IP Library Granted Patent US 10,278,077
Granted Patent B2
US 10,278,077 · App. 13/583,157 · Granted Apr 30, 2019

Protection of a security module in a telecommunication device coupled to an NFC circuit

Inventors: Thierry Huque (Ramillies, BE); Olivier Van Nieuwenhuyze (Wezembeek-Oppem, BE)
Assignee: Proton World International N.V.
H04W12/10H04L63/0492H04W12/12H04W4/80
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,278,077
App. No.
13/583,157
Granted
Apr 30, 2019
Kind
B2
Abstract

The invention relates to a method for protecting information contained in a security module of a telecommunication device provided with a near-field communication router, wherein the provision of information from the security module to the near-field communication router is subject to checking a signature of a routing table between ports of said router.

Claims (47)

1. A method, comprising:

protecting data stored in a security module of a telecommunication device having a near field communication (NFC) router, the NFC router having a plurality of individually assignable gates and a routing table, the protecting including the acts of:

in response to receiving a request to assign a communication pipe to one of the individually assignable gates, creating and storing a reference signature for the communication pipe based on at least one of a personal code of an authorized user of the telecommunication device or an identifier of a radio frequency gate of the router;

in response to receiving a request to provide data from the security module to the NFC router, creating a current signature corresponding to the request to provide data;

verifying whether the current signature corresponds to the stored reference signature; and

preventing a provision of the requested data from the security module based on a failure to verify that the current signature corresponds to the stored reference signature.

2. The method of claim 1 , wherein creating and storing the reference signature for the communication pipe is based on the personal code of an authorized user of the telecommunication device.

3. The method of claim 1 , wherein the reference signature is calculated by the security module.

4. The method of claim 1 , wherein the reference signature is calculated by the NFC router.

5. The method of claim 1 , comprising:

verifying at least one of the current signature of the routing table and the reference signature using the security module on each initialization of the NFC router.

6. The method of claim 1 , comprising:

in response to receiving a further request to provide data from the security module to the NFC router, creating a further signature corresponding to the further request to provide data;

verifying whether the further signature corresponds to the stored reference signature; and

providing the requested data from said security module on a gate of said NFC router based on verifying that the further signature corresponds to the stored reference signature.

7. The method of claim 1 , comprising:

receiving the personal code keyed in by the authorized user;

verifying the personal code; and

updating the routing table is depending on the verification of the personal code.

8. A telecommunication device, comprising:

a security module configured to store data;

a near field communication (NFC) router coupled to the security module, the NFC router having a plurality of individually assignable gates, each individually assignable gate being a physical gate; and

a memory configured to store a routing table defining linking assignments of individual ones of the plurality of individually assignable gates of the NFC router, wherein the telecommunication device is configured to:

in response to receiving a request to assign a communication pipe to one of the individually assignable gates, create and store a reference signature for the communication pipe based on at least one of a personal code of an authorized user of the telecommunication device or an identifier of a radio frequency gate of the router;

in response to receiving a request to provide data from the security module to the NFC router, create a current signature corresponding to the request to provide data;

verify whether the current signature corresponds to the stored reference signature; and

prevent a provision of the requested data from the security module based on a failure to verify that the current signature corresponds to the stored reference signature.

9. The telecommunication device of claim 8 , wherein the telecommunication device is configured to create and store the reference signature for the communication pipe based on the personal code of an authorized user of the telecommunication device.

10. The telecommunication device of claim 8 , wherein the security module is further configured to verify whether the current signature corresponds to the stored reference signature by comparing the current signature with the reference signature.

11. The telecommunication device of claim 8 , wherein the telecommunication device is further configured to prevent a modification of the routing table absent verification of the personal code entered by a user.

12. The telecommunication device of claim 8 , wherein the telecommunication device is further configured to calculate the current signature based on an identifier of the communication pipe, an identifier of a first gate, and an identifier of a second gate, the first and second gates of the NFC router being linked by the communication pipe.

13. A telecommunication device comprising:

a near field communication (NFC) router having a routing table associated therewith, the routing table configured to store assignments of individually assignable gates of the NFC router; and

a security module having a memory to store data, the security module configured to prevent transfer of data stored in the security module absent verification of a current signature of the routing table, wherein the verification is a joint operation performed using both the NFC router and the security module, and wherein the device is configured to:

in response to receiving a request to assign a communication pipe to one of the individually assignable gates, create and store a reference signature for the communication pipe based on at least one of a personal code of an authorized user of the telecommunication device or an identifier of a radio frequency gate of the router;

in response to receiving a request to provide data from the security module to the NFC router, create a current signature corresponding to the request to provide data;

verify whether the current signature corresponds to the stored reference signature; and

prevent a provision of the requested data from the security module based on a failure to verify that the current signature corresponds to the stored reference signature.

14. The telecommunication device of claim 13 , wherein the security module includes:

means for calculating the reference signature on each modification of the routing table; and

means for storing the reference signature.

15. The telecommunication device of claim 14 , wherein the security module includes:

means for verifying whether the current signature corresponds to the reference signature.

16. The telecommunication device of claim 13 , further comprising:

means for preventing a modification of the routing table absent verification of the personal code entered by the user.

17. The telecommunication device of claim 13 , further comprising:

means for calculating the current signature based on an identifier of the communication pipe, an identifier of a first gate, and an identifier of a second gate of the NFC router, the first and second gates being linked by the communication pipe.

Assignments (2)
CHANGE OF NAME Recorded Sep 26, 2024
From: PROTON WORLD INTERNATIONAL
To: STMICROELECTRONICS BELGIUM
Reel/Frame 069057/0620 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 16, 2012
From: HUQUE, THIERRY; VAN NIEUWENHUYZE, OLIVIER
To: PROTON WORLD INTERNATIONAL N.V.
Reel/Frame 029311/0186 →
Priority Claims (1)
FR 10 51696 · Mar 9, 2010 · national
Continuity (1)
Related Publication 20130059568A1 · Mar 7, 2013