초록 ▼

A method of securely loading and validating commands (COM) in a smart card (SC) is disclosed. Especially in the case where application-specific commands are loaded by an application provider (AP), that is off-line with respect to the card issuer (CI), it must be ensured that the commands are valid.

A method of securely loading and validating commands (COM) in a smart card (SC) is disclosed. Especially in the case where application-specific commands are loaded by an application provider (AP), that is off-line with respect to the card issuer (CI), it must be ensured that the commands are valid. The invention provides a method involving the protection of the commands (COM) by means of authentication codes, these codes (MAC1, MAC2) being produced using two different keys: one key (K1) is stored by the card issuer (CI), the other (K2) by a trusted third party (TTP). A further authentication code (MAC3), produced using a key from a set of keys (K3*), may be utilized to selectively validate commands for individual applications (e.g. AP1, AP2).

대표청구항 ▼

[ I claim:] [10.] A smart card, comprising a substrate and an integrated circuit having a processor and a memory, the memory containing at least two keys the integrated circuit being arranged to regenerate, using the at least two keys at least two authentication codes relative to a received command

[ I claim:] [10.] A smart card, comprising a substrate and an integrated circuit having a processor and a memory, the memory containing at least two keys the integrated circuit being arranged to regenerate, using the at least two keys at least two authentication codes relative to a received command modification request including at least two corresponding request authentication codes and to compare the at least two regenerated authentication codes with the received at least two corresponding request authentication codes to verify an approved modification to commands is being received.