Patent ID: 8205088

Claim:
A method for the authenticated transmission of a data set and/or of a program from a host having a host processor to a hardware security module i (HSM i ) comprising the following steps: a) at a system manufacturer's site, for i HSM i each comprising an HSM processor, a code generator that generates a variable code Cw, and an HSM memory connected with the HSM processor, a first HSM-individual fixed code Fc 1 i , a second HSM-individual fixed code Fc 2 i , and a third HSM-individual fixed code Fc 3 i are determined, wherein the second fixed code Fc 2 i is calculated from the first fixed code Fc 2 i according to a given algorithm, wherein the third fixed code Fc 3 i is calculated from the second fixed code Fc 2 i and data of the data set and/or of the program, and wherein all the fixed codes Fc 1 i , Fc 2 i and Fc 3 i optionally are different from each other, b) at the system manufacturer's site, the first fixed code Fc 1 i and the second fixed code Fc 2 i or the given algorithm are stored in the HSM memory; c) at least one of the HSM i is transported to a production site, and the first fixed code Fc 1 i , and at least one of the data set and the program, and the third fixed code Fc 3 i are transmitted to the production site and stored at the host in a host memory, as host-stored data; d) at the production site, the HSM processor and the host processor are connected with each other by at least one interface; e) the host processor transmits to the HSM i an initialization data sequence, by means of which a response data sequence; f) after reception of the response data sequence, the host processor couples the data set and/or the program to be transmitted with the third fixed code Fc 3 i assigned to the HSM i and stored to a transmission data set and transmits the transmission data set to the HSM processor; g1) the HSM processor calculates, by means of the stored given algorithm, the second fixed code Fc 2 i or reads it out from the HSM memory and compares it with a second fixed code Fc 2 i ′ calculated from the transmission data set, or g2) the HSM processor calculates by means of the stored given algorithm the second fixed code Fc 2 i and therefrom in connection with the transmission data set or the transmitted data set and/or program the third fixed code Fc 3 i and compares it with the third fixed code Fc 3 i ′ comprised in the transmission data set; and h) upon agreement of the second fixed code Fc 2 i with the second fixed code Fc 2 i ′ or of the third fixed code Fc 3 i with the third fixed code Fc 3 i ′, the authorization and approval of the data set and/or of the program for the activation in the HSM i are effected.