Method of controlling an electronic device and corresponding electronic device
Method of controlling an electronic device and corresponding electronic device. The method may be performed by an electronic device ( 20 ) and includes steps such as receiving an instruction command (CMD) that includes identifiers (ID) of instructions (IS) that are prerecorded in a memory ( 30 ) of the electronic device; using the identifiers to form a code (RC) defining a set of instructions, where the set of instructions combines prerecorded instructions (IS) to execute a security check; and storing the code (RC) in a memory ( 28 ) of the electronic device in order to configure the electronic device ( 20 ) to execute the security check.
1. A controlling method performed by an electronic device, said method comprising:
storing, in a first ROM-type memory of the electronic device, a plurality of security check instructions configured to cause performance of one or more security checks of the electronic device, the plurality of security check instructions being in a deactivated state and enabling personalization of the electronic device;
receiving an instruction command including identifiers identifying two or more security check instructions of the plurality of security check instructions;
concatenating the received identifiers to create a code defining a set of instructions, wherein said set of instructions comprises the two or more security check instructions; and
storing the code in a second memory of the electronic device accessed by a program executed by the electronic device, wherein the program performs a check of a transaction by executing the set of instructions defined by the code.
2. The method according to claim 1 , wherein the instruction command is a script command received during a Europay Mastercard Visa (EMV) transaction.
3. The method according to claim 1 , wherein executing the set of instructions is performed in response to a GENERATE AC command previously received from an external terminal in compliance with the EMV protocol.
4. The method according to claim 1 , wherein executing the set of instructions comprises:
determining a first result delivered by performing the check; and
executing at least one security check instruction defined in said set of instructions, the at least one security check instruction being a function of the first result of the check.
5. The method according to claim 4 , wherein said at least one security instruction comprises at least one of the following:
sending a notification including data representative of the first result of the check;
storing history data in the memory of the electronic device, the history data being representative of the first result of the check; or
generating a security decision specifying how the transaction is to be processed.
6. The method according to claim 4 , wherein the set of instructions comprise:
at least two first prerecorded security check instructions for executing a plurality of security check operations as the check;
at least one second prerecorded security check instruction comprising a link operator defining a combining logic link between said plurality of security check instructions; and
at least one third prerecorded security check instruction for executing a security operation as a function of the result of said plurality of security check instructions in compliance with said combining logic link.
7. The method according to claim 6 , wherein the first result of the check is a boolean.
8. The method according to claim 6 , wherein the link operator comprises at least one of the following:
an “AND” operator;
an “OR” operator;
an equality operator;
an inequality operator; or
a comparison operator.
9. The method according to claim 4 , comprising:
performing a preliminary security check before the check, the preliminary security check delivering a preliminary result;
determining a final result on the basis of the preliminary result from the preliminary security check and of the first result from the check; and
processing the transaction in accordance with the final result.
10. The method according to claim 9 , wherein the preliminary result corresponds to a first degree of security and the final result corresponds to a second degree of security, said second degree of security being at least as high as the first degree of security.
11. The controlling method of claim 1 , wherein the code is of a BER-TLV structure according to EMV standard.
12. The controlling method of claim 1 , wherein the executing the set of instructions comprises interpreting the code stored in the second memory and accessing the prerecorded security check instructions in the first ROM-type memory.
13. A non-transitory computer-readable data medium that includes instructions that, when executed by a processor of an electronic device, perform a method comprising:
storing, in a first ROM-type memory of the electronic device, a plurality of security check instructions configured to cause performance of one or more security checks of the electronic device, the plurality of security check instructions being in a deactivated state and enabling personalization of the electronic device;
receiving an instruction command including identifiers identifying two or more security check instructions of the plurality of security check instructions;
concatenating the identifiers to create a code defining a set of instructions, wherein said set of instructions comprises the two or more security check instructions;
storing the code in a second memory of the electronic device accessed by a program executed by the electronic device, wherein the program checks a transaction by executing the set of instructions defined by the code.
14. An electronic device comprising:
a processor;
a first ROM-type memory;
a second memory;
a non-transitory computer-readable medium storing instructions that when executed by the processor cause the processor to perform operations comprising:
storing, in a first ROM-type memory of the electronic device, a plurality of security check instructions configured to cause performance of one or more security checks of the electronic device, the plurality of security check instructions being in a deactivated state and enabling personalization of the electronic device;
receiving an instruction command including identifiers identifying two or more of the security check instructions;
concatenating the received identifiers to create a code defining a set of instructions, wherein said set of instructions comprises the two or more security check instructions; and
storing the code in a second memory of the electronic device accessed by a program executed by the electronic device, wherein the program checks a transaction by executing the set of instructions defined by the code.