Giesecke & Devrient Gmbh

Giesecke+devrient Mobile Security Gmbh

Giesecke-devrient Mobile Security Germany Gmbh

Giesecke+devrient Mobile Security Germany Gmbh

Stefan Eckardt

Michael Baldischweiler

Thomas Stocker

Dirk Wacker

Martin Rosner

Martin Rösner

Jochen Kirsch

Ralf Klaassen

BeeGek Lim

Beegek Lim

Otmar Knoller

A method for personalizing an integrated secure element, which is permanently installed in a mobile end device. The method involves the agreement of a shared secret between the secure element and an HSM, encrypting an operating system, and possibly personalization data and/or one or several profiles, in the HSM based on the shared secret and transferring the encrypted operating system to the secure element, and re-encrypting the operating system in the secure element for storage in the NVM memory of the mobile end device.

Personalization of a secure element

A chipset for a mobile radio-enabled end device is provided in which an integrated subscriber identity module is arranged in a secure processor of the chipset, and in which an operating system of the secure processor is arranged or arrangeable. The operating system comprises a core OS and an application OS, wherein the application OS comprises a core OS verification apparatus which is arranged to verify the integrity of the core OS upon it being put into operation and to continue the putting into operation at most only in the case of a successful verification of the core OS and to cause a fault measure and/or to interrupt or terminate the putting into operation in the case of an unsuccessful verification.

Integrated subscriber identity module having a core OS and an application OS

The invention relates to methods for storing and accessing user data () and configuration data () in a mobile device () that is connected to a user module (). According to a first aspect of the invention, the user data () is stored in the mobile device () at least partially in encrypted form, and is decrypted, in access operations, using a decrypting function () of the user module (). According to a second aspect of the invention, the configuration data () is stored in the user module (). The configuration data () indicates whether, or to what extent, an application program () is allowed to be executed by the mobile device (). Security and protection against unauthorised access to user data () and application programs () in the mobile device () are increased by the invention.

Storing and accessing data in a mobile device and a user module

A memory array includes a plurality of storage cells ( ) and a selection device ( ) which selects a storage cell ( ) for physical access due to a logical address ( ) supplied via an address bus ( ). The selection device ( ) includes a scrambling device ( ) which allocates a storage cell ( ) in the memory array in predictable fashion by scrambling to a logical address ( ) transmitted to one of the selection devices ( ), the cell then being physically accessed.

Memory array with address scrambling

Growing community of inventors

Mammendorf, Germany

Stefan Eckardt