Patent claim: The security module of claim 1 wherein each first security value is a security value associated with a public key infrastructure PKI.

Related passage: Following the creation process of the supplementary security domain of the application provider and the key distribution process are described in conjunction with Figure 3 the following processing includes1.the application provider service terminal reads identification information of the smart card such as ICCID of the smart card and then transmits the identification information of the smart card to the application provider management platform 2.the application provider management platform transmits a supplementary security domain creation request to the card issuer management platform the request message including the application provider ID ASPID the feature information ICCID of the smart card and so on 3.after receiving the supplementary security domain creation request the card issuer management platform checks the supplementary security domain creation request and determining whether the request is allowed specifically the card issuer can determine whether a supplementary security domain is created through the application provider management platform according to service authority of the application provider 4.after confirming that a supplementary security domain can be created by the application provider management platform the card issuer management platform searches information concerning the smart card including ID ISDID of the issuer security domain of the smart card in the database in the interior of the management platform according to ICCID of the smart card5.the card issuer management platform sends SELECT message to the smart card through the application provider management platform to select the issuer security domain of the smart card 6.the card issuer management platform and the issuer security domain of the smart card establishes SCP10 secure channel according to the requirements of Appendix F Secure Channel Protocol 10 of Global Platform Card Specification V2.2 to complete authentication of both sides and negotiation of session key 7.the card issuer management platform sends a supplementary security domain creation message INSTALL for Install to the issuer security domain the issuer security domain creating a supplementary security domain in accordance with the message after the completing of the creation of the supplementary security domain the issuer security domain sends an INSTALL Response to the card issuer management platform 8.after confirming that a supplementary security domain has been created the card issuer management platform informs the supplementary security domain of generating a publicprivate key pair corresponding to Step S202 in Figure 2 9.the supplementary security domain produces a public key and a private key by calling the interface for generating a key in the card and then returns the public key to the card issuer management platform corresponding to Step S202 in Figure 2 10.the card issuer management platform sends One Public Key for Trust Point for External Authentication PK.TPEX.AUT to the issuer security domain of the smart card by PUT KEY message corresponding to Step S202 in Figure 2 11.the issuer security domain of the smart card sends PK.TPEX.AUT of the supplementary security domain to the supplementary security domain the supplementary security domain sets PK.TPEX.AUT and then sending PUT KEY RESPONSE to the card issuer management platform corresponding to Step S202 in Figure 2 12.the card issuer management platform sends the basic information of the created supplementary security domain and the public key of the supplementary security domain to the application provider management platform corresponding to Step S202 in Figure 2 13.the application provider management platform adds in the database information concerning the supplementary security domain 14.the application provider management platform sends SELECT message to the smart card by the service terminal of the application provider management platform to select the created supplementary security domain corresponding to Step S204 in Figure 2 15.the application provider management platform and the supplementary security domainestablishes SCP10 secure channel according to the requirements of Appendix F Secure Channel Protocol 10 of Global Platform Card Specification V2.2 to complete authentication of the application provider management platform performed by the supplementary security domain and negotiation of session key corresponding to Step S204 in Figure 2 16.the application provider management platform informs the supplementary security domain of generating a new public key and a new private key corresponding to Step S206 in Figure 2 17.the supplementary security domain reproduces a public key and a private key of the supplementary security domain by calling the interface for generating a key in the card and then returning the public key to the application provider management platform corresponding to Step S206 in Figure 2 18.the application provider management platform sends the public key and certificate application information of the supplementary security domain to an application provider CA CA issuing the certificate of the supplementary security domain corresponding to Step S206 in Figure 2 19.the application provider management platform sends the supplementary security domain certificate to the supplementary security domain through PUT KEY message corresponding to Step S206 in Figure 2 20.the supplementary security domain decrypting the message uses a session key and installing the supplementary security domain certificate after obtaining it the supplementary security domain sending PUT KEY Response to the application provider management platform.