Program access authorization of peripheral devices via a smart card
A method and a system of access control between a main processor and peripherals connected by a communication bus, including assigning, to all or part of the programs to be executed by the main processor, at least one token selectively authorizing access to one or several of said peripherals, said token being provided at least initially by an auxiliary processor exploiting a memory distinct from that of the main processor; and checking, for each request of access of one of said programs to one of said peripherals, the presence of said authorization token for the access to the concerned peripheral.
1. A method of access control between a main processor and peripheral devices connected by a communication bus, comprising:
assigning, to at least one program from a plurality of programs to be executed by the main processor, at least one access authorization selectively authorizing access of the at least one program to at least one peripheral device from said peripheral devices, wherein:
said at least one access authorization is being provided by an auxiliary processor contained in a smart card comprising a memory distinct from a memory of the main processor,
the memory of the smart card contains security rules used to authorize the access of the at least one program to the at least one peripheral, the security rules indicate which program of the plurality of programs has access to which peripheral device from said peripheral devices,
the at least one access authorization is distinct from keys authenticating and/or validating the at least one pro gram, and
the main processor does not modify the security rules and the at least one access authorization; and
checking, for each request for access by the at least one program to the at least one peripheral device, the presence of said at least one access authorization for the access to the at least one peripheral device.
2. The method of claim 1 , wherein said at least one access authorization is provided by said auxiliary processor on each access request to the at least one peripheral device.
3. The method of claim 1 , wherein said at least one access authorization is provided by said auxiliary processor upon installation or new use of a program, to define peripheral devices to which the program will further have access.
4. The method of claim 3 , wherein said auxiliary processor configures a unit for managing the access to the memory of the main processor by provision of said at least one access authorization.
5. The method of claim 1 , wherein at least two of said peripheral devices are formed of an access card to access a mobile telephone network and of an access card to access a wireless local area network, said auxiliary processor authorizing or not authorizing access to one of the networks on each access request completed by the main processor.
6. The method of claim 1 , wherein said auxiliary processor forms one of said peripheral devices.
7. A system for controlling access to peripheral devices communicating with a main processor via a bus, the system comprising:
means for assigning, to at least one program from a plurality of programs to be executed by the main processor, at least one access authorization selectively authorizing access to at least one peripheral device from the peripheral devices, the at least one access authorization being provided by an auxiliary processor contained in a smart card comprising a memory distinct from a memory of the main processor, wherein the memory of the smart card contains security rules that indicate, in a table data structure, which program of the plurality of programs has access to which peripheral device from the peripheral devices, the at least one access authorization is distinct from keys authenticating and/or validating the at least one program, and wherein the main processor does not modify the security rules and the at least one access authorization; and
means for checking, for each request for access by the at least one program to the at least one peripheral device, the presence of said at least one access authorization for the access to the at least one peripheral device.
8. The system of claim 7 , wherein a peripheral device is formed of at least an access interface to a communication network of a local area network type or of a mobile telephone type.
9. An electronic component comprising at least one main processor, comprising means for the processor to behave as the auxiliary processor in implementation of the method of claim 1 .
10. An electronic assembly comprising at least one main processor and peripherals wherein access to the peripherals is desired to be controlled, comprising means for implementing the method of claim 1 .
11. A system for access control between a main processor and peripheral devices connected by a communication bus, the system comprising:
a component for assigning, to at least one program from a plurality of programs to be executed by the main processor, at least one access authorization selectively authorizing access to at least one peripheral device from the peripheral devices, the at least one access authorization being provided by an auxiliary processor contained in a smart card comprising a memory distinct from a memory of the main processor, wherein the memory of the smart card contains security rules that indicate which program of the plurality of programs has access to which peripheral device from the peripheral devices, the at least one access authorization is distinct from keys authenticating and/or validating the at least one program, and wherein the main processor does not modify the security rules and the at least one access authorization; and
a component for checking, for each request for access by the at least one program to the at least one peripheral device, the presence of said at least one access authorization for the access to the at least one peripheral device.
12. The system of claim 11 , wherein the at least one access authorization is provided by the auxiliary processor on a request, by a program, for access to a peripheral device.
13. The system of claim 11 , wherein the at least one access authorization is provided by the auxiliary processor upon installation or new use of a program, to define peripheral devices to which the program has access.
14. The system of claim 11 , wherein the auxiliary processor configures a unit for managing access to the memory of the main processor by provision of the at least one access authorization.
15. The system of claim 11 , wherein at least two of the peripheral devices are formed of an access card to provide access to a mobile telephony network and of an access card to provide access to a wireless local area network, wherein the auxiliary processor authorizes access to one of the networks on each access request completed by the main processor.