EP1817752A2

EP1817752A2 - Method for personalising chip cards

Info

Publication number: EP1817752A2
Application number: EP05811146A
Authority: EP
Inventors: Guido Treutwein; Wolfgang Gebhardt; Arne Lehmeyer; Rainer WÖRZ
Original assignee: Siemens AG
Current assignee: Atos IT Solutions and Services GmbH
Priority date: 2004-12-01
Filing date: 2005-11-11
Publication date: 2007-08-15
Also published as: CN101069218A; CN101069218B; DE102004058020A1; US8020773B2; WO2006058828A3; WO2006058828A2; US20080116261A1

Abstract

The invention relates to a method for personalising a chip card (CHIPK), whereby key information (KEY1) is stored in a memory (MEM) of the chip card (CHIPK) for the purposes of a partial personalisation. For a complete personalisation, an instruction sequence definition (BSD) and an instruction sequence designed for a chip card application and comprising instructions to be carried out by the chip card (CHIPK) are transmitted to the chip card (CHIPK). According to the inventive method, a check which is secured by the key information (KEY1) is carried out for each chip card instruction (B1, B2, B3, B4, B5) in order to determine whether the chip card instruction (B1, B2, B3, B4, B5) satisfies the instruction sequence definition (BSD), and if it does, the respective chip card instruction (B1, B2, B3, B4, B5) is carried out by the chip card (CHIPK).

Description

description

Method for personalizing smart cards

A personalization of chip cards, in which card and / or person individual data are loaded onto a respective chip card, has hitherto generally been carried out in secured personalization centers at a manufacturer of the chip card, at a certification authority or at a trustworthy service provider.

In such a personalization center customizable personalization data, such. As a name of a user whose account number or other customer-specific data or applications played on the smart card. The

Personalization centers, are usually secured by the use of electronic, mechanical security mechanisms and / or organizational measures against unauthorized manipulation, since in them security-relevant data (eg personal data of the user of the chip card, PINs, etc.) are processed, and a disclosure of information to unauthorized persons and an influence of unauthorized persons on the process of personalization is to be avoided.

If, for example in the case of chip cards, for identification of persons, maximum security - in particular against manipulation or forgery of the stored data on the chip card - is demanded, then so far usually the personalization in secured personalization centers has to be carried out.

Personalization in an unsecured environment outside of personalization centers has so far been performed only on smart cards with low security requirements.

Personalization of a smart card typically involves activating one or more applications on the smart card Chip card together with a generation of security keys and / or security key pairs, eg so-called symmetric keys or RSA keys (RSA: encryption algorithm named after the inventors Rivest, Shamir and Adleman). The generation of backup key pairs proves to be very expensive compared to the remaining personalization steps. Thus, the number of smart cards processed in a given period of time in a personalization center is significantly affected by a generation time of the security keys of the respective smart cards.

The personalization of a smart card can often not be completed in a single personalization session, since at the time of issue of the smart card is not yet completely known which applications are to be played on the smart card and installed on the smart card. Additionally, with multi-application chip cards, which may include multiple applications, there is a need to activate applications over the life of the smart card. According to the prior art, this is the chip card to bring once more in the secure personalization center, if required by the respective security requirements.

It is an object of the present invention to provide a flexible method for personalizing smart cards.

This object is achieved by a method having the features of claim 1. Advantageous embodiments of the invention are specified in the dependent claims.

In the method according to the invention, for the personalization of a chip card in the context of a partial personalization to be carried out, preferably in a secure personalization center, key information, eg comprising a card-specific secure messaging key and / or an authentication key, stored in a, preferably non-volatile, memory of the chip card. Such a nonvolatile memory can be realized, for example, as an EEPROM on the chip card. According to the invention, a command sequence definition and a command sequence establishing a smart card application with chip card commands to be executed by the chip card are transmitted to the chip card as part of a supplementary personalization which can also be carried out in an unsecured environment. Furthermore, for a particular smart card command of this command sequence, a check using the key information and thereby secured is carried out as to whether this smart card command satisfies the command sequence definition. If so, the chip card command in question is executed by the chip card.

It should be noted that the indicated sequence of process characteristics need not correspond to the chronological order of these characteristics. For example, the check of the chip card commands may be carried out contiguously at the beginning of the supplementary personalization, before the individual chip card commands are executed.

Preferably, the validity of the command sequence using the key information when loading the command sequence on the smart card or installing the

Command sequence be secured on the chip card. The examination of the command sequence using the command sequence definition can then take place during execution of the command sequence without additional backup by means of the key information.

An advantage of examining the instruction sequence by means of a instruction sequence definition is that it can be ensured that only unmanipulated, trusted instruction sequences can be executed, since only these satisfy the instruction sequence definition. With the inventive method complementary personalization in unsecured areas such as the user's private home, local sales office for mobile cards, chip card encoding for employee cards, bank branches for credit or loyalty cards or registration offices for ID cards and chip cards can be safely carried out so far only be carried out in secure personalization centers in order to fulfill high security requirements.

Time-consuming personalization steps, in particular generating certificates and key pairs, can be carried out as part of the supplementary personalization. It is advantageous that these time-consuming steps do not have to be performed in a personalization center and thus a shorter personalization time per chip card is achieved and the personalization center can partially personalize smart cards in shorter time intervals.

A further advantage is that multi-application chip cards, in which even after their delivery further applications can be loaded to activate the applications need not be sent again to the personalization center to complete the personalization.

The activation of such a further application may be carried out as part of the complementary personalization. That the complementary personalization with applications can e.g. be performed by the user of the smart card even in his apartment outside the personalization center.

The check of the smart card commands may be implemented and thus secured, for example, by using a secure messaging key as key information to prevent transmission of the command sequence and / or the command sequence definition to the smart card using an incorrect secure messaging key. Farther For example, the smart card may contain, as key information, a private key of an RSA key pair. The transmitted command sequence and / or command sequence definition may be encrypted for backup by means of a public RSA key of the smart card. Thus, the smart card, and only these, can decrypt the command sequence and / or the command sequence definition with the private key stored on the smart card. Furthermore, an authentication or signature key can be used as key information to ensure that the command sequence and / or command sequence definition has been generated and transmitted from the expected location, preferably the personalization center performing the partial personalization.

Preferably, before executing a respective smart card command of the command sequence with the aid of the command sequence definition, it is checked whether the smart card command to be executed satisfies the command sequence definition. If the test result is positive, the chip card command will be executed, but if the test result is negative, the chip card command will not be executed.

According to a development of the invention, an access authorization on the chip card can be set for executing the command sequence, and a presence of the access authorization can be checked before execution of a respective chip card command. If the result of the test is positive, then the relevant chip card command can be executed. If the test result is negative, execution of the relevant chip card command can be suppressed.

The access authorization can advantageously be set when the command sequence is called by the operating system. In another embodiment, prior to executing a respective smart card command of the command sequence, an access authorization associated with the smart card command may be set and deleted after execution. Such access authorization for a chip card command may, for example, include a write right to a specific memory area. Another example of an access authorization is an authorization of a chip card command to generate a key for encryption or a certificate for authentication.

The setting and deletion of an access authorization allows a simple implementation of test routines to check whether a chip card command may be executed. Furthermore, by means of such check routines, it is easy to realize that the chip card can not execute an instruction which is only permitted in the supplementary personalization when executing chip card instructions outside of the supplementary personalization, by performing each chip card command during and outside the supplementary personalization. the access permissions are checked.

According to one embodiment of the invention, the key information can be chip card-specific or chip card group-independent. A respective smart card group may e.g. a respective production lot of the chip cards, a respective distribution customer of the chip cards, a respective application, e.g. when used as a fuel card at gas stations, or all produced chip cards are assigned. Thus, it can be limited in the Teilpersonalisierung on which smart cards a respective command sequence can be performed - only on a single chip card, on a chip card group or on all smart cards.

According to an advantageous embodiment of the invention, the command sequence definition can specify states and state transitions of a state machine which changes from a respective state to a predetermined state of succession, which is different from previously assumed states, wherein a respective state is changed. each state is assigned a predetermined chip card command, which is allowed to execute in this state.

The instruction sequence definition may comprise information patterns for the - preferably entire - instruction sequence with which it can be determined by comparison with chip card instructions contained in the instruction sequence whether a respective chip card instruction to be executed satisfies the instruction sequence of the instruction sequence definition, if an order of the chip card instructions is correct, and / or whether, after execution of the command sequence, all chip card commands contained in the command sequence have been processed and thus the command sequence has been completely processed. In this case, the command sequence definition can be implemented in such a way that, for each chip card command of the associated command sequence, it contains information identifying the chip card command, preferably in as brief a representation as possible.

Advantageously, a state diagram of the state machine does not contain any branches, loops or recursions. As a result, in the case of the supplementary personalization of the chip card, the execution of the command sequence can be restricted to those command sequences which are provided by the personalization unit carrying out the partial personalization. The absence of recursion can ensure that a command sequence passing through the state diagram is executed unchanged, once, essentially completely and / or in the correct order. A user of the chip card is thus protected against manipulation by unauthorized third parties.

Furthermore, the command sequence definition, the command sequence, a chip card application partially set up by executing the command sequence up to an individual chip card command, the access authorization, the state machine and / or a respectively assumed state of the state machine. maten be stored in a preferably non-volatile memory of the smart card. As a result, interrupted supplementary personalization can continue after the interruption. When using a non-volatile memory to store the information provided, it is possible to continue the supplemental personalization even after the power supply has been interrupted.

This additionally enhances security against tampering because a manipulated, only partially valid instruction sequence and instruction sequence definition can not be cleared by simple means such as interrupting the power supply and then exchanged with a modified, also manipulated instruction sequence and instruction sequence definition.

The continuation of an interrupted supplementary personalization may preferably be carried out by continuing the command sequence at the state of the last state of the state machine. Alternatively, an interrupted supplementary personalization could be continued such that the execution of the command sequence is resumed at the beginning thereof and all chip card commands that have already been processed are ignored until the chip card commands that have not yet been processed are pending execution.

According to a further development of the invention, after a complete execution of the command sequence, the information indicating completed complementary personalization can be stored on the chip card, the access authorization deleted, and / or the command sequence definition, the command sequence, the state machine, and / or a state machine state the chip card are deleted. In this case, the information indicating a completed supplementary personalization can also be represented by information that is deleted after personalization has taken place and thus indicates by their absence that the personalization is complete.

It is advantageous, in particular, that after the supplementary personalization, data and chip card commands which are no longer required can be deleted and thus memory space can be freed up. Furthermore, the presence or absence of data on the chip card can be evaluated by the operating system of the chip card in order to detect whether the chip card is in the state of carrying out a supplementary personalization, whether the supplementary personalization has already been completed, or if the supplementary Personalization has not started yet. Depending on this evaluation, the operating system of the chip card can additionally decide whether the respective commands to be executed are to be executed with different access authorizations.

According to one development of the invention, a smart card command of a command sequence, preferably the last chip card command of the command sequence, may contain a command sequence definition for a further command sequence. This allows command sequences to be executed in cascade and split long command sequences into several short, modular command sequences and executed successively.

Furthermore, after executing a last chip card command of the command sequence, a test routine for checking a successful supplementary personalization can be called up and this test routine, upon detection of a faulty supplementary personalization, stores an information indicating faulty personalization on the chip card. Thus, a program of the smart card by simply reading this information can detect whether an application has been personalized error-free and only in this case access the application. This test routine can be permanent on the

Chip card, be part of the command sequence or as the command sequence in the context of the supplementary personal be transferred to the chip card and be deleted after termination.

According to one development of the invention, a routine may be carried out as part of the partial personalization, which reserves a memory area or a directory on the chip card for the reception of data generated during the supplementary personalization in the execution of the command sequence. It can thus be guaranteed that no memory shortage or overflow occurs during the processing of the supplementary personalization, and that only the command sequences whose chip card commands write to this previously reserved memory area can be completely executed.

According to one embodiment of the invention can be locked until complete execution of the command sequence calling of not included in the command sequence chip card commands. As a result, a chip card can only be used for its intended purpose if the supplementary personalization has been completely executed and terminated.

An embodiment of the invention will be explained in more detail with reference to the drawing.

In each case show in a schematic representation

FIG. 1 shows a part personalization of a chip card taking place in a personalization center;

FIG. 2 shows an introduction of a supplementary personalization of the chip card in an unsecured environment;

FIG. 3 shows the chip card with loaded and permanently existing modules for carrying out the supplementary personalization; FIG. 4 shows the chip card during the execution of a command sequence in the context of the supplementary personalization and

FIG. 5 shows a command sequence definition as state automaton with states and state transitions.

FIG. 1 diagrammatically shows a partial personalization of a chip card CHIPK taking place in a personalization center PZ. In the present exemplary embodiment, it is assumed that the chip card CHIPK can be identified by a chip card number ID which is contained on it and which is unique relative to other chip cards and shown as a rectangle. The chip card number ID is preferably already brought to the chip card CHIPK during the production of the chip card CHIPK. The electronically and / or mechanically secured area of a personalization center PZ is represented by a dashed-dotted line. On the chip card CHIPK is accessed in the illustrated in Figure 1 steps by a smart card reader / writer CHIPLES. The coupling between chip card reader / writer CHIPLES and chip card CHIPK is represented by a broad black line, as well as the connection between smart card reader / writer CHIPLES and a partial personalization module KEYGEN. The partial personalization module KEYGEN controls this

Chip card reader / writer CHIPLES and processes routines for partial personalization of chip card CHIPK.

In the present exemplary embodiment, it is assumed that the partial personalization module KEYGEN key information KEY1 and KEY2 are preferably generated according to the RSA method as a key pair. Furthermore, the partial personalization module KEYGEN is connected to a database CHIPDB - represented by a broad black line - which in particular comprises a table TABKEY, with an allocation of chip card numbers, here ID, in each case to a key information, here KEY2. Read / write access to data and memory the components mentioned are shown by dashed arrows. In addition to the unique chip card numbers ID, the chip card CHIPK also comprises a memory MEM, which is usually designed as an EEPROM, in order to be able to store data permanently and overwritable.

Alternatively - not shown - for storing chip card numbers and key information in the database CHIPDB, the key information KEY1 and / or KEY2 can be derived by the partial personalization module KEYGEN by means of a suitable, reconstructable method using a key known only to the personalization center PZ.

FIG. 2 schematically illustrates an initiation of the supplementary personalization by requesting a command sequence BS and a command sequence definition BSD at the personalization center PZ and their transmission to the chip card CHIPK. The chip card CHIPK is thereby located in an unsecured environment. This unsecured environment is referred to below as the personalization site HB at which the supplementary personalization is to be performed. It is assumed in the embodiment that the personalization location HB is the home area, i. the private home or the office of a smart card user is, with other possible personalization sites HB local personalization offices, chip card issuing agencies such as banks and insurance companies, as well as the personalization center PZ can be.

The database CHIPDB and the table TABKEY in the personalization center PZ are shown in FIG. 2 in accordance with FIG. The chip card CHIPK, the chip card number ID, the memory MEM, the key information KEY1, a second chip card reading / writing device CHIPLES2 and the connection between both is likewise shown in FIG. 1, the chip card CHIPK and the chip card reading / writing device CHIPLES2 not being in the personalization center PC but in one who carry out the complementary personalization, HB. Furthermore, at the personalization site HB represented by a dashed-dotted line, there is a communication module KOM1 which controls the chip card reading / writing device CHIPLES2 and can be connected via an internet connection to a communication module KOM2 in the personalization center PZ. In this case, an Internet connection is only a preferred of several connection options.

In the exemplary embodiment, it is assumed that the communication module KOM1 establishes an Internet connection with the HTTPS protocol (HyperText Transport Protocol Secure), sends a message REQ to the communication module K0M2 and sends this in a response a data message DAT the command sequence definition BS and associated command sequence definition

BSD - preferably encrypted - sent back, also using the HTTPS protocol. In particular, the key information KEY1 stored on the chip card CHIPK and / or a public key of the personalization center PZ can be used for HTTPS encryption.

In addition to the Internet connection assumed in the exemplary embodiment, all types of verbal, written or electronic connections are possible, eg radio or telephone connections. Furthermore, different protocols for communication are possible with an electronic connection, eg HTTP, HTTPS, SMTP or a proprietary protocol. The connection can also be made offline, ie without a direct electronic connection, or through an online-offline combination in which the request is transmitted to the personalization center PZ through an Internet connection and the answer without a direct electronic connection. In particular, in an alternative embodiment, it is possible to remotely place a request to the PZ personalization center and not directly transfer the data to be transmitted online from there, but instead store it on a CD-ROM, floppy disk, tape medium or other removable media by post. to be sent and read in by the communications module KOMl.

The communication module KOM2 has access, represented by a wide black line, to the database CHIPDB and to a generation module BSGEN for generating or determining command sequence BS and command sequence definition BSD. The transmission of the messages REQ and DAT via the Internet connection assumed in the exemplary embodiment between the communication modules KOM1 and KOM2 is illustrated by arrows. The transmission path of command sequence BS and command sequence definition BSD starting from the generating module BSGEN to the memory MEM of the chip card CHIPK is shown by a dashed arrow.

Not in the figure dargstellt is in personalization HB a terminal for user interaction on which runs a program that performs the possibly required interaction with the user. These are e.g. Inquiries as to whether an Internet connection should be established, which command sequence BS should be downloaded. In a preferred embodiment, chip card reading / writing device CHIPLES2, communication module COM1 and the mentioned terminal are part of a workstation computer with standard components and standard operating system.

The communication module KOM2 can be implemented in such a way that it only accepts connection requests that satisfy a plausibility routine contained in it (not shown). Furthermore, the communication module KOM2 may be in communication with a web server (not shown), may be a module of a web server, or may include a web server to provide interaction opportunities with the user of the smart card CHIPK. In particular, a list of the possible chip card applications to be activated in a web page can be displayed to the user for selection, preferably after reading and evaluating the chip card number ID, only for to display chip card CHIPK enabled chip card applications.

Figures 3 and 4 show schematically each chip card CHIPK with loaded and permanently available modules for

Carrying out the supplementary personalization. FIG. 3 shows a state after import but before execution of command sequence BS and command sequence definition BSD. FIG. 4 shows the chip card CHIPK after processing four chip card commands Bl,..., B4 during processing of a fifth chip card command B5 of the command sequence BS. The chip card CHIPK shown in FIGS. 3 and 4 also has a fault counter FAHLZ in the memory MEM on. The error counter FEHLZ is a data field which stores the number of errors, the error types and / or further details regarding occurring errors. The memory MEM comprises the key information KEY1, the command sequence definition BSD and the command sequence BS, which is characterized in that it is transmitted and executed command by command to the chip card CHIPK (not shown) or as a complete sequence in the chip card

CHIPK stored and then processed step by step. A free memory area FREIMEM of the memory MEM is represented by a dashed rectangle. By the partial execution of the command sequence BS (from Bl to B4) generated application data APPDATA, are represented by a hatched rectangle within the memory MEM. The individual commands Bl, B2, B3, B4, B5 of the command sequence BS are shown within this command sequence BS, wherein it is indicated by three points that the command sequence BS can contain any number of commands. In a corresponding manner, the individual command sequence definition units D1, D2, D3, D4, D5 are shown within the command sequence definition BSD. The chip card CHIPK furthermore comprises a supplementary personalization routine EPERS, which accesses the command sequence BS and the command sequence definition BSD read-represented by a dotted arrow, and the error counter MIST and the available free memory read and write FREE - represented by a continuous arrow - accessed. The step-by-step execution of the instructions B1, B2, B3, B4, B5 and command sequence definition units D1, D2, D3, D4, D5 is illustrated by a double arrow in the processing direction.

In particular, chip card instructions B1, B2, B3, B4, B5 to be executed as part of the supplementary personalization can be commands with write access to a volatile or non-volatile memory MEM of the chip card, as well as commands that generate security certificates or key pairs.

FIG. 5 illustrates a command sequence definition BSD which predefines states and state transitions in the sense of a state machine, the states of which Z1, Z2, Z3, Zn are denoted as

The state transitions are labeled by the instruction sequence definition units D1, D2, D3, D4, Dn, Dn + 1, the execution of which cause the state transitions. The initial state BZ defines the

Start state of the state machine; EZ defines the final state representing the successful execution of the command sequence BS. Usually, the initial state BZ and the final state EZ are identical and correspond to a neutral state of the chip card CHIPK, if no additional personalization takes place.

FIG. 1 illustrates the partial personalization of the chip card CHIPK in the personalization center PZ. In the present exemplary embodiment, the chip card CHIPK contains the unique, unchangeable chip card number ID, by means of which the chip card CHIPK can be identified. The partial personalization module KEYGEN requests this chip card number ID from the chip card reader / writer CHIPLES and transmits it to the database CHIPDB, so that an entry is created in the table TABKEY. In the table TABKEY is preferred one entry stored for each chip card delivered.

The partial personalization module KEYGEN generates the preferably smart card-specific key information KEY1 and KEY2 preferably according to the RSA method or alternatively according to a suitable key derivation method. Depending on the method used, the key information KEY1 and KEY2 can match, so that there is only one common key information. The key information KEY1 is a private key of the chip card CHIPK using the RSA method and key information KEY2 is an associated public key. Depending on the method used, the partial personalization module KEYGEN transmits the key information KEY2 to the database CHIPDB, so that it is stored in the table TABKEY assigned to the chip card number ID. The partial personalization module KEYGEN transmits the key information KEY1 to the chip card reading / writing device which writes the obtained key information KEY1 into the nonvolatile memory MEM of the chip card CHIPK. There, the key information KEYl remains permanently stored. Thus, the chip card CHIPK is partially personalized with only a few steps and little effort.

In order to activate a chip card application and / or data, such an application and / or such data is set up on the partially personalized chip card CHIPK, preferably at a different personalization location and at a later time. The process steps required for this purpose are illustrated schematically in FIG. 2:

In the home area HB of the user, a user inserts the chip card CHIPK transferred to him into a chip card reader / writer CHIPLES2 and starts the supplementary personalization in a manner not described in detail. Then that reads

Communication module KOMl the chip card number ID and transmits them, preferably encrypted by the key formation KEY1 and / or a public key of the personalization center PZ - in the message REQ to the communication module KOM2 in the personalization center PZ to request the delivery of a command sequence BS and command sequence definition BSD. Depending on the characteristics of the chip card CHIPK, various messages REQ can also be given for different chip card applications to be activated, or a message REQ with a parameter indicating which application is to be activated on the chip card.

The communication module KOM2 extracted, possibly after previous decryption, the transmitted chip card ID ID from the message REQ and further determined from the message REQ, which application is to be activated in a later step on the chip card CHIPK. The communication module COM2 contacts the database CHIPDB and queries the key information KEY2 stored there in the table TABKEY. Furthermore, the communication module KOM2 requests from the generating module BSGEN a command sequence BS for later generation of the chip card application and a corresponding matching command sequence definition BSD, the key information KEY2 possibly being provided by the communication module KOM2 for its generation and being used by the generating module BSGEN. The command sequence definition BSD is then generated using the key information KEY2 and the command sequence BS so that it can be used on the chip card CHIPK to check the execution of the command sequence BS according to various criteria.

Depending on which chip card application is to be activated, the generation module BSGEN generates or reads the application setup BS and the command sequence definition BSD, preferably both being card-encrypted using the key information KEY2 and thus being decryptable only on the chip card that has the appropriate one Key information KEYl contains. Furthermore, a command sequence BS can be generated. the one that can set up multiple applications on chip card CHIPK when running. In addition, the supplementary personalization routine EPERS can likewise be provided by the generation module BSGEN and transmitted to the chip card (not shown). This is advantageous if different personalization routines are used for different command sequences.

The communication module KOM2 transmits the command sequence BS and the command sequence definition BSD and, if appropriate, the supplementary personalization routine EPERS in a data message DAT, preferably encrypted by means of the key information KEY2 and / or the public key of the personalization center PZ, to the communication module KOM1 in the home area HB user. The command sequence BS and the command sequence definition BSD is transmitted to the chip card CHIPK in that the communication module KOM1 writes it into the memory MEM of the chip card CHIPK using the chip card reading / writing device CHIPLES2. Further, the communication module COMl causes the supplementary personalization routine EPERS to be called to execute the command sequence BS as part of the supplementary personalization.

FIG. 3 schematically shows the chip card CHIPK after the command sequence BS and the command sequence definition BSD have been loaded after calling the supplementary personalization routine EPERS. If the command sequence BS and the command sequence definition BSD were played encrypted on the smart card, they are to be decrypted by the complementary personalization routine EPERS first using the key information KEYl.

The use of the key information KEY1 for decryption - preferably using standard means - thus ensures the following check of the command sequence BS by means of the command sequence definition BSD, since only for the decryption key sequence KEY1 prepared command sequences BS can be decrypted. This implicitly prevents the execution of other command sequences. By securing the entire command sequence BS, the respective chip card commands B1, B2, B3, B4, B5 of the command sequence BS are implicitly saved.

A pointer contained in the supplemental personalization routine EPERS points to the next instruction to be executed of the instruction sequence BS. This is initially the first instruction Bl of the instruction sequence BS. A further contained pointer points parallel to the first command sequence definition unit D1 to be evaluated, which is assigned to the command Bl, it being assumed in the application example that the command sequence definition BSD comprises information patterns for the entire command sequence BS and exactly one command sequence definition unit for each command gives.

A third contained pointer points to the memory area allocated to the application to be installed outdoors

Memory FREE. In an alternative embodiment of the invention, this memory area can already be reserved for the application as part of the partial personalization.

The representation as a pointer has been introduced only for clarification and can be solved in an implementation of a smart card CHIPK without pointer. The error counter FEHLZ is either already present on the chip card CHIPK or is only generated by the supplementary personalization routine EPERS in the memory MEM.

The supplementary personalization routine EPERS now reads (not shown) the first instruction Bl of the instruction sequence BS and checks by means of the associated instruction sequence definition unit D1 whether the instruction Bl to be executed satisfies this instruction sequence definition unit D1. This can be used to ensure that no illegal command is executed and that no commands are executed in the wrong order. If the command Bl satisfies the command sequence definition unit Dl, it is executed by the chip card CHIPK and, if it is a write command to the memory MEM, a part of the free memory FREIMEM with application data APPDATA is described. This reduces the free memory FREIMEM. Subsequently, the pointers are indexed so that the command B2 to be executed next and the command sequence definition units to be evaluated next, the unit D2 is set.

In the case of an error, the hands are not indexed and the error counter MISSING is increased. The further behavior after an error can be different; e.g. the execution of the command sequence BS can be aborted or it can be attempted to execute the command again. If the command sequence BS is aborted, the pointer to the command sequence definition BSD can be reset or it can remain at the previous position in order to continue processing there after transferring a further command sequence BS to the chip card CHIPK.

The supplementary personalization routine EPERS or an operating system routine of the chip card CHIPK can check the error counter MISSED and, when a predetermined threshold value is exceeded, trigger an action, such as the following: Disabling the chip card CHIPK.

FIG. 4 schematically illustrates the chip card CHIPK after successful execution of four instructions B1, B2, B3, B4 of the command sequence BS. Analogously, four command sequence definition units D 1, D 2, D 3, D 4 were evaluated in the illustrated embodiment of the invention after processing the four commands. An originally free memory area was used when executing the commands Bl, B2, B3, B4 for the storage of the application data APPDATA. After execution of all instructions of the instruction sequence BS, all instruction commands The sequence definition units of the command sequence definition BSD have been successfully evaluated and the desired application has been created in the application data APPDATA. Thus, the smart card application is set up and the supplementary personalization can be terminated.

The command sequence BS and command sequence definition BSD can be deleted by the supplementary personalization routine EPERS. Furthermore, this routine may end. The chip card CHIPK can use the application now stored on it after completion of the supplementary personalization.

The chip card CHIPK can send a message (not shown) about the successful execution of the command sequence BS to the communication module KOM1, which can then display this information to the user on the screen of a terminal.

Furthermore, the communication module KOM1 can send a corresponding message (not shown) to the personalization center PZ.

FIG. 5 schematically illustrates an instruction sequence definition BSD which prescribes a state machine. A successful evaluation of a command sequence definition unit D 1 and thus a successful execution of an instruction Bl causes the state machine to change from the initial state BZ to the state Z 1. This state is in turn only left by the machine and forwarded to the only following state Z2 when the command sequence definition unit D2 has been successfully evaluated and thus command B2 has been executed. Since the state machine illustrated in FIG. 5 has no forward or backward loops in the state graph, there is only one sequence of command sequence definition units that completes the state machine and places it in the final state EZ. The final state EZ is then like the initial state BZ again a state, the usual wise in normal operation of the chip card CHIPK, so outside the complementary personalization is taken.

It can thus be guaranteed that in a command sequence BS according to the specification of the command sequence definition BSD all commands of the command sequence BS are processed, that the order of the commands satisfy the command sequence definition BSD and that no commands inserted later in the command sequence BS are executed.

The transition from the initial state BZ can be used to control further access rights, e.g. Write access to certain memory areas by setting an access authorization, are enabled and available during the execution of the command sequence BS. Due to the transition to the final state EZ, this access authorization can then be withdrawn again. If each chip card command is checked for access authorizations it requires before it can be processed, it is thus possible to achieve that chip card commands executed during a supplementary personalization have sufficient access rights and such chip card commands are blocked outside of the supplementary personalization.

The present embodiment comprises an authorization at the personalization center PZ, a secure transmission of the command sequence BS, a check of the command sequence BS by the command sequence definition BSD, which specifies a loop-free state machine. Thus, it meets the usually high security requirements for digital

Signature applications. By individual combination of the specified features and by individual design of these features, embodiments of this invention allow for the individual security specifications of personalization centers an exact implementation of these security requirements.

Claims

claims

1. A method for personalizing a chip card (CHIPK), in which a. in the context of a partial personalization a key information (KEY1) is stored in a memory (MEM) of the chip card (CHIPK), b. as part of a complementary personalization i. an instruction sequence definition (BSD) is transferred to the chip card (CHIPK), ii. a command sequence (BS) setting up a smart card application with chip card commands (B1, B2, B3, B4, B5) to be executed by the chip card (CHIPK), to which chip card (CHIPK) is transferred, iii. for a respective chip card command

(Bl, B2, B3, B4, B5), a check using the key information (KEY1) and thereby secured is made, whether this smart card command (B1, B2, B3, B4, B5) of the command sequence definition

(BSD), and iv. if so, the chip card command (B1, B2, B3, B4, B5) in question is executed by the chip card (CHIPK).

2. Method according to Claim 1, characterized in that an access authorization is set on the chip card for executing the command sequence (BS), and before execution of a respective chip card command

(Bl, B2, B3, B4, B5) a presence of the access authorization is checked, if the test result is positive, the relevant chip card command (B1, B2, B3, B4, B5) is executed, and if the test result is negative, the chip card command concerned (B1, B2 , B3, B4, B5) is not executed.

3. The method according to any one of the preceding claims, characterized in that the key information (KEYl) is chip card individual or smart card group-individual.

4. The method according to any one of the preceding claims, characterized in that in the context of a supplementary personalization a complementary personalization performing supplementary personalization routine (EPERS) is transferred to the smart card (CHIPK).

5. The method according to any one of the preceding claims, characterized in that the command sequence definition (BSD) states

(BZ, Z1, Z2, Z3, Zn) and state transitions of a state machine, which changes from a respective state (BZ, Z1, Z2, Z3, Zn) to a predetermined state of being different from previously assumed states, wherein a respective state ( BZ, Zl, Z2, Z3, Zn) in each case a predetermined chip card command is assigned, which is allowed in this state (BZ, Z1, Z2, Z3, Zn) for execution.

6. The method according to any one of the preceding claims, characterized in that the command sequence definition (BSD), the command sequence (BS), the supplementary personalization routine (EPERS), by processing the command sequence (BS) to a respective smart card command (Bl, B2, B3, B4, B5) partially established chip card application (APPDATA), the access authorization, the state machine and / or a respective assumed state (BZ, Z1, Z2, Z3, Zn, EZ) of the state machine in a preferably non-volatile memory (MEM) the chip card (CHIPK) are stored.

7. The method according to any one of the preceding claims, characterized in that after a complete execution of the command sequence (BS) a. an information indicating completed completion personalization is stored on the smart card (CHIPK), b. the access authorization is deleted, and / or c. the command sequence definition (BSD), the command sequence (BS), the supplementary personalization routine (EPERS), the state machine and / or a status of the state machine on the chip card (CHIPK) is deleted.

8. The method according to any one of the preceding claims, characterized in that a smart card command (Bl, B2, B3, B4, B5) of a command sequence (BS) includes a command sequence definition (BSD) for another command sequence (BS).

9. The method according to any one of the preceding claims, characterized in that after executing a last chip card command sequence command a test routine for checking a successful personalization is called and this test routine on detection of a faulty personalization, the incorrect personalization indicating information on the smart card (CHIPK) stores.

10.Verfahren according to any one of the preceding claims, characterized in that in the context of Teilpersonalisierung a routine is executed, which reserves a memory area on the chip card (CHIPK) for the inclusion of in the context of complementary Personalization in the execution of the command sequence (BS) generated data (APPDATA) of the smart card application.

11.Verfahren according to any one of the preceding claims, characterized in that until the complete execution of the command sequence (BS) a calling of not in the command sequence (BS) contained chip card commands is blocked.