Payment application lifecycle management in a contactless smart card

A system for managing the lifecycle of a card software application received from a remote trusted service manager (TSM) for a contactless smart card, the system comprising:

• a secure element embedded within a chip of the contactless smart card;
• a first memory embedded within the secure element, wherein the first memory is operable to store a control software application of the secure element and a first sharable interface object (SIO) associated with the control software application of the secure element;
• a second memory embedded within the secure element, wherein the second memory is operable to store the card software application and a second SIO associated with the card software application;
• a firewall embedded within the secure element operable to separate between the first SIO and the second SIO, wherein the firewall is further operable to support secure data transfer between the first SIO and the second SIO through the firewall;
• a card runtime environment for receiving from the remote TSM, one of a plurality of card software applications in computer-coded form and one of a plurality of computer-coded instructions for performing a function on the card software application, wherein the card software application comprises account information of a card instrument and an application identifier (AID) code;
• process method function calls in the card runtime environment of the contactless smart card for rendering the one of the plurality of computer-coded instructions, wherein the rendered computer-coded instruction performs the function on the card software application or invokes a process method function call of the card runtime environment to perform the function on the card software application;
• process method function calls in the card runtime environment of the contactless smart card for registering, in the control software application of the secure element, the card software application using the AID code, wherein the control software application of the secure element comprises a list of AIDs of previously received and registered card software applications and a card application status tag for each of the listed AIDs;
• and
• process method function calls in the card runtime environment of the contactless smart card for updating, in the control software application of the secure element, the card application status tag of the registered card software application, wherein the card application status tag is updated with a computer code related to the function performed.

A contactless smart card configured to manage the lifecycle of a card software application received from a remote trusted service manager (TSM), the contactless smart card comprising:

• a secure element embedded within a chip of the contactless smart card;
• a first memory embedded within the secure element, wherein the first memory is operable to store a control software application of the secure element and a first sharable interface object (SIO) associated with the control software application of the secure element;
• a second memory embedded within the secure element, wherein the second memory is operable to store the card software application and a second SIO associated with the card software application;
• a firewall embedded within the secure element operable to separate between the first SIO and the second SIO, wherein the firewall is further operable to support secure data transfer between the first SIO and the second SIO through the firewall;
• a card runtime environment for receiving from the remote TSM, one of a plurality of card software applications in computer-coded form and one of a plurality of computer-coded instructions for performing a function on the card software application, wherein the card software application comprises account information of a card instrument and an application identifier (AID) code;
• process method function calls in the card runtime environment of the contactless smart card for rendering the one of the plurality of computer-coded instructions, wherein the rendered computer-coded instruction performs the function on the card software application or invokes a process method function call of the card runtime environment to perform the function on the card software application;
• process method function calls in the card runtime environment of the contactless smart card for registering, in the control software application of the secure element, the card software application using the AID code, wherein the control software application of the secure element comprises a list of AIDs of previously received and registered card software applications and a card application status tag for each of the listed AIDs;
• and
• process method function calls in the card runtime environment of the contactless smart card for updating, in the control software application of the secure element, the card application status tag of the registered card software application, wherein the card application status tag is updated with a computer code related to the function performed.