Secure software customization for smartcard
The customizing of a smartcard chip with a complete software begins with masking a smartcard chip by storing a first part of the software. The first part of the software, when executed, is enabled to input unlocking data at an input port of the smartcard chip, to use the unlocking data to decrypt encrypted data stored in the smartcard, and to store the decrypted data in the smartcard memory. Masking of the smartcard chip further comprises storing encrypted customization software. The customization software, when executed, is enabled to input data and to store the input data in the smartcard memory. After decrypting and executing the customization software; the second part of the software is input and stored in the smartcard, enabling the whole software on the smartcard.
1. A smartcard chip for use in the production of a customized smartcard, the smartcard chip comprising:
an input device configured to obtain input from a client comprising an unlocking key;
a first memory having a masked software portion permanently stored therein, wherein the masked software, when executed, is configured to accept a command comprising the unlocking key;
a second memory having customization software stored therein, wherein the customization software is encrypted with the unlocking key; and
a processor configured to:
execute the masked software,
accept the unlocking key via the input device, and
decrypt and execute the customization software using the inputted unlocking key,
wherein the customization software, when executed, allows the client to input at least one portion of software that is added to the masked software portion to obtain a completed software,
wherein the completed software customizes the smartcard for the client.
2. The smartcard chip according to claim 1 , in which the first memory is a Read Only Memory device and the second memory a rewritable memory device.
3. A method for customizing a smartcard chip with a software during production of a customized smartcard comprising:
masking the smartcard chip by storing a first masked software portion in a first memory and an encrypted customization software in a second memory,
wherein the first masked software portion, when executed, is configured to accept a command comprising an unlocking key;
executing the first part of the masked software to obtain the unlocking key from a client;
decrypting and executing the encrypted customization software using the unlocking key, wherein the customization software, when executed, allows the client to input a second portion of software that is added to the masked software portion to obtain a completed software, and
wherein the completed software customizes the smartcard for the client.
4. The method for customizing according to claim 3 , further comprising:
storing the decrypted customization software in the smartcard memory; and
storing the second portion of the software into the first memory.
5. The method for customizing according to claim 4 , further comprising:
erasing the encrypted and the decrypted customization software from the second memory.
6. The method for customizing according to claim 4 , further comprising:
executing the completed software.
7. The method for customizing according to claim 5 , further comprising: executing the completed software.
8. The method for customizing according to claim 4 , further comprising:
inputting at the input port software amendments to the first masked software portion;
storing the input software amendments in the second memory.
9. The method for customizing according to claim 3 , further comprising:
mounting the smartcard chip on a smartcard support.
10. A smartcard comprising a smartcard chip according to claim 1 .
11. A smartcard chip for use in the production of a customized smartcard, the smartcard chip comprising:
an input device configured to obtain input from a client comprising an unlocking key;
a first memory having a first masked software permanently stored therein, wherein the first masked software, when executed, is configured to accept a command comprising the unlocking key;
a second memory having an encrypted customization software stored therein, wherein the customization software is encrypted with the unlocking key; and
a processor configured to:
execute the masked portion of the software,
accept the unlocking key via the input device, and
decrypt and execute the encrypted customization software,
wherein the first software comprises only part of the software of the customized smartcard, and the customization software is adapted to, during execution, accept code or data via the input means, and write the code or data into the second memory, the code or data being complementary to the first masked software, to obtain a completed software, wherein the completed software customizes the smartcard for the client.
12. The smartcard chip according to claim 11 , wherein the first masked software without the unlocking key only accepts service commands, and with the unlocking key only accepts a command to decrypt the customization software.