Abstract: A computing device comprises: a memory; a processor; an interpreter; and a Memory Management Unit. The interpreter is for controlling the processor to execute a program comprising at least one first instruction in a format that is not native to the processor and at least one second instruction in machine code that is native to the processor. The Memory Management Unit is adapted to control access by the processor to the memory and possibly also to peripherals when the at least one second instruction is executed.

Abstract: There is disclosed a method of providing a software update to a secure element comprised in a host device, comprising converting the software update into a sequence of ciphertext blocks using a chained encryption scheme, and transmitting said sequence of ciphertext blocks to the host device. Furthermore, there is disclosed a method of installing a software update on a secure element comprised in a host device, comprising receiving, by the host device, a sequence of ciphertext blocks generated by a method of providing a software update of the kind set forth, converting said sequence of ciphertext blocks into the software update, and installing the software update on the secure element. Furthermore, corresponding computer program products and a corresponding host device are disclosed.

Abstract: An automatically configurable smart card comprises—a generic data structure provided for containing smart card specific data, and—a smart card operating system being adapted to automatically detect the generic data structure and to migrate the generic data structure.

Abstract: An embedded device (1) having a memory (2) that is organized to store both data objects (DO1-DOx) and meta data (MD) which describes the locations at which the data objects are stored in the memory (2), the embedded device (1) which is connectable to a remote defragmentation device (3) is disclosed. The embedded device (1) is adapted to transmit, at the request of the defragmentation device (3), the meta data (MD) and optionally the data objects (DO1-DOx) stored in the memory (2) to the defragmentation device (3) and, in accordance with instructions and data received from the defragmentation device (3), to update in its memory (2) the meta data (MD) and to store the data objects (DO1-DOx) at locations as defined in the updated meta data (MD).

Abstract: There is disclosed a method of providing a software update to a secure element comprised in a host device, comprising converting the software update into a sequence of ciphertext blocks using a chained encryption scheme, and transmitting said sequence of ciphertext blocks to the host device. Furthermore, there is disclosed a method of installing a software update on a secure element comprised in a host device, comprising receiving, by the host device, a sequence of ciphertext blocks generated by a method of providing a software update of the kind set forth, converting said sequence of ciphertext blocks into the software update, and installing the software update on the secure element. Furthermore, corresponding computer program products and a corresponding host device are disclosed.

Abstract: According to an aspect of the invention, a process for verifying a computer program on a smart card is conceived, the process comprising: identifying, within said computer program, one or more instruction sequences that have a single start point and one or more end points in the program flow; identifying, in each instruction sequence, one or more basic blocks that have a single start point and a single end point in the program flow; and verifying the instruction sequences by verifying each basic block identified in said instruction sequences.

Abstract: In a method of and circuit for identifying and/or verifying the hardware and/or software of an appliance and of a data carrier, for example a smartcard, cooperating with the appliance, it is provided that a first unit (E1) for verifying the hardware and/or software of the appliance, in particular a Trusted Platform Module (TPM), and a second unit (E2) for verifying and/or identifying and authorizing the external data carrier, in particular a Secure Application Module (SAM), are coupled for direct data exchange via a communication interface (17) of the central arithmetic units (2, 10), in order to reduce or eliminate the possibility of attack or manipulation.

Abstract: A computing device comprises: a memory; a processor; an interpreter; and a Memory Management Unit. The interpreter is for controlling the processor to execute a program comprising at least one first instruction in a format that is not native to the processor and at least one second instruction in machine code that is native to the processor. The Memory Management Unit is adapted to control access by the processor to the memory and possibly also to peripherals when the at least one second instruction is executed.

Abstract: A device (100) for managing access rights to an object of an object oriented programming language, wherein the device comprises a processing unit (101) and a memory management unit (102). The processing unit (101) is adapted for determining information in dicative of the access rights to the object and for storing the determined information in the memory management unit (102).

Abstract: An embedded device (1) having a memory (2) that is organized to store both data objects (DO1-DOx) and meta data (MD) which describes the locations at which the data objects are stored in the memory (2), the embedded device (1) which is connectable to a remote defragmentation device (3) is disclosed. The embedded device (1) is adapted to transmit, at the request of the defragmentation device (3), the meta data (MD) and optionally the data objects (DO1-DOx) stored in the memory (2) to the defragmentation device (3) and, in accordance with instructions and data received from the defragmentation device (3), to update in its memory (2) the meta data (MD) and to store the data objects (DO1-DOx) at locations as defined in the updated meta data (MD).

Abstract: An integrated circuit (1 . . . 1??, 1a . . . I c) with a true random number generator (2 . . . 2??), which true random number generator (2 . . . 2?) comprises at least one instable physically uncloneable function (3 . . . 3??, 3a, 3a?) for generating true random numbers (8). Hence, each device of a group of devices can be provided with a unique true random generator, so that each device of the group is provided with different true random numbers even when said devices are applied to identical environmental conditions. Such a random number generator (2 . . . 2??) may be part of a smart card as well as of a module for near field communication, for example.

Abstract: An automatically configurable smart card comprises—a generic data structure provided for containing smart card specific data, and—a smart card operating system being adapted to automatically detect the generic data structure and to migrate the generic data structure.

Abstract: In a method of and circuit for identifying and/or verifying the hardware and/or software of an appliance and of a data carrier, for example a smartcard, cooperating with the appliance, it is provided that a first unit (E1) for verifying the hardware and/or software of the appliance, in particular a Trusted Platform Module (TPM), and a second unit (E2) for verifying and/or identifying and authorizing the external data carrier, in particular a Secure Application Module (SAM), are coupled for direct data exchange via a communication interface (17) of the central arithmetic units (2, 10), in order to reduce or eliminate the possibility of attack or manipulation.

Abstract: A method for analyzing fingerprint images includes picking up a sequence of images at very short time intervals, while a finger is being placed onto an electronic fingerprint sensor. A criterion for recognizing a live finger is extracted from variations in the images. The images are defined as a pixel raster having different gray values, with the aid of which the pixels are assigned binary values of zero or one. Significant changes in the values are detected and compared, with the aid of distinctive numbers or the like, to known typical changes that occur regularly in a particular image class.

Abstract: The method enables automatic triggering of pattern recognition tasks. A histogram of the frequency distribution of the gray-scale values of the image is determined periodically and repeatedly from the available image information. The characteristics of the histogram are determined, and the characteristics are used as the basis for establishing whether a relevant pattern is present. If the relevant pattern is found to be present, the pattern recognition process is initiated.

Abstract: A method for analyzing fingerprint images includes picking up a sequence of images at very short time intervals, while a finger is being placed onto an electronic fingerprint sensor. A criterion for recognizing a live finger is extracted from variations in the images. The images are defined as a pixel raster having different gray values, with the aid of which the pixels are assigned binary values of zero or one. Significant changes in the values are detected and compared, with the aid of distinctive numbers or the like, to known typical changes that occur regularly in a particular image class.