METHOD OF DISPATCHING AN ITEM OF SECURITY INFORMATION AND ELECTRONIC DEVICE ABLE TO IMPLEMENT SUCH A METHOD
Methods and devices for sending security information are disclosed. The methods may be performed by an electronic device and may include several steps or operations, such as: detecting an event encountered by the electronic device; storing security information that is representative of the event in a secure memory of the device; after the storing, starting a transaction with an external terminal; and sending the security information to the external terminal in a transaction message during the transaction.
1 . A method for sending security information, wherein the method is performed by an electronic device, the method comprising:
detecting an event encountered by the electronic device;
storing security information representative of said event in a secure memory of the electronic device;
after said storing, starting a transaction with an external terminal; and
sending the security information to the external terminal in a transaction message during said transaction.
2 . The method according to claim 1 , wherein the event encountered by the electronic device comprises at least one of the following:
an anomaly encountered by the electronic device; and
an attack against the electronic device.
3 . The method according to claim 1 , wherein the event is detected by the electronic device on the basis of a current value of a counter.
4 . The method according to claim 3 , wherein the event is an anomaly or an attack detected by the electronic device by comparing the current value of the counter with a threshold value.
5 . The method according to claim 3 , wherein the counter represents at least one of the following:
a number of consecutive failed attempts at inputting a secret code; and
a total number of incomplete transactions performed by the electronic device.
6 . The method according to claim 3 , wherein the security information comprises the current value of said counter as stored in the secure memory.
7 . The method according to claim 1 , wherein, during said detecting, the electronic device detects as the event a time interval between:
said electronic device sending a response to a command from the external terminal; and
receiving a subsequent command from the external terminal.
8 . The method according to claim 7 , wherein said electronic device is configured to decide on the basis of a comparison between said time interval and a predetermined threshold value whether data representative of said time interval should be stored during the storing.
9 . The method according to claim 1 , wherein said event satisfies at least one of the following conditions:
the event causes the electronic device to be reinitialized; and
the event comprises the electronic device executing an operation that affects a confidential code stored in the secure memory of the electronic device.
10 . The method according to claim 1 , wherein the detecting comprises:
detecting an abnormal behavior of the electronic device or an attack against said electronic device if at least one condition pre-recorded in the electronic device is satisfied.
11 . The method according to claim 1 , wherein the transaction and the transaction message including the security information comply with the Europay Mastercard Visa (EMV) protocol.
12 . The method according to claim 11 , further comprising:
sending referencing data to the external terminal in an application file locator (AFL) message, enabling the external terminal to read the security information in the secure memory of the electronic device;
wherein the security information is sent to the external terminal in response to a read command received from the external after sending the AFL message.
12 . (canceled)
12 . (canceled)
13 . (canceled)
14 . A non-transitory data medium readable by a processor and storing a computer program including instructions that, when executed by the processor, perform operations comprising:
detecting an event encountered by an electronic device;
storing security information representative of the event in a secure memory of the electronic device;
after the storing, starting a transaction with an external terminal; and
sending the security information to the external terminal in a transaction message during the transaction.
15 . A processing method performed by a terminal that is external to an electronic device, said method comprising:
starting a transaction with the electronic device;
during the transaction, receiving a transaction message containing security information from the electronic device, said security information being representative of an event that has been detected by the electronic device; and
processing the security information.
16 . The processing method according to claim 15 , wherein the processing comprises at least one of the following:
performing risk analysis associated with said transaction on the basis of the security information; and
sending the security information to a server that is remote from the external terminal.
17 . An electronic device comprising:
a detector module that detects an event encountered by the electronic device;
an obtaining module that obtains security information representative of said event;
a storage module that stores the security information in a secure memory of the electronic device;
an execution module that, after the security information has been stored, starts a transaction with an external terminal; and
a sender module that sends the security information to the external terminal in a transaction message during said transaction.
18 . The electronic device according to claim 17 , wherein the execution module carries through the transaction to its end once the security information has been sent to the external terminal.
19 . The electronic device according to claim 17 , wherein the electronic device is a smart card.
20 . The electronic device according to claim 17 , wherein the detector module comprises at least one of the following:
a first processor module that detects said event on the basis of a command received from an external entity by an interface module of the electronic device, said interface module serving to set up communication between the electronic device and said external entity;
a sensor configured to detect an attack made against the electronic device; and
a second processor module that detects said event on the basis of the detected attack.
21 . A terminal external to an electronic device, said terminal comprising:
an execution module that starts a transaction with the electronic device;
a receiver module that, during the transaction, receives a transaction message from the electronic device, the transaction message containing security information representative of an event detected by the electronic device; and
a processor module that processes the security information.
22 . The terminal according to claim 21 , wherein said transaction and said transaction message comply with the Europay Mastercard Visa (EMV protocol, and the terminal comprises:
an extractor module that, during the transaction extracts referencing data from an Answer to Reset (ATR) message received by the electronic device, which referencing data enables the terminal to read the security information in a secure memory of the electronic device.
23 . The method according to claim 11 , further comprising:
sending referencing data to the external terminal in an Answer to Reset (ATR) message, enabling the external terminal to read the security information in the secure memory of the electronic device.
24 . The method according to claim 11 , wherein the security information is sent to the external terminal as data that is not interpretable by the external terminal and in response to a GENERATE AC message received from the external terminal.