Writing application data to a secure element

摘要

Systems, methods, computer programs, and devices are disclosed herein for partitioning the namespace of a secure element in contactless smart card devices and for writing application data in the secure element using requests from a software application outside the secure element. The secure element is a component of a contactless smart card incorporated into a contactless smart card device. A control software application resident in the same or a different secure element provides access types and access bits, for each access memory block of the secure element namespace, thereby portioning the namespace into different access types. Further, a software application outside the secure element manages the control software application by passing commands using a secure channel to the secure element, thereby enabling an end-user of the contactless smart card device or a remote computer to control the partitioning and use of software applications within the secure element.

主权项

1. A computer-implemented method for writing application data to secure elements of user computing devices, comprising:
assigning, by a control software application in a secure element namespace of a secure element of a user computing device, one or more memory blocks of the secure element namespace to a first software application from a software application provider; transmitting, from the user computing device to a remote trusted service manager (TSM) computer, a request for application data for the first software application assigned to the one or more memory blocks of the secure element and an access key for a write access type, the application data to be written to the secure element namespace; receiving, in a secure memory of the user computing device, from the remote TSM computer, the requested application data and the requested access key; and writing, by the control software application in the secure element, the requested application data from the secure memory to the one or more data memory blocks of the secure element namespace assigned to the first software application, wherein the one or more data memory blocks of the secure element namespace are accessed by the control software application using the requested access key.