Dynamic multiple-application systematic framework for integrated circuit card and information processing methods based on the framework

The multiple-application systematic framework according to any of the preceding claims, wherein the service provider management module 101 is operable to allocate a unique service provider ID (SID) to the service provider, encrypt an information management secret key (SKey) provided by the service provider to the user and generate a MAC check code for the SID, encrypted SKey and service token to be written into the IC card 300 by the service provider.

The multiple-application systematic framework according to any of the preceding claims, wherein the service module 200 is operable to retrieve a user ID and values of the counter in the IC card 300, retrieve the service token and the SKey generated for the user from the service SKey generated for the user, and is further operable to obtain from the card issuer the encrypted SKey, SID and MAC check code.

The multiple-application systematic framework according to any of the preceding claims, wherein the authentication and security management module 3000 is a software program in the user's IC card 300 and operates to communicate with the application control module 3010 in the user's communications device 301 via the second communication means;

• conduct security authentication and encryption and decryption with the module 3010;
• receive control instructions of the card issuer, service provider or user transmitted by the module 3010 and read, write in, modify, check or delete data in the multi-application data storage area 3001;
• and to output data or calculation results to the module 3010.

The multiple-application systematic framework according to any of the preceding claims, wherein the multi-application data storage area 3001 is a unique storage space in the user's IC card 300 for storing one or more service tokens provided by at least one service provider, SID and SKey.

The multiple-application systemic framework according to any of the preceding claims, wherein the user terminal device 30 further comprises a communications device 302 comprising an application module 3020.

The multiple-application systematic framework according to any of the preceding claims, wherein the first communications means is one of the Internet, intranet and any network suitable for interconnecting the card issuer device 10, the service provider device 20 and the user terminal device 30.

The multiple-application systematic framework according to any of the preceding claims, wherein the second communications means is a wireless communication means comprising Wi-Fi, Bluetooth, infra-red and near field communication (NFC).