Customization of an electronic circuit
A method and a system of customization and authentication of an electronic circuit for an application implementing an asymmetrical algorithm and using a certification authority, including use of an authentication channel of another application implementing the same asymmetrical algorithm and using another certification authority.
1. A method for customizing, in an electronic circuit containing a first application using an asymmetrical authentication algorithm and a first certification authority, at least a second application using an asymmetrical authentication algorithm and a second certification authority different from the first one, said method comprising:
generating, by the electronic circuit in response to a request by a terminal, a pair of public and private keys intended for the second application;
transmitting, by the electronic circuit to the terminal in response to a request by the terminal, a signed public key including the public key of the second application signed using a private key of the first application; and
transmitting to the second certification authority, using an authentication mechanism of the first application, the signed public key to obtain a certificate of this public key.
2. The customization method of claim 1 , wherein said circuit has a pair of public and private keys dedicated to the first application, said method comprising:
generating a digital signature of the public key of the second application using the private key of the first application;
transmitting the public key of the second application and said signature to the second certification authority; and
recording, in the circuit, a certificate provided by the second certification authority.
3. A system of customization of electronic circuits for several applications using different certification authorities to obtain certificates of public keys of asymmetrical authentication algorithms, configured to implement the method of claim 1 .
4. A method for customizing a card including an electronic circuit that executes a first application, using an asymmetrical authentication algorithm and a first certification authority, comprising:
the electronic circuit generating, in response to a request by a terminal, a public key and a private key for a second application to be executed;
the electronic circuit transmitting to the terminal, in response to a request by the terminal, a signed public key of the second application, using an authentication mechanism of the first application;
the electronic circuit receiving from a second certification authority a certificate of the public key of the second application; and
the electronic circuit storing the certificate to customize the card for use with the second application.
5. A method as defined in claim 4 , wherein the electronic circuit has a public key and a private key for the first application, the method comprising:
generating a digital signature of the public key of the second application, using the private key of the first application; and
transmitting the public key of the second application and the digital signature to the second certification authority.
6. A method as defined in claim 4 , wherein transmitting further comprises transmitting identification data including a public key index associated with the first certification authority, a first certificate including a public key of the issuer of the card, and a second certificate containing a public key of the card.
7. A card including an electronic circuit that executes a first application, using an asymmetrical authentication algorithm and a first certification authority, comprising:
a memory element; and
a processor configured to:
generate, in response to a request by a terminal, a public key and a private key for a second application to be executed;
transmit to the terminal in response to a request by the terminal, a signed public key of the second application, using an authentication mechanism of the first application;
obtain from a second certification authority a certificate of the public key of the second application; and
store the certificate in the memory element to customize the card for use with the second application.
8. A card as defined in claim 7 , wherein the processor is further configured to generate a digital signature of the public key of the second application, using the private key of the first application, and to transmit the public key of the second application and the digital signature to the second certification authority.
9. A card as defined in claim 7 , wherein the processor is further configured to transmit identification data including a public key index associated with the first certification authority, a first certificate including a public key associated with an issuer of the card, and a second certificate including a public key of the card.