Giesecke & Devrient Gmbh

Giesecke+devrient Mobile Security Gmbh

Dieter Weiss

Wolfgang Rankl

Michael Baldischweiler

Gisela Meister

Thomas Larsson

Jan Eichholz

Thomas Stocker

Florian Gawlas

Klaus Vedder

Martin Merck

Ulrich Dietz

Jens Rudolph

Jorgen Hult

Thomas Frey

Michael Tagscherer

Alexander Kolbeck

Michael Meyer

Jari Nyholm

A method for installing an application in a security element of a portable end device comprises the following steps: the installation device receives an installation job for installing a pre-specified application on a pre-specified security element. The job is processed by the installation device which receives the installation job from the pre-specified security element itself or from a further security element different from the pre-specified security element.

Method and system for installing an application in a security element

A method of providing a secure element of a mobile terminal with a subscription profile in which the mobile terminal is configured to communicate with a cellular communications network and the subscription profile comprises a network specific portion related to the cellular communications network or a different cellular communications network as well as a hardware specific portion related to the hardware of the mobile terminal and/or the secure element. The method comprises the steps of: assembling the subscription profile, wherein the network specific portion of the subscription profile is provided by a first server and the hardware specific portion of the subscription profile is provided by a second server; and providing the subscription profile over-the-air to the secure element. A corresponding secure element, mobile terminal and subscription management backend system involves features of the method.

Methods and devices for OTA subscription management

A method is provided for interaction of a portable data carrier with an end device. The data carrier comprises a transducer arrangement having at least one or a set of capacitive transducer elements which are arranged on or in the data carrier at defined positions in relation to the geometry of the data carrier, at least one contactless interface, and a dedicated energy supply. The end device comprises a capacitive display screen having a touch-sensitive display, wherein the data carrier generates via the capacitive transducer elements signals which, when the data carrier is placed onto the display screen, are picked up by the display screen of the end device and evaluated as input signals through the end device.

Method for interaction of a data carrier with an end device

A method and a system for secure transfer of an application from a server (S) into a reading device unit () with authentication of a user with a data carrier unit (), the server (S) making available the application, wherein, between the data carrier unit () and the server (S), a first cryptographically secured channel (K) is set up based on first cryptographic information (A), and between a security module () of the reading device unit () and the server (S) a second cryptographically secured channel (K) is set up based on second cryptographic information (B). The application is transferred from the server to the reading device unit via the second cryptographically secured channel (K).

Method for secure transfer of an application from a server into a reading device unit

The invention relates to a method for subsequently implementing a SIM functionality, with the help of which a mobile telephone () is enabled to use a mobile radio network, in a security module (). Within the context of the method according to the invention the SIM functionality is realized in the form of an application, of which at least a first part is loaded into the security module (). Furthermore, personalizing data, which are required for a use of the mobile radio network by the mobile telephone (), are transmitted from a provider () to the security module () in encrypted form on the direct or indirect way. The encrypted personalizing data are decrypted by the security module () by means of a secret key of a user stored in the security module (). The security module () is personalized by means of the decrypted personalizing data.

Retrospective implementation of SIM capabilities in a security module

In a method for controlled program execution by a portable data carrier, the value of a status counter (ZZ) is altered during execution of each controlled section (.x) of an executed program () in order to reflect the processing of the respective controlled section (.x); when executing a jump instruction (.x), which causes one or more controlled sections (.x) to be skipped, the value of the status counter (ZZ) is altered as if the skipped controlled sections (.x) had been executed and the value of the status counter (ZZ) is compared at at least one test point () with at least one admissible value. A portable data carrier has corresponding features. The invention provides reliable protection against manipulations of the portable data carrier and is also suitable for application in executing complex programs.

Controlled program execution by a portable data carrier

A method is proposed for operating a portable data carrier designed for executing reloadable function programs. According to the method the data carrier initially has installed thereon a loader interface which allows the reloading of load applications which in turn permit the loading of function programs. Each load application has allotted thereto an invariable assigned address space. To support the management of an assigned address space, badges are produced for application programs to be reloaded, said badges containing information about the size of the memory space required for the application program. Address space in the memory device is allotted to application programs to be reloaded in accordance with the size information provided on the badges. A data carrier suitable for carrying out said method is further disclosed.

Method for operating a portable data carrier configured for executing reloadable functional programs

To permit safe writing of the pointer (P) pointing to the current record in a cyclic memory or ring memory, e.g. an EEPROM, the new record (D'&num; ) is written to the memory location (R ) containing the oldest record, and then the pointer (P) is updated. The pointer (P) consists of a first pointer (P , P *) and a second pointer (P , P *) redundant with respect to the first pointer. Each pointer contains a check value in the form of the inverse or complement code of the actual pointer. Due to the second pointer and the check value, the pointer is written with optimal safety. In case of a disturbance in the course of pointer updating, the old first pointer can later alternatively be recovered from the second pointer or the second pointer updated with the aid of the new first pointer.

Process for the secure writing of a pointer for a circular memory

In a system for conducting transactions with a multifunctional card having an integrated circuit, the circuit contains a bank application associated with the user's account-keeping bank and at least one purse application associated with a services supplier or manufacturer. With the aid of an apparatus communicating with the card, the card user can load a selectable sum of money into the purse application. The purse supplier is provided with a transaction certificate about the sum loaded in the purse and to be credited to the purse supplier's account, without a need for storing the secret data necessary for preparing this certificate in the purse application or in the purse terminal.

Growing community of inventors

Munich, Germany

Dieter Weiss