LKGLOBAL Partnerschaftsgesellschaft mbB

A method, as well as a corresponding configuration program (10), a security program dataset (10c), a computer-readable data carrier (11, 12, 13), a hardware security module (4), and a server device (3) are provided, wherein for transforming data objects (D) for configuring secure elements (6), such as eUICCs, of user devices (5) intended to be issued to users and allowing secure accesses involving a trusted entity (T), in particular for accessing telecommunication networks, the method comprising the steps of providing a hardware security module (4) for a server device (3) configured to transform a data input of data elements (F) to a data output of data objects (D) configured to operate the secure elements (6); and providing a sequence key (Φ) configured to allow execution of a transformation sequence (W) in the hardware security module (4), wherein the transformation sequence (W) comprises at least two transformation operations (V) performed on the data elements (F) in the course of generating the data objects (D).

A method, as well as a corresponding configuration program (10), a security program dataset (10c), a computer-readable data carrier (11, 12, 13), a hardware security module (4), and a server device (3) are provided, wherein for transforming data objects (D) for configuring secure elements (6), such as eUICCs, of user devices (5) intended to be issued to users (U) and allowing secure accesses involving a trusted entity (T), in particular for accessing telecommunication networks, the method comprising the steps of providing a hardware security module (4) for a server device (3) configured to transform a data input of data elements (E) to a data output of data objects (D) configured to operate the secure elements (6); and providing a trust chain dataset (U) for managing a data batch (M) of the data elements (E), the data objects (D) and/or transformation operations (V) performed on the data elements (E) in the course of generating the data objects (D).

A method, as well as a corresponding configuration program (10), a security program dataset (10c), a computer-readable data carrier (11, 12, 13), a hardware security module (4), and a server device (4) are provided, wherein providing user profile datasets (P) for configuring secure elements (6), such as eUICCs, of user devices (5) intended to be issued to users (U) and allowing secure accesses involving a trusted entity (T), in particular for accessing telecommunication networks, the method comprising the steps of providing a set of secure elements (6) each having an element identifier (D), configuring a profile identifier database (D) containing potential profile identifiers (I) each identifying a user profile dataset (P) to be associated with a user; and fetching an element identifier (X) of a secure element (6) for configuration, and selecting a profile identifier (I) from the profile identifier database (D) to be associated with the element identifier (X) based on at least one selection instruction taken from the profile identifier database (D).

The invention relates to a method for restricting a use of a token (10). The method comprises connecting a card (10b) with an application stored on a main user device (20, S10) and providing a main token (10a) associated with sensitive card information of the card (10b), wherein the main token (10a) is configured to enable a main user (10) to use a plurality of card functionalities (S20). The method further comprises providing a first additional token (11a) that is associated with the main token (10a) by a first token reference, wherein the first additional token (11a) is configured to restrict the use of the plurality of card functionalities enabled by the main token (10a) to a first subset of the plurality of card functionalities (S30). The invention also relates to a system (100) for restricting a use of a token.

The invention relates to a system (1) for providing itemized card event information (2) to a user (10). The system (1) comprises a server entity (40) that receives a first itemized card event information (2a) which is associated to a first card-based transaction process executed via a first card transaction entity (31) based on a card (20) of the user (10). The server entity (40) receives an address information (3) which is associated to the card (20) of the user (10) and indicates a storage address of the server entity (40). The server entity (40) stores the first itemized card event information (2a) using the storage address and provides the first itemized card event information (2a) to the user (10) of the card (20). The invention also relates to a method for providing itemized card event information (2) to a user.

A method, as well as a corresponding configuration program (10), an application program dataset (A), a computer-readable data carrier (11, 12, 13), a user device (5), and a server device (3) are provided, wherein for configuring a user device (5), in particular a mobile device or an IoT device, comprising a secure element (6), such as an eUICC, for identifying a user (U) with at least one associated user profile dataset (P) to allow participation in mobile telecommunication networks (N), the method comprises the steps providing the at least one user profile dataset (P) to the secure element (6); monitoring the at least one user profile dataset (P) to determine if the at least one user profile dataset (P) is an enabled state (E); and sending a status notification (G) to a server device (3), in particular a security server providing a secure location for handling user profile datasets (P), after determining that the at least one user profile dataset (P) is in the enabled state (E), for allowing the server device (3) to remotely carry out at least one profile operation (Q) with the at least one user profile dataset (P).

The invention relates to a method for re-using a residual material (2) from a card body manufacturing process. The method comprises providing the residual material to a processing unit (110) and processing the residual material (2) to provide a re-usable material (12) based on the residual material (2). The method further comprises providing the re-usable material (12) to an antenna manufacturing unit (130) and applying an antenna element (14) to the re-usable material (12) in order to provide an antenna layer (16). The method further comprises providing the antenna layer (16) to a card body manufacturing unit (150) and manufacturing a multi-layered card body (10) which includes the antenna layer (16). The invention further relates the use of such a method for manufacturing a card-like data carrier.

A card body (2) for a chip card (1) with a chip module (3), a method for manufacturing a chip card (1) with a chip module (3), and a chip card (1), in particular a transaction card, comprising a corresponding card body (2), are provided, wherein the card body (2) comprises a cavity (6) extending down from a top face (4) of the card body (2) and configured for receiving the chip module (3) a support surface (16) provided in the cavity (6) for supporting the chip module (3); at least one contact opening (13) arranged in the support surface (16) for establishing an electrical contact between the chip module (3) and an antenna module (10) at least partly embedded in the card body (2); and a compensation space (14) arranged in the support surface (16) and laterally bordering the at least one contact opening (13) for localising connection material and/or heat when electrically connecting the chip module (3) to the antenna module (10).

Ein Verfahren zum Herstellen einer gebogenen Verbundplatte umfasst: Bereitstellen eines Verbundplattenrohlings (9) mit einer ersten Deckschicht (20), einer zweiten Deckschicht (30) und einer Kernschicht (40); Anordnen eines ersten Druckkörpers (50) auf einer ersten Oberfläche (12) der ersten Deckschicht; Ausüben einer Druckkraft (45) auf den ersten Druckkörper (50), um hierdurch eine Vertiefung (21) in der ersten Oberfläche (12) zu bilden; Aushärten des Verbundplattenrohlings (9), um eine Verbundplatte (10) zu erhalten; Entfernen des ersten Druckkörpers (50); Bilden einer ersten Ausnehmung (55) in der Vertiefung (21) durch Abtragen der ersten Deckschicht (20) und der Kernschicht (40); Überführen der Verbundplatte (10) in einen verformten Zustand; Anordnen eines ersten Kernschichteinsatzes (60) in der ersten Ausnehmung (55) und Verbinden des ersten Kernschichteinsatzes (60) mit der zweiten Deckschicht (30) und der Kernschicht (40); Anordnen eines ersten Deckschichteinsatzes (70) auf dem ersten Kernschichteinsatz (60); Verbinden des ersten Deckschichteinsatzes (70) mit dem ersten Kernschichteinsatz (60) und der ersten Oberfläche (12).

A method, as well as a corresponding configuration program (10), application program dataset (A), a user device (5), and server device (3) are provided, wherein for configuring the user device (5), the method comprises the steps of providing at least one user profile dataset (P) for a user (U) to operate a secure element (6), such as an eUICC, of the user device (5), to access a secured service, such as at least one mobile telecommunication network (N); and assigning a memory quota (M) to the at least one user profile dataset (P) for determining an amount of memory space in a secure memory location (7) of the secure element (6) to be used and/or occupied by the at least one user profile dataset (P).