-
公开(公告)号:US20240338451A1
公开(公告)日:2024-10-10
申请号:US18292524
申请日:2022-07-26
Inventor: David PATINO , Clara GIFRE , Federico RUAU , Bjorn KORNEFALK
CPC classification number: G06F21/572 , G06F9/4451
Abstract: An update agent, a secure element containing the update agent, and a method for loading and personalizing a software in the secure element are provided. In a first step, an update agent is loaded into the se-cure element. In a further step, software personalization data is loaded into the secure element, and stored in the update agent. Subsequently, the software is loaded into the secure element and personalized using the software personalization data stored in the update agent.
-
公开(公告)号:US20240296039A1
公开(公告)日:2024-09-05
申请号:US18574474
申请日:2022-06-29
Inventor: Clara GIFRE , David PATINO , Federico RUAU
CPC classification number: G06F8/65 , H04L9/0637 , H04L9/3242
Abstract: Methods, apparatus and systems are provided for implementing an encryption scheme for providing a software image to a secure element. The software image is converted into a sequence of ciphered blocks, which is protected with an authentication tag to obtain a sequence of protected blocks, which are then transmitted to an update agent on the secure element. The steps of converting the software image into a sequence of ciphered blocks and protecting the sequence of ciphered blocks with an authentication tag are implemented by an authenticated encryption function using a same block cipher.
-
公开(公告)号:US20240346147A1
公开(公告)日:2024-10-17
申请号:US18292398
申请日:2022-07-26
Inventor: David PATINO , Clara GIFRE , Federico RUAU
CPC classification number: G06F21/572 , G06F21/72
Abstract: An update agent, a secure element containing the update agent, and a method for retrieving a software image to be stored onto the secure element includes a communication interface for providing connectivity to a storage module for downloading software images onto the SE. The update agent has a first memory storing authentication data for authenticating software images, and a second memory storing credentials for personalizing software images.
-
公开(公告)号:US20240241959A1
公开(公告)日:2024-07-18
申请号:US18411563
申请日:2024-01-12
Inventor: Clara GIFRE , David PATINO , Xavier GOMEZ , Patricia NARANJO GALLARDO
Abstract: A method is provided for changing and recovering personalization data of a trusted software in a secure element and changing and restoring diversified data. The method includes the steps of providing an update agent in the secure element; storing personalization data in the installed software; performing a Full Reflash to recover or update a software or operating system comprising the steps of first securing personalization data to a memory of the update agent before, in following step, recovering or loading a software image into the secure element. The method includes as a final step personalizing the software image by the personalization data secured during the first step of the Full Reflash.
-
公开(公告)号:US20240273206A1
公开(公告)日:2024-08-15
申请号:US18292420
申请日:2022-07-26
Inventor: Clara GIFRE , David PATINO , Federico RUAU , Ruben GOMEZ JIMENEZ
Abstract: A method for personalizing a software, in particular an operating system OS, in a secure element, SE, includes the steps of loading a software image into the memory of the SE; loading a software personalization record comprising personalization data into the memory of the SE; and personalizing the loaded software image using the software personalization data. Personalization of the software image is initiated by an internal agent of the SE. Initiation personalization of the software image by the internal agent is triggered by a trigger event that is detected by the internal agent, the trigger event being unrelated to software personalization.
-
公开(公告)号:US20240354091A1
公开(公告)日:2024-10-24
申请号:US18292484
申请日:2022-07-26
Inventor: Xavier PERARNAU , Marta COUTO , Clara GIFRE , David PATINO , Federico RUAU
IPC: G06F8/65
CPC classification number: G06F8/65
Abstract: A method and an apparatus for updating software loaded on a secure element, SE, which SE comprises an update agent handler, and an update agent. In a first step, a request to backup a current version of software loaded on the SE is received at the SE. The request is sent from a device, external to the SE. Upon receiving the backup request, the SE performs a secure backup of the current software version, and returns the software backup to the device, to be stored thereon. In a further step, the SE performs an update process of the current software version, to obtain an updated software version. If the update process fails, a rollback is performed at the SE to restore the software backup as a new current soft-ware version on the SE.
-
公开(公告)号:US20240354088A1
公开(公告)日:2024-10-24
申请号:US18574927
申请日:2022-06-29
Inventor: Clara GIFRE , David PATINO , Federico RUAU
IPC: G06F8/61
CPC classification number: G06F8/61
Abstract: A method, a data structure, and an update agent for implementing a scheme for downloading an operating system image onto a secure element. The update agent receives from an external device an installation package for installing an operating system onto the secure element. The update agent requests control of the secure element and loads the operating system received with the installation package into the secure element, after which control of the secure element is transferred to the operating system.
-
公开(公告)号:US20240281244A1
公开(公告)日:2024-08-22
申请号:US18571919
申请日:2022-06-29
Inventor: Clara GIFRE , David PATINO , Federico RUAU
CPC classification number: G06F8/65 , G06F8/61 , H04L9/3242
Abstract: A method, an update agent and an off-card entity are provided for implementing an authentication scheme for providing a software image to a secure element. An installation package includes a package binding function for linking the installation package to the secure element, a manifest, a manifest signature generated using a block-cipher algorithm, and a software image is received at an update agent within the secure element. The update agent implements an authentication and integrity scheme by verifying various signatures contained within the installation package and installing the software image in case of successful authentication and integrity verification.
-
-
-
-
-
-
-