Personalisation of security modules

A method for operating a security module, said method comprising the steps of:

• providing a security module having a secure key memory and at least one data interface;
• in a personalization state, setting up a connection to a personalization unit using the data interface;
• using the security module to create a module key pair afresh and storing said module key pair in the key memory;
• sending a public module key to the personalization unit via the connection;
• using the personalization unit to produce a certificate relevant to the public module key by signing with a signing key from the personalization unit;
• causing the personalization unit to send the certificate to the security module and storing said certificate securely therein;
• clearing down the connection between the security module and the personalization unit;
• changing the security module from a personalization state to an operating state;
• and
• setting up in the operating state, a cryptographically secure connection to a central system, said connection involving the use of a private module key and involving the public module key together with the certificate being transmitted to the central system, where the certificate is checked.

A method for personalizing a security module, comprising the following steps:

• connecting a security module to a personalization unit;
• connecting the security module temporarily to an identification unit the connection being accomplished by a user using an interface which is determined by the user;
• sending via the identification unit, an identification value, which can be checked by the personalization unit, to the security module, which forwards it to the personalization unit;
• and wherein
• the personalization unit performs the personalization if the check on the identity value is positive.

A security module comprising:

• a programmable processor including memory for storing a secure key;
• at least one data interface for releasably coupling said security module to a personalization unit;
• means for creating a module key pair storable in said memory and for sending said module key to said personalization unit;
• means for receiving and securely storing a certificate sent from said personalization unit;
• operating means for changing said security module from a personalization state to an operating state once said security module is no longer coupled to said personalization unit;
• and
• means for establishing a cryptographically secure connection to a central system using a private module key, said public module key and said certificate.

A personalization unit comprising:

• at least one data interface for coupling said personalization unit to a security module;
• means for receiving a module key via said interface, said module keying being sent from said security module;
• means for generating a signing key and producing a certificate regarding said module key, said certificate being produced by signing said module key with said signing key;
• and
• means for sending said certificate to said security module.

A central system comprising:

• a secure key memory;
• at least one data interface;
• means for receiving a private module key;
• a public module key and a certificate from a security module;
• means for establishing a cryptographically secure connection to said security module using said public module key, said private module key and said certificate;
• and
• means for checking said certificate.