Thales Dis France Sas

Thales Dis France Sa

Guillaume Phan

Sylvain Chafer

Nicolas Vienne

Evangelos Spyropoulos

Emmanuel Lepavec

Valentin Favreau

Chandra Gondowisito

Olivier Poncelet

Chandra Gondowasito

Provided is a method for securely diversifying a generic application stored in a secure processor of a terminal, said method comprising: Generating at the request of a manager application hosted in an application processor of said terminal, at the level of a distant server, a server challenge; Sending said server challenge to said application; Generating a first message at said application, said first message being function of said server challenge, an application challenge and an unique identifier of said application; Sending said first message to a Root-Of-Trust service hosted in a secure processor of said terminal, said Root-of-Trust service generating an attestation of said first message, said attestation guaranteeing that said first message has not been modified and originates from said secure processor; and Transmitting said attestation of said first message to said distant server in an enablement request message.

Method for securely diversifying a generic application stored in a secure processor of a terminal

There is described a method for Java Card application memory footprint optimization which relies on the separation in advance of the code related to the personalization from the rest of the code. It allows this code to perform the personalization of an application installed from a main package while being itself included and installed from a separated package dedicated to the personalization, namely the Card Personalization Specifications (CPS) package. This way, the CPS package and all the code inherent to the personalization can be removed once all the personalization steps have been completed.

Java card application memory footprint optimization

Growing community of inventors

Meudon, France

Guillaume Phan