Abstract: Provided is a method for securely diversifying a generic application stored in a secure processor of a terminal, said method comprising: Generating at the request of a manager application hosted in an application processor of said terminal, at the level of a distant server, a server challenge; Sending said server challenge to said application; Generating a first message at said application, said first message being function of said server challenge, an application challenge and an unique identifier of said application; Sending said first message to a Root-Of-Trust service hosted in a secure processor of said terminal, said Root-of-Trust service generating an attestation of said first message, said attestation guaranteeing that said first message has not been modified and originates from said secure processor; and Transmitting said attestation of said first message to said distant server in an enablement request message.

Abstract: Provided is a method to implement a Virtual Primary Platform (VPP) using a Tamper Resistant Element (TRE) and an External Execution Environment (EEE).The Virtual Primary Platform (VPP) comprises a VPP Low Level Operating System (VPP LLOS) distributed across a VPP Process Execution Environment (VPEE) in the Tamper Resistant Element (TRE). The VPP Low Level Operating System (VPP LLOS) comprises VPP LLOS API stubs installed in the VPP Process Execution Environment (VPEE) and routes communications between the VPP Process Execution Environment (VPEE) and the External Execution Environment (EEE) and an external agent (EA) installed therein.

Abstract: The present invention relates to a method for amending the firmware of a device with limited resources, the device comprises a memory unit, and a firmware amending software, and the firmware comprises: at least two functional components, wherein the first functional component comprises at least one public function, configured to be called by at least one second functional component different from the first functional component, a functional component table, wherein at least one of the functional components is registered, a call dispatch unit, where each call addressing one of the public functions is dispatched, wherein the firmware amendment comprises the steps for the firmware amending software of: storing a new functional component at a memory location of the memory unit, updating the functional component table with the memory location of said new functional component, and handing over control to the firmware.

Abstract: The present invention relates to a method for amending the firmware of a device with limited resources, the device comprises a memory unit, and a firmware amending software, and the firmware comprises: at least two functional components, wherein the first functional component comprises at least one public function, configured to be called by at least one second functional component different from the first functional component, a functional component table, wherein at least one of the functional components is registered, a call dispatch unit, where each call addressing one of the public functions is dispatched, wherein the firmware amendment comprises the steps for the firmware amending software of: storing a new functional component at a memory location of the memory unit, updating the functional component table with the memory location of said new functional component, and handing over control to the firmware.