Mondex International Limited

Multos Limited

Multos Limted

Timothy Philip Richards

David Barrington Everett

John Charles Viner

Anthony David Peacham

Stuart James Miller

Ian Stephen Simmons

Ian Stephens Simmons

Methods, apparati, and computer-readable media for securely transporting a software application onto a tamper resistant module (TRM) () by using an individualized TRM key set. A method embodiment of the present invention comprises: storing a key pair unique to the TRM () in a memory located on the TRM (), where the key pair comprises a TRM public key () and a TRM private key (); retrieving the TRM public key from the TRM; encrypting a portion of the software application using the TRM public key (); transmitting the encrypted software application to the TRM (); and recovering and decrypting the encrypted software application using the TRM private key ().

Key transformation unit for a tamper resistant module

Methods and apparati for securely loading one or more computer software applications onto a tamper resistant module (TRM) () and for securely deleting one or more applications from the TRM. An embodiment of the invention comprises a method for determining, based at least upon an encrypted personalization data block, whether a TRM () is part of a qualified set of TRM's to accept loading of an application. Thereafter, the method provides for loading the application onto the TRM () only after the first step determines that the TRM () is qualified to accept the loading of the application. Another embodiment comprises a method for determining, based at least upon an encrypted personalization data block, whether a TRM () is part of a qualified set of TRM's to accept deleting of an application. Thereafter, the method provides for deleting the application from the TRM () only when the first step determines that the TRM () is qualified to accept the deleting of the application.

Tamper resistant module certification authority

Methods and systems for flexibly loading an application, e.g., a software application, and associated data from an application provider () onto a tamper resistant module (TRM) () having an I/O buffer () and a memory (). A method embodiment of the invention comprises determining () the size of the TRM's I/O buffer (), segmenting () the application to be loaded and its associated data into a plurality of segments, with each segment adapted to be stored in the I/O buffer () and the size of each segment being a function of the determined size of the I/O buffer (), separately transmitting () each segment to the tamper resistant module (), and storing () each separately transmitted segment in a selected one of one or more available spaces of the TRM's memory (), said spaces selected depending upon the size of each segment and upon which of said available spaces has the smallest available area in the TRM's memory () in which the segment can be stored.

Flexibly loading a tamper resistant module

A secure multiple application card system and process is provided having secure loading and deleting capability by use of a Certification Authority and Personalization Bureau. The certification authority maintains the security of the system by requiring IC cards to be injected with its public key and a card identifier for uniquely identifying each card, by providing a personalization data block for each card, and by signing with its private key all applications to be loaded or deleted from the IC card.

Secure multiple application card system and process

A system and method of flexibly loading an application and its associated data from an application provider onto an IC card. The application and its associated data is divided into segments which can each fit into the input buffer of an Integrated circuit card. Each segment is transmitted separately and the Integrated circuit card then stores the segment in an available space in the IC card's memory. The segments can be placed in non-contiguous memory in order to reduce memory fragmentation.

System and method for flexibly loading an IC card

A multi-application IC card system is disclosed having selective application loading and deleting capability. Prior to loading an application onto an IC card a test is conducted to determine if the card is qualified to receive the application using personalization data stored on the card and comparing it with permissions data associated with the application indicating one or more sets of cards upon which the application may be loaded. If the personalization data of the card falls within the allowable set of permissions for that application then the card may be loaded with the application. Preferably, the personalization data includes data representative of the card number, issuer, a product class and the date on which the card is personalized.

Secure multi-application IC card system having selective loading and deleting capability

System and method for flexibly loading in IC card

A multi-application IC card system and method is disclosed providing a secure data transmission technique. The method is used, for example, to load an application from an application provider, which could be remote, to an IC card. At least a portion of the application is encrypted using a transfer key. The transfer key is then encrypted using the public key of a public/secret key pair of the intended IC card to form a key transformation unit. The encrypted application and key transformation unit are then sent to the IC card and the IC card decrypts the key transformation unit using its secret key. The transfer key is then recovered and used to decrypt the encrypted application. The application can then by stored on the IC card and accessed by the card user.

Growing community of inventors

Herts, United Kingdom

Timothy Philip Richards