Idemia Identity & Security France

Idemia France

Idemia Identity & Security

Starchip

Lauren Marjorie Del Giudice

Pierrick Bieules

Emmanuelle Dottax

Yves Fusella

Jean-Yves Pierre Bernard

Maël Berthier

Aurélien Cuzzolin

Anthony Fonteneau

Yannick Courquin

Rémy Cricco

Rémi Louis Marie Duclos

Rëmi Louis Marie Duclos

Rémi Duclos

Yoann Fages-tafanelli

An eUICC card comprising an initial runtime environment, subscriber profiles, associated adapters, and an adaptive routine configured to apply these adapters. An adapter enables the initial runtime environment to be adapted to the specificities of the corresponding profile when the latter is enabled. To enable dynamic adaptation of the runtime environment to the profiles used, the eUICC card further comprises inverse adapters associated with the profiles. The inverse adapter of the active profile makes it possible to restore the initial runtime environment upon disabling or deleting this profile. The adaptation can consist of modifying a Java class of the Java Card runtime environment of the eUICC, to the specificities of a profile.

Dynamic adaption of a secure element execution environment to profiles

The disclosure relates to a collecting method implemented by a first device including a first volatile memory, this first device interacting with a second device including a second non-volatile memory, the memories comprising objects each constituting an instance of an object-oriented language class. The method comprises an analysis of the objects by running through an object tree from the persistent roots; and on detecting that the analysis is finished, a collecting from the first and second memories for deleting each object that has not been analyzed during said analysis. This analysis in particular comprises, for each object: the identification of each reference pointing to another object; and the definition of a first or second type for each identified reference, this analysis continuing only along the references of the first type.

Data collector in an electronic device

The disclosure proposes a method in a first device comprising a transaction history and a generation counter, this device processing transactions with a second device. During a current transaction: receipt of data comprising a public key of the second device, a second generation counter and an identifier of the current transaction; verification that the first and second generation counters coincide; verification that the history comprises an input associated with the public key; approval of the current transaction if the transaction identifier satisfies a condition indicating the uniqueness of the current transaction; storage in the history of a new input with the public key; and update of an account balance to pay a credit to an account. The method also comprises: detection of a risk of saturation of the memory of the first device; update of the first generation counter and eviction of the memory.

Memory management in a transaction processing device

A method for executing a transaction for a processor associated with a persistent memory and with a cache memory, the cache memory comprising cache lines associated with respective states, including:

Method for executing a transaction

Method for verifying data generated by an electronic device included in equipment, the electronic device including a computing unit, a one-time programmable memory and a volatile memory, the equipment including a rewritable non-volatile memory and a communication bus enabling the electronic device to store data in the rewritable non-volatile memory. The method includes: creating a secured channel by encryption between the equipment and a server; obtaining an authentication key from the server; loading data and a message authentication code from the rewritable non-volatile memory to the volatile memory, the message authentication code obtained by the electronic device from the authentication key and said data prior to the storage of said data and message authentication code in the rewritable non-volatile memory, the electronic device not having kept the authentication key following the obtaining of the message authentication code; verifying said data using the secret key and the message authentication code.

Data verification method

A secure element and method for backup of data stored in a non-volatile memory of the secure element. The method for backup of data includes de-fragmenting an area of the non-volatile memory so as to form, in the area, an occupied region and a free region. The method further includes compressing the portion of data contained in the occupied region, after de-fragmentation, and compressing the contents of the free region using a compression algorithm that is different from the one used for compressing the portion of data contained in the occupied region. In one embodiment, the occupied region is compressed using a dictionary, and the free region is compressed by applying run-length encoding (RLE). The method also includes generating a backup image containing the compressed portion of data and the compressed contents of the free region, and writing the backup image into the nonvolatile memory. The area may contain objects to be handled by a program coded in an object language. Metadata for each area may also be generated and stored in the nonvolatile memory. A method of restoring data, including configuring the secure element in a busy mode to avoid corruption of the contents, and a method for resetting the secure element, are also disclosed.

Secure element including a non-volatile memory and methods for saving and restoring data including defragmenting and compressing data stored in occupied and free regions

Growing community of inventors

COURBEVOIE, France

Lauren Marjorie Del Giudice