Method of sending a data from a secure token to a server
AssigneeGemalto SA
InventorsXavier BERARD, HongQian Karen LU
Life of this patent
Estimating the term…
Abstract
The invention is a method for managing a response generated by an application embedded in a secure token in response to a command requesting opening a proactive session. An applicative server relies on an OTA server to securely send the command to the application. The method comprises the steps of: the application retrieves a data from the command and derives a key using a preset function, the application generates the response to the command, builds a secured response packet comprising the response secured with the derived key and sends the secured response packet to the applicative server.
Claims10
A method for managing a response generated by an application embedded in a secure token acting as an UICC in response to a command requesting opening a proactive session, an applicative server relying on an OTA server to send the command to the application, said command being secured by the OTA server with a security layer independent of the content of the command,
- wherein said method comprises the steps:
- identifying in the command a data for derivation of a key;
- receiving and deciphering the command in the secure token;
- the application retrieves the data from the command and computes the key by applying a preset function to said data;
- application generates the response to the command, builds a secured response packet comprising the response secured with the key and sends the secured response packet to the applicative server;
- and
- the applicative server computes the key by applying the preset function to the data and retrieves the response using the key.
A secure token acting as an UICC and including an application able to handle a command requesting opening a proactive session, said command being initiated by an applicative server and secured by an OTA server with a security layer independent of the content of the command, the application being able to generate a response corresponding to the command,
- wherein the application is configured to retrieve a data from the command and to compute a key by applying a preset function to said data,
- and in that the application is configured to build a secured response packet comprising the response secured with the key key and to send the secured response packet to the applicative server.
Dependencies are inferred from the claim text.