Procede de securisation d'un langage du type a donnees typees, notamment dans un systeme embarque et systeme embarque de mise en oeuvre du procede

Method for making secure a typed data language in particular in an integrated system and integrated system therefor

Abstract

L'invention concerne un procédé et un système embarqué à puce électronique (8) pour l'exécution sécurisée d'une séquence d'instructions d'une application informatique se présentant sous la forme d'objects ou de données typées, notamment écrite en langage 'JAVA'. La mémoire (1) est organisée en une première série de piles élémentaires (2, 3) pour l'enregistrement des instructions. On associe à chaque donnée ou objet typé un ou plusieurs bits dits de typage spécifiant le type. Ces bits sont enregistrés dans une deuxième série de piles élémentaires (4, 5), en relation biunivoque avec les piles (2, 3) de la première série. Avant l'exécution d'instructions de types prédéterminés, il est procédé à une vérification en continu, préalable à l'exécution de ces instructions, de la concordance entre un type indiqué par celles-ci et un type attendu, indiqué par les bits de typage. En cas de non-concordance l'exécution et stoppée.
The invention concerns a method and a microchip (8) integrated system for executing securely a sequence of instructions of a computer application in the form of objects or typed data, in particular written in JAVA language. The storage unit (1) is arranged into a first series of elementary stacks (2, 3) for recording the instructions. The method consists in associating with each data or typed object one or several so-called typing bits specifying the type. Said bits are recorded in a second series of stacks (4, 5) in one-to-one relationship with the stacks (2, 3) of the first series. Before executing the instructions of predetermined types, a continuous verification is carried out, prior to execution of said instructions, of the conformity between a type mentioned in the instructions and an expected type, indicated by the typing bits. In case of non-conformity, the execution is stopped.

Claims

Description

Topics

Download Full PDF Version (Non-Commercial Use)

Patent Citations (1)

    Publication numberPublication dateAssigneeTitle
    EP-0718764-A2June 26, 1996Sun Microsystems, Inc.Appareil et méthode interprétateur de programme en code octet avec prévérification de restrictions de type de données

NO-Patent Citations (5)

    Title
    COHEN, RICHARD: "Defensive Java Virtual Machine", VERSION 0.5 ALPHA RELEASE, 13 May 1997 (1997-05-13), Austin, Texas (USA), pages 1-14 23-38 61-62 93-94 131-133, XP002161893, Retrieved from the Internet [retrieved on 20010302]
    GRIMAUD G ET AL: "FACADE: a typed intermediate language dedicated to smart cards", ESEC/FSE'99. 7TH EUROPEAN SOFTWARE ENGINEERING CONFERENCE. HELD JOINTLY WITH 7TH ACM SIGSOFT SYMPOSIUM ON THE FOUNDATIONS OF SOFTWARE ENGINEERING, TOULOUSE, FRANCE, 6-10 SEPT. 1999, vol. 24, no. 6, Software Engineering Notes, Nov. 1999, ACM, USA, pages 476 - 493, XP002161892, ISSN: 0163-5948
    HEONSHIK SHIN ET AL: "Concurrent garbage collection with associative tag", SECOND INTERNATIONAL CONFERENCE ON COMPUTERS AND APPLICATIONS (CAT. NO.87CH2433-1), BEIJING, CHINA, 23-27 JUNE 1987, 1987, Washington, DC, USA, IEEE Comput. Soc. Press, USA, pages 230 - 236, XP002161891, ISBN: 0-8186-0780-7
    MCGRAW G ET AL: "JAVA SECURITY AND TYPE SAFETY", BYTE,US,MCGRAW-HILL INC. ST PETERBOROUGH, vol. 22, no. 1, 1997, pages 63 - 64, XP000679974, ISSN: 0360-5280
    STEENKISTE P ET AL: "TAGS AND TYPE CHECKING IN LISP: HARDWARE AND SOFTWARE APPROACHES", OPERATING SYSTEMS REVIEW (SIGOPS),US,ACM HEADQUARTER. NEW YORK, vol. 21, no. 4, 1 October 1987 (1987-10-01), pages 50 - 59, XP000001708

Cited By (24)

    Publication numberPublication dateAssigneeTitle
    EP-1881404-A1January 23, 2008GemplusVerfahren zum dynamischen Schutz der Daten während der Ausführung eines Programmcodes in einer Zwischensprache in einem Rechner
    JP-2006508845-AMarch 16, 2006ノールブレムス・システムズ・フォー・コマーシャル・ヴィークルス・エルティーディー車両用電子制御装置
    US-7653602-B2January 26, 2010Visa U.S.A. Inc.Centralized electronic commerce card transactions
    US-7725369-B2May 25, 2010Visa U.S.A. Inc.Method and server for management of electronic receipts
    US-7827077-B2November 02, 2010Visa U.S.A. Inc.Method and apparatus for management of electronic receipts on portable devices
    US-7857215-B2December 28, 2010Visa U.S.A. Inc.Method and system including phone with rewards image
    US-7857216-B2December 28, 2010Visa U.S.A. Inc.Method and system for providing interactive cardholder rewards image replacement
    US-7987120-B2July 26, 2011Visa U.S.A. Inc.Method and portable device for management of electronic receipts
    US-8005763-B2August 23, 2011Visa U.S.A. Inc.Method and system for providing a distributed adaptive rules based dynamic pricing system
    US-8010405-B1August 30, 2011Visa Usa Inc.Multi-application smart card device software solution for smart cardholder reward selection and redemption
    US-8015060-B2September 06, 2011Visa Usa, Inc.Method and system for managing limited use coupon and coupon prioritization
    US-8239261-B2August 07, 2012Liane Redford, Bryan Shimko, James Mazour, Rajkumar ViswanathanMethod and system for managing limited use coupon and coupon prioritization
    US-8244648-B2August 14, 2012Visa U.S.A. Inc.Method and system for providing a distributed adaptive rules based dynamic pricing system
    US-8386343-B2February 26, 2013Visa U.S.A. Inc.Method and user device for management of electronic receipts
    US-8407083-B2March 26, 2013Visa U.S.A., Inc.Method and system for managing reward reversal after posting
    US-8429048-B2April 23, 2013Visa International Service AssociationSystem and method for processing payment transaction receipts
    US-8554610-B1October 08, 2013Visa U.S.A. Inc.Method and system for providing reward status
    US-8626577-B2January 07, 2014Visa U.S.ANetwork centric loyalty system
    US-8646092-B2February 04, 2014Gemalto SaMethod of dynamic protection of data during the execution of a software code in intermediate language in a digital apparatus
    US-8793156-B2July 29, 2014Visa U.S.A. Inc.Method and system for providing reward status
    US-9087426-B2July 21, 2015Visa U.S.A. Inc.Method and administration system for management of electronic receipts
    US-9710811-B2July 18, 2017Visa U.S.A. Inc.Centralized electronic commerce card transactions
    US-9852437-B2December 26, 2017Visa U.S.A. Inc.Opt-in/opt-out in loyalty system
    WO-2008009697-A1January 24, 2008Gemalto SaProcédé de protection dynamique de données pendant l'exécution d'un code logiciel dans un langage intermédiaire dans un appareil numérique