Gemalto Sa

Gemplus

Thales Dis France Sa

Philippe Proust

Pierre Girard

Xavier Berard

Lionel Merrien

Fabrice Vergnes

Pascal Moitrel

Jacques Fournier

Anne Laget

Frédéric Faria

Eric Brier

Olivier Benoit

Nathalie Feyt

Franck Imoucha

Cedric Huet

Pascal Guterman

Claude Barral

Laurent Sustek

Mireille Pauliac

Cedric Cardonnel

Sébastien Petit

Christophe Clavier

The invention concerns a method for managing content on a secure element connected to an equipment, this content being managed on the secure element from a distant administrative platform. According to the invention, the method consists in: establishing, at the level of the administrative platform a secure channel between the equipment and the administrative platform, thanks to session keys generated by the secure element and transmitted to the equipment; transmitting to the administrative platform a request to manage content of the secure element; and verifying at the level of the administrative platform that this request originates from the same secure element that has generated the session keys and, if positive, authorizing the management and, if negative, forbid this management.

Method for managing content on a secure element connected to an equipment

The invention relates to a system for managing multiple subscriptions in a UICC, this system comprising a central server able to manage subscriptions stored on a UICC comprised in a mobile terminal in the field, at the request of a subscriber of one of these subscriptions.

System for managing multiple subscriptions in a UICC

The invention proposes several improvements related to the management of secure elements, like UICCs embedding Sim applications, these secure elements being installed, fixedly or not, in terminals, like for example mobile phones. In some cases, the terminals are constituted by machines that communicate with other machines for M2M (Machine to Machine) applications.

UICCs embedded in terminals or removable therefrom

The invention is a method for authenticating a device which comprises a chip and a body carrying the chip. The body comprises a graphical security feature. The method comprises the steps of: The extracting step and the authenticating step are carried out by a machine distinct from the device.

Method of authenticating a device

The present invention relates to a method for downloading a subscription from an operator to a UICC embedded in a terminal. The method includes transmitting from the terminal, to a platform, an identifier and a request for downloading the subscription; verifying in the platform that the terminal is authorized to download the subscription by verifying the rights of the terminal in accordance with its identifier; and downloading the subscription to the UICC if the rights are confirmed and, otherwise, refusing to download the subscription.

Method for downloading a subscription from an operator to a UICC embedded in a terminal

A method of protecting a telecommunication terminal having a chip-card-type personal component which is required for telecommunication network access. The terminal includes a processing unit, at least one operating memory element containing the information necessary to the operation of the terminal, i.e. a terminal operating program, and the data necessary to the program. The method involves: a) encrypting the contents of the operating memory element of the telecommunication terminal using a pre-determined key K which is necessary for decryption; and b) allowing the terminal to commence decryption once the terminal has been started with a start-up program that is saved in a secure memory element and once the key for decryption has been calculated by same.

Method of protecting a mobile-telephone-type telecommunication terminal

The invention relates to a security token comprising a communication interface adapted to communicate with a host computer; a security module, comprising encryption based security features; and a non volatile memory storing at least an application to be uploaded and executed in a host computer. The application makes use of the security features when executed in a host computer in communication with the communication interface. The security token is adapted to modify the content of the application as uploaded or its execution parameters at successive connections of the security token to a host computer.

Security token for securely executing an application on a host computer

The invention relates to a method for secure data transmission in connections between two functional modules of an electronic unit. A first module of a message of k bits in a word code of n bits is injection coded with a constant Hamming weight of w. The word of code is transmitted to a second module. An error signal is generated when the Hamming weight of the word of code of n bits, received by the second module, is different from w. In the absence of error, the code word is decoded, where k, w and n are whole numbers. The invention further relates to a corresponding electronic circuit.

Secure data transmission between two modules

The invention concerns a particular structure of enhanced short message, and a method for synchronizing and ensuring the security of exchanged enhanced short messages having this structure. Conventionally, an enhanced message is transmitted by a message service centre to a subscriber identification module (or SIM module) of a mobile station. The body ( ) of this enhanced message contains in particular a first field ( ) for remote commands pertaining to a remote application. This body ( ) also contains a second field ( ) for storing the current value of a synchronizing counter, to be compared to a previous value of the synchronizing counter, stored in the SIM module. The body ( ) can contain another field ( ) for storing a certificate, the body signature, for proving the authenticity of the enhanced message and the identity of its transmitter. The enhanced message is accepted or refused by the SIM module depending on the coherence of these values with the internal status of the SIM module.

Enhanced short message and method for synchronizing and ensuring security of enhanced short messages exchanged in a cellular radio communication system

A communication system comprising multiple terminal equipment (,), each consisting of a terminal (,) cooperating with a microprocessor-driven user card (SIM module;,). Each user card includes data memory (,) comprising a plurality of objects and serving as medium to at least two separate applications, the user card comprising a microprocessor (,) and ROM (,) for executing instructions pertaining to the applications. Each object contained in the user card data memory is associated with a first defined access control policy by a set of first access conditions. Each object is also associated with at least another access control policy defined by a set of at least one alternative access condition. Each alternative access condition is applicable, for the object, to group of at least on instruction pertaining to the application(s) using the other defined access control policy. Each object is also associated with a plurality of access control policy indicators each indicating, for one of the applications, which access control policy to use with the application, the control access policy indicators being stored in the data memory (,).

Communication system for managing safely and independently a plurality of applications by each user card and corresponding user card and management method

Growing community of inventors

Marseilles, France

Philippe Proust