IP Library Granted Patent US 9,076,280
Granted Patent B2
US 9,076,280 · App. 13/577,148 · Granted Jul 7, 2015

Completion of portable data carriers

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,076,280
App. No.
13/577,148
Granted
Jul 7, 2015
Kind
B2
Abstract

A method for completing at least one portable data carrier connected to a completion device, wherein a completion data set that is present on the completion device is introduced into the data carrier. A security module is connected to the completion device and different authorization data sets are provided on the security module. The security module includes a management application for managing the different authorization data sets. Each of the authorization data sets exactly specifies one completion, and each of the authorization data sets is exactly associated with one completion data set. The managing application on the security module monitors the completion of the at least one data carrier according to the specification in an authorization data set selected from the different authorization data sets.

Claims (41)

1. A method comprising:

providing on a security module connected with a completion apparatus different authorization data sets as well as a management application that manages the different authorization data sets, wherein each of the authorization data sets respectively specifies exactly one completion and is respectively associated with exactly one completion data set;

connecting at least one portable data carrier to the completion apparatus, each data carrier being a chip card; and

completing the at least one portable data carrier by incorporating a completion data set present on the completion apparatus into the at least one data carrier,

wherein the management application monitors the completion of the at least one data carrier according to a specification in a selected authorization data set, and

wherein the selected authorization data set specifies at least one of:

the maximum number of data carriers to be completed with the completion data set associated with the authorization data set, and

the time period within which this completion can take place, and

wherein the completion is carried out only when the specified maximum number has not yet been reached or the specified time period is given.

2. The method according to claim 1 , wherein the selected authorization data set uniquely specifies the completion data set to be incorporated as well as completion commands incorporating the completion data set into the at least one data carrier by uniquely associating with the selected authorization data set a completion script made available on the completion apparatus, which completion script predetermines the completion data set as well as the completion commands.

3. The method according to claim 1 , wherein the selected authorization data set specifies the security module and is made available on the security module only when the security module matches the specification in the authorization data set.

4. The method according to claim 1 , wherein the selected authorization data set specifies the at least one data carrier and the completion is only carried out when the at least one data carrier matches the specification in the authorization data set.

5. The method according to claim 1 , wherein an auxiliary application executable on the completion apparatus, further comprising the steps:

transmitting an authorization data script comprising the selected authorization data set as well as the completion script to the completion apparatus;

transmitting the authorization data set from the completion apparatus to the security module by executing the authorization data script by the auxiliary application; and

incorporating the completion data set from the completion apparatus into the at least one data carrier by executing the completion script by the auxiliary application.

6. The method according to claim 5 , wherein the completion script and the selected authorization data set are encrypted prior to the transmission to the completion apparatus.

7. The method according to claim 6 , wherein the completion script is decrypted, prior to the carrying out by the auxiliary application, by the auxiliary application.

8. The method according to claim 6 , wherein the selected authorization data set is decrypted, after the transmission to the security module, by the management application.

9. The method according to claim 5 , wherein the auxiliary application authenticates itself against the security module and the at least one data carrier and wherein a data communication from the completion apparatus to the security module or to the at least one data carrier is carried out in an encrypted manner.

10. The method according to claim 1 , wherein the management application predetermines a configuration of the completion of the data carrier based on configuration predeterminations in the selected authorization data set.

11. The method according to claim 1 , wherein the security module is personalized prior to the making available.

12. The method according to claim 1 , wherein the at least one data carrier is individualized prior to the incorporation of the completion data set.

13. A hardware device comprising:

a security module configured to monitor a method for completing at least one portable data carrier, the method incorporating a completion data set present on a completion apparatus connectable with the security module into the at least one data carrier, each data carrier comprising a chip card operating system, the security module being configured to take up different authorization data sets,

wherein each of the authorization data sets specifies exactly one completion and is respectively associated with exactly one completion data set, and

the security module comprises a management application configured to manage different authorization data sets and to monitor the completion of the at least one data carrier according to a specification in a selected authorization data set, and

wherein the selected authorization data set specifies at least one of:

the maximum number of data carriers to be completed with the completion data set associated with the authorization data set, and

the time period within which this completion can take place, and

wherein the completion is carried out only when the specified maximum number has not yet been reached or the specified time period is given.

14. A system comprising:

a security module configured to take up different authorization data sets, and comprising a management application configured to manage the different authorization data sets, wherein each of the authorization data sets is associated with exactly one completion script and specifies exactly one completion;

a completion apparatus having an auxiliary application that incorporates the different authorization data sets into the security module, the completion apparatus also having different completion scripts, each comprising a completion data set and completion commands;

at least one portable data carrier according to ISO 7816 removably connectable with the completion apparatus;

wherein the auxiliary application incorporates a corresponding completion data set into the at least one data carrier when the at least one data carrier is connected to the completion apparatus by executing a selected completion script, thereby completing the operating system of the at least one portable data carrier;

wherein the management application monitors the completion according to a specification in the selected authorization data set associated with the completion script, and

wherein the selected authorization data set specifies at least one of:

the maximum number of data carriers to be completed with the completion data set associated with the authorization data set, and

the time period within which this completion can take place, and

wherein the completion is carried out only when the specified maximum number has not yet been reached or the specified time period is given.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 30, 2017
From: GIESECKE & DEVRIENT GMBH
To: GIESECKE+DEVRIENT MOBILE SECURITY GMBH
Reel/Frame 044559/0969 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 3, 2012
From: HOLTMANN, LUDGER; TREGER, JORN; JAUERNIG, MATTHIAS; STAMER, SARA
To: GIESECKE & DEVRIENT GMBH
Reel/Frame 028722/0262 →