Granted Patent B2

US 12,585,752 · App. 18/391,185 · Granted Mar 24, 2026

Inventors: Olivier Van Nieuwenhuyze (Wezembeek-Oppem, BE); Alexandre Charles (Auriol, FR)

Assignees: STMICROELECTRONICS (ROUSSET) SAS; STMICROELECTRONICS BELGIUM

G06F21/44

Abstract

Claims (53)

1 . An electronic device, comprising:

secure processing circuitry, which, in operation, executes:

a first low-level operating system to execute:

a first application; and

an application programming interface; and

a second low-level operating system; and

a processor coupled to the secure processing circuitry, wherein the processor, in operation, executes a high-level operating system to execute a second application, wherein the application programming interface, in operation:

verifies a reliability of a received command from the second application and directed to the first application; and

transmits the command and a result of the verification to the first application, wherein the verifying the reliability of the command includes verifying the high-level operating system of the processor is reliable by communicating with the second low-level operating system of the secure processing circuitry.

2 . The electronic device according to claim 1 , wherein the application programming interface, in operation, applies a plurality of verification tests.

3 . The electronic device according to claim 1 , wherein the verifying by the application programming interface, in operation, includes verifying whether the second application is reliable.

4 . The electronic device according to claim 1 , wherein the application programming interface, in operation, verifies whether the high-level operating system of the processor is authentic.

5 . The electronic device according to claim 3 , wherein

, in operation, a second command from an electronic system independent from the electronic device and directed to the first application is received, and, in operation, the application programming interface:

verifies a reliability of the second command by communicating with the second low-level operating system of the secure processing circuitry; and

transmits the command and a result of the verification of the reliability of the second command to the first application.

6 . The electronic device according to claim 5 , wherein, in operation, the electronic system is coupled with the electronic device using a wireless pairing function.

7 . The electronic device according to claim 1 , wherein the application programming interface, in operation, verifies that a communication channel over which the command is received is a reliable channel.

8 . The electronic device according to claim 1 , wherein the application programming interface, in operation, validates an authenticity of the verification of the command received by the first application.

9 . The electronic device according to claim 1 , wherein the application programming interface, in operation,

verifies that a communication channel over which the command is received is a reliable channel using pairing-function parameters;

validates an authenticity of the verification of the command received by the first application using pairing-function parameters; or

verifies that a communication channel over which the command is received is a reliable channel using pairing-function parameters and validates an authenticity of the verification of the command received by the first application using pairing-function parameters.

10 . A system, comprising:

a processor, which, in operation, executes applications using a high-level operating system of the processor;

a secure processing circuit, which, in operation, executes a first application of the secure processing circuit using a first low-level operating system of the secure processing circuit; and

an application programming interface, which, in operation:

verifies a reliability of a received command directed to the first application from an application executing on the processor; and

transmits the command and a result of the verification to the first application, wherein the application programming interface verifies that the high-level operating system of the processor is reliable by communicating with a second low-level operating system of the secure processing circuit.

11 . The system according to claim 10 , wherein the verifying by the application programming interface, in operation, includes verifying whether the application executing on the processor is reliable.

12 . The system according to claim 10 , wherein the application programming interface, in operation, verifies whether the high-level operating system is authentic.

13 . The system according to claim 11 , wherein, in operation, the processor is coupled to the secure processing circuit using a wireless pairing function.

14 . The system according to claim 13 , wherein the application programming interface, in operation,

verifies that a communication channel over which the command is received is a reliable channel using pairing-function parameters;

validates an authenticity of the verification of the command received by the first application using pairing-function parameters; or

verifies that a communication channel over which the command is received is a reliable channel using pairing-function parameters and validates an authenticity of the verification of the command received by the first application using pairing-function parameters.

15 . A method, comprising:

executing, using a first low-level operating system of a secure circuit of a device, a first application;

receiving a command directed to the first application from a second application executing on a processor using a high-level operating system of the processor;

verifying, using an application programming interface of the device, a reliability of the received command directed to the first application; and

transmitting, using the application programming interface, the command and a result of the verification to the first application, wherein the application programming interface verifies the high-level operating system of the processor is reliable by communicating with a second low-level operating system of the secure circuit.

16 . The method according to claim 15 , wherein the verifying includes verifying whether the second application is reliable.

17 . The method according to claim 16 , wherein the processor is a processor of an electronic system independent from the device, and the method comprises coupling the device to the electronic system using a wireless pairing function.

18 . The method according to claim 16 , comprising:

verifying, using the application programming interface, that a communication channel over which the command is received is a reliable channel using pairing-function parameters;

validating, using the application programming interface, an authenticity of the verification of the command received by the first application using pairing-function parameters; or

verifying, using the application programming interface, that a communication channel over which the command is received is a reliable channel using pairing-function parameters and validating, using the application programming interface, an authenticity of the verification of the command received by the first application using pairing-function parameters.

19 . A non-transitory computer-readable medium having contents which configure an electronic device to perform a method, the method comprising:

executing, using a first low-level operating system of a secure circuit of the electronic device, a first application;

receiving a command directed to the first application from a second application executing on a processor using a high-level operating system of the processor;

verifying, using an application programming interface of the electronic device, a reliability of the received command directed to the first application; and

transmitting, using the application programming interface, the command and a result of the verification to the first application, wherein the application programming interface verifies the high-level operating system of the processor is reliable by communicating with a second low-level operating system of the secure circuit.

20 . The non-transitory computer-readable medium of claim 19 , wherein the contents comprise instructions executable by the electronic device.

Assignments (3)

Priority Claims (1)

Continuity (1)

References Cited (18)