Giesecke & Devrient Gmbh

Deutschetelekom Ag

Secure Thingz Limited

Arm Limited

Giesecke+devrient Mobile Security Gmbh

Trustonic Limited

Giesecke-devrient Mobile Security Germany Gmbh

Rubean Ag

Stephan Spitz

Dominik Schnieders

Hermann Geupel

Tim Woodruff

Haydn Povey

Andrew Bott

Walter Hinz

Tim Hoole

Claus Dietze

Jan Eichholz

Ullrich Martini

Wolfgang Effing

Helmut Scherzer

Gero Galka

Hermann Sterzinger

Erich Englbrecht

Markus Kohler

Robert John Brown

Oliver Richter

Thomas Palsherm

Thorsten Urhahn

Hans Borgs

Ulrich Kolzenburg

Andrew Frame

Hao Chen

Markus KÖHLER

Werner Bschorr

Erich Engelbrecht

Hinz Walter

A method for operating a mobile Point-of-Sales (mPOS) application for executing a transaction includes: a Universal Integrated Circuit Card (UICC) card connected to a terminal device executes in interaction with the terminal device an application frontend of the mPOS application that provides, upon launch, an I/O interface with a human machine interface displayed by a touchscreen of the terminal device and a machine-to-machine interface; and the application frontend, for starting a transaction, captures transaction data associated with the transaction to be started via the human machine interface, reads further transaction data via the machine-to-machine interface from a transaction device separate from the terminal device and arranged close to the terminal device, generates a transaction authorization authorizing the requested transaction, and transmits the transaction authorization, the transaction data and the further transaction data via a connection to a remote backend server for completing the transaction.

Methods and system for operating a mobile Point-of-Sales application using a sim

A method for authenticating a user includes: an application frontend of a face recognition application, upon receipt of a face recognition request from an application backend of the face recognition application, causes a terminal device to activate a camera of the terminal device; the application frontend receives a video stream of a face of the user captured by the camera of the terminal device; the application frontend transmits the received video stream to the application backend; the application backend, upon receipt of the video stream, extracts a face characteristic of the user from the received video stream in real-time; and the application backend compares the extracted face characteristic with a stored reference face characteristic of the user and authenticates the user based on the extracted face characteristic matching the stored reference face characteristic.

Method and system for authenticating a user

A provisioning control apparatus is configured to be coupled to a provisioning equipment server, which is electrically connectable with one or more electronic devices for provisioning the one or more electronic devices with first or second program codes. The provisioning control apparatus comprises: a communication interface configured to receive an electronic credit token having a credit counter; and a processor. The communication interface is configured to transmit the first and second program codes towards the provisioning equipment server. The processor is configured to update a value of the credit counter for each transmission of the first and second program codes to obtain an updated credit counter, and to prohibit a further transmission of the first or second program codes if the updated credit counter indicates that a number of transmissions is reached. A provisioning control system comprises the apparatus and a corresponding method for provisioning one or more electronic devices.

Provisioning control apparatus, system and method

A method for completing a transaction includes: a backend server executes an application backend of a transaction application; a first terminal device executes a first application frontend of the transaction application; the first application frontend, for starting a transaction, transmits a transaction request indicating the transaction to be started and a second application frontend different from the first application frontend and comprising transaction data associated with the indicated transaction to the application backend; a second terminal device executes the second application frontend of the transaction application; the application backend provides a transaction link for being connected to by the second application frontend and transmits an authorization request to the second application frontend; the second application frontend authorizes the requested transaction and transmits a transaction authorization to the application backend; and the application backend completes the transaction.

Method and system for completing a transaction

A method for configuring a mobile Point-of-Sales (mPOS) application for executing a transaction includes: installing an application frontend of the mPOS application on a terminal device connected to a communication network; installing an application backend of the mPOS application on an edge cloud server of the communication network; configuring the application frontend to act, upon launch, as an I/O interface and to communicate with the application backend via a secure connection provided by the communication network; and splitting I/O drivers comprised by computer program code of the mPOS application into a low-level driver executed on the terminal device as part of the I/O interface and a high-level driver executed in the application backend at the edge cloud server.

Method and system for configuring a mobile point-of-sales application

A method for operating a mobile Point-of-Sales (mPOS) application includes: an application frontend of the mPOS application is installed and launched on a terminal device connected to a communication network via a secure connection; an application backend of the mPOS application is installed and launched on an edge cloud server of the communication network; the application frontend, for starting a transaction associated with the mPOS application, transmits a transaction request indicating the transaction to be started and comprising transaction data associated with the indicated transaction to the application backend via the connection; the application backend transmits an authorization request to the application frontend via the connection; the application frontend authorizes the requested transaction and transmits a transaction authorization to the application backend via the connection; and the application backend completes the transaction.

Method and system for operating a mobile point-of-sales application

A method for completing a transaction includes: a backend server connected to a communication network executes an application backend of a transaction application; a first terminal device connected to the communication network via a first connection executes a first application frontend of the transaction application; the first application frontend transmits a transaction request indicating the transaction to be started and a second application frontend and comprising transaction data associated with the indicated transaction to the application backend via the first connection; a second terminal device connected to the communication network via a second connection executes the second application frontend of the transaction application; the application backend transmits an authorization request to the second application frontend via the second connection; the second application frontend authorizes the requested transaction and transmits a transaction authorization to the application backend via the second connection; and the application backend completes the transaction.

A processor system includes a processor and a first memory area storing a boot program code. The boot program code starts execution of the operating system when executed by the processor, performs a cryptographic operation when processor executes the boot program code. A second memory area stores one or more cryptographic keys and is only accessible to the boot program code. A third memory stores the operating system. A communication interface receives data over a communication network. The processor retrieves the boot program code from the first memory area and executes the boot program code to start execution of the operating system. The processor terminates execution of the boot program code. The processor is configured to re-execute the boot program code while the operating system is executed to cryptographically encrypt data upon the basis of the cryptographic keys stored in the second memory area.

Processor system with a communication interface

A processor system includes a processor and a first memory area storing a boot program code. The boot program code starts execution of an operating system when executed by the processor, and performs a cryptographic operation when the processor executes the boot program code. A second memory area stores one or more cryptographic keys and is only accessible to the boot program code. A third memory area stores the operating system. The processor retrieves the boot program code from the first memory area and executes the boot program code to start the execution of the operating system. The processor re-executes the boot program code to cryptographically encrypt data upon the basis of the cryptographic keys stored in the second memory area.

Processor system

A provisioning control apparatus is configured for coupling to a provisioning equipment server electrically connectable with an electronic device(s) for provisioning the electronic device(s) with a program code. The apparatus comprises: a communication interface configured to receive an electronic provisioning token including a provisioning counter indicating a total of transmissions of the program code towards the provisioning equipment server; and a processor configured to retrieve the provisioning counter from the received token. The interface can transmit the program code towards server; the processor can update a value of the counter for each transmission of the program code towards the server for an updated counter. The processor prohibits transmission of the program code towards the server if the updated counter indicates a total number of transmissions has been reached. A provisioning control system includes the provisioning control apparatus and a corresponding method for provisioning includes one or more electronic devices.

A provisioning control apparatus couples to a provisioning equipment server electrically connectable with an electronic device(s) for provisioning the electronic device(s) with a program code. The provisioning control apparatus has a communication interface which transmits the program code to the provisioning equipment server for provisioning the electronic device(s) with the program code and to receive an electronic provisioning token having provisioning control data. The provisioning control apparatus includes a processor that controls the transmission of the program code via the communication interface to the provisioning equipment server. The electronic provisioning token has time adjustment information for adjusting the clock, and the processor adjusts the time of the clock. A provisioning control system includes the provisioning control apparatus and a method involves provisioning the electronic device(s).

A data provisioning device is arranged for provisioning a data processing entity from a set of data processing entities sharing the same joint decryption key. The data provisioning device comprises: a network interface configured to receive the provisioning data for provisioning the data processing entity, a joint encryption key associated with the joint decryption key, and control information indicating a processing scheme to be deployed by the data provisioning device when provisioning the data processing entity; a processor configured to process the provisioning data according to the control information to obtain processed provisioning data, to cryptographically encrypt the processed provisioning data using the received joint encryption key to obtain encrypted processed provisioning data; and a device interface configured to transmit the encrypted processed provisioning data to the data processing entity.

Data provisioning device for provisioning a data processing entity

A method for configuring an application for an end device having a predefined end-device configuration with a predefined security level. A query about the predefined end-device configuration is directed by means of the application to a central place in which a multiplicity of security levels of end-device configurations have respective application configurations associated therewith. In response to the query, the central place ascertains the predefined security level of the predefined end-device configuration from the multiplicity of security levels, and outputs it to the application together with the associated application configuration. In dependence on the output security level, one or several functions of the application are configured by means of the application on the basis of the output application configuration for the end device.

Method for configuring an application for an end device

The invention relates to a mobile station comprising a terminal (ME) and a security element ((U)(SIM)) which can be operated, removed or securely implemented in the terminal (ME), a link being provided between the terminal (ME) and the security element ((U)(SIM)) and being verifiable by means of a secret key (PrK; KST) and by means of the verification key (Puk; KSA). The terminal (ME) comprises a secured runtime environment (TEE), and the verification key (PuK; KST) is stored in the secured runtime environment (TEE).

Mobile station with bond between end device and security element

The invention provides a method for programming a chip for a mobile end device, wherein, in a preparatory step, a serial number is programmed into the chip and thereafter, in a programming step, the serial number is verified and a programming of at least one further datum into the chip is only carried out if the serial number has been successfully verified. The serial number is verified here by means of a security module (HSM), while employing a secret information item stored in the security module (HSM) and different from the serial number.

Growing community of inventors

Munich, Germany

Stephan Spitz