Secure starting of an electronic circuit

1. A system, comprising:

a processing device;

a secure element including a microprocessor to process security keys; and

a memory, separate from the secure element, the memory having a non-reprogrammable memory area coupled to the processing device, the non-reprogrammable memory area having stored therein a set of boot instructions executable by the processing device, wherein the microprocessor of the secure element, in operation:

receives a ciphered first security key;

deciphers the first security key;

receives a second security key;

using the second security key, deciphers the set of boot instructions;

calculates a signature of the deciphered set of boot instructions; and

in response to a determination that the calculated signature is valid:

ciphers the second security key using the deciphered first security key; and

sends the ciphered second security key to the processing device.

2. The system according to claim 1 , wherein the secure element is arranged to:

store the signature of the deciphered set of boot instructions;

update the set of boot instructions;

calculate an updated signature of the updated set of boot instructions; and

store the updated signature.

3. The system according to claim 1 , wherein first security key has been ciphered with a public key and the secure element is arranged to decipher the first security key with a private key, the public key and private key forming a pair of keys that are unique to the system.

4. The system according to claim 1 , wherein the signature is unique within the system.

5. The system according to claim 1 , comprising:

a power supply, wherein the secure element is arranged to interrupt operation of the power supply in response to a determination that the calculated signature is not valid.

6. The system according to claim 1 , wherein the processing device is arranged to:

receive the ciphered second security key;

decipher the second security key;

decipher instructions of the set of boot instructions using the deciphered second security key; and

execute the deciphered instructions.

7. The system according to claim 6 , wherein the processing device is arranged to:

store the deciphered second security key only in volatile memory.

8. The system according to claim 1 , wherein the processing device is arranged to:

generate initialization data; and

store the generated initialization data in the memory.

9. The system according to claim 1 , wherein the processing device is arranged to:

generate a random number;

cipher the random number to form the ciphered first security key; and

communicate the ciphered first security key to the secure element.

10. The system according to claim 9 , wherein the processing device is arranged to:

enter a waiting mode after communication; and

continue executing after receiving the ciphered second security key.

11. A secure element device, comprising:

a secure microprocessor arranged to deliver secure services; and

at least one communication interface arranged to bi-directionally pass control information between the secure element device and a microcontroller, wherein the secure microprocessor of the secure element device, in operation:

waits in an idle state until a ciphered first security key is received from the microcontroller;

deciphers the first security key;

retrieves a second security key;

deciphers a set of boot instructions using the second security key;

calculates a signature of the deciphered set of boot instructions; and

in response to a determination that the calculated signature is valid:

ciphers the second security key using the deciphered first security key; and

communicates the ciphered second security key to the microcontroller.

12. The secure element device according to claim 11 , wherein the secure element device is arranged as an embedded Universal Integrated Circuit Card (eUICC).

13. The secure element device according to claim 11 , wherein the secure element device is arranged as an embedded Secure Element (eSE).

14. The secure element device according to claim 11 , wherein the secure element device is arranged to provide secure services to a mobile device.

15. The secure element device according to claim 11 , wherein the at least one communication interface includes a near-field communication controller.

16. An electronic device, comprising:

a processing device;

processing means for providing secure services; and

a memory means, separate from die processing means for providing secure services, for providing secure storage of initialization information, the initialization information including boot instructions executable by the processing device, wherein the processing means for providing secure services are for:

receiving a first security key;

deciphering the initialization information using a second security key;

verifying a signature formed based on the initialization information stored in the memory means;

ciphering the second security key using the first security key; and

transmitting the ciphered second key to the processing device.

17. The electronic device according to claim 16 , wherein the electronic device is a mobile phone device.

18. The electronic device according to claim 16 , wherein the electronic device is an electronic key device.

19. The electronic device according to claim 16 , comprising:

a near field communications device coupled to the processing means for providing secure services.

20. The electronic device according to claim 16 , wherein the secure services include access control services.