System and method for downloading application components to a chipcard

Device including at least the following components:

• a) Client at least including:
• aa) a Browser
• bb) a computer program product to execute sending of a request for a smart card application component, and unpacking of a data packet comprising a signed command sequence and transmission of individual commands thereof in sequence to a processor-based smart card
• cc) a reader for the smart card
• b) Server including at least:
• aa) a computer program product to execute:
• i) delivery of a secret code or Session Key by the server to the client responsive to the request
• ii) bundling in the server a sequence of commands to produce a bundled command sequence for downloading of the smart card application component to the smart card
• iii) generation of a digital signature in the server using the secret key or Session Key by way of each command within the command sequence to produce a signed, bundled command sequence comprising a bundled sequence of individually signed commands
• iv) transmission of the signed, bundled command sequence as the data packet to the client, thereby reducing data transfers between the server and the client
• bb) a nonvolatile memory to store the secret keys and the Master Key
• c) Communication link between client and server:
• wherein the computer program product of the client and the computer program product of the server further execute an authentication method for generation of the Session Key which includes:
• transmission of a request from the server via the client to the smart card to transmit the smart card identification data stored on the smart card;
• reading of the smart card identification data from the nonvolatile memory of the smart card and transmission of the smart card identification data via the client to the server;
• identification from the smart card identification data of an authentication method by means of which a Session Key agreed between the server and the smart card can be generated;
• and
• wherein the computer program product of the client and the computer program product of the server further determine the Session Key by an authentication method comprising:
• generation of a first random number and selection of a secret key by the server;
• transmission of the first random number via the client to the smart card;
• generation of a second random number by the smart card;
• creation of a Session Key from the first and second random numbers;
• encrypting the first and second random numbers and transmitting the first and second encrypted random numbers and the second random number generated by the smart card to the server;
• and
• generation of a Session Key by the server and checking of the first and second encrypted random numbers, and the second random number with the aid of the Session Key.

Computer program product stored in the internal memory of a digital computer, containing elements of software code to execute a method for downloading application components from a server via a client to a processor-based smart card, wherein the server and the client are interconnected via a distributed system, said method comprising:

• sending a request from the client to the server for a smart card application component for the processor-based smart card;
• delivery of a secret key or Session Key by the server to the client, responsive to the request;
• bundling in the server a sequence of commands to produce a bundled command sequence for downloading of the application component to the smart card;
• generation of a digital signature in the server using the secret key or Session Key by way of each command within the bundled command sequence to produce a signed, bundled command sequence comprising a bundled sequence of individually signed commands;
• transmission of the signed, bundled command sequence as a data packet to the client thereby reducing data transfers between the server and the client;
• unpacking of the data packet by the client and transmission of individual signed commands of the bundled command sequence in sequence to the smart card;
• and
• checking of the digital signature of the individual commands on the smart card and execution of the commands on the smart card if the digital signature is correct;
• wherein the method further includes:
• transmission of a request from the server via the client to the smart card to transmit the smart card identification data stored on the smart card;
• reading of the smart card identification data from the nonvolatile memory of the smart card and transmission of the smart card identification data via the client to the server;
• identification from the smart card identification data of an authentication method by means of which a Session Key agreed between the server and the smart card can be generated;
• wherein the Session Key is determined by:
• generation of a first random number and selection of a secret key by the server;
• transmission of the first random number via the client to the smart card;
• generation of a second random number by the smart card;
• creation of a Session Key from the first and second random numbers;
• encrypting the first and second random numbers and transmitting the first and second encrypted random numbers and the second random number generated by the smart card to the server;
• and
• generation of a Session Key by the server and checking of the first and second encrypted random numbers, and the second random number with the aid of the Session Key.