Abstract: A method for collecting transaction history data and an associated terminal device. The method may include: collecting on-line, from a remote server (SV), first history data (DT) representative of at least one transaction associated with a user account (15); communicating contactlessly with a smart card (2), during which the terminal (T) recovers second history data (DH) stored locally in a memory (10) of the smart card, the second history data being representative of transactions processed by the smart card in association with the user account (15); and analyzing, during which the terminal (T) aggregates the first and second history data in order to obtain up-to-date history data. It is thus possible to generate transaction-following data from the up-to-date history data.

Abstract: Disclosed is a method for authenticating a user by using an electronic apparatus including an authentication module and a secure module, which includes the following steps: the authentication module transmits a recognition result to the secure module according to a process that allows the authentication module to be authenticated by the secure module; the secure module generates an authentication token by signing, with a private key stored in the secure module, data including data representing at least one feature of the authentication module; and transmitting the generated authentication token. Also disclosed is an associated secure module, electronic apparatus and system.

Abstract: Disclosed is a method for administering a communication channel between two host components of a mobile NFC device. The method includes a step of updating the whitelist of a first host component, then a step of notifying the update to a second authorised host component. The notifying step informs the second host component of the status of the whitelist of the first host component in order to prevent the transmission of requests to create a communication channel which would then be rejected. Also disclosed is a mobile NFC device.

Abstract: A checking device and method performed by a microcircuit for dependency rules for objects updated in the microcircuit. The device and method include steps for receiving (B3) a command for updating a first object (105) stored in the microcircuit, the command giving an updated value for the first object; and verifying (B4, B4?) an updating rule (106) for the first object while taking account of the updated value for the first object. The device and method can be used in microcircuits that carry out transactions.

Abstract: Notification devices and methods for configuring a secure element incorporated into a terminal connected to a network are disclosed. The devices and methods may perform steps implemented by an application of the secure element, such as obtaining at least one item of information that can be used to configure the secure element stored in a memory of the terminal outside the secure element, sending the item of information and an identifier of the secure element to a configuration system, and obtaining configuration data originating from the configuration system, the configuration data being supplied to the secure element depending on the item of information.

Abstract: The invention relates to a method for controlling a transaction carried out between an electronic device comprising a secure memory and an external terminal by monitoring usage patterns of the electronic device, wherein a first and a second item of usage information are read when the transaction is carried out; a first list of data pairs is recorded on the secure memory, each of said pairs comprising the first and second (IU2) items of usage information; a second list of counters is recorded on the secure memory; an indicator for monitoring usage patterns of the electronic device is calculated on the basis of the first item of usage information, the second item of usage information, and/or a counter from the second list.

Abstract: Disclosed is an electronic device including: a body; a module enclosed in the body; a microcircuit and a direct current source, both forming part of the body; and an electronic component forming part of the module and accessible from the exterior, the electronic component being electrically connected to the microcircuit and having to be supplied with direct current from the direct current source. The body includes a first antenna connected to the direct current source via an oscillator and the module includes a second antenna connected to the electronic component via a rectifier circuit, the first and second antennas being electromagnetically coupled, providing a wireless radio frequency power supply to the electronic component of the module from the direct current source of the body.

Abstract: Disclosed is a method for recording a reference biometric data item in a biometric smart card including a biometric sensor. The recording of a biometric data item acquired by the biometric sensor, as a reference biometric data item, is completed in response to the validation, by the biometric smart card, of a personal secret code of the biometric smart card user entered on a first external device to authorise a transaction between the biometric smart card and a second external device by way of the first external device.

Abstract: An authentication method performed by an authentication server (ACS). The method includes receiving from an access server (SW) giving access to a service (S), an authentication request including transaction data (DT) associated with an IC card; determining whether a security code included in the transaction data is of the DCVV type; and if so, detecting that no 3D secure (3DS) authentication is to be performed and co-operating with a verification server (SV) in order to verify the validity of the DCVV security code.

Abstract: A secure element (30) has a local store of file property data (50). A method of preparing a script to send to the secure element (30) to remotely provision a profile (31) at the secure element includes preparing the script such that the script lacks a command to create a file if the local store of file property data (50) at the secure element includes file property data which can be used to locally create that file. A script may include an entry of reduced length which refers to the file to be locally created, such as a SELECT FILE command and an identifier of the file.

Abstract: An embedded subscriber identity module (eUICC1) and a method of controlling such a module. The embedded subscriber identity module (eUICC1) is suitable for maintaining numerous communication profiles (P) simultaneously in the active state, and each active communication profile (P) allows the communications terminal (T) containing the embedded subscriber identity module to communicate with a mobile telephone network (R) associated with that communication profile.

Abstract: A server includes a first server configured to receive requests and a plurality of second servers configured to service requests. A method of client-server communication includes receiving, at the first server, a request from the client and allocating the request to one of the second servers. The server determines if the allocated second server can provide a response to the request within a predetermined time period. If the allocated second server cannot provide a response to the request within the predetermined time period it sends a reply to the client indicating when the server system can provide a response to the request and including an identifier of the allocated second server. Server generates a response to the request. Server receives a callback message from the client. Server sends the response to the client.

Abstract: A method for assisting in improving the security of an electronic operation carried out via a secure element. The method comprises the following steps. A first application of the secure element is selected and writes a piece of contextual data in means of recording of the secure element. Then, a second application is selected, reads the contextual data in the means for recording and verifies if the contextual data satisfies a predefined condition. If yes, it is considered that the context of the selecting of the second application is legitimate and the electronic operation can continue normally.

Abstract: An electronic wireless communication device (200) that includes first and second electronic chips (202, 204); a first antenna (206) electrically connected to the first electronic chip (202); a second antenna (208) electrically connected to the second electronic chip (204); and a third antenna (210) that is adapted to be electromagnetically coupled with the first and second antennas (206, 208). The first electronic chip (202) is configured to communicate with a first external terminal using a first protocol via a first antenna pair formed by the first antenna (206) and the third antenna (210); and the second electronic chip (204) is configured to communicate with the first external terminal and/or a second external terminal using a second protocol via a second antenna pair formed by the second antenna (208) and the third antenna (210).

Abstract: An embedded subscriber identity module (eUICC1), which includes communication profiles, and that co-operates with a communications terminal (T). The module includes at least two communication profiles (P) that are active at the same time so as to allow the communications terminal to communicate with each mobile telephone network (R1, R2) associated with the active communication profiles, a receive module for receiving, from the terminal (T), a command (CMD) that has one of the active communication profiles as its destination (P), (referred to as the destination profile), and a determination module for determining the destination profile from among the active communication profiles on the basis of a destination profile identifier included in the command.

Abstract: A control method and associated devices in an embedded subscriber identity module (eUICC1) co-operating with a terminal (T) includes operations for: receiving identifiers (ID) of services associated with a communications profile (P) to be executed when the profile is in the active state; determining whether each service (S) is supported by an operating system (OS1) of the embedded subscriber identity module (eUICC1), and if not, sending a request to update the operating system (OS1); installing the update enabling the operating system to run the communications profile (P); and sending a request to receive or to continue receiving the communications profile (P) for installing in the embedded subscriber identity module (eUICC1). Also described is a control method performed by a profile provisioning server for supplying the embedded subscriber identity module (eUICC1) with the service identifiers.

Abstract: Disclosed is a method for making a window in a thin plastic accommodating layer by inserting an insert from a thin plastic supply layer, the method including the following steps: cutting an opening in the accommodating layer according to the shape of the future window, punching the supply layer to produce an insert and inserting the insert into the opening, wherein the punching and at least one first phase of insertion are carried out in a single movement of a single punching and inserting tool, in a direction going from the supply layer to the accommodating layer.

Abstract: An embedded subscriber identity module (2) includes: a first memory zone (Z1) for storing an operating system (OS1); a second memory zone (Z2) for storing user data (DT) in memory that is accessible by the operating system (OS1); and a third memory zone (Z3) for storing a data model (MD) defining at least one criterion (CT) that is to be complied with by the user data (DT) contained in the second memory zone (Z2). The embedded subscriber identity module (2) further includes a determination module (8) configured to determine whether the user data (DT) complies with the at least one criterion; and a processor module (10) configured to cause at least one first predetermined action as defined in the data model (MD) to be executed if the user data (DT) is not in compliance with the at least one criterion.

Abstract: A security document may include a laserizable first layer including a grayscale image formed by laserizing; a color pattern that is in alignment with the grayscale image; and a second layer arranged between the first layer and the pattern, such that the first layer is above the second layer, and the pattern is below the second layer. The second layer may be more opaque than the first layer, such that when observing the security document from the top, the grayscale image appears to be colored by the color pattern only when the bottom of the security document is being illuminated.

Abstract: A method for producing a security device (1) comprising a first colour pattern (A) visible along an associated viewing axis (??) and at least one second colour pattern (B) visible along an associated viewing axis (??), comprising the following steps:—assembling an image layer (4) suitable for forming at least one colour pattern (A, B) by laser etching, on a support (3),—laser etching the first colour pattern (A) in the image layer (4), along the associated viewing axis (??) of same, in such a way that it can be seen through a lens array (7),—for each of said at least one second colour pattern (B), laser etching said at least one second colour pattern (A) in the image layer (4), along the associated viewing axis (??) of same, in such a way that it can be seen through a lens array (7). A security device (1) obtained by said method.