WO2001016873A1 - Gestionnaire de correcteur de carte a puce - Google Patents

Gestionnaire de correcteur de carte a puce Download PDF

Info

Publication number
WO2001016873A1
WO2001016873A1 PCT/US2000/000083 US0000083W WO0116873A1 WO 2001016873 A1 WO2001016873 A1 WO 2001016873A1 US 0000083 W US0000083 W US 0000083W WO 0116873 A1 WO0116873 A1 WO 0116873A1
Authority
WO
WIPO (PCT)
Prior art keywords
rom
management record
memory
read
application
Prior art date
Application number
PCT/US2000/000083
Other languages
English (en)
Inventor
Todd Carper
Original Assignee
Cryptec Systems, Inc.
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from US09/386,289 external-priority patent/US6338435B1/en
Application filed by Cryptec Systems, Inc. filed Critical Cryptec Systems, Inc.
Publication of WO2001016873A1 publication Critical patent/WO2001016873A1/fr

Links

Classifications

    • G—PHYSICS
    • G07—CHECKING-DEVICES
    • G07F—COIN-FREED OR LIKE APPARATUS
    • G07F7/00—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus
    • G07F7/08—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means
    • G07F7/10—Mechanisms actuated by objects other than coins to free or to actuate vending, hiring, coin or paper currency dispensing or refunding apparatus by coded identity card or credit card or other personal identification means together with a coded signal, e.g. in the form of personal identification information, like personal identification number [PIN] or biometric data
    • G07F7/1008—Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/60—Software deployment
    • G06F8/65—Updates
    • G06F8/66—Updates of program code stored in read-only memory [ROM]
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/355—Personalisation of cards for use
    • G06Q20/3552—Downloading or loading of personalisation data

Definitions

  • the present invention relates to the field of portable tokens, such as smart cards. More particularly, the present invention relates to a smart card capable of effectively correcting or amending ROM based programming. Such correction may be done in the field through non-secure medium.
  • stored value cards are becoming increasingly popular.
  • Stored value cards are purchased or issued with a specific monetary value.
  • the cardholder desires to use the stored value card to purchase goods or services, the card is presented at the point of sale and the cost of the goods or services is deducted from the value of the card.
  • the cardholder may continue to use the stored value card in this manner until all the value has been removed from the card. The card may then be discarded, or its value may be replenished.
  • Such cards are commonly used to pay subway fares or to make long distance phone calls.
  • smart cards For many types of transactions, however, the current trend is away from credit/debit cards and stored value cards, and into a class of devices generally called smart cards. Rather than employing information encoded on a magnetic strip, smart cards include a microprocessor and a memory element embedded within a credit card size device. With a microprocessor, smart cards are able to interact with terminals across a broader range of transactions, and are able to communicate a broader, and a more detailed range of information regarding the cardholder, a cardholder account, transaction authorization, or other information.
  • the term "smart card” is used throughout as a convenient name for a broad class of devices sometimes referred to as portable tokens.
  • Smart cards are the most common present form of portable tokens, but as will be seen hereafter the actual physical form of the portable token, as well as the specific means by which the portable token communicates data to the outside world are not the subject of the present invention. Smart cards have been used in various applications for some time.
  • Fig 1 shows an exemplary smart card 10. Roughly the size of a credit card, smart card 10 includes a microprocessor 12 with an integral memory element, and conductive contacts 13.
  • Microprocessor 12 is typically a single wafer integrated circuit mounted on, or embedded within the otherwise plastic smart card.
  • Conductive contacts 13 interface with a terminal to electrically transfer data between the terminal and the smart card.
  • Other embodiments of the smart card do not include conductive contacts 13.
  • Such "contactless" smart cards receive information via proximately coupling, such as magnetic coupling, or via remote coupling, such as radio communication.
  • microprocessor 12 and conductive contacts 13 of Fig 1 are shown in some additional detail in Fig 2.
  • Conductive contacts variously include power contacts, at least one input/output (I/O) port, a reset port, and a clock (elk) signal port.
  • Microprocessor 12 comprises a central processing unit (CPU) 21 which is generically control logic including I/O circuitry 23. Terminal signals variously interface with CPU 21 through the conductive contacts 13 and I/O circuitry 23.
  • Microprocessor 12 is associated with a memory element 20.
  • the "memory" may be formed on the same integrated circuit as the microprocessor, or may be formed on a separate device.
  • the memory includes Random Access Memory (RAM) 22, Read Only Memory (ROM) 24, and Read/Write (R/W) Memory 26, such as Electrically Erasable Programable Read Only Memory (EEPROM).
  • RAM Random Access Memory
  • ROM Read Only Memory
  • R/W Read/Write
  • EEPROM Electrically Erasable Programable Read Only Memory
  • some or all of these presently-used memory elements may be replaced by battery backed- up RAM, flash memory, or other electronic data storage media.
  • Terminal broadly indicates any device exchanging information with a smart card using any number of data transfer means.
  • a computer, ATM, merchant point-of-sale device, or security control device, are present examples of terminals.
  • the terminal nominally includes a mechanism detecting the presence of a properly positioned smart card. Upon detecting the smart card, the terminal provides power to the microprocessor, and typically sends a reset (RST) signal to the smart card. The smart card uses the RST signal to reset itself, or to initiate an internal reset function. After reset, the smart card returns an answer-to-reset (ATR) signal to the terminal.
  • the ATR signal communicates basic information concerning the smart card to the terminal. Once such basic information is successfully recognized by the terminal, communication, i.e., data transfer, between the smart card and the terminal can be established.
  • Smart cards can be programmed to operate as stored value cards, credit cards, debit cards, ATM cards, calling cards, personal identity cards, critical record storage devices, etc.
  • a smart card may, at least in theory, be designed to use a number of different application programs.
  • an inability to readily develop applications has limited the type and number of applications placed on the conventional smart card.
  • most conventional smart cards include only a single application, or at most a single type of application. This is not surprising when one considers that from a programming perspective, conventional first generation smart cards are little more than an embedded application. Looking at Fig 3A, such first generation cards can be viewed as an application 30 stored in memory which runs a set of microprocessor-specific instructions on hardware resources 32.
  • hardware resources is used to generically indicate the memory and logic circuits, with their associated interfaces, used to execute microprocessor instructions but may also include I/O circuits, power circuits, and the other hardware.
  • each application must be written in a very low level, or machine level language. This language is specific to the microprocessor on which the application is intended to run.
  • the first generation, embedded application programming model offers at least one significant advantage - programming flexibility. Microprocessors are typically able to execute a significant set of instructions. Since an embedded application is written at the machine level, the full range of the microprocessor's instructions set may be accessed and utilized by the application. Unfortunately, such programming flexibility comes at a high price.
  • Such conventional smart cards do not employ a true operating system. Rather, a specific application written according to the microprocessor instruction set is stored in ROM and executed in accordance with commands received from a terminal.
  • MPCOS, VisaCash, GSM, and Proton are examples of such first generation embedded applications.
  • a true operating system does not execute commands received from the outside world.
  • a true operating system will not (is unable to) execute commands received from a terminal.
  • an operating system serves as a conduit and router for commands communicated from a terminal to an application stored on the smart card.
  • an operating system serves as a conduit through which an application utilizes the hardware resources.
  • an operating system provides I/O functions and provides other functionality to applications running on the OS. Since first generation smart cards store only the application code, and since this code must necessarily execute commands received from the terminal, first generation smart cards do not include an operating system.
  • second generation smart cards incorporate an interpreter.
  • An interpreter can be thought of as a library of commands.
  • JAVA and BASIC are common interpreters.
  • a set of commands is defined and identified in the interpreter, any one of which may be "called" by an application.
  • calling is used throughout to broadly describe a relationship between two pieces of code in which one piece invokes the other. Commands, functions, definitions and instructions may be used by having one piece of code call other pieces of code. The foregoing pieces of code may reside within the an application or the OS.
  • an interpreter 33 can be thought of residing between application 30 and hardware resources 32, as shown in Fig 3B.
  • an application running on a second generation smart card gains access to the hardware resources only through the interpreter which converts a command into one or more microprocessor instructions.
  • the interpreter effectively provides a higher level of abstraction and a programming language reflecting this level of abstraction with which a broader class of programmers may effectively write applications.
  • the definition of commands by the interpreter which promotes programming efficiency and standardization, necessarily restricts programing flexibility, since an interpreter will never define the entire range of commands theoretically made possible by an unrestricted combination of the microprocessor instructions.
  • programming flexibility is traded away for programming ease and standardization.
  • the use of an interpreter also slows program execution since commands must be converted into microprocessor instructions before execution.
  • Such functional inabilities attributable to the interpreter are particularly exasperating where a sequence of microprocessor instructions might be designed to implement the desired "new" function, but where the programmer lacks access to the microprocessor instruction set because of the obligatory presence of the interpreter.
  • conventional smart cards store some, if not all, programming in ROM.
  • conventional first generation smart cards store the embedded application in ROM.
  • Second generation smart cards store the interpreter program, as well as typically storing application programs in ROM.
  • EEPROM Electrically erasable programmable read-only memory
  • the EEPROM address thus allows subsequent programming steps to be grafted into the existing application stored in ROM.
  • the conventional filtering approach would first create an "incorrect" D according to the ROM based program, and thereafter delete the incorrect data object D, and then re-create D using the EEPROM based steps identified in the filtering instructions.
  • the filtering approach is very inefficient, and for more than one or two minor fixes results in a tangled mess of code.
  • this inefficient filtering approach to correcting a ROM based application works well enough for smart cards running a single application, it would not work for a smart card running multiple applications from different vendors.
  • the historic inability to securely modify or upgrade existing smart card programming in the field is just one reason why smart cards have failed to realize their full commercial potential. Many other reasons exist.
  • conventional smart cards merely store security keys which are exported to the trusted machine during the security routine used to authenticate the new code.
  • the trusted machine not the smart card, performs the security routine.
  • Such a process requires that the smart card export proprietary security keys. Once exported, the smart card loses control over the keys, thereby creating a number of additional opportunities for hackers to breach the card's security.
  • the present invention provides a system and method by which ROM based programming may be securely and effectively modified, amended, or replaced in the field. Such replacement may be done via non-secure medium.
  • the present invention provides a smart card comprising; a microprocessor and a memory, the memory including a ROM and a read/write memory, and storing at least a ROM management record, an operating system (OS), and an application.
  • the read/write memory stores a ROM management record address indicator identifying the location in memory for the ROM management record.
  • the ROM management record may be stored in ROM or in read/write memory.
  • the ROM management record address indicator is stored in a global data object reserve space of the read/write memory.
  • the present invention provides a method of patching ROM based programming in a smart card memory, where the memory includes a ROM and read/write memory.
  • the method stores an initial ROM management record in memory, and stores a
  • ROM management record address indicator in read/write memory identifying a location in memory for the initial ROM management record. Further, the method patches ROM based programming, and after patching ROM based programming stores a new ROM management record in read/write memory, and updates the ROM management record address indicator to identify a location in read/write memory for the new ROM management record.
  • the present invention provides a method of patching ROM based programming in a smart card comprising a microprocessor and a memory, the memory comprising a ROM and read/write memory, the memory storing an initial ROM management record, and the read/write memory storing a ROM management record address indicator identifying a location in memory for the initial ROM management record.
  • the method comprises; downloading an application implementing the patch to the read/write memory, installing the application in read/write memory, and executing the application to patch ROM based programming.
  • the method comprises; creating patch code to modify the ROM based programming, creating a new ROM management record in read/write memory to replace the initial ROM management record, and updating the ROM management record address indicator to identify a location in read/write memory for the new ROM management record.
  • ROM management record identifies a location in ROM for the API.
  • Fig. 1 shows an exemplary smart card
  • Fig. 2 shows the integrated circuit portion of the exemplary smart card of Fig 1 in some additional detail
  • Fig. 3 A illustrates the software/hardware relationship of a conventional, first generation smart card
  • Fig. 3B illustrates the software/hardware relationship of a conventional, second generation smart card
  • Fig. 4 illustrates the software/hardware relationship of a smart card according to one aspect of the present invention.
  • Fig. 5 illustrates the software/hardware relationship of a smart card according to another aspect of the present invention.
  • ROM read-only memory
  • ROM provides a cost effective and stable storage medium for smart card programs. Accordingly, the examples given below are presented in the context of ROM based programs. This preference for using conventional ROM as a storage medium for certain smart cards programs may change in the future with the advent of cheap, space efficient flash memory or similar read/write storage medium.
  • the present invention also contemplates the use of a true operating system (OS).
  • OS true operating system
  • smart cards particularly well adapted to the present invention may also include an application programming interface (API) and/or a hardware abstraction layer (HAL).
  • API application programming interface
  • HAL hardware abstraction layer
  • the API and HAL are preferably stored in ROM.
  • the use and cooperation of the API and HAL with the OS are the subject of commonly assigned U.S. Patent Application No. 09/386,290 filed August 31, 1999 and entitled "Smart Card Operating System with Interfaces. The subject matter of this application is incorporated by reference herein.
  • the present invention further contemplates the ability to download and install programming code in the field.
  • the downloading, installation and de-installation of programming code in a smart card are the subject of commonly assigned U.S. Patent Application No. 09/386,288 filed August 31, 1999 and entitled "System and Method for Installing/De-Installing an Application of a Smart Card.”
  • the subject matter of this application is incorporated by reference herein.
  • the present invention uses the ability to download and install new "applications" as a mechanism by which ROM based programming may be modified or replaced.
  • ROM 40 stores an OS 41, an API 42, A HAL 43, and an application 44.
  • ROM 40 also stores an initial ROM management record 45.
  • initial ROM management record 45 is placed (or masked) into ROM during manufacture.
  • Initial ROM management record 45 indexes the programs in ROM.
  • initial ROM management record 45 may be a vector table storing the start addresses for each program in ROM, but might be any other convenient record or algorithm.
  • the initial ROM management record 45 is identified by a ROM management record address indicator 47 stored in the global data object reserve space in Read/Write memory 50.
  • this global data object reserve space is defined within Read/Write memory 50 as part of a routine which defines the starting environment for the smart card.
  • the ROM management record address indicator 47 is set to a default value. The default value indicates a location in ROM at which the initial ROM management record 45 may be found.
  • the ROM management record address indicator 47 may be a data record having the appropriate "type" field stored in the Read/Write file directory. Such a record would first be created during smart card initialization.
  • the configuration of the initial ROM management record 45 and ROM management record indicator 47 persists in memory until such time as it becomes necessary to "patch" one or more of the programs stored in ROM.
  • a process by which the present invention effectively amends or replaces a ROM based program, or a portion of a ROM based program, such as the OS, API, and HAL or ROM based applications is referred to as patching.
  • Patching is a special use of the present invention's general ability to download and install new programming code. All programs, records, and data objects stored in Read/Write memory may be readily replaced by downloading new code, and installing the new code in place of the old. Patching differs in the sense that the code being replaced is permanently stored in
  • ROM and, thus, can not be conveniently overwritten in or deleted from memory. Rather, in one aspect of the present invention, ROM based programming code is replaced by code downloaded into Read/Write memory and by the creation of a new ROM management record 49 in Read/Write memory which replaces the initial ROM management record 45.
  • Fig. 5 shows an exemplary routine by which a ROM based program is modified in the present invention.
  • a patch is downloaded 52 and installed 53 like any other new piece of programming code. The patch may be authenticated in this process to ensure programming code integrity.
  • patches are "one-time" use applications, and as such do not return a persistent command table. Rather, once installed the patch is executed 54. When executed, the patch creates patch code in Read/Write memory 55, creates a "new" ROM management record 56, and updates the ROM management record indicator 57 to accurately reflect the location of the new ROM management record in Read/Write memory.
  • the routine illustrated in Fig. 5 will be further explained in the context of a specific example.
  • the smart card issuer requires that original API 42 be replaced with a new API in order to more effectively implement additional OS functions.
  • the original API 42 is stored in ROM and indexed in the initial ROM management record 45, also stored in ROM.
  • the new API patch code is downloaded, installed and executed, a new API
  • ROM management record 49 is created in Read/Write memory 50. Since each of these data objects are intended to be persistent in memory, each must be associated with a data record in file directory 48. Finally, the ROM management record address indicator 47 stored in the global data object reserve space is updated to reflect the presence of the new ROM management record 49 in Read/Write memory.
  • the new ROM management record 49 would contain exactly the information found in the initial
  • the new ROM management record 49 references the address of the new API 51 stored in Read/Write memory. This change in reference or index effectively replaces the original API code with the new API code.
  • the old code is "cut-off," absent another change to the ROM management record.
  • the actual ROM based code may be completely and effectively replaced in memory, and not merely supplemented.
  • Rom based programming may be amended, corrected, or replaced in the field via an un-secure medium.
  • the actual ROM based programming code is completely replaced in memory by the present invention. Since the patch code can be authenticated during its download and installation, programming code integrity may be assured. Further, the download/installation authentication capability of the present invention allows ROM based programming code to be patched through any terminal in the field. There is no need to rely on a trusted machine. Non-secure media such as the Internet may be used. Further, different application vendors may patch their proprietary programming code without sharing code information with the OS provider, and without threatening the integrity of other applications stored in the smart card.
  • ROM based programming including the OS, an API, a HAL, an inte ⁇ reter, or an application may be patched using the present invention. Multiple patches may be made to ROM based programming code without any loss in code coherency.
  • the code implementing the ability to patch ROM based programming in the present invention is preferably stored as a callable function, or a patch manager, within the smart card OS.
  • the patch manager like any other OS function, may be revised or replaced by a patch.
  • the present invention provides a real ability to fix programming bugs in the field.
  • the smart card user need not be aware of the patching process. It may be done as part of a routine smart card transaction. With an ability to effectively modify or replace all smart card programming code in the field, the risk of fielding new smart card software is greatly reduced.
  • the present invention has been explained with reference to several examples and within the context of presently preferred embodiments. The present invention is not limited to the teaching examples or context, but is defined by the attached claims.

Landscapes

  • Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Business, Economics & Management (AREA)
  • Computer Security & Cryptography (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Accounting & Taxation (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • Stored Programmes (AREA)

Abstract

La présente invention concerne un système et un procédé de correction de mémoire reposant sur la programmation d'une carte à puce. Au moyen d'un enregistrement (45) de gestion de mémoire morte et d'un indicateur (47) d'adresse dudit enregistrement, on peut utiliser un code de correction téléchargé sur une mémoire de lecture/écriture installée (50) pour remplacer complètement le code de programmation reposant sur la mémoire morte.
PCT/US2000/000083 1999-08-31 2000-01-05 Gestionnaire de correcteur de carte a puce WO2001016873A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US09/386,289 US6338435B1 (en) 1999-01-15 1999-08-31 Smart card patch manager
US09/386,289 1999-08-31

Publications (1)

Publication Number Publication Date
WO2001016873A1 true WO2001016873A1 (fr) 2001-03-08

Family

ID=23524976

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2000/000083 WO2001016873A1 (fr) 1999-08-31 2000-01-05 Gestionnaire de correcteur de carte a puce

Country Status (1)

Country Link
WO (1) WO2001016873A1 (fr)

Cited By (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1313020A1 (fr) * 2001-11-19 2003-05-21 EM Microelectronic-Marin SA Architecture d'un circuit intégré pour carte à puce et procédé d'allocation mémoire associé
US6824064B2 (en) 2000-12-06 2004-11-30 Mobile-Mind, Inc. Concurrent communication with multiple applications on a smart card
WO2008089922A1 (fr) 2007-01-24 2008-07-31 Giesecke & Devrient Gmbh Installation d'un programme de correction dans un module de carte intelligente
GB2517155A (en) * 2013-08-12 2015-02-18 Mastercard International Inc Local evaluation of computer equipment
US9607189B2 (en) 2015-01-14 2017-03-28 Tactilis Sdn Bhd Smart card system comprising a card and a carrier
US10037528B2 (en) 2015-01-14 2018-07-31 Tactilis Sdn Bhd Biometric device utilizing finger sequence for authentication
US10395227B2 (en) 2015-01-14 2019-08-27 Tactilis Pte. Limited System and method for reconciling electronic transaction records for enhanced security

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5805869A (en) * 1993-07-30 1998-09-08 Apple Computer, Inc. System for computer with interface and scripting systems cooperating in interrated fashion by sharing frame objects of common unified data structure stored in object system
US5901303A (en) * 1996-12-27 1999-05-04 Gemplus Card International Smart cards, systems using smart cards and methods of operating said cards in systems

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5805869A (en) * 1993-07-30 1998-09-08 Apple Computer, Inc. System for computer with interface and scripting systems cooperating in interrated fashion by sharing frame objects of common unified data structure stored in object system
US5901303A (en) * 1996-12-27 1999-05-04 Gemplus Card International Smart cards, systems using smart cards and methods of operating said cards in systems

Cited By (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6824064B2 (en) 2000-12-06 2004-11-30 Mobile-Mind, Inc. Concurrent communication with multiple applications on a smart card
EP1313020A1 (fr) * 2001-11-19 2003-05-21 EM Microelectronic-Marin SA Architecture d'un circuit intégré pour carte à puce et procédé d'allocation mémoire associé
WO2003044669A1 (fr) 2001-11-19 2003-05-30 Em Microelectronic-Marin Sa Architecture d'un circuit integre pour carte a puce et procede d'allocation memoire associe
WO2008089922A1 (fr) 2007-01-24 2008-07-31 Giesecke & Devrient Gmbh Installation d'un programme de correction dans un module de carte intelligente
GB2517155A (en) * 2013-08-12 2015-02-18 Mastercard International Inc Local evaluation of computer equipment
US9607189B2 (en) 2015-01-14 2017-03-28 Tactilis Sdn Bhd Smart card system comprising a card and a carrier
US10037528B2 (en) 2015-01-14 2018-07-31 Tactilis Sdn Bhd Biometric device utilizing finger sequence for authentication
US10147091B2 (en) 2015-01-14 2018-12-04 Tactilis Sdn Bhd Smart card systems and methods utilizing multiple ATR messages
US10223555B2 (en) 2015-01-14 2019-03-05 Tactilis Pte. Limited Smart card systems comprising a card and a carrier
US10229408B2 (en) 2015-01-14 2019-03-12 Tactilis Pte. Limited System and method for selectively initiating biometric authentication for enhanced security of access control transactions
US10275768B2 (en) 2015-01-14 2019-04-30 Tactilis Pte. Limited System and method for selectively initiating biometric authentication for enhanced security of financial transactions
US10395227B2 (en) 2015-01-14 2019-08-27 Tactilis Pte. Limited System and method for reconciling electronic transaction records for enhanced security

Similar Documents

Publication Publication Date Title
US6338435B1 (en) Smart card patch manager
US6390374B1 (en) System and method for installing/de-installing an application on a smart card
US6256690B1 (en) System and method for facilitating multiple applications on a smart card
RU2159467C2 (ru) Система и способ загрузки прикладных задач на интеллектуальную карточку
US5754762A (en) Secure multiple application IC card using interrupt instruction issued by operating system or application program to control operation flag that determines the operational mode of bi-modal CPU
EP1113387A2 (fr) Carte à puce comportant une mémoire non volatile avec un mappage nouveau
EP1103032B1 (fr) Architecture de logiciel pour terminal de cartes a puce
US5901303A (en) Smart cards, systems using smart cards and methods of operating said cards in systems
US6754828B1 (en) Algorithm for non-volatile memory updates
JP4163264B2 (ja) スマートカード
US20030028766A1 (en) Firmware security key upgrade algorithm
US6357665B1 (en) Configuration of IC card
EP1272983B1 (fr) Production integree de cartes a puce
US20080091958A1 (en) Tamper resistant module certification authority
JPS63182795A (ja) ポータブル・カードとその製造方法
US6687800B1 (en) Chip card comprising means and method for managing a virtual memory and associated communication method
CA2288824A1 (fr) Procede et dispositif de carte a puce multi-application permettant de telecharger une application sur la carte posterieurement a son emission
EP0981805A1 (fr) Carte a circuit integre avec fonction interpreteur
US7367047B2 (en) Portable information recording medium
EP1053535B1 (fr) Configuration de carte a circuit integre
US20060080655A1 (en) System and method for post-issuance code update employing embedded native code
WO2001016873A1 (fr) Gestionnaire de correcteur de carte a puce
WO1997050063A2 (fr) Systeme portable sûr de gestion transactionnelle destine a des unites programmables intelligentes
WO2001016865A1 (fr) Systeme et procede d'installation/desinstallation d'une application sur une carte a puce
WO2001016707A1 (fr) Système d'exploitation de cartes à puce doté d'interfaces

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): SG

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE

121 Ep: the epo has been informed by wipo that ep was designated in this application
DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
122 Ep: pct application non-entry in european phase