Giesecke+devrient Mobile Security Gmbh

Giesecke+devrient Advance52 Gmbh

Giesecke & Devrient Gmbh

Florian Gawlas

Jan Eichholz

Wolfram Seidemann

Tilo Fritzhanns

Maria Veleva

Thomas Tarantino

Gisela Meister

Dieter Weiss

Ralf Liebler

Leif Östling

Daniel Albert

Giselher Dorff

Werner Strobl

Rodrigue Gil

Sascha Behlendorf

Verena Rapp

Michael Fiedler

A method relates to a terminal for managing electronic coin datasets and to a corresponding terminal. The electronic coin datasets are output by a central issuer entity, wherein each electronic coin dataset has a test value, and the test value is incremented when the electronic coin dataset is directly transmitted between two terminals or the test value is invariant in the event of an action carried out by terminals on the electronic coin dataset. In the method, it is determined whether the electronic coin dataset is displayed by the terminal in the payment system or whether the electronic coin dataset is returned to the central issuer entity. A method in a payment system is provided for managing electronic coin datasets, to a corresponding payment system, and to a monitoring entity.

Method, terminal, monitoring entity, and payment system for managing electronic coin datasets

A device for directly transmitting electronic coin data records to another device includes accessing data storage, such that an electronic coin data record is stored in the data storage; an interface at least for outputting the at least one electronic coin data record to the other device; and a computing unit configured to mask the electronic coin data record in the device by applying a homomorphic encryption function to the electronic coin data record to obtain a masked electronic coin data record for registering the masked electronic coin data record at a monitoring entity; and to output the electronic coin data record using the interface. A payment system has a monitoring layer including a database in which masked electronic coin data records are stored; and a direct transaction layer including at least two devices in which the method can be carried out.

Device for directly transmitting electronic coin data records to another device, and payment system

A method for individualizing a portable data carrier, in particular a chip card includes an end device that supplies data for configuring and/or updating one or more functions of the portable data carrier. The data are transmitted by the end device to the portable data carrier via a communication connection between the end device and the portable data carrier. A configurating and/or updating of the function or functions of the portable data carrier is effectuated by means of the data transmitted to the portable data carrier.

Method for individualizing a portable data carrier, in particular a chip card

A method for authorizing a transaction has the following steps: inputting transaction data on a first mobile device, transmitting the transaction data from the first device to a background system by means of a first over-the-air interface, transmitting in encrypted manner at least a password to a second mobile device through the intermediary of the first mobile device, and authorizing the transaction by inputting the password displayed on the second device on the first device.

Method for authorizing a transaction

A security element of a mobile device comprises a service-provider network subscription associated with a service provider. The security element is arranged such that the service-provider subscription is employable parallel to a user network subscription installed on the security element. A service associated with the service provider thus becomes utilizable on the basis of the service-provider subscription, independently of a user subscription that might be present on the same security element.

Subscription management

A method and a system for secure transfer of an application from a server (S) into a reading device unit () with authentication of a user with a data carrier unit (), the server (S) making available the application, wherein, between the data carrier unit () and the server (S), a first cryptographically secured channel (K) is set up based on first cryptographic information (A), and between a security module () of the reading device unit () and the server (S) a second cryptographically secured channel (K) is set up based on second cryptographic information (B). The application is transferred from the server to the reading device unit via the second cryptographically secured channel (K).

Method for secure transfer of an application from a server into a reading device unit

Growing community of inventors

Munich, Germany

Florian Gawlas