Secure portable object
AssigneeTrusted Logic
InventorsNicolas Regnault, Eric Vetillard
Life of this patent
Estimating the term…
Abstract
The invention relates to a secure portable object of the smart card type comprising (a) an object body and (b) a micro-module comprising a processor and at least one memory in which a first application executed by a first execution engine in a first execution space is stored. The invention is characterized in that a second application is further stored in the said at least one memory, where the said second application is executed by a second execution engine distinct from the first execution engine, in a second execution space distinct from the first execution space. The invention particularly applies to smart cards.
Claims18
A secure portable object of the smart card type comprising (a) an object body and (b) a micro-module comprising a processor and one or more memories in which a first application having a first application format and a second application distinct from the first application yet having the first application format are stored, a first execution engine of a first virtual machine and a second execution engine of a second virtual machine are respectively capable of executing the first and second application, and in that the first application is executed by the first execution engine in a first execution space and the second application is executed by the second execution engine in a second execution space distinct from the first execution space the first execution engine being distinct from the second execution engine wherein the second execution space has a secondary characteristic distinct from the first execution space, wherein the second execution engine implements additional security measures designed to prevent that an application executed by the second execution engine from making memory accesses outside a portion of memory allocated to the application and wherein the second application is allocated to be executed in the second execution space based on a requiring the secondary characteristic and the first application is allocated to be executed by the first execution space based on a requirement of not requiring the secondary characteristic.
A method for securing a secure portable object of the smart card type comprising (a) an object body and (b) a micro-module comprising a processor and one or more memories in which a first application having a first application format and a second application distinct from the first application and yet having the first application format are stored, further comprising the following stages, where:
- providing a first execution engine of a first virtual machine and a second execution engine of a second virtual machine, each capable of executing the said first and second applications, respectively;
- executing the first execution engine the first application in the first execution space;
- executing the second application in the second execution space wherein the second execution space is distinct from the first execution space;
- identifying the execution space to be allocated for each application to install based on a secondary characteristic of such second execution space wherein applications requiring said secondary characteristic are identified to be installed in the second execution space whereas applications not requiring the secondary characteristic are identified to be installed in the first execution space;
- and
- installing the each application so that the each application is executed in the execution space to which the each application is allocated.
Dependencies are inferred from the claim text.