Flexibly loading a tamper resistant module
    2.
    发明授权
    Flexibly loading a tamper resistant module 失效
    灵活加载防篡改模块

    公开(公告)号:US07689826B2

    公开(公告)日:2010-03-30

    申请号:US11655497

    申请日:2007-01-19

    IPC分类号: G06K19/06

    摘要: Methods and systems for flexibly loading an application, e.g., a software application, and associated data from an application provider (101) onto a tamper resistant module (TRM) (103) having an I/O buffer (115) and a memory (119). A method embodiment of the invention comprises determining (501) the size of the TRM's I/O buffer (115), segmenting (503) the application to be loaded and its associated data into a plurality of segments, with each segment adapted to be stored in the I/O buffer (115) and the size of each segment being a function of the determined size of the I/O buffer (115), separately transmitting (505) each segment to the tamper resistant module (103), and storing (603) each separately transmitted segment in a selected one of one or more available spaces of the TRM's memory (119), said spaces selected depending upon the size of each segment and upon which of said available spaces has the smallest available area in the TRM's memory (119) in which the segment can be stored.

    摘要翻译: 用于将应用程序(例如,软件应用程序)和关联数据从应用程序提供程序(101)灵活加载到具有I / O缓冲器(115)和存储器(119)的防篡改模块(TRM)(103)上的方法和系统 )。 本发明的方法实施例包括确定(501)TRM的I / O缓冲器(115)的大小,将要加载的应用程序及其相关联的数据分段(503)到多个段中,每个段适于被存储 在所述I / O缓冲器(115)中,并且每个段的大小是所确定的所述I / O缓冲器(115)的大小的函数,分别将每个段发送(505)到所述防篡改模块(103) (603)在TRM存储器(119)的一个或多个可用空间中的所选择的一个中的每个单独发送的段,所述空间根据每个段的大小而选择,并且所述可用空间中的哪个可用空间在TRM的存储器 存储器(119),其中可以存储该段。

    Multi-application IC card with delegation feature
    8.
    发明授权
    Multi-application IC card with delegation feature 失效
    具有授权功能的多功能IC卡

    公开(公告)号:US06220510B1

    公开(公告)日:2001-04-24

    申请号:US09064915

    申请日:1998-04-23

    IPC分类号: G06K500

    摘要: A multi-application IC card which processes two or more applications using an Application Abstract Machine architecture. The AAM architecture only allows one application to be executed at a time and allows for shared processing by performing a delegation function to a second application. A data space for each application is allocated when the application is selected to be executed. The data space includes a volatile and non-volatile region. The delegation function temporarily interrupts the execution of the first application, saves the temporary data of the first application, shares any data needed with the second application and the second application is executed until the delegated task is competed. The first application then retrieves the saved data and completes its execution. A delegator stack is used to keep track of the delegator's identity when multiple delegations occur. The AAM model allows for a high level of security while transferring data between applications.

    摘要翻译: 一种使用Application Abstract Machine架构处理两个或多个应用程序的多应用IC卡。 AAM架构仅允许一次执行一个应用,并且通过对第二应用执行委托功能来允许共享处理。 当应用被选择执行时,分配每个应用的数据空间。 数据空间包括易失性和非易失性区域。 授权功能暂时中断第一个应用程序的执行,保存第一个应用程序的临时数据,共享第二个应用程序所需的任何数据,并执行第二个应用程序,直到委派的任务被竞争。 然后,第一个应用程序检索保存的数据并完成其执行。 当多个代理发生时,委托器堆栈用于跟踪委托者的身份。 AAM模型允许在应用程序之间传输数据时具有高水平的安全性。