Multi-application IC card with secure management of applications

A multi-application IC card comprising:

• a runtime environment for managing executions of a plurality of stored applications, each of the plurality of stored applications comprising a set of rules to be satisfied by its execution and a corresponding set of reactions to be taken if the set of rules are not satisfied;
• said runtime environment comprising
• a plurality of security registers and a plurality of reaction registers to reference, respectively, the set of rules and the set of reactions, and
• a security policy manager to initialize, for the plurality of stored applications, a reference between said plurality of security registers and the set of rules and between said plurality of reactions registers and the set of reactions,
• said security policy manager cooperating with said plurality of security registers and said plurality of reaction registers to perform a checking of the set of rules and an activation of the set of reactions and comprising a registration function to be called by at least one of the plurality of stored applications to initialize said plurality of security registers and said plurality of reaction registers.

A multi-application IC card comprising:

• a runtime environment for managing executions of a plurality of stored applications, each of the plurality of stored applications comprising a set of rules to be satisfied by its execution and a corresponding set of reactions to be taken if the set of rules are not satisfied, the set of rules comprising security objects including code for managing a security policy for the plurality of stored applications and the set of reactions comprising reaction objects including code for managing reactions to a violation of the security policy for the plurality of stored applications;
• said runtime environment comprising
• a plurality of security registers and a plurality of reaction registers to reference, respectively, the set of rules and the set of reactions, and
• a security policy manager to initialize, for the plurality of stored applications, a reference between said plurality of security registers and the set of rules and between said plurality of reactions registers and the set of reactions,
• said security policy manager cooperating with said plurality of security registers and said plurality of reaction registers to perform at least one of a checking of the set of rules and an activation of the set of reactions.

A method for managing a multi-application IC card, comprising a runtime environment for executing a plurality of stored applications, comprising:

• storing, for each of the plurality of stored applications, a set of rules to be satisfied by its execution and a corresponding set of reactions to be taken if the set of rules are not satisfied;
• storing references to the set of rules and the set of reactions in a plurality of security registers and a plurality of reaction registers, respectively, in the runtime environment;
• and
• performing at least one of checking the set of rules and activating the set of reactions using the plurality of security registers and the plurality of reaction registers.