the boot loader.
- the personalization system 110 After the loading of the chip card operating system 128 and possibly further personalization data has taken place and thus the chip card is prepared for active operation, the personalization system 110 sends a status command 138 in order to set the status of the chip card 100 set in the storage area 124 to the status "active operation" ,
- the smart card operating system 128 further includes a program call 142 for starting the boot loader 106. Further, in the flash 104, addresses for calling the interface function 14 and the memory function 1 18 of the boot loader 106 for the smart card operating system 128 may be stored, so that the smart card operating system 128 performs these functions Bootloaders 106 can call in active mode and thus does not have to have such functions themselves, so that the resources of the smart card are used efficiently.
- the authentication function 140 is selected to provide sufficiently strong authentication of a smart card terminal outside a secured access area as provided by a production environment.
- the authentication function 140 implements the steps of a cryptographic protocol based on asymmetrical cryptographic key pairs, such as a challenge-response protocol, a Diffie-Hellman protocol, an extended access control system. Protocol (EAC) or a PACE protocol with so-called terminal authentication (TA) and Chip Authentication (CA), see Technical Guideline TR-031 10-2, Advanced Security Mechanisms for Machine Readable Travel Documents - Part 2, Version 2.1 1, March 20, 2012, Federal Office for Information Security.
- EAC EAC
- TA terminal authentication
- CA Chip Authentication
- the authentication function 140 may also include an authorization check and the definition of one or more parameters for establishing secure communication, such as a session key for establishing a secure messaging (SM) channel.
- SM secure messaging
- FIG. 2 shows the chip card 100 in operative operation, which has been personalized according to FIG.
- executable program instructions for example, to update or replace the smart card operating system 128, that is, for a so-called operating system update, a smart card terminal 144 is used.
- the chip card terminal 144 has an interface 146 corresponding to the interface 16 of the chip card 100.
- this is a contactless interface, in particular according to ISO 14443 with support from VHBR.
- the interface 146 is formed with a mechanical feeder to completely receive the smart card 100 in a housing of the smart card terminal 144, this mechanical feeder can be designed analogous to known bank terminals for the withdrawal of cash.
- the smart card terminal 144 has a memory 148 in which executable program instructions 150 are stored, such as an operating system update for updating the smart card operating system 128. Further, the memory 148 includes program instructions 152 which implement those steps of a cryptographic protocol that concern the smart card terminal 144 and which are interoperable with the authentication function 140 of the smart card operating system 128. The smart card terminal 144 has a processor 154 for executing these program instructions 152. To perform the operating system update, you can do the following:
- the user inserts the chip card 100 into the mechanical intake of the chip card terminal 144.
- the smart card terminal 144 couples electrical energy into the smart card 100 via its interface 146. Since the status "active operation" is stored in the memory area 124, the smart card operating system 128 then starts and not the boot loader 106.
- the smart card terminal sends a command 156 to the smart card 100 to start the operating system update.
- the authentication function 140 of the operating system 128 is started so that the cryptographic protocol for verifying the authenticity of the chip card terminal 144 is carried out, for which purpose the chip card terminal 144 exchanges data with the chip card 100 in accordance with data 158.
- the smart card terminal 144 sends a digital certificate by specifying its right to reload executable program instructions, that is, the operating system update in this case. Based on this certificate can be checked by the smart card operating system 128 by the smart card 100, whether the smart card terminal 144 for reloading the program instructions has the required authorization.
- one or more parameters required for secure communication are determined, such as by a Diffie-Hellman key exchange or other method of, for example, specifying a symmetric session key.
- the authentication function 140 then stores such a parameter, such as a symmetric session key 160, in the memory area 122.
- the smart card operating system 128 may store further data in the memory area 122 to enable it Bootloader 106 to pass.
- These may be, for example, data specifying to which addresses in the flash 104 the program instructions received from the smart card terminal 144 are to be stored and / or an updated start address 162 'from which the program execution upon injection of energy into the smart card 100 after successful and complete reloading of the program instructions.
- the smart card operating system 128 then starts the program call 142 so that the boot loader 106 is started. As a result, the execution of the smart card operating system 128 is terminated at the same time.
- the bootloader 106 then accesses the memory area 124 first. Since the memory card 124 stores the smart card 100 in the "active" state, in which the boot loader 106 normally can not start because it is disabled after personalization, the boot loader 106 subsequently accesses the address 120 in the Memory area 122, to read from there data indicating the possibly successful authentication and rights checking If there is such data and their testing was successful, the execution of the boot loader 106 is continued, otherwise aborted.
- the boot loader 106 attempts to read from the address 120 the session key 160. Only if there is a session key 160 at the address 120 is the execution of the boot loader 106 continued.
- a secured channel is then established, for example after a so-called secure Messaging method.
- the previously agreed between the smart card 100 and the smart card terminal 144 session key 160 may be used.
- the boot loader 106 may use the session key 160 to authenticate the smart card terminal 144, by the boot loader 106 checking whether the smart card terminal 144 has access to the correct session key 160, for example by means of a challenge-response method. Alternatively, such a separate check can be omitted since only one valid session key 160 allows reception of the program instructions 150. This check is therefore inherent to the transmission of the program instructions 150 over the secure channel.
- the smart card terminal 144 then sends the operating system update with the program instructions 150, which may be encrypted with the session key 160, via the secure messaging channel to the boot loader 106, which decrypts the program instructions 150 and stores them in the flash 104. This can be done by completely or partially overwriting the initially loaded operating system 128 by the program instructions 150 or by additionally writing the program instructions 150 into the NVM 104.
- the program instructions 150 may be transmitted either in plain text or in the form of data specifying the program instructions 150.
- both the boot loader 106 and the smart card operating system 128 are certified, for example, in accordance with the Common Criteria with a sufficient level of security, which guarantees that they meet the security requirements, for example for sovereign documents.
- the updated by the reloading of the program instructions 150 chip card operating system is certified accordingly, it being ensured that the recharging actually the corresponding certified updated smart card operating system is introduced into the smart card 100, as this by their turn certified components, ie the boot loader 106 , the initially inserted smart card operating system 128 and the smart card terminal 144, takes place.
- Information for reloading itself that is, for example, the version of the chip card operating system 128 to which the reloading is to take place as well as the version of the chip card operating system 128 which is present after reloading,
- Additional information such as a return address, into the smart card operating system 128 after reloading, an updated address 120, if not static, to the address and size of the memory area 122 for the boot loader 106 with specified data in the
- boot loader 106 and / or proof of successful authentication for reloading, as well as configuration data for the accurate operation of boot loader 106.
- the smart card operating system 128 may provide the boot loader 106 with further data and parameters via the memory area 122, the memory area 122 instead of the NVM 104 being stored in a RAM of the smart card 100 and / or a register of the processor 126 and / or another non-memory card.
- volatile memory NVM
- MMU volatile memory
- the other data and / or parameters may be, for example: In addition to the executable program instructions 150 parameter values for their execution,
- One or more memory addresses for the program instructions 150 in the NVM 104 for example, each of the program instructions 150 may be assigned a memory address in the NVM 104 to which the program instruction concerned is to be stored, or blocks of program instructions each to be written by an allocated memory address by the boot loader 106 may be combined,
- the NVM 104 may store two different operating system versions of the smart card operating system 128, which address then identifies that of the two operating system versions that is actually to be executed.
- the bootloader 106 may additionally have functions for calculating checksums of memory contents that may be CRC and / or hashed.
- the boot loader may further comprise a function for setting the entry address of the smart card operating system 128, from which the program execution starts after the energy is coupled into the smart card in active operation.
- This start address may be passed to the boot loader via the memory area 122 at its start by the smart card operating system 128, so that the boot loader may write the new start address in a predefined memory area, for example the NVM 104.
- the boot loader 106 may be configured so that the components of the smart card operating system 128 to be updated are not overwritten, but instead bit-wise logical operations of current data of the smart card operating system 128 and the update provided by the smart card terminal 144, for example XOR, AND, OR or NOT operations.
- the chip card 100 can have a secure memory area for storing at least one attribute and the interface 16 for reading out the attribute, the chip card operating system 128 or 128 'having a cryptographic function for carrying out a cryptographic access protocol, the successful execution of which is a necessary prerequisite for is an external read access to the attribute.
- This cryptographic function can be provided by the authentication function 140, which thus also serves to authenticate a reader, e.g. for a border control.
- FIG. 3 shows a flow chart of an embodiment of a method according to the invention.
- step 200 the smart card 100 is inserted into the smart card terminal 144 and power is coupled into the smart card so that the operating system 128 starts from a predefined start address 162.
- the start address 162 may be stored in a predefined nonvolatile memory area of the smart card 100 which is automatically accessed by the smart card 100 as soon as the power is coupled into the smart card to start execution of the smart card operating system 128 from this start address 162.
- step 204 smart card 100 receives command 156 from smart card terminal 144 for reloading executable program instructions.
- a cryptographic protocol for authenticating smart card terminal 144 and checking (step 208) whether smart card terminal 144 has the access rights necessary for reloading the program instructions is started, including data 158 between smart card terminal 144 and smart card 100 be exchanged to perform the cryptographic protocol in question. Further, due to the execution of the cryptographic protocol, a session key 160 is set, which is written by the smart card operating system 128 into the storage area 122. In addition, the smart card operating system may still write additional data before starting the boot loader in step 212 using program call 142.
- This data may be, for example, data specifying to which addresses in the NVM 104 the program instructions 150 are to be written and / or an updated start address 162 'from which the execution of the program code stored in the NVM 104 , starting to take place.
- the program instructions 150 include a new version of the smart card operating system 128, that is, the current version of the smart card operating system 128 'to be written in the NVM 104 behind the smart card operating system 128. Accordingly, the start address 162 must be updated to the start address 162 '(see Fig. 2) so that at the next boot, the program will start from this updated start address, thus executing the new version of the smart card operating system 128' instead of the previous version.
- bootloader 1 12 After bootloader 1 12 is started by smart card operating system 128, it accesses memory area 122 and reads the data contained therein at step 214. Step 216 then establishes a secure channel between smart card 100 and smart card terminal 144, for example using the session key 160, and data is loaded from the smart card terminal 140 specifying the program instructions 150 at step 218.
- These data may directly relate to the program instructions 150 themselves or, depending on the embodiment, to data from which these program instructions 150 can be derived by the smart card 100, for example by logically interpreting these data with the program instructions of the programmer Chip card operating system 128 are linked by the boot loader 106, so that the result of these logical operations, the updated program instructions 150 result.
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- General Engineering & Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Software Systems (AREA)
- Computer Security & Cryptography (AREA)
- Human Computer Interaction (AREA)
- Stored Programmes (AREA)
- Storage Device Security (AREA)
Abstract
Description
Claims
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
DE102014220616.2A DE102014220616A1 (de) | 2014-10-10 | 2014-10-10 | Verfahren zum Laden von ausführbaren Programminstruktionen in eine Chipkarte im Wirkbetrieb |
PCT/EP2015/072746 WO2016055358A1 (de) | 2014-10-10 | 2015-10-01 | Verfahren zum laden von ausführbaren programminstruktionen in eine chipkarte im wirkbetrieb |
Publications (1)
Publication Number | Publication Date |
---|---|
EP3204850A1 true EP3204850A1 (de) | 2017-08-16 |
Family
ID=54293223
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP15778904.1A Pending EP3204850A1 (de) | 2014-10-10 | 2015-10-01 | Verfahren zum laden von ausführbaren programminstruktionen in eine chipkarte im wirkbetrieb |
Country Status (4)
Country | Link |
---|---|
US (1) | US10360042B2 (de) |
EP (1) | EP3204850A1 (de) |
DE (1) | DE102014220616A1 (de) |
WO (1) | WO2016055358A1 (de) |
Families Citing this family (10)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DE102016225360A1 (de) * | 2016-12-16 | 2018-06-21 | Bundesdruckerei Gmbh | Nachladen kryptographischer Programminstruktionen |
CN109426523B (zh) * | 2017-08-18 | 2022-12-06 | 厦门雅迅网络股份有限公司 | 基于trustzone技术的双***启动方法及计算机可读存储介质 |
US10452565B2 (en) * | 2018-01-12 | 2019-10-22 | Sunasic Technologies, Inc. | Secure electronic device |
DE102018005284A1 (de) * | 2018-07-03 | 2019-09-05 | Giesecke+Devrient Mobile Security Gmbh | Chip-Personalisierung eines eingebetteten Systems durch einen Dritten |
FR3105854B1 (fr) * | 2019-12-31 | 2024-07-19 | Stmicroelectronics Rousset Sas | Système embarqué |
WO2021200926A1 (ja) * | 2020-04-01 | 2021-10-07 | パナソニックIpマネジメント株式会社 | ストレージシステム |
EP3958114B1 (de) | 2020-08-19 | 2024-04-24 | Giesecke+Devrient Mobile Security Germany GmbH | Software-eignung |
US11907409B2 (en) * | 2021-09-29 | 2024-02-20 | Dell Products L.P. | Dynamic immutable security personalization for enterprise products |
DE102021126509B4 (de) | 2021-10-13 | 2023-05-17 | Infineon Technologies Ag | Tragbare Chipvorrichtung und Verfahren zum Ausführen eines Softwaremodul-Updates in einer tragbaren Chipvorrichtung |
CN117251221B (zh) * | 2023-11-16 | 2024-01-30 | 深圳市航顺芯片技术研发有限公司 | 微控制芯片及其管理方法、存储介质 |
Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DE102011111698A1 (de) * | 2011-08-24 | 2013-02-28 | Fujitsu Technology Solutions Intellectual Property Gmbh | Verfahren zum Log-in an einem Computersystem sowie Computerprogramm zum Ablauf auf einem Computersystem |
EP2590383A1 (de) * | 2011-11-02 | 2013-05-08 | Research In Motion Limited | Mobile Kommunikationsvorrichtung mit sicheren Elementdatenverwaltungsfunktionen und zugehörige Verfahren |
EP2634693A1 (de) * | 2012-02-28 | 2013-09-04 | MIMOON GmbH | Verfahren und Vorrichtung zur Interaktion mit einer laufenden Software |
Family Cites Families (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DE102007041370B4 (de) | 2007-08-30 | 2016-06-09 | Bundesdruckerei Gmbh | Chipkarte, elektronisches Gerät, Verfahren zur Herstellung einer Chipkarte und Verfahren zur Inbenutzungnahme einer Chipkarte |
CN103843006B (zh) * | 2011-09-30 | 2017-05-10 | 国际商业机器公司 | 用于向用户终端配备操作***的方法和设备 |
JP5689429B2 (ja) * | 2012-02-27 | 2015-03-25 | 株式会社日立製作所 | 認証装置、および、認証方法 |
DE102012012509B4 (de) | 2012-06-22 | 2021-02-04 | Giesecke+Devrient Mobile Security Gmbh | Verfahren und Vorrichtung zum Austausch des Betriebssystems eines ressourcenbeschränkten tragbaren Datenträgers |
FR2993682B1 (fr) | 2012-07-20 | 2014-08-22 | Oberthur Technologies | Mise a jour d'un systeme d'exploitation pour element securise |
DE102012015573A1 (de) | 2012-08-07 | 2014-02-13 | Giesecke & Devrient Gmbh | Verfahren zum Aktivieren eines Betriebssystems in einem Sicherheitsmodul |
US8894485B2 (en) * | 2013-03-18 | 2014-11-25 | Cadillac Jack, Inc. | Electronic gaming system with ROM-based media validation |
-
2014
- 2014-10-10 DE DE102014220616.2A patent/DE102014220616A1/de active Pending
-
2015
- 2015-10-01 WO PCT/EP2015/072746 patent/WO2016055358A1/de active Application Filing
- 2015-10-01 EP EP15778904.1A patent/EP3204850A1/de active Pending
- 2015-10-01 US US15/514,220 patent/US10360042B2/en active Active
Patent Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
DE102011111698A1 (de) * | 2011-08-24 | 2013-02-28 | Fujitsu Technology Solutions Intellectual Property Gmbh | Verfahren zum Log-in an einem Computersystem sowie Computerprogramm zum Ablauf auf einem Computersystem |
EP2590383A1 (de) * | 2011-11-02 | 2013-05-08 | Research In Motion Limited | Mobile Kommunikationsvorrichtung mit sicheren Elementdatenverwaltungsfunktionen und zugehörige Verfahren |
EP2634693A1 (de) * | 2012-02-28 | 2013-09-04 | MIMOON GmbH | Verfahren und Vorrichtung zur Interaktion mit einer laufenden Software |
Non-Patent Citations (1)
Title |
---|
See also references of WO2016055358A1 * |
Also Published As
Publication number | Publication date |
---|---|
DE102014220616A1 (de) | 2016-04-14 |
US20170277546A1 (en) | 2017-09-28 |
WO2016055358A1 (de) | 2016-04-14 |
US10360042B2 (en) | 2019-07-23 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
WO2016055358A1 (de) | Verfahren zum laden von ausführbaren programminstruktionen in eine chipkarte im wirkbetrieb | |
EP2864871B1 (de) | Verfahren und vorrichtung zum austausch des betriebssystems eines ressourcenbeschränkten tragbaren datenträgers | |
DE102013013179A1 (de) | Verfahren zum Betreiben eines Sicherheitselements | |
EP3754530B1 (de) | Verfahren zum nachladen von software auf eine chipkarte durch einen nachladeautomaten | |
EP3308278B1 (de) | Verfahren zum aktualisieren von personalisierungsdaten | |
EP2987078B1 (de) | Verfahren zum bereitstellen einer applikation auf einem sicherheitsmodul sowie ein solches sicherheitsmodul | |
EP3215977B1 (de) | Verfahren zur änderung einer in einer chipkarte gespeicherten datenstruktur, signaturvorrichtung und elektronisches system | |
EP2169579B1 (de) | Verfahren und Vorrichtung zum Zugriff auf ein maschinenlesbares Dokument | |
EP1634252B1 (de) | Verfahren zum laden von tragbaren datenträgern mit daten | |
EP3175383B1 (de) | Verfahren zur änderung der kontrolldaten einer chipkarte und chipkartensystem | |
EP3215957B1 (de) | Chipkarte, chipkartensystem und verfahren zum zugriff auf eine chipkarte | |
DE102021126509B4 (de) | Tragbare Chipvorrichtung und Verfahren zum Ausführen eines Softwaremodul-Updates in einer tragbaren Chipvorrichtung | |
EP2486551B1 (de) | Personalisieren eines telekommunikationsmoduls | |
EP3329415B1 (de) | Chipkarte mit hauptapplikation und persistenzapplikation erlaubt hauptapplikationupdate ohne die benutzerdaten im persistenzapplikation zu ändern | |
DE102007027935A1 (de) | Tragbarer Datenträger und Verfahren zur Personalisierung eines tragbaren Datenträgers | |
EP1638058A2 (de) | Verifizierung eines Datenträgers vor der Installation eines Anwendungsprogramms | |
DE102007028249A1 (de) | Speicherung von Schlüsseln auf einer Chipkarte | |
DE10218796A1 (de) | Verfahren zum Herstellen eines elektronischen Sicherheitsmoduls |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: THE INTERNATIONAL PUBLICATION HAS BEEN MADE |
|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE |
|
17P | Request for examination filed |
Effective date: 20170510 |
|
AK | Designated contracting states |
Kind code of ref document: A1 Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR |
|
AX | Request for extension of the european patent |
Extension state: BA ME |
|
DAV | Request for validation of the european patent (deleted) | ||
DAX | Request for extension of the european patent (deleted) | ||
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: EXAMINATION IS IN PROGRESS |
|
17Q | First examination report despatched |
Effective date: 20180327 |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: EXAMINATION IS IN PROGRESS |
|
APBK | Appeal reference recorded |
Free format text: ORIGINAL CODE: EPIDOSNREFNE |
|
APBN | Date of receipt of notice of appeal recorded |
Free format text: ORIGINAL CODE: EPIDOSNNOA2E |
|
APBR | Date of receipt of statement of grounds of appeal recorded |
Free format text: ORIGINAL CODE: EPIDOSNNOA3E |
|
APAF | Appeal reference modified |
Free format text: ORIGINAL CODE: EPIDOSCREFNE |
|
P01 | Opt-out of the competence of the unified patent court (upc) registered |
Effective date: 20230526 |