公开(公告)号：WO2022144636A1

公开(公告)日：2022-07-07

申请号：PCT/IB2021/061355

申请日：2021-12-06

Applicant: STMICROELECTRONICS S.R.L.

Inventor： MASSASCUSA, Sofia ,  FOLLERO, Giulio ,  ALFARANO, Marco

IPC: G06F8/76 ,  H04W12/30 ,  G06F21/71 ,  H04W8/20

Abstract: A method includes compiling, by a compiler (305) of a Smart Secure Platform (SSP) supporting a Primary Platform (105) and a Secondary Platform, source code comprising an implementation of an operating system of the Secondary Platform and applications of the Secondary Platform, to produce compiled source code compatible by an operating system of the Primary Platform (105); linking, by the compiler (305), personalization data to the compiled source code to produce a native Secondary Platform Bundle (SPB) compatible with the Primary Platform (105), the personalization data being associated with a subscription of a user of the SSP; and delivering, by the compiler, the native SPB.

公开(公告)号：EP4283508A1

公开(公告)日：2023-11-29

申请号：EP23172246.3

申请日：2023-05-09

Applicant: STMicroelectronics S.r.l.

Inventor： ALFARANO, Marco ,  MASSASCUSA, Sofia

IPC: G06F21/77 ,  G07F7/10

Abstract: Method for introducing personalization data in non-volatile memories of a plurality of integrated circuit cards, in particular secure elements, in particular integrated circuit cards, by storing Token Non-Volatile Memory (NVM) Images comprising
writing in the non-volatile memory (61) of a given integrated circuit (60) a static data image (SI), corresponding to an invariant part of non-volatile memory (61) common to said plurality of integrated circuits (60) including an operating system, and
writing in the static data image (SI) a set of personalization data (DI, PD, UPD) representing data specific of the given integrated circuit (60),
wherein said method includes
storing (232) a subset (UPD) of personalization data (DI, PD, UPD) in said non-volatile memories of a plurality of integrated circuits by
reserving (234) an area (61b) of the non-volatile memory for said subset (UPD) of personalization data,
storing (236) commands (SC(AC,K)), in particular APDU, configured to perform the writing of respective personalization data values (K) in said subset (UPD) by corresponding applications and/or operative system stored in said integrated circuit (61),
said storing (234) commands comprising converting (236a) said commands with a known coding obtaining an inner command script (ICS) comprising said commands encoded therein and storing (236b) said inner command script in said area (61b) of the non-volatile memory for said subset (UPD) of personalization data,
providing (238) a decoding software module (SEE), in particular an application, which is configured to decode said inner command script (ICS) obtaining said commands (SC(AC,K)), in particular APDU, configured to perform the writing of personalization data values in said subset (UPD) and to execute them,
at a subsequent activation of the integrated circuit by said decoding software module (SEE) decoding (250) and executing said inner command script (ICS).

公开(公告)号：EP3799384A1

公开(公告)日：2021-03-31

申请号：EP20196213.1

申请日：2020-09-15

Applicant: STMicroelectronics S.r.l.

Inventor： ALFARANO, Marco ,  MASSASCUSA, Sofia

IPC: H04L29/06 ,  H04W12/00 ,  H04W4/50 ,  H04W8/20 ,  H04W12/30

Abstract: Method for introducing personalization data in non volatile memories of a plurality of integrated circuits, comprising
writing in the non volatile memory (61) of a given integrated circuit a static data image (SI), corresponding to an invariant part of non volatile memory common to said plurality of integrated circuits (60) including an operating system, and personalization data images (DI) representing data specific of the given integrated circuit,
said personalization data pertaining a given integrated circuit being arranged in a set of personalization data fields,
wherein said method includes a procedure of generation (205-235) of test data images (I j ) to be stored in said non volatile memory comprising
for each data field (T j ) in said set of personalization data fields (T 1 ...T m ) performing an iterative procedure comprising at each iteration the operations of:
erasing (210) a non volatile memory (61) of a test integrated circuit (60') corresponding to said plurality of integrated circuits,
storing (220) said operating system in said non volatile memory,
storing (230) test personalization data in said non volatile memory,
said storing (230) comprising
generating (232) instances (TPD 1 ...TPD m ) of said test personalization data (TPD) on the basis of a provided (231) reference version (U1) of test personalization data (TPD) arranged in said set of data fields (T 1 ...T m ),
the first instance (TPD 1 ) at the first iteration corresponding to said provided reference version (U1) and the following instances (TPD 2 ...TPD m ) in following iterations corresponding to the reference version (U1 subject to an alteration applied on a different data field (T 1 ...T m ) for each iteration,
dumping (234) an image (I j ) of the non volatile memory (61) corresponding to the current test instance (TPD j ),

performing (235) iteratively said procedure of generation till the last data field in the set of data fields personalization obtaining a corresponding set of test dumped images (I 1 ...I m ) one for each data field (T j ) in said set of personalization data fields (T 1 ...T m ),
comparing (240) each test dumped image (I 1 ...I m ) with the test dumped image (I 1 ) obtained from the reference version (U1) extracting respective location information (LM j ) regarding the memory area in the non volatile memory (61)at which said test dumped image (I 1 ...I m ) differs from the test dumped image (I 1 ) obtained from the reference version,
processing (250) said location information to identify a static memory image (SI) containing only invariant memory slices and a dynamic memory image (DMI) associated to a substitution table (ST) indicating the location of memory area corresponding to each data field (T j ),
writing (270) in an integrated circuit (60) of said plurality of integrated circuits said static image (SI) and a dynamic personalized image (PMI) obtained filling at corresponding locations of memory area in the dynamic memory image (DMI) obtained from the substitution table (ST) the content of respective data fields (T j ) in personalization data (PD) to be specifically associated to said integrated circuit (60).

公开(公告)号：EP4272074A1

公开(公告)日：2023-11-08

申请号：EP21819990.9

申请日：2021-12-06

Applicant: STMicroelectronics S.r.l.

Inventor： MASSASCUSA, Sofia ,  FOLLERO, Giulio ,  ALFARANO, Marco

IPC: G06F8/76 ,  H04W12/30 ,  G06F21/71 ,  H04W8/20

公开(公告)号：EP3104321A1

公开(公告)日：2016-12-14

申请号：EP15202826.2

申请日：2015-12-28

Applicant: STMicroelectronics S.r.l.

Inventor： MIRANDA, Rita ,  CIMINO, Carlo ,  ALFARANO, Marco

IPC: G06Q20/32 ,  G06Q20/34 ,  G06Q20/42

CPC classification number: G07F7/08 ,  G06F17/30876 ,  G06K19/07345 ,  G06Q20/3278 ,  G06Q20/352 ,  G06Q20/354 ,  G06Q20/425

Abstract: Method for the activation of a payment card (SC), comprising accessing a remote computer server (14) of a card issuer to input card activation information (AS),
The method includes
storing (120) a unique code (UN) corresponding to a given payment card (SC) both
in a smart card (13) corresponding to a cardholder (U), comprising a contactless readable interface (13a), used as payment card (SC), and
in the remote computer server (14),

reading (160) said unique code (UN) by a user terminal (11) associated to the cardholder (U) comprising a corresponding contactless interface (11a), in particular a NFC interface,
sending (170) said unique code (UN) from the user terminal (11) to the remote computer server (15),
upon verification (180) of the unique code (UN) at the remote computer server (15),
generating (200) and sending (210) an activation code (AS) to the user terminal (11) associated to the cardholder (U) and
supplying (190) to the user terminal (11) access to an activation code input mask (AP) corresponding to the payment card (SC),

upon submission (220) of the activation code (SS),
comparing (230) the submitted code (SS) with the generated code (AS) and, in case of matching, activating (240) the payment card (SC).

Abstract translation: 用于激活支付卡（SC）的方法，包括访问卡发行者的远程计算机服务器（14）以输入卡激活信息（AS）。该方法包括存储（120）对应于 在与持卡人（U）对应的智能卡（13）中的给定支付卡（SC），包括用作支付卡（SC）的非接触式可读接口（13a），并且在远程计算机服务器（14）中，读取 （160）通过与持卡人（U）相关联的用户终端（11）所述唯一代码（UN）包括相应的非接触式接口（11a），特别是NFC接口，从所述唯一代码（UN）发送（170）所述唯一代码 用户终端（11）到远程计算机服务器（15），在远程计算机服务器（15）的唯一代码（UN）的验证（180）之后生成（200）并发送（210）激活码（AS） 到与持卡人（U）相关联的用户终端（11）并向用户终端（11）提供（190）访问激活码输入m 在所述激活码（SS）提交（220）之后询问对应于所述支付卡（SC）的（AP），将所述提交的代码（SS）与所生成的代码（AS）进行比较（230），并且在匹配的情况下， 激活（240）支付卡（SC）。

公开(公告)号：EP3648489A1

公开(公告)日：2020-05-06

申请号：EP19203377.7

申请日：2019-10-15

Applicant: STMicroelectronics S.r.l.

Inventor： ALFARANO, Marco ,  MASSASCUSA, Sofia

IPC: H04W12/00 ,  H04W4/50 ,  H04W8/20 ,  H04W8/26 ,  H04L29/06

Abstract: A method for the generation of personalized Profile Package data in integrated circuit cards,
comprising the operations of:
providing (110) at a profile creator (54) entity a table (11a) comprising a plurality of data records (R1...R n ) corresponding to a plurality of profile data, each record (R 1 ...R n ) comprising a plurality of personalization fields (T1...Tm) to store different types of personalization values,
providing (105) at said profile creator entity (54) a file (12) for the Profile Package comprising fields to be personalized (F 1 ...F k ...F p ) corresponding to one or more of said fields (R1...Rn) to store different types of personalization values,
combining (115; 240) data records (R 1 ...R n ) comprised in said table (11a) with the file for the profile package (12) inserting personalization values (T1...Tm) in fields to be personalized (F 1 ...F k ...F p ) to obtain respective personalized Profile Packages (12a),
transmitting said personalized Profile Packages (12a) from a data preparation entity (52) to the respective integrated circuit cards (50) for storing.
Such method includes
protecting (215) said file for the profile package (12) performing an encryption with a master encryption key (K M ) obtaining an encrypted file for the profile package (12e),
protecting (220) data records in said plurality of data records (R1...R n ) performing an encryption with a respective data protection key (K P ), obtaining encrypted data records (11e),
transmitting (230) said encrypted file for the profile package (12e) and encrypted data records to (11e) the data preparation entity (52),
decrypting (235) said encrypted file for the master profile (11e) and encrypted data records (12e) at the data preparation entity (52) to obtain unencrypted data records (11s) and said file for the master profile (12),
performing (240) at the data preparation entity (52) said combination of said unencrypted data records (11s) with the file for the master profile to obtain respective personalized Profile Package (12a).

公开(公告)号：EP3163793B1

公开(公告)日：2019-02-06

申请号：EP16171021.5

申请日：2016-05-24

Applicant: STMicroelectronics S.r.l.

Inventor： CIMINO, Carlo ,  ALFARANO, Marco

IPC: H04L9/32