Abstract: The functionality of a hardware security module is combined with that of a cryptographic accelerator in a single device. A single device comprising a hardware security module configured to generate and securely store at least one cryptographic key is combined with hardware configured to accelerate cryptographic computations associated with a plurality of encryption algorithms. The cryptographic keys generated are managed entirely within the composite HSM cryptographic accelerator. Once generated, cryptographic keys may be stored either within the device or outside the device in an encrypted form. The master key used to encrypt the cryptographic keys remains within the device at all times and is isolated on a separate bus. Clear text versions of the cryptographic keys are not accessible outside of the composite HSM cryptographic accelerator.

Abstract: The embodiments of the present invention teaches a system and method which allows card issuers to securely add applications during the lifetime of the card after the card has already been issued (post issuance). The system and method according to embodiments of the present invention allows the loading of an application and/or objects from an application server via a card acceptance device and its supporting system infrastructure delivery mechanism, onto a card post issuance in a secure and confidential manner.

Abstract: A system and method allow card issuers to securely add applications during the lifetime of the card after the card has already been issued (post issuance). Loading of an application and/or objects from an application server via a card acceptance device (and its supporting system infrastructure delivery mechanism) onto a card post issuance is performed in a secure and confidential manner. A smart card includes a card domain application that manages the card. Any number of security domain applications on the card provide security for loaded applications by managing keys; each application is associated with a security domain. Each of the card domain and security domains has a command interface for off-card communication, and an API for internal card use. The card life cycle includes the states of masked, initialized, load secured and blocked. An application life cycle includes the states of not available, loaded, installed, registered, personalized, activated and blocked. An application can block the card.