Method of controlling an electronic device and corresponding electronic device

Patent metadata

Field	Value
Publication number	US-11200571-B2
Application number	US-201715696215-A
Country	US
Kind code	B2
Filing date	Sep 6, 2017
Priority date	Sep 6, 2016
Publication date	Dec 14, 2021
Grant date	Dec 14, 2021

Abstract

Method of controlling an electronic device and corresponding electronic device. The method may be performed by an electronic device (20) and includes steps such as receiving an instruction command (CMD) that includes identifiers (ID) of instructions (IS) that are prerecorded in a memory (30) of the electronic device; using the identifiers to form a code (RC) defining a set of instructions, where the set of instructions combines prerecorded instructions (IS) to execute a security check; and storing the code (RC) in a memory (28) of the electronic device in order to configure the electronic device (20) to execute the security check.

First claim

The invention claimed is:

1. A controlling method performed by an electronic device, said method comprising:
storing, in a first ROM-type memory of the electronic device, a plurality of security check instructions configured to cause performance of one or more security checks of the electronic device, the plurality of security check instructions being in a deactivated state and enabling personalization of the electronic device;
receiving an instruction command including identifiers identifying two or more security check instructions of the plurality of security check instructions;
concatenating the received identifiers to create a code defining a set of instructions, wherein said set of instructions comprises the two or more security check instructions; and
storing the code in a second memory of the electronic device accessed by a program executed by the electronic device, wherein the program performs a check of a transaction by executing the set of instructions defined by the code.

2. The method according to claim 1 , wherein the instruction command is a script command received during a Europay Mastercard Visa (EMV) transaction.

3. The method according to claim 1 , wherein executing the set of instructions is performed in response to a GENERATE AC command previously received from an external terminal in compliance with the EMV protocol.

4. The method according to claim 1 , wherein executing the set of instructions comprises:
determining a first result delivered by performing the check; and
executing at least one security check instruction defined in said set of instructions, the at least one security check instruction being a function of the first result of the check.

5. The method according to claim 4 , wherein said at least one security instruction comprises at least one of the following:
sending a notification including data representative of the first result of the check;
storing history data in the memory of the electronic device, the history data being representative of the first result of the check; or
generating a security decision specifying how the transaction is to be processed.

6. The method according to claim 4 , wherein the set of instructions comprise:
at least two first prerecorded security check instructions for executing a plurality of security check operations as the check;
at least one second prerecorded security check instruction comprising a link operator defining a combining logic link between said plurality of security check instructions; and
at least one third prerecorded security check instruction for executing a security operation as a function of the result of said plurality of security check instructions in compliance with said combining logic link.

7. The method according to claim 6 , wherein the first result of the check is a boolean.

8. The method according to claim 6 , wherein the link operator comprises at least one of the following:
an “AND” operator;
an “OR” operator;
an equality operator;
an inequality operator; or
a comparison operator.

9. The method according to claim 4 , comprising:
performing a preliminary security check before the check, the preliminary security check delivering a preliminary result;
determining a final result on the basis of the preliminary result from the preliminary security check and of the first result from the check; and
processing the transaction in accordance with the final result.

10. The method according to claim 9 , wherein the preliminary result corresponds to a first degree of security and the final result corresponds to a second degree of security, said second degree of security being at least as high as the first degree of security.

11. The controlling method of claim 1 , wherein the code is of a BER-TLV structure according to EMV standard.

12. The controlling method of claim 1 , wherein the executing the set of instructions comprises interpreting the code stored in the second memory and accessing the prerecorded security check instructions in the first ROM-type memory.

13. A non-transitory computer-readable data medium that includes instructions that, when executed by a processor of an electronic device, perform a method comprising:
storing, in a first ROM-type memory of the electronic device, a plurality of security check instructions configured to cause performance of one or more security checks of the electronic device, the plurality of security check instructions being in a deactivated state and enabling personalization of the electronic device;
receiving an instruction command including identifiers identifying two or more security check instructions of the plurality of security check instructions;
concatenating the identifiers to create a code defining a set of instructions, wherein said set of instructions comprises the two or more security check instructions;
storing the code in a second memory of the electronic device accessed by a program executed by the electronic device, wherein the program checks a transaction by executing the set of instructions defined by the code.

14. An electronic device comprising:
a processor;
a first ROM-type memory;
a second memory;
a non-transitory computer-readable medium storing instructions that when executed by the processor cause the processor to perform operations comprising:
storing, in a first ROM-type memory of the electronic device, a plurality of security check instructions configured to cause performance of one or more security checks of the electronic device, the plurality of security check instructions being in a deactivated state and enabling personalization of the electronic device;
receiving an instruction command including identifiers identifying two or more of the security check instructions;
concatenating the received identifiers to create a code defining a set of instructions, wherein said set of instructions comprises the two or more security check instructions; and
storing the code in a second memory of the electronic device accessed by a program executed by the electronic device, wherein the program checks a transaction by executing the set of instructions defined by the code.

Assignees

• Idemia France
• Oberthur Technologies

Inventors

• Chamberot Francis
• De Oliveira Marco

Classifications

• G06Q20/341 Primary

  Active cards, i.e. cards including their own processing means, e.g. including an IC or chip · CPC title

• G07F7/1008

  Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system · CPC title

• G06Q20/3552

  Downloading or loading of personalisation data · CPC title

• G06Q20/24

  Credit schemes, i.e. "pay after" · CPC title

• G07F7/127

  in which both online and offline card verification can take place · CPC title