Thales Dis France Sas

Thales Dis France Sa

Denis Dubois

Fabien Courtiade

Florent Labourie

Jianrong Yang

Nopiga Pahala

Syarif Ahmad

Shier Loon Sharon Yong

Frédéric Dao

Jérôme Duprez

Gerald Glinka-Hecquet

Provided is a method for patching an operating systemon a secure elementembedded in a terminal. The method comprises transmitting from a platformto a SM-SRan order to create on the secure elementan ISD-P, establishing between the platformand the ISD-P or the secure elementa secure channel, transmitting from the SM-SRto the secure elementa patch of the operating system, executing in the ISD-Pthe patch of the operating system, and sending from the secure elementto the platforma message informing the platformof the result of the execution of the patch.

Method for patching an operating system on a secure element transparently through an SM-SR platform

The invention is a method for managing a tamper-proof device comprising a processor and an operating system able to handle a set of communication protocols with external entities. The operating system accesses a ruling data specifying for each communication protocol of the set whether Card Lock, Card Terminate and Final Application privileges as defined by GlobalPlatform Card Specification (V2.3) are authorized or forbidden. Upon receipt of a command from one of said external entities, the operating system uses the ruling data to deny or to authorize execution of the command based on the communication protocol used to convey the command.

Method of managing privileges in a tamper-proof device comprising several software containers

The invention is a method for managing a tamper-proof device comprising a plurality of software containers and an operating system. The operating system is able to handle a set of communication protocols with external entities. The operating system accesses a pairing data in which each communication protocol of said set has been associated with a single software container and upon receipt of a message from one of the external entities, the operating system uses the pairing data to route the message to the software container associated with the communication protocol used to convey the message.

Method of managing a tamper-proof device comprising several software containers

Method for a service provider to launch a targeted service implemented by an application belonging to a security domain of an eUICC embedded into a communication device. The security domain and application being respectively called transversal security domain and transversal application, the eUICC comprising a set of at least one profile allowing the communication device to access to a specific mobile network infrastructure, one profile being activated at a time by receiving by the eUICC from an SM-SR server on a communication interface a command for enabling a profile, the command having an identifier of the transversal security domain; interpreting by the eUICC the command for enabling a profile as a command for transmitting a subscription address associated to the profile which is activated in the eUICC; sending an SMS message comprising a subscription address associated to the profile which is currently active; establishing between the server operated by the service provider and the eUICC a communication channel, this establishment being initiated by the server operated by the service provider using the subscription address transmitted by SMS; receiving by the eUICC on said communication channel a command for launching the targeted service; launching by the eUICC the targeted service.

Method for a service provider to launch a targeted service implemented by an application belonging to a security domain of an eUICC

Growing community of inventors

Gemenos, France

Denis Dubois