Abstract:
A secure portable electronic device for providing secure services when used in conjunction with a host computer. The secure portable device includes a read-only memory partition, a read/write memory partition, and a secure memory partition. The secure portable device includes instructions stored in the read-only partition including a host agent containing instructions executable by the host computer. The secure portable device also includes instructions stored in the secure memory partition. These instructions include a card agent containing instructions executable by central processing units secure portable electronic device, and includes a card agent communications module for communicating with the host agent; and a security module for accessing private information stored in the secure memory partition. The host agent includes a host agent communications module for communicating with the card agent and at least one function requiring use of private information stored in the secure memory partition of the portable device and operable to transmit a request to the card agent to perform a corresponding function requiring the use of private information stored on the portable device.
Abstract:
The invention relates to a cryptographic mechanism and to a cryptographic device incorporating such cryptographic mechanism. The cryptographic mechanism offers a better resistance to side channel attacks than that of known cryptographic mechanisms by incorporating a new type of masking mechanism.
Abstract:
A device capable of communicating with a computer via a USB interface, the device comprising a USB hub and a wireless USB network adapter which is connected to the USB hub, and being adapted such that a smart card capable of communication using the USB protocol can be connected to the USB hub.
Abstract:
A plurality of assemblies is manufactured. Each assembly comprises a sealing slice that is fixed to a base slice. The plurality of assemblies is manufactured in the following manner. In a preparation step, a stack is formed. The stack comprises a plurality of pre-assemblies. Each pre-assembly comprises a base slice, a sealing slice and a fixing layer provided between the base slice and the sealing slice. The stack further comprises at least one supple buffer layer. The supple buffer layer has a mechanical rigidity, which is substantially less than that of the base slices and that of the sealing slices. The supple buffer layer thus enables to compensate for variations in thickness of the base slices and of the sealing slices. In a fixing step, the stack is pressed which causes the sealing slice of each pre-assembly to be fixed to the base-slice of the pre-assembly.
Abstract:
An assembly comprises an integrated circuit card capable (2) of communicating data in a contactless fashion. The assembly further comprises a case (32) for the integrated circuit card. The case has an electrical circuit (14, 16) which, when the integrated circuit card is inside the case, is electrically coupled to the integrated circuit card so as to prevent the integrated circuit card from communicating data in a contactless fashion.
Abstract:
This invention concerns a system to update encoded data stored in a memory of a data processing device such as a smartcard. In this system, the data is represented by a tree structure in directories and files according to an object representation. According to the invention, the update system comprises a specific referencing object able to reference all or some of the attributes of the encoded data in memory. A microcontroller is then programmed to extract from the referencing object the information required to locate the memory block occupied by this attribute, and update this block, replacing it by the new previously encoded data.
Abstract:
A method for authenticating a user for use of a server computing device wherein the server computing device is connected by a network to a host device. Generating a key representation image having thereon a plurality of individual key images placed at random positions, each corresponding to a possible character value in an authentication phrase. Accepting a sequence corresponding to locations of mouse clicks representing user selections of character values in an attempted authentication phrase. Verifying that the sequence of location values corresponds to a correct authentication phrase by mapping the locations of the mouse clicks to the locations of the randomly placed key images. Alternatively, accepting a sequence corresponding to a transformation of personal identification number based on a random number and a numerical operation or selection in a matrix.
Abstract:
Method for checking the signature of a message, the message, signature, and a certificate having been sent by a signer having a public key to a recipient having a message storage device. According to the invention, the method includes the stages according to which: the certificate in the protected device connected to the storage device of the recipient and checked and at least one checking result data element is sent to a display device connected directly to the protected device, the result data element is checked on the display device, when the certificate is verified, a reduction of the message is calculated in the protected device and the message is recopied onto the display device during the reduction operation, the signature with the public key of the signer is decrypted in the protected device, and the decrypted signature is compared with the reduction carried out, according to the result of the comparison, a message is sent from the protected device to the display device indicating that the signature conforms/does not conform to the message or to the public key of the signer put forward.
Abstract:
A portable object (1) of the smart card type comprises a main circuit (3, 8, 9, 10) for internal processing and storage of data. The main circuit comprises several integrated circuits (3, 10). The portable object comprises a supply voltage circuit (7) for applying a first supply voltage (3 to 5V) to one of the integrated circuits (3) of the main circuit and for applying a second, different supply voltage (1.2 to 1.8 V) to another integrated circuit (10) of the main circuit.
Abstract:
The invention relates to a method of updating an authentication algorithm in at least one data processing device (CARD, SERV) which can store a subscriber identity (IMSI1) which is associated with an authentication algorithm (Algo1) in a memory element of said device (CARD, SERV). The inventive method comprises the following steps, namely: a step whereby a second inactive (Algo2) authentication algorithm is pre-stored in a memory element of the device and a step for switching from the first algorithm (Algo1) to the second algorithm (Algo2) which can inhibit the first algorithm (Algo1) and activate the second (Algo2).