EP1941469A1

EP1941469A1 - Smart card customizing

Info

Publication number: EP1941469A1
Application number: EP06794012A
Authority: EP
Inventors: Olivier Potonniee
Original assignee: Gemplus SCA
Current assignee: Thales DIS France SA
Priority date: 2005-10-14
Filing date: 2006-10-11
Publication date: 2008-07-09
Also published as: US8186496B2; US20090065325A1; WO2007042533A1

Abstract

The invention concerns a method for reducing factory customizing time in a smart card (CPn), wherein a pre-customizing manager (GM) into a customizing machine loads post-customizing data (AP, OP1-OPI, DOP1-DOPI) in the smart card. Then a post-customizing application (AP) included in the smart card is enabled after delivery of the card to a user following a connection of the smart card to a terminal to process the loaded post-customizing data so as to make the smart card operational.

Description

Personalization of smart card

The present invention relates to the personalization of smart card. More particularly, it relates to the personalization of a smart card once the card issued to an end user, so that it becomes functional.

The smart card personalization, also called microcontroller card, is to load data such as applications and their parameters and to diversify the content of each smart card according to its end user. Personalization includes, among other things, downloading secret data, such as authentication keys, and personal data, such as a name or an identity number.

The smart card personalization is performed by a personalization machine in the card manufacturing plant and is subject to time constraints that affect the cost of manufacturing a card. Currently, the personalization of a smart card lasts a few seconds. If customization requires a higher processing time, the price of the card increases.

As the personalization of the cards is more and more complex and the applications to be implemented in the cards are more numerous, the cost of production of each smart card is becoming higher.

The aim of the invention is to reduce the cost of personalization of smart cards without increasing the duration of their factory customization, while meeting the growing need for personalization data and increasing the capacity of card storage.

To achieve this objective, a method for personalizing a smart card is characterized in that it comprises: a pre-customization for loading post-personalization data in the smart card by a personalization machine, and a post-personalization to process in the smart card post-personalization data loaded, following a binding of the smart card to a terminal, to make the smart card functional.

The personalization of a smart card according to the invention is thus divided into two parts: the pre-customization that is performed during the manufacture of the smart card, and the post-personalization that is performed after delivery of the smart card to an end user and after powering up the smart card by linking it to the terminal. Post customization avoids an increase in the customization time in the factory. As long as all the customization of the smart card is not completed, the card is not functional and can not be used normally by an end user. Preferably, the post-personalization data loaded in the smart card includes a post-personalization application and personalization operations. During post-customization, the post-customization application runs correctly and successively all personalization operations so that the smart card is functional.

According to a variant of the invention, during the execution of one of the personalization operations, a network connection application can be activated in the card by said personalization operation in order to communicate with a server via the terminal for downloading. in the smart card data and / or codes relating to the execution of said personalization operation.

The invention also relates to a system for personalizing a smart card, which is characterized in that it comprises: pre-personalization means for loading post-personalization data in the smart card by a personalization machine , and a post-personalization means included in the smart card for processing the post-personalization data loaded, following a link of the smart card to a terminal, in order to make the smart card functional

The invention is also directed to a smart card to be personalized, comprising a post-personalization means for processing post-personalization data that has been loaded into the smart card by a personalization machine during pre-personalization, following a link the smart card to a terminal, in order to make the smart card functional. Finally, the invention relates to a program adapted to be implemented in the system for personalizing a smart card, said program comprising instructions which, when the program is executed in said system, perform the steps according to the method of the invention. 'invention.

Other features and advantages of the present invention will emerge more clearly on reading the following description of several preferred embodiments of the invention, given by way of non-limiting examples, with reference to the corresponding appended drawings in which:

FIG. 1 is a schematic block diagram representative of a pre-personalization device for a smart card connected to a personalization machine, according to the invention; FIG. 2 is a block diagram representative of a post-personalization device of a smart card connected to a terminal, according to the invention;

FIG. 3 is an algorithm of a personalization method of a smart card according to the invention; and FIG. 4 is an algorithm of a post-personalization process of a smart card according to the invention.

The personalization of a smart card according to the invention comprises two distinct steps. Pre-personalization and post-personalization of the card.

The pre-customization is performed by a personalization machine installed in a card manufacturing plant and includes in particular a loading into the data card necessary for post-personalization of the card.

Post-personalization of the card is executed by the card after it has been issued to a user of the card and when the card is linked to a terminal. Post-customization is to make the card functional by completing its customization.

As shown in FIG. 1, a smart card pre-personalization device, during the manufacture of the card, comprises a personalization machine MP for pre-customizing N smart cards, the machine communicating with at least one card chip CP _n, the index n is between 1 and N. in PD personalization machine and the smart card CP _n shows only functional blocks, most of which provide functions linked to the invention and can match to software and / or hardware modules.

The smart card CP _n , also called microcontroller card or integrated circuit card, constitutes a user identity module of the UICC type (Universal Integrated Circuit Card) removable from a terminal T. The smart card is for example a card provided with a Subscriber Identity Module (SIM) application when the terminal is a GSM or GPRS type mobile, or a Universal Subscriber Identity Module (USIM) application, a Removable User Identity Module (RUIM) or an IP Subscriber (ISIM) Identity Module) when the terminal is a mobile operating in third generation (3GPP) coded Division Multiple Access (CDMA) multiple access (UMTS) type UMTS (Universal Mobile Telecommunications System) or UTRAN (Terrestrial Radio Access Network UMTS), or the third generation (3GPP2) of the CDMA 2000 type.

More generally, the smart card CP _n is a portable electronic object such as a debit or credit card, an electronic purse, a USB key

(Universal Serial Bus), an MMC card (Multi-Media

Card), an SD (Secure Digital) card, an additional smart card, or any other small or miniature electronic device. The smart card CP _n mainly comprises, in integrated form, one or more PC microprocessors, a non-rewritable memory M1 of the ROM or Flash type, a non-volatile memory M2 of the EEPROM or Flash type, and a memory M3 of the RAM or SRAM type serving more particularly data processing. The card CP _n communicates with or without contact, with the MP personalization machine through a PES input / output port and a LM drive the MP machine. The different elements of the card are connected to each other by a bidirectional bus BC.

Before pre-customization of the smart card by the personalization machine MP, the memories M1 to M3 of the card are empty.

The personalization machine MP comprises a PM processor, a GM pre-customization manager to load personalization data into the smart card CP _n , MM memories and the reader LM to communicate with the smart card through the input port / PES output of the smart card CP _n . The different elements of the personalization machine MP are interconnected by a bidirectional bus BM.

The memories MM in the personalization machine MP contain in particular data post customization to be loaded by the pre-customization manager GM into the CP card _n during the pre-customization. The post-personalization data mainly comprises a smart card operating system OS, an SDM startup script, an AP post-personalization application, an ST personalization status, J LOPi customization operation lists with LOPj and F descriptions. operation of customization DOPi to DOPp. The post-personalization data may also comprise an ACR network connection application, N IMSI (International Mobile Subscriber Identity) type identification data IMSIi to IMSIN and N authentication data Ki to KN respectively for the N chip cards. customize, and an AC encryption algorithm.

According to a first embodiment, the AP post-personalization application is a generic application to be loaded into all the smart cards during the pre-personalization. The AP application is based on a list of personalization operations also loaded in each card during the pre-customization and is executed in the card after a link thereof to a terminal during post-personalization. .

Each list of personalization operations LOP _j in the memories MM of the personalization machine, with 1 <j <J, corresponds to a specific post-personalization of at least one smart card in which the list is loaded. The list of personalization operations LOP _j includes for example I OPi personalization operations to successive OPi. According to a second embodiment, the memories MM of the personalization machine do not contain lists of personalization operations LOPi to LOPj, but include J post-personalization applications. Each application relates to post-personalization specific to at least one smart card and includes a succession of personalization operations.

Each OPi customization operation contained either in a list of personalization operations or in a post-customization application, with 1 <i <I, comprises a sequence of instructions executed by the post-personalization application AP. Each personalization operation OPi is associated with a description of operation DOPi and an identification number i corresponding, for example, to the rank of the operation in the list of personalization operations LOP _j or in the post-personalization application. .

A personalization operation is for example an initialization of a memory zone of the smart card to a given or determined value, an execution of an application such as a security function, or a download from a remote server S d. a set of data or executable code to be stored in a memory of the smart card. Referring to this last example, the personalization operation includes an activation instruction for activating an ACR network connection application loaded in the card so that it connects to the remote server S which requires an IMSI identity _n of the card and an authentication key K _n also loaded in the smart card. The personalization operation description F's DOPi to DOPp memorized in the memories MM of the personalization machine MP are associated with F personalization operations that are distinct from one another and are listed in all the J lists of personalization operations LOP 1 to LOPj according to the first embodiment, or J post-personalization applications according to the second embodiment.

Each personalization operation description DOP _f , with 1 <f <F, contains mainly POP parameters _f necessary to execute the personalization operation OP _f . When the personalization operation OP _f has been interrupted, the description DOP _f may also include a coherence reconciliation operation OR _f to bring the post-personalization coherence with the state of the card before the execution of the operation. of customization which cancels the latter, or with a state of end of personalization operation ensuring the continuity of post-customization.

The personalization status ST indicates the state of post-personalization of a smart card at a given time. The ST status is read by the post-personalization application on each link of the smart card to a terminal and indicates which personalization operation was running before a possible post-personalization interruption and whether the operation was finished or not. The ST status is composed of two elements ST1 and ST2. The first STl status element includes the identification number of the personalization operation running. The second status element ST2 is for example a bit to indicate by the state "1" that the personalization operation designated by the first status element ST1 is completed, and by the state "0" that this operation does not. is not over.

As a variant, the ST status in the memory M2 comprises a number of bits respectively associated with the operations to be executed. The bit associated with an operation changes from state "0" to state "1" irreversibly when the associated operation is executed correctly.

Referring to Figures 1 and 2 and according to the first embodiment of the invention, the smart card CP _n mainly comprises, after manufacture and pre-customization, the operating system OS stored and SDM startup script in the memory Ml, the AP post-personalization application stored in the memories Ml and M2, a list of LOP customization operations _j and operation descriptions DOPi to DOPi associated with the operations OPi to OPi of the list LOP _j in the M2 memory, and the personalization status ST in the memory M2. The smart card may comprise in the memories M1 and M2 the network connection application ACR and in the memory M2 an identity IMSI _n of the card, an authentication key K _n and the encryption algorithm AC.

With reference to FIG. 2, a card post-personalization device comprises a terminal T communicating with the pre-personalized CP _n card and delivered to an end user. The terminal T is included in a telecommunications network RT for example of the GSM, GPRS or UMTS type and can communicate with a remote server S through the network RT during post-personalization. This communication can be initiated by a personalization operation to download data and / or customization codes to make the smart card functional. The data and / or customization codes can be stored in a BD database connected to or integrated into the server S.

According to other examples, the terminal T is replaced by any terminal with which can communicate a smart card, and can be a portable device for message transmission, or a personal computer (PC) with a smart card reader or a fixed terminal such as a bank terminal hosting a debit or credit chip card. The network RT is then for example an intranet, a wireless local area network, or the Internet.

The terminal T contains a reader LT which is connected to an input / output port PES of the smart card CP _n with or without electrical contact.

In addition to the smart card reader LT, the terminal T conventionally comprises an IT network interface, a PT processor and MT memories. The various elements of the terminal are interconnected by a bidirectional bus BT.

With reference to FIG. 3 and according to the first embodiment of the invention, the personalization method of a smart card CP _n according to the invention comprises two main stages E1 and E2. Step El is the pre-personalization of the smart card CP _n by the personalization machine MP during the manufacture of the card at the factory. As previously described, the pre-customization manager GM in the MP machine loads the operating system OS, the boot script SDM, the post-personalization application AP, a list of personalization operations into the card CP _n. LOP _j , personalization operation descriptions DOPi to DOPi associated with the personalization operations OPi to OPi contained in the list LOP _j and the status elements ST1 and ST2 to a value, for example zero, indicating that post-personalization is not possible. not started. The pre-customization manager GM of the personalization machine MP can also load in the card CP _n the application of network connection ACR, the identity of the IMSI card _n , the authentication key K _n and the algorithm of AC encryption.

According to the second embodiment of the invention, the MP machine does not load a list of personalization operations, but a specific post-personalization application comprising a succession of personalization operations.

Step E2 is the post-personalization of the smart card after a delivery of the card to a user and during a link of the card to the terminal T. The post-personalization is triggered by activation of the post-personalization application AP which successively executes the customization operations OPi OPi included either in the list of personalization operations LOPj, or directly in the AP application. As long as not all customization operations are not executed and completed, the smart card is not functional.

The algorithm of the post-personalization process is illustrated in FIG. 4 and comprises steps E20 to E30.

The index "i" in FIG. 4 corresponds to the identification number of the running customization operation OPi. At the first link of the smart card to the terminal T, the index i is at zero and no personalization operation loaded in the card is executed.

At each link of the smart card to the terminal T, in step E20, the processor PC executes the startup script SDM comprising an instruction for activating the AP post-personalization application. The application AP reads the personalization status ST in order to know the state of the personalization of the card since the post-customization of the card can be interrupted at any moment, for example by an inadvertent extraction of the card out of the reader LT of the terminal.

If the status element ST1, in step E21, has a value of zero indicating that no personalization operation has been executed, the post-personalization application AP checks, in step E25, whether an operation OPi ₊ i customization is to be executed. If, in step E21, the value of the status element ST1 is equal to a non-zero value i indicating that a personalization operation has already been executed or was running during an interruption, the post-personalization application AP reads the second element of status ST2, at step E22, in order to know the execution status of the OPi personalization operation.

If the execution of the personalization operation OPi is completed which corresponds to ST2 = "1", the post-personalization application AP checks in step E25 whether a subsequent personalization operation OPi ₊ i is to be executed.

If, in step E22, the second status element ST2 is "0" and indicates that the operation OPi has not been completed during an interruption of the post-customization, the post-personalization application AP reads the OPi operation in the LOP list _j or directly in the application, in order to deduce a ORi consistency re-operation, or to search in the DOPi description associated with the OPi operation the ORi coherence operation, to bring all or part of the interrupted customization operation OPi back into coherence and to terminate or allow to correctly re-execute this interrupted personalization operation OPi in order to continue the post-customization. The post-personalization application AP executes the ORi reconciliation operation in step E23. In step E24, the post-personalization application AP modifies the status element ST2 to the value "1" which, combined with the value "i" of the status element ST1, indicates that the execution of the OPi customization operation is complete. The post-customization application checks, in step E25, whether a next customization operation 0Pi ₊ i is to be executed.

If so, the post-customization application points, in step E26, to the new operation 0Pi ₊ i, associates the new value i ≡ i + 1 to the status element ST1 and changes the status element ST2 to "0" indicating that a new operation OPi ≡ OPi ₊ i is being executed. In step E27, the application AP executes the personalization operation OPi according to its personalization parameters POPi and included in the associated description DOPi.

Then in step E28, the post-personalization application modifies the status element ST2 to the value "1" which, combined with the value i of the status element ST1, indicates that the execution of the OPi customization operation is complete. The post-personalization application returns to step E25. As long as all the OPi to OPi customization operations have not been executed and completed, the post-personalization application repeats the execution of the steps E26 to E28.

As soon as all the operations have been executed and completed, the customization is complete and the processor PC modifies, in step E29, the boot script SDM so as not to launch the AP post-personalization application at each link of the smart card CP _n to the terminal T. the PC processor removes at step E30, obsolete post-personalization data such as the application of post-personalization AP, ST status, descriptions of Dopi customization operation DOPi and according to the first embodiment of the invention the list of personalization operations LOP _j .

Alternatively, at each step of the post-personalization process, security conditions, such as the presence of a secret, related to post-personalization are verified by the card. The invention described herein relates to a method and a personalization system of smart card. According to a preferred implementation, the steps of the method of the invention are determined by the instructions of a program incorporated in a system, partly in a personalization machine MP and partly in a smart card CP _n . The program comprises program instructions which, when said program is loaded and executed in the system, whose operation is then controlled by the execution of the program, carry out the steps of the method according to the invention.

Accordingly, the invention also applies to a program, including a program on or in an information carrier, adapted to implement the invention. This program can use any programming language, and be in the form of source code, object code, or intermediate code between source code and object code such as in a partially compiled form, or in any other form desirable to implement the method according to the invention.

Claims

1 - Method for personalizing a smart card (CP _n ) comprising a pre-personalization (El) for loading post-personalization data (AP, OPi-OPi, DOPi-DOPi) and a startup script (SDM) in the smart card from a personalization machine (MP), characterized in that it comprises an activation (E2) of a post-personalization application by said startup script (SDM) following a link of the smart card to a terminal (T) of a user, in order to process in the smart card post-personalization data loaded (AP, OPi-OPi, DOPi-DOPi) and make the smart card functional.

The method according to claim 1, wherein the post-personalization data loaded in the smart card comprises the post-personalization application (AP) and personalization operations (OPi-OPi), and during the postpersonalization, the postpersonalization application executes correctly and successively all the personalization operations so that the smart card is functional.

3 - Process according to claim 2, wherein the personalization operations (OPi-OPi) are included in the post-personalization application (AP).

4 - Process according to claim 1 or 2, wherein the personalization operations (OPi-OPi) are included in a list of operations of customization (LOP _j ) loaded in the smart card during the pre-customization.

5 - Process according to any one of claims 1 to 4, according to which after an interruption of one of the personalization operations (OPi) of the post-personalization, if a personalization operation running has has not been completed, a coherence reconciliation operation (ORi) is activated (E23) to restore all or part of the interrupted personalization operation (OPi) in order to continue the post-personalization.

6 - Process according to claim 5, wherein the reconciliation operation (ORi) ends the interrupted personalization operation (OPi) to continue the post-personalization.

7 - Process according to any one of claims 1 to 6, comprising a suppression

(E30) post-personalization data (AP, OP-

OPi, DOPI-DOPI) as soon as all the personalization operations (OPi-OPi) loaded into the smart card are executed and correctly completed (E29).

8 - Process according to any one of claims 1 to 7, wherein during the execution of one of the personalization operations (OPi), a network connection application (ACR) is activated by said personalization operation. to communicate with a server

(S) via the terminal to download in the smart card data and / or codes relating to performing said one personalization operation (OPi).

9 - System for personalizing a smart card (CP _n ) comprising a means of pre-personalization

(GM) for loading post-personalization data (AP, OPi-OPi, DOPi-DOPi) and a startup script (SDM) into the smart card from a personalization machine (MP), characterized in that the smart card contains a post-personalization application (AP) activated by said startup script (SDM), following a link of the smart card to a terminal (T) of a user, in order to process the post-personalization data loaded and make the smart card functional.

10 - Smart card (CP _n ) to be personalized, characterized in that it comprises a post-personalization application (AP) activated by a startup script (SDM) following a link from the smart card to a terminal ( T) of a user, in order to process post-personalization data and the start-up script that were loaded into the smart card by a personalization machine (MP) during a pre-personalization step and render the functional smart card.

The smart card of claim 10, wherein the post-personalization data loaded in the smart card includes the post-personalization application.

(AP) and personalization operations (OPi-OPi), and during post-personalization, the post-personalization application performs correctly and successively all the operations of customization so that the smart card is functional.

12 - program adapted to be implemented in a system for personalizing a smart card (CP _n ), comprising instructions which, when the program is executed in said system, performs a pre-customization (El) to load post-processing data; personalization (AP, OPi-OPi, DOPi-DOPi) and a boot script (SDM) in the smart card by a personalization machine (MP), characterized in that it includes instructions for activating a post-application. personalization (E2) by the start script (SDM) following a link of the smart card to a terminal (T) of a user, in order to process in the smart card the post-personalization data loaded (AP, OP). OPi, DOPi-DOPi) and make the smart card functional.