Multos Limited

Mondex International Limited

Multos Limted

Ian Stephen Simmons

David Barrington Everett

Timothy Philip Richards

John Charles Viner

Anthony David Peacham

Stuart James Miller

Anthony David Peachman

Methods, apparati, and computer-readable media for securely transporting a software application onto a tamper resistant module (TRM) () by using an individualized TRM key set. A method embodiment of the present invention comprises: storing a key pair unique to the TRM () in a memory located on the TRM (), where the key pair comprises a TRM public key () and a TRM private key (); retrieving the TRM public key from the TRM; encrypting a portion of the software application using the TRM public key (); transmitting the encrypted software application to the TRM (); and recovering and decrypting the encrypted software application using the TRM private key ().

Key transformation unit for a tamper resistant module

Methods and apparati for securely loading one or more computer software applications onto a tamper resistant module (TRM) () and for securely deleting one or more applications from the TRM. An embodiment of the invention comprises a method for determining, based at least upon an encrypted personalization data block, whether a TRM () is part of a qualified set of TRM's to accept loading of an application. Thereafter, the method provides for loading the application onto the TRM () only after the first step determines that the TRM () is qualified to accept the loading of the application. Another embodiment comprises a method for determining, based at least upon an encrypted personalization data block, whether a TRM () is part of a qualified set of TRM's to accept deleting of an application. Thereafter, the method provides for deleting the application from the TRM () only when the first step determines that the TRM () is qualified to accept the deleting of the application.

Tamper resistant module certification authority

Methods and systems for flexibly loading an application, e.g., a software application, and associated data from an application provider () onto a tamper resistant module (TRM) () having an I/O buffer () and a memory (). A method embodiment of the invention comprises determining () the size of the TRM's I/O buffer (), segmenting () the application to be loaded and its associated data into a plurality of segments, with each segment adapted to be stored in the I/O buffer () and the size of each segment being a function of the determined size of the I/O buffer (), separately transmitting () each segment to the tamper resistant module (), and storing () each separately transmitted segment in a selected one of one or more available spaces of the TRM's memory (), said spaces selected depending upon the size of each segment and upon which of said available spaces has the smallest available area in the TRM's memory () in which the segment can be stored.

Flexibly loading a tamper resistant module

A secure multiple application card system and process is provided having secure loading and deleting capability by use of a Certification Authority and Personalization Bureau. The certification authority maintains the security of the system by requiring IC cards to be injected with its public key and a card identifier for uniquely identifying each card, by providing a personalization data block for each card, and by signing with its private key all applications to be loaded or deleted from the IC card.

Secure multiple application card system and process

A secure multiple application card system including an IC card having a microprocessor, a ROM and an EEPROM, wherein program instructions are stored in the ROM at time of manufacture, and at time of personalization, an address table is stored in the EEPROM. Upon operation of the IC card, the operating system calls the program instructions, including codelets and primitives, in accordance with the addresses indicated in the address table.

Configuration of IC card

A system and method of flexibly loading an application and its associated data from an application provider onto an IC card. The application and its associated data is divided into segments which can each fit into the input buffer of an Integrated circuit card. Each segment is transmitted separately and the Integrated circuit card then stores the segment in an available space in the IC card's memory. The segments can be placed in non-contiguous memory in order to reduce memory fragmentation.

System and method for flexibly loading an IC card

A multi-application IC card system is disclosed having selective application loading and deleting capability. Prior to loading an application onto an IC card a test is conducted to determine if the card is qualified to receive the application using personalization data stored on the card and comparing it with permissions data associated with the application indicating one or more sets of cards upon which the application may be loaded. If the personalization data of the card falls within the allowable set of permissions for that application then the card may be loaded with the application. Preferably, the personalization data includes data representative of the card number, issuer, a product class and the date on which the card is personalized.

Growing community of inventors

Cambs, United Kingdom

Ian Stephen Simmons