Process for loading a protected storage zone of an information processing device, and associated device

A process for executing secure operations between a first portable object and a second portable object which require holding rights held by the first portable object by using an information processing device, the information processing device comprising device processing means and device memory means for performing general nonsecure operations, and incorporating a security module which comprises module processing means and module memory means for performing specific secure operations, said module memory means being nonvolatile and read-write accessible to module processing means but at least write-protected from outside the module,

• said first and second portable objects comprising respective first and second object processing means and first and second object memory means for performing specific secure operations, said first and second object memory means being nonvolatile and read-write accessible to first and second object processing means respectively but at least write-protected from outside the first and second portable objects respectively, said rights being stored in said first and second object memory means respectively,
• the process comprising the steps of:
• establishing communication between said first portable object and said information processing device;
• copying said rights from said first object memory means to said module memory means under the control of said module processing means;
• stopping communication between said first portable object and said information processing device;
• using the information processing device in lieu of the first portable object to perform said secure operations by cooperating with said second portable object and by requesting the information processing device to derive said rights from said module.

An information processing system for performing secure operations which require holding rights held by a first portable object, said system having an information processing device,

• the information processing device comprising device processing means and device memory means for performing general nonsecure operations, reader means for cooperating with a portable object, and incorporating a security module which comprises module processing means and module memory means for performing specific secure operations, said module memory means being nonvolatile and read-write accessible to module processing means but at least write-protected from outside the module,
• said first portable object comprising first object processing means and first object memory means for performing specific secure operations, said first object memory means being nonvolatile and read-write accessible to first object processing means but at least write-protected from outside the first portable object, said rights being stored in said first object memory means,
• said device processing means comprising:
• means for triggering and controlling a communication between said module and said first portable object through said reader means;
• means for copying said rights from said first object memory means to said module memory means under the control of said module processing means;
• means for stopping communication between first portable object and information processing device;
• means for performing said secure operations within a predetermined limit of use which require possessing said rights, by deriving said rights from said module in lieu of the first portable object;
• and
• means for inhibiting operation of said module under the control of said module processing means when said predetermined limit of use has been reached.

An information processing system for executing secure operations between a first portable object and a second portable object which require holding rights held by the first portable object said system having an information processing device, the information processing device comprising device processing means and device memory means for performing general nonsecure operations, reader means for cooperating with a portable object, and incorporating a security module which comprises module processing means and module memory means for performing specific secure operations, said module memory means being nonvolatile and read-write accessible to module processing means but at least write-protected from outside the module,

• said first and said second portable objects comprising respective first and second object processing means and first and second object memory means for performing specific secure operations, said first and said second object memory means being nonvolatile and read-write accessible to first and second object processing means, respectively, but at least write-protected from outside the first and the second portable objects, respectively, said rights being stored in said first and said second object memory means respectively,
• said device processing means comprising:
• means for triggering and controlling a communication between said module and said first portable object through said reader means;
• means for copying said rights from said first object memory means to said module memory means under the control of said module processing means;
• means for stopping communication between first portable object and information processing device;
• means for performing said secure operations, by cooperating with said second portable object and by deriving said rights from said module and said second portable object is in lieu of the first portable object.