IP Library Granted Patent US 9,817,972
Granted Patent B2
US 9,817,972 · App. 15/044,652 · Granted Nov 14, 2017

Electronic assembly comprising a disabling module

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,817,972
App. No.
15/044,652
Granted
Nov 14, 2017
Kind
B2
Abstract

An electronic assembly for an electronic device may include a detection module to detect a security anomaly of a Rich-OS operating system and a disabling module to disable at least one secure function of the electronic device in response to the detection. The disablement nevertheless allows use of the electronic device in fail-soft mode. The electronic assembly may be implemented such that these two modules are dependent on a trusted operating system, and the trusted operating system and the Rich-OS operating system may be stored in a memory of the electronic assembly and executed on the electronic assembly.

Claims (44)

1. An electronic assembly for an electronic device, the electronic assembly comprising:

a processor;

a memory;

a detection module to detect a security anomaly of a Rich-OS operating system, wherein the detection module performs a calculation of a fingerprint of a specific series of octets in at least one level of the Rich-OS operating system and compares the fingerprint with a reference fingerprint;

a disabling module which in response to said detection disables at least one secure function of said electronic device used by applications of the Rich-OS operating system, by performing operations comprising:

sending a disabling instruction to the at least one secure function, and

waiting for an acknowledgement of disablement of the at least one secure function; and

a trusted operating system comprising the detection module and the disabling module, the trusted operating system and the Rich-OS operating system being stored in the memory of the electronic assembly, and being executed on the electronic assembly.

2. The electronic assembly according to claim 1 , wherein the security anomaly is corruption of the Rich-OS operating system.

3. The electronic assembly according to claim 1 , wherein the detection module is capable of receiving a message containing a securing command.

4. The electronic assembly according to claim 1 , wherein the at least one secure function comprises of at least one chosen from a group consisting of:

an application of a secure element, executed by the electronic device; and

a function providing access to at least one sensitive data item of a secure element, the at least one sensitive data item being accessible to the electronic device.

5. The electronic assembly according to claim 1 , wherein the trusted operating system takes steps to ensure the security of said electronic device when the acknowledgement is negative.

6. The electronic assembly according to claim 1 , wherein the detection module is activated in response to verification of the security of the electronic device, triggered by at least one chosen from a group consisting of:

on the initiative of the trusted operating system,

on start-up of the electronic device,

at regular intervals, and

on the initiative of a user of said electronic device.

7. A terminal comprising:

an electronic assembly comprising:

a processor;

a memory;

a detection module to detect a security anomaly of a Rich-OS operating system, wherein the detection module performs a calculation of a fingerprint of a specific series of octets in at least one level of the Rich-OS operating system and compares the fingerprint with a reference fingerprint;

a disabling module which in response to said detection disables at least one secure function of said electronic device used by applications of the Rich-OS operating system, by performing operations comprising:

sending a disabling instruction to the at least one secure function, and

waiting for an acknowledgement of disablement of the at least one secure function; and

a trusted operating system comprising the detection module and the disabling module, the trusted operating system and the Rich-OS operating system being stored in the memory of the electronic assembly, and being executed on the electronic assembly.

8. The terminal according to claim 7 , wherein the terminal is a mobile telephony terminal.

9. A method for securing an electronic device comprising a processor, the method comprising:

detecting, by the processor of the electronic device, a security anomaly of a Rich-OS operating system, wherein the detecting comprises calculating a fingerprint of a specific series of octets in at least one level of the Rich-OS operating system and comparing the fingerprint with a reference fingerprint; and

disabling, by the processor of the electronic device and in response to the detecting, at least one secure function of said electronic device, by performing operations comprising:

sending a disabling instruction to the at least one secure function, and

waiting for an acknowledgement of disablement of the at least one secure function;

wherein the method is implemented using a trusted operating system comprising a module that performs said detecting and a module that performs said disabling, and the trusted operating system and the Rich-OS operating system are executed on the electronic device.

10. A non-transitory computer-readable medium comprising instructions that, when executed by a processor of an electronic assembly, perform a method comprising:

detecting, by the processor of the electronic assembly, a security anomaly of a Rich-OS operating system, wherein the detecting comprises calculating a fingerprint of a specific series of octets in at least one level of the Rich-OS operating system and comparing the fingerprint with a reference fingerprint; and

disabling, by the processor of the electronic assembly and in response to the detecting, at least one secure function of an electronic device, by performing operations comprising:

sending a disabling instruction to the at least one secure function, and

waiting for an acknowledgement of disablement of the at least one secure function;

wherein the detecting and the disabling are implemented using a trusted operating system comprising a module that performs said detecting and a module that performs said disabling, and the trusted operating system and the Rich-OS operating system are executed on the electronic assembly.

11. The non-transitory computer-readable medium according to claim 10 , wherein the method is included in the trusted operating system.

12. The non-transitory computer-readable medium according to claim 10 , wherein the method is included in a patch on said trusted operating system.

13. The non-transitory computer-readable medium according to claim 10 , wherein the method is included in an application implementation-dependent on said trusted operating system.

Assignments (1)
CHANGE OF NAME Recorded Dec 16, 2022
From: OBERTHUR TECHNOLOGIES
To: IDEMIA FRANCE
Reel/Frame 062140/0907 →