Micron Technology Incorporated

Gemalto Sa

Axalto S.a.

Gemalto Inc.

Axalto Inc

Schlumberger Technologies, Inc.

Thales Dis Usa, Inc.

Schulumberger Malco, Inc.

Ksheerabdhi Krishna

Sylvain Jacques Prevost

Ruchirkumar Shah

Michael Andrew Montgomery

Mehdi Asnaashari

Scott Bates Guthery

Timothy J Wilkinson

Kapil Sachdeva

Yannick Burianne

Medhi Asnaashari

HongQian Karen Lu

Joseph Jerome Leibenguth

Bart J Bombay

Yves Reignoux

Tim Wilkinson

Jean-Pierre Lafon

Denis Groeninck

Severine Cheramy

Neville Pattinson

Dimitar Gospodinov

Simon Tan

Tao Zheng

Ruchirkumar D Shah

The present invention relates to a biometric system (FBS) comprising a sensor (FS) and a secure execution environment (SEE) as separate physical components, said biometric system being intended to be used in cooperation with a biometric application (BA), wherein said secure execution environment (SEE) comprises a data processing component (DP) and a secure memory (SEM) storing data enabling to access calibration data as determined at the time of the physical pairing of the sensor (FS) and the secure execution environment (SEE), said data processing component (DP) using the calibration data as retrieved when raw biometric data are received from the sensor (FS) to produce biometric sample to be used in the biometric application (BA).

Biometric sensor and processor pairing

A storage device contains a smart-card device and a memory device, both connected to a controller. The storage device may be used in the same manner as a conventional smart-card device, or it may be used to store a relatively large amount of data in various partitions. One of these partitions may be a read-only partition that is normally accessible only for read accesses. However, it may sometimes be necessary to update or supplement the data stored in the read-only partition. This is accomplished by a host issuing an appropriate command to the storage device, which may be accompanied by an identifier for an appropriate level of authorization. The controller then changes the attribute of the read-only partition from 'read-only' to 'read/write' to allow data to be written to the partition. Upon completion, the controller changes the attribute of the partition back to read-only.

System and method for updating read-only memory in smart card memory modules

A storage device contains a smart-card device and a memory device, both of which are accessed though a controller. The storage device may be used in the same manner as a conventional smart-card device, or it may be used to store a relatively large amount of data in various partitions corresponding to the protection level of the data stored therein. The smart-card device stores critical security parameters that are provided to the controller to protect access to some or all of the partitions of the memory device. A host connected to the controller issues commands, and the controller analyzes the commands and responds to them in various ways depending upon the nature of the command. In particular, depending upon the nature of the command, the controller may either pass the command to the smart-card device, or ignore the command either indefinitely or until a predetermined event has occurred.

Intelligent controller system and method for smart card memory modules

A storage device contains a smart-card device and a memory device, which is connected to a controller. The storage device may be used in the same manner as a conventional smart-card device, or it may be used to store a relatively large amount of data. The memory device may also be used to store data or instructions for use by the smart-card device. The controller includes a security engine that uses critical security parameters stored in, and received from, the smart-card device. The critical security parameters may be sent to the controller in a manner that protects them from being discovered. The critical security parameters may be encryption and/or decryption keys that may encrypt data written to the memory device and/or decrypt data read from the memory device, respectively. Data and instructions used by the smart-card device may therefore stored in the memory device in encrypted form.

Critical security parameter generation and exchange system and method for smart-card memory modules

An integrated circuit card is used with a terminal. The integrated circuit card includes a memory that stores an interpreter and an application that has a high level programming language format. A processor of the card is configured to use the interpreter to interpret the application for execution and to use a communicator of the card to communicate with the terminal.

Computer program product containing instructions for providing a processor the capability of executing an application derived from a compiled form

Method for providing user-to-user delegation service in federated identity environment, characterized in that it comprises a delegation or assignment step wherein a delegator specifies said delegation at an identity provider for delegating a privilege or task to a delegatee to be performed at a service provider.

User to user delegation service in a federated identity management environment

A storage device contains a smart-card device and a memory device, both connected to a controller. The storage device may be used in the same manner as a conventional smart-card device, or it may he used to store a relatively large amount of data in various partitions. One of these partitions may be a read-only partition that is normally accessible only for read accesses. However, it may sometimes be necessary to update or supplement the data stored in the read-only partition. This is accomplished by a host issuing an appropriate command to the storage device, which may he accompanied by an identifier for an appropriate level of authorization. The controller then changes the attribute of the read-only partition from 'read-only' to 'read/write' to allow data to be written to the partition. Upon completion, the controller changes the attribute of the partition back to read-only.

A system and method of operating a device to securely update the control firmware controlling the device. Downloading a firmware update package to a first microcontroller of the device. Determining a firmware update portion and an encrypted hash portion of the firmware update package wherein the encrypted hash portion is cryptographically signed by a signatory. Confirm that the encrypted hash portion conforms to the firmware update by independently computing the hash of the encrypted firmware update portion on the first microcontroller and comparing that value to the signed hash. Other systems and methods are disclosed.

System and method for secure firmware update of a secure token having a flash memory controller and a smart card

A method of operating a host computer having a web-browser with the capability of executing at least one web-browser add-on to provide a web application access to a smart card to protect the smart card from security threats associated with being connected to the Internet. Prior to establishing a connection between a web application executing in the web browser, verifying that the web application has been authorized to connect to a smart care using the web-browser add-on to provide a web application access to a smart card.

System and method for providing security in browser-based access to smart cards

Growing community of inventors

Cedar Park, TX, United States of America

Ksheerabdhi Krishna