Patent ID: 7117364

Claim:
Method for downloading application components from a server via a client to a multifunction, processor-based smart card, wherein the server and the client are interconnected via a distributed system, said method comprising: sending a request from the client to the server for a smart card application component for the processor-based smart card; delivery of a secret key or Session Key by the server to the client, responsive to the request; bundling in the server a sequence of commands to produce a bundled command sequence for downloading of the application component to the smart card; generation of a digital signature in the server using the secret key or Session Key by way of each command within the bundled command sequence to produce a signed, bundled command sequence comprising a bundled sequence of individually signed commands; transmission of the signed, bundled command sequence as a data packet to the client, thereby reducing data transfers between the server and the client; unpacking of the data packet by the client and transmission of individual signed commands of the bundled command sequence in sequence to the smart card; checking of the digital signature of the individual commands on the smart card and execution of the commands on the smart card if the digital signature is correct; wherein the authentication method for generation of the Session Key is selected by: transmission of a request from the server via the client to the smart card to transmit the smart card identification data stored on the smart card; reading of the smart card identification data from the nonvolatile memory of the smart card and transmission of the smart card identification data via the client to the server; identification from the smart card identification data of an authentication method by means of which a Session Key agreed between the server and the smart card can be generated; wherein the Session Key is determined by an authentication method comprising: generation of a first random number and selection of a secret key by the server; transmission of the first random number via the client to the smart card; generation of a second random number by the smart card; creation of a Session Key from the first and second random numbers; encrypting the first and second random numbers and transmitting the first and second encrypted random numbers and the second random number generated by the smart card to the server; and generation of a Session Key by the server and checking of the first and second encrypted random numbers, and the second random number with the aid of the Session Key.