Giesecke & Devrient Gmbh

Giesecke+devrient Mobile Security Gmbh

Geisecke+devrient Mobile Security Gmbh

Thomas Stocker

Klaus Finkenzeller

Thomas Frey

Martin Merck

Michael Baldischweiler

Dieter Weiss

Stefan Eckardt

Alexander Kolbeck

Daniel Ciesinger

Monika Eckardt

Georg Kramposthuber

Georg Kramphosthuber

Alexander Grebe

Thorsten Ulbricht

Kalman Cinkler

Siegfried Vollmann

Hartmut Steinegger

Jürgen Hirschinger

Helmut Köglmeier

A method is provided for operating a security module of a mobile terminal, and a security module. The security module is developed to communicate over one of a plurality of mobile communication networks. The security module comprises different system configurations for different mobile communication networks of the plurality of mobile communication networks. The security module receives subscription data for logging into one mobile communication network of the plurality of mobile communication networks, analyzes the subscription data, and identifies the mobile communication network out of the plurality of mobile communication networks. Subsequently, the security module selects a system configuration in accordance with the mobile communication network, identified in the preceding step, of the plurality of mobile communication networks. The security module is operated with the selected system configuration in the identified mobile communication network.

Method and device for operating a mobile terminal in a mobile communication network

A method for operating a portable data carrier includes a processing unit for processing commands and a memory unit for storing data, with random wait states being inserted into the processing of the commands for thwarting SPA/DPA attacks. An actual checksum may be computed over the data of a selected region of the memory unit during a random wait state. A portable data carrier is arranged for executing the method.

Method for operating a portable data carrier, and such a portable data carrier

For clearing transaction data selected for a processing, there is generated in a portable data carrier () a transaction acoustic signal () (S; S; S) upon whose acoustic reproduction by an end device () at least transaction data selected for the processing are reproduced superimposed acoustically with a melody specific to a user of the data carrier () (S; S; S). The generated transaction acoustic signal () is electronically transferred to an end device () (S; S), which processes the selected transaction data (S; S; S) only when the user of the data carrier () confirms vis-&#xe0;-vis the end device () an at least partial match both of the acoustically reproduced melody with the user-specific melody and of the acoustically reproduced transaction data with the selected transaction data (S; S, S; S).

Release of transaction data

In a process for memory management in the execution of a program by a portable data carrier which has a first and a second memory region for the storage of objects generated in program execution, an object is initially created at least in part in the second memory region. If, in the course of further program execution, a persistent reference to the object is generated, the object is transferred to the first memory region. In a process for converting a source program into an executable program, a check is carried out at compile time as to whether a persistent reference to an object to be newly created is generated. Depending on the result of that check, program code is generated which creates the object either in the first or at least in part in the second memory region.

Managing persistent and temporary data objects in a portable data carrier

In a method for the controlled execution of a program (), the program () being intended for a virtual machine (VM, VM'), on a portable data carrier, wherein the data carrier has a processor that executes at least a first and a second virtual machine (VM, VM&#x2032;), the program () is executed both by the first and by the second virtual machine (VM, VM&#x2032;). If, during execution of the program (), a difference is found between the operating state of the first virtual machine (VM) and the operating state of the second virtual machine (VM&#x2032;), execution of the program is aborted. A data carrier and a computer program product exhibit corresponding features. The invention provides a technique for the controlled execution of a program, which technique prevents security risks due to an attack or a malfunction of the data carrier.

Controlled execution of a program used for a virtual machine on a portable data carrier

A method is proposed for operating a portable data carrier designed for executing reloadable function programs. According to the method the data carrier initially has installed thereon a loader interface which allows the reloading of load applications which in turn permit the loading of function programs. Each load application has allotted thereto an invariable assigned address space. To support the management of an assigned address space, badges are produced for application programs to be reloaded, said badges containing information about the size of the memory space required for the application program. Address space in the memory device is allotted to application programs to be reloaded in accordance with the size information provided on the badges. A data carrier suitable for carrying out said method is further disclosed.

Method for operating a portable data carrier configured for executing reloadable functional programs

A method is proposed for virtual enlargement of the stack of a portable data carrier allowing reloading of executable program code. To permit the execution of programs requiring a larger stack than that physically present, the stack is segmented into at least two stack segments and their fill state monitored. When complete occupation of a segment is recognized, the oldest stack segment is swapped out to a further storage medium. The further storage medium is a nonvolatile read-write memory that can be a slower memory compared to the stack. When sufficient memory space is available in the stack again, the swapped out segment is returned. The method includes managing a destination address of each stack segment swapped out to the non-volatile read-write memory in a register in a volatile read-write memory.

Method for virtually enlarging the stack of a portable data carrier

Growing community of inventors

Munich, Germany

Thomas Stocker