Abstract: Protection of a data file to be used by a white-box cryptography software application installed in memory of a device to prevent the malevolent use of a digital copy of the data file by a white-box cryptography (WBC) software application installed in memory of another device. The mechanism includes extracting an unique identifier for the device from the environment of the device and modifying data in the data file according to the unique identifier, the available white-box cryptography software application includes a software security layer to retrieve the unique identifier from the environment of the device in which the software application is installed and to use this unique identifier in combination with the stored data file when executing, the result of the execution being correct only in case where the correct unique identifier has been extracted by the executed WBC software application.

Abstract: The present invention relates to a method to protect a data file to be used by a white-box cryptography software application installed in memory of a device to prevent the malevolent use of a digital copy of the data file by a white-box cryptography software application installed in memory of another device, said method comprising the steps of extracting an unique identifier for the device from the environment of the device and modifying data in the data file according to the unique identifier, the available white-box cryptography software application being such that it comprises a software security layer adapted to, when the WBC software application is executed, retrieve the unique identifier from the environment of the device in which it is installed and to use this unique identifier in combination with the stored data file in its execution, the result of the execution being correct only in case where the correct unique identifier has been extracted by the executed WBC software application.

Abstract: The present invention relates to a method and system for securing a validation process of an online payment transaction. During an online transaction on a mobile device, it is requested a contactless tap from a contactless display card (thanks to NFC reader mode in the mobile device) to establish a contactless exchange session. During this contactless exchange session, the display card receives the amount requested for the transaction and the identification of merchant. The user is invited to check amount and merchant identification on the screen of the display card. When the user validates the transaction by for example pressing on a corresponding button then the display card creates an authorization message comprising enciphered financial user information and data on the transaction. With a second tap from the display card, the mobile device receives the authorization message which is transmitted to the display card issuer through the merchant for validation.

Abstract: The invention relates to a portable token equipped with non-volatile memory, the token comprising authentication means to authenticate a holder of the token, authorization means to define the rights of the holder, and payment means to trigger a payment transaction. The authorization means are set to store the rights in non-volatile memory after the authentication means are invoked, and the payment means have the capacity to retrieve the rights from non-volatile memory, and to subject the execution of the payment transaction to the verification of the rights. The invention also relates to a related portable device, to a system comprising a portable token and a portable token, and to a method for carrying out a payment transaction with a portable token.

Abstract: For securing the data areas of a memory in an electronic component, said component is able to modify said data areas. A method includes a single backup memory of data areas including means of reference of the data to be secured, and means of backing up information on said data areas.

Abstract: The invention relates to a method for controlling commands in several application files, whereby an access condition corresponding to said command is associated with each command in each application file, each command in each application file is executed if a user orders the execution thereof and if the access condition corresponding to said command is stored. According to the invention, the access conditions are stored jointly for all application files.

Abstract: The invention concerns a device to secure the data areas of a memory in an electronic component, the said component being able to modify the said data areas.