Sun Microsystems, Inc.

Oracle America, Inc.

Belle Gate Investment B.v.

Other

Oracle International Corporation

Transmo Limited

Belle Gate Investments B.v.

Eduard K De Jong

Jon Bostrom

Aaron Cooley

Sebastian J Hans

Christopher John Stanford

Jurjen N E Bos

Jurjen Ne Bos

In a method for using and maintaining user data stored on a smart card, a smart card receives a user data request for the user data stored on the smart card. The smart card determines whether the user data request is a data maintenance request or a data use request. A data maintenance request is for modifying user data stored on the smart card. A data use request is for read only access to user data stored on the smart card. The smart card uses a first process to determine whether to allow the user data request when the user data request is determined to be a data maintenance request. The smart card uses a second process, different from the first method, to determine whether to allow the user data request when the user data request is determined to be a data use request.

Method for using and maintaining user data stored on a smart card

A method of exchanging a series of communication primitives during one or more communication sessions between two or more communication units is provided. In one embodiment, the method includes providing a first communication primitive including at least a first destination ID identifying at least a first communication unit as a receiver of the first communication primitive. The method also includes providing first data in the first communication primitive that reflects a first return destination ID identifying at least a second communication unit as a sender of the first communication primitive. Further, using the first data, a second destination ID is determined that is included in a second communication primitive sent from the first communication unit to the second communication unit. Also, the method includes determining, by the second communication unit during the one or more communication sessions, second data indicating a second return destination ID, wherein the second data differs from the first data and providing a third communication primitive including the second data.

Communication method and apparatus using changing destination and return destination ID's

A resource-constrained device comprises a processor configured to execute multiple instruction streams comprising multiple instructions having an opcode and zero or more operands. Each of the multiple instruction streams is associated with one of multiple instruction execution modes having an instruction set comprising multiple instruction implementations. At least one of the multiple instruction implementations is configured to change the processor from a first instruction execution mode to a second instruction execution mode. The processor comprises an instruction fetcher configured to fetch an instruction from one of the multiple instruction streams based at least in part upon a current instruction execution mode.

Multiple instruction execution mode resource-constrained device

Access to digital content may be controlled by determining a digital content specification and associated authenticated rights locker access request, sending the authenticated rights locker access request and the digital content specification, and receiving a new authenticated rights locker access request and a Web page with clickable links in response to the sending, where at least one of the clickable links is associated with an authenticated digital content request. When an indication of a user selection of one of the clickable links is received, an authenticated digital content request associated with the user-selected clickable link is sent to a digital content repository. The digital content is received in response to the sending of the authenticated digital content request.

Embedded content requests in a rights locker system for digital content access control

Communicating program data between a first device and a second device comprises disassembling a first program file comprising program data into at least one logical data unit, partitioning each of the at least one logical data unit into at least one protocol data unit and computing a first fingerprint over the payload portion of the at least one protocol data unit of the at least one logical data unit. The format of the at least one protocol data unit is defined by a communication protocol and includes a payload portion.

Signing program data payload sequence in program loading

A system for loading application identifiers to a mobile device includes a mobile device, a card device insertable into the mobile device, and an application center. The card device is adapted to determine an effective mobile device identifier of the mobile device, and transmit the effective mobile device identifier to the application center. The effective mobile device identifier is based at least in part on the result of a process performed by the card device. The application center is adapted to (1) determine zero or more allotted application identifiers and zero or more application identifiers of applications loaded on the mobile device based at least in part on the effective mobile device identifier, (2) identify at least one application identifier of the zero or more allotted application identifiers which does not form part of the zero or more application identifiers of applications loaded on the mobile device, and (3) load the at least one application identifier to the mobile device.

Card device for loading applications to a mobile device

A method for personalizing multi-application smart cards includes receiving, by an end-user, an anonymous smart card. The anonymous smart card includes one or more anonymous end-user applications; at least one personalized external application; and an end-user-controlled partition including a plurality of empty fields. The plurality of empty fields is for storing user data for the identified end-user. Each of the one or more anonymous end-user applications is disabled for uses requiring a link to an identified end-user. Also, each of the one or more anonymous end-user applications is enabled for uses not requiring a link to the identified end-user. The end user personalizes the anonymous smart card by storing user data in the end-user-controlled partition of the smart card. The user data includes identifying information for the end-user.

Personalizing an anonymous multi-application smart card by an end-user

Obfuscation of an application program comprises receiving an obfuscated key decryption program comprising an instruction stream configured to perform a decryption algorithm for a first cryptographic key. The obfuscated key decryption program also has an encrypted second cryptographic key scrambled in its instruction stream. The second cryptographic key is encrypted with the first cryptographic key. The obfuscated key decryption program is executed to decrypt the second cryptographic key. The second cryptographic key is used for decrypting digital content.

Rendering and encryption engine for application program obfuscation

A multi-application smart card may be personalized by receiving a smart card request, preparing an anonymous smart card having multiple user applications that are disabled for uses requiring a link to an identified user and enabled for uses not requiring a link to an identified user, and issuing the anonymous smart card to a user.

Growing community of inventors

Bristol, Netherlands

Eduard K De Jong