Abstract: Method for detecting possible frauds in payment transactions between at least two partners (1, 2), the payment transaction data and/or payment authorization data being transmitted over at least one mobile radio network, at least one multivalued parameter used for detecting a possible fraud attempt being determined in said mobile radio network, said payment transactions being performed over at least one payment service provider (4), at least a second multivalued parameter used for detecting a possible fraud attempt being determined by said payment service provider (4), and certain combinations of said first and second parameters are sought in said fraud detection module in order to detect fraud attempts.

Abstract: Proposed are a method and a system for management of resources of portable resource modules, each connected to a communication terminal, which modules comprise electronic memory units and are designed in particular as chipcards. A first resource management instruction comprising a module identification is transmitted to a resource management centre. A second resource management instruction is transmitted from the resource management centre via a communication network to the resource module identified through the module identification. In the particular resource module, resources are made ready or released by a resource control mechanism corresponding to the received second resource management instruction. A resource management confirmation is transmitted by the particular resource module via the communication network to the resource management centre, and in the resource management centre information about the resources made ready or released is stored assigned to the module identification.

Abstract: Proposed are a method and a system for management of resources of portable resource modules (1, 1?), each connected to a communication terminal (2, 2?, 2?), which modules comprise electronic memory units (11) and are designed in particular as chipcards. A first resource management instruction comprising a module identification is transmitted to a resource management centre (4). A second resource management instruction is transmitted from the resource management centre (4) via a communication network (3) to the resource module (1) identified through the module identification. In the particular resource module (1), resources are made ready or released by a resource control mechanism (111) corresponding to the received second resource management instruction.

Abstract: The aim of this invention is to propose a method to manage the security of the set composed by an equipment, a security module and applications in order to limit the risk related to the fact that a security module could be fraudulently used by applications executed on a type of equipment and/or of software version that does not entirely fulfill the established security criteria.

Abstract: A method is disclosed for the authentication of applications both at the time of their downloading, as well as at the time of their execution. At least one application works in an equipment connected by a network to a control server, the equipment being locally connected to a security module. The application is loaded and/or executed via an application execution environment of the equipment and uses resources stored in the security module.

Abstract: Method and system for ordering a digital certificate by a user and for delivering the certificate to a certificate support device of the user. A placed order, in which personal data have been received from the user and the user has been authenticated by a registration unit, is stored in a responsible certification unit. A secret certificate PIN assigned to the order, which is otherwise known only to the certification unit, is transmitted to the user, and a certificate or a reference to a certificate is transmitted for storing to the certificate support device identified by a certificate support identification, if the certificate PIN and indications making it possible to determine the order are transmitted to the certification unit.

Abstract: A method for adapting the security settings of a communication station (12) depending on a security relevant event is disclosed, wherein the communication station (12) comprises a mobile terminal (16) with an identification module (18). In a first step, the security relevant event occurring in said communication station and/or said mobile terminal (16) is identified in an event handler (26, 261, 262, 27) and stored in an event registry (28). In a second step, a security registry (30) in the identification module (18) is updated according to the identified event. In a third step, the security level of the communication station (12) and/or the mobile terminal (16) is adapted according to the security registry (30) of the identification module (18). The invention also relates to a communication station (12) and to an identification module (18).

Abstract: Method for blocking respectively unblocking a money account bound to a SIM card (10). The money account is designed for paying services of several providers (2). The money account is blocked respectively unblocked depending on the dynamically determined location of the mobile user.

Abstract: The invention relates to an authorization verification method and devices suited therefor, which play back authorization data via a user interface (11) of an electronic playback device (1). During the playback of authorization data via the user interface (11) of a first playback device (1), the playback attributes are modified. The playback of authorization data via the user interface (11) of the first playback device (1) is compared with the playback of reference data via a user interface (21) of a second electronic playback device (2). Authorization is granted in the event the playback of authorization data via the user interface (11) of the first playback device (1) matches the playback of reference data via the user interface (21) of the second playback device (2), and modifications of the playback attributes are, in essence, time-synchronized.

Abstract: The aim of this invention is to provide a method to allocate resources on a security module of a portable apparatus such as a telephone, taking into account the security imperatives of the different intervening parties, such as the operator and application suppliers.

Abstract: For a communication terminal (10), proposed is a security module (1) configured to authenticate a telecommunications network (2). The security module (1) comprises a locking module (12), for disabling usability of an application module (11), an unlocking module (13), for re-enabling usability of the application module (11), and a control module (14) for activating the unlocking module (13), depending on received data that is assignable in an authenticated way to a specific telecommunications network (2). The control module (14) is configured to activate the locking module (12) depending on the selection and usage of the application module (11). The control module (14) is configured to activate the unlocking module (12) depending on the reception of authorization messages, that can be authenticated, or authentication data of the telecommunications network (2).

Abstract: Method for verifying in a mobile device (13) the authenticity of electronic partner certificates issued by a certification authority. Said mobile device (13) has an identification module (16) (SIM or WIM). Said issued certificates are verified with the certificate of the certification authority. A reference to said electronic certificate of the certification authority is stored in a second module (14) that is connected with said mobile device (13). Advantages: the second module can be distributed independently from the first module and from the mobile device.

Abstract: Method for blocking respectively unblocking a money account bound to a SIM card (10). The money account is designed for paying services of several providers (2). The money account is blocked respectively unblocked depending on the dynamically determined location of the mobile user.

Abstract: Method for detecting possible frauds in payment transactions between at least two partners (1, 2), the payment transaction data and/or payment authorization data being transmitted over at least one mobile radio network, at least one multivalued parameter used for detecting a possible fraud attempt being determined in said mobile radio network, said payment transactions being performed over at least one payment service provider (4), at least a second multivalued parameter used for detecting a possible fraud attempt being determined by said payment service provider (4), and certain combinations of said first and second parameters are sought in said fraud detection module in order to detect fraud attempts.

Abstract: Proposed are a method and a system for management of resources of portable resource modules (1, 1?), each connected to a communication terminal (2, 2?, 2?), which modules comprise electronic memory units (11) and are designed in particular as chipcards. A first resource management instruction comprising a module identification is transmitted to a resource management centre (4). A second resource management instruction is transmitted from the resource management centre (4) via a communication network (3) to the resource module (1) identified through the module identification. In the particular resource module (1), resources are made ready or released by a resource control mechanism (111) corresponding to the received second resource management instruction.

Abstract: Method for updating time-limited parameters (50), in particular lists of blocked user chip-cards, in offline chip-card terminals (5), in which said parameters are updated with the user chip-cards (4) used in said offline chip-card terminal (5). Advantage: the offline terminals do not have to be inspected manually.

Abstract: Method for updating time-limited parameters (50), in particular lists of blocked user chip-cards, in offline chip-card terminals (5), in which said parameters are updated with the user chip-cards (4) used in said offline chip-card terminal (5).

Abstract: Method for verifying in a mobile device (13) the authenticity of electronic partner certificates issued by a certification authority. Said mobile device (13) has an identification module (16) (SIM or WIM). Said issued certificates are verified with the certificate of the certification authority.