Abstract: In a method for loading media data (M) into a memory of a portable data carrier (10) connected to an external operator device (24), the data carrier (10) receives a loading job, an encrypted data transfer channel (50) is set up between the data carrier (10) and a trustworthy, non-local server (30) on which the media data (M) are held, and the media data (M) are transferred in encrypted form via the data transfer channel (50) and written to the memory of the data carrier (10). A data carrier (10) and a computer program product have corresponding features. In addition, an operator device (24) and a computer program product are provided that are configured to provide a user interface for initiating the method for loading the media data (M). The invention provides a technique for loading media data (M) into a portable data carrier (10), which technique prevents unauthorized copying of the media data (M).

Abstract: A method for installing a file system (26) in a portable data carrier (10) comprises the steps of reading in specification data (SD) that at least partly describe the file system (26) at the semantic level, interpreting the read-in specification data (SD) by means of a processor core (12) of the data carrier (10), and installing the file system (26) in accordance with the interpreted specification data (SD) in a memory (14) of the data carrier (10). A computer-readable data carrier (30) and a device (28) for initializing and/or personalizing a portable data carrier (10) are equipped for storing specification data (SD) and/or transferring them into a portable data carrier (10) in accordance with the invention. The invention makes available a technique for installing a file system (26) in a data carrier (10) that reduces the hitherto strong dependency between the file format used and internal aspects of the operating system of the data carrier (10).

Abstract: In a method for loading media data (M) into a memory of a portable data carrier (10) connected to an external operator device (24), the data carrier (10) receives a loading job, an encrypted data transfer channel (50) is set up between the data carrier (10) and a trustworthy, non-local server (30) on which the media data (M) are held, and the media data (M) are transferred in encrypted form via the data transfer channel (50) and written to the memory of the data carrier (10). A data carrier (10) and a computer program product have corresponding features. In addition, an operator device (24) and a computer program product are provided that are configured to provide a user interface for initiating the method for loading the media data (M). The invention provides a technique for loading media data (M) into a portable data carrier (10), which technique prevents unauthorized copying of the media data (M).

Abstract: A method for installing a file system (26) in a portable data carrier (10) comprises the steps of reading in specification data (SD) that at least partly describe the file system (26) at the semantic level, interpreting the read-in specification data (SD) by means of a processor core (12) of the data carrier (10), and installing the file system (26) in accordance with the interpreted specification data (SD) in a memory (14) of the data carrier (10). A computer-readable data carrier (30) and a device (28) for initializing and/or personalizing a portable data carrier (10) are equipped for storing specification data (SD) and/or transferring them into a portable data carrier (10) in accordance with the invention. The invention makes available a technique for installing a file system (26) in a data carrier (10) that reduces the hitherto strong dependency between the file format used and internal aspects of the operating system of the data carrier (10).

Abstract: A method is proposed for virtual enlargement of the stack of a portable data carrier allowing reloading of executable program code. To permit the execution of programs requiring a larger stack than that physically present, the stack is segmented into at least two stack segments and their fill state monitored. When complete occupation of a segment is recognized, the oldest stack segment is swapped out to a further storage medium. The further storage medium is a nonvolatile read-write memory that can be a slower memory compared to the stack. When sufficient memory space is available in the stack again, the swapped out segment is returned. The method includes managing a destination address of each stack segment swapped out to the non-volatile read-write memory in a register in a volatile read-write memory.

Abstract: A method is proposed for distributed creation of a program for a programmable portable data carrier (10) e.g. a smart card. Program source text (Q) is created on a user computer (20), compiled and linked into executable program code (C) on a spatially separate compiler server (30), and the executable program code (C) loaded into data carrier (10) again via the user computer (20). A secure end-to-end link is set up for the data exchange between data carrier (10) and compiler server (30). For this purpose, the data carrier (10) is provided, in a precompletion step, with software tools for final processing that permit a transport code (U, CSSL, UCSM) provided in a transient format to be converted into executable program code (C). the transport code (U, CSSL, UCSM) is secured by encryption mechanisms. The transfer of the executable program code (C) generated by the compiler server (30) to the data carrier (10) is effected in the transient format (U, CSSL, UCSM).

Abstract: A method is proposed for virtual enlargement of the stack of a portable data carrier (10) allowing reloading of executable program code. To permit the execution of programs requiring a larger stack than that physically present, the stack (26) is segmented into at least two stack segments (30) and their fill state monitored. When complete occupation of a segment (30) is recognized, the oldest stack segment (30) is swapped out to a further storage medium (18). The further storage medium (18) can be a slower memory compared to the stack (26). When sufficient memory space is available in the stack (26) again, the swapped out segment (30) is returned.