Secure end-to-end personalization of smart cards

A secure end-to-end smart card personalization system comprising:

• a personalization system comprising a programmable circuit communicatively connected to a memory storing computer executable instructions which, when executed, cause the personalization system to:
• generate a customized dataset including personalization data for installation onto a smart card, the customized dataset being generated based on an operating system of the smart card by performing a personalization process using a virtual smart card formatted according to the operating system;
• encrypt at least a portion of the customized dataset, at a personalization system, using an encryption key that is associated with a card issuance device that is separate from the personalization system, the encryption key being different from any encryption key used to secure the customized dataset when stored on the smart card;
• and
• transmit the customized dataset to the card issuance device.

A secure end-to-end smart card personalization system comprising:

• a personalization system communicatively connected to a card issuance device, the personalization system configured to:
• generate a personalized virtual smart card including personalization data for installation onto a real smart card, the customized dataset being generated based on an operating system of the real smart card by performing a personalization process using a virtual smart card formatted according to the operating system;
• encrypt at least a portion of the customized dataset, at a personalization system, using a public key of a public-private key pair unique to a printer and different from a public key of the real smart card;
• and
• transmit the customized dataset to the card issuance device.

A method of personalizing a smart card, the method comprising:

• receiving at a personalization system an operating system type of a smart card to be personalized;
• generating a customized dataset including personalization data for installation onto the smart card to be personalized by performing a personalization process using a virtual smart card formatted according to the operating system without requiring a concurrent secured connection to the card issuance device;
• and
• after the customized dataset is generated, transmitting the customized dataset to the card issuance device.

A method of personalizing a smart card, the method comprising:

• transmitting to a personalization system an operating system type of a smart card to be personalized;
• receiving, at a card issuance device, a customized dataset including personalization data for installation onto the smart card to be personalized, the customized dataset including a personalized virtual smart card formatted according to the operating system;
• and
• personalizing a real smart card using the customized dataset.