Method of managing a secure element
The invention is a method for managing a secure element that comprises an operating system and a software application including an executable part which is tied to the operating system through a plurality of links. The method comprises the following steps: on receipt of an un-map command, recording in a memory area of the secure element a description of said links using an intermediate language, replacing the operating system by a new operating system by keeping said memory area unchanged, on receipt of a re-map command by the secure element, restoring a new set of links between the executable part and the new operating system by using the description.
1. A method for managing a secure element comprising a first operating system and a software application including an executable part, said executable part being tied to said first operating system through a plurality of links, wherein each link of said plurality of links is an access from the executable part to data located in said first operating system wherein said method comprises:
on receipt of an un-map command, recording in a memory area of the secure element a description of said links using an intermediate language,
replacing the first operating system by a second operating system by keeping said memory area unchanged,
on receipt of a re-map command by the secure element, restoring a new set of links between said executable part and said second operating system by updating the executable part using the description.
2. A method according to claim 1 , wherein the description comprises, for each link of said plurality of links, a couple made of an identifier of a calling point in said executable part and its linked called item.
3. A method according to claim 1 , wherein the secure element checks the validity of credentials associated with the un-map command and denies execution of the un-map command in case of unsuccessful checking.
4. A method according to claim 1 , wherein the software application includes at least one object linked to the executable part and wherein on receipt of the un-map command, the executable part is moved to the memory area and the link between said at least one object and said executable part is updated.
5. A method according to claim 1 , wherein the un-map command specifies an identifier of the applications to be un-mapped.
6. A method according to claim 1 , wherein the secure element includes a list comprising an identifier of the applications to be un-mapped and wherein the list is either updated in the secure element each time a new application is installed in the secure element or updated in the secure element by an external entity.
7. A secure element comprising a first operating system and a software application including an executable part, said executable part being tied to said first operating system through a plurality of links, wherein each link of said plurality of links is an access from the executable part to data located in said first operating system and said secure element comprises:
a translating agent configured to record in a memory area of the secure element a description of said links using an intermediate language on receipt of an un-map command,
an admin agent configured to replace the first operating system by a second operating system by keeping said memory area unchanged,
a mapping agent configured to restore a new set of links between said executable part and said second operating system by updating the executable part using the description on receipt of a re-map command.
8. A secure element according to claim 7 , wherein the description comprises, for each links of said plurality of links, a couple made of an identifier of a calling point in said executable part and its linked called item.
9. A secure element according to claim 7 , wherein the secure element includes a list comprising an identifier of the applications to be un-mapped.
10. A secure element according to claim 7 , wherein the secure element includes a black list comprising an identifier of the applications which are not authorized to be un-mapped and wherein the translating agent is adapted to ignore the applications belonging to the black list.