Method for accessing and transferring data linked to an application installed on a security module associated with a mobile terminal, and associated security module, management server and system

1. A method for transferring data from a first secure memory area to a second secure memory area, the data being linked to an application installed on a security module associated with a mobile terminal, the data being stored in the first secure memory area of the security module, the method comprising steps for:

receiving a message containing a request to access said data of said application and to prevent execution of said application, at least a portion of said message being encrypted with a first management key,

obtaining said request by decrypting the message by way of a second management key associated with the first management key,

reading said application data,

encrypting the data read, utilizing a processor of the security module, with the second management key, and

transmitting the encrypted data or storing the encrypted data in the second secure memory area;

wherein the application is prevented from execution based on the request after transmitting or storing the encrypted data; and

wherein the method is performed by one or more hardware processors.

2. The transfer method as claimed in claim 1 , wherein the second memory area is located in the security module.

3. The transfer method as claimed in claim 2 , wherein the access request comprises an action instruction and the method comprises a step for executing said action after the transmission or storage step.

4. The transfer method as claimed in claim 3 , wherein the action is at least one of a blocking of said application and a deleting of data of said application.

5. The transfer method as claimed in claim 4 , further comprising a step for receiving an instruction to update the application in a third secure memory area and a step for receiving an instruction to transfer said data from the second memory area to the third secure area.

6. The transfer method as claimed in claim 1 , characterized in that the second memory area is located in an other security module.

7. The transfer method as claimed in claim 6 , wherein the access request comprises an action instruction and the method comprises a step for executing the action after the transmission or storage step.

8. A security module associated with a mobile terminal, the module comprising:

a receiver that comprises a hardware processor and associated receiving algorithm that receive a message containing a request to access data linked to an application installed on the security module and to prevent execution of the application, the data being stored in a first secure memory area of the security module, said message being encrypted with a first management key,

an obtaining algorithm that obtains said request by decryption of the message by way of a second management key associated with the first management key,

a reading algorithm that reads said data,

an encrypting algorithm that encrypts the data read with the second management key,

a storing algorithm, that stores the encrypted data in a second memory area able to store the encrypted data, or a transmitter, that transmits the encrypted data; and

a blocking algorithm that prevents the execution of the application based on the request.

9. A non-transitory computer program product comprising instructions for implementing a method for transferring data from a first secure memory area to a second secure memory area, the data being linked to an application installed on a security module associated with a mobile terminal, the data being stored in the first secure memory area of the security module, when the method is loaded and run by a hardware processor, the method comprising steps for:

receiving a message containing a request to access said data of said application and to prevent execution of said application, at least a portion of said message being encrypted with a first management key,

obtaining said request by decrypting the message by way of a second management key associated with the first management key,

reading said application data,

encrypting the data read, utilizing a processor of the security module, with the second management key, and

transmitting the encrypted data or storing the encrypted data in the second secure memory area;

wherein the application is prevented from execution based on the request after transmitting or storing the encrypted data.

10. The non-transitory computer program product of claim 9 , wherein the second memory area is located in the security module.

11. The non-transitory computer program product of claim 9 , characterized in that the second memory area is located in an other security module.

12. The non-transitory computer program product of claim 10 , wherein the access request comprises an action instruction, the method further comprising executing said action after the transmission or storage step.

13. The non-transitory computer program product of claim 9 , wherein the action is at least one of a blocking of said application and a deleting of data of said application.

14. The non-transitory computer program product of claim 13 , the method further comprising receiving an instruction to update the application in a third secure memory area and a step for receiving an instruction to transfer said data from the second memory area to the third secure area.

15. A terminal comprising:

a security module comprising:

a receiver that comprises a hardware processor and associated receiving algorithm that receive a message containing a request to access data linked to an application installed on the security module and to prevent execution of the application, the data being stored in a first secure memory area of the security module, said message being encrypted with a first management key,

an obtaining algorithm that obtains said request by decryption of the message by way of a second management key associated with the first management key,

a reading algorithm that reads said data,

an encrypting algorithm that encrypts the data read with the second management key,

a storing algorithm, that stores the encrypted data in a second memory area able to store the encrypted data, or a transmitter, that transmits the encrypted data; and

a blocking algorithm that prevents the execution of the application based on the request.