Protection of an electronic device
View Patent ↗An electronic device includes a processor and one or more secure elements. The processor executes a first high-level operating system and a first application. The one or more secure elements execute a first low-level operating system to verify a reliability, an authenticity, or a reliability and an authenticity of the first high-level operating system, and execute a second low-level operating system to execute a second application and to perform wireless communication with the first application. At each booting of the electronic device, the first low-level operating system performs a verification of the reliability, of the authenticity, or of the reliability and the authenticity of the first high-level operating system. In response to a request from the first application to the second application, the second low-level operating system requests a result of the verification from the first low-level operating system, and transmits the result to the second application.
1 . An electronic device comprising:
a processor, which, in operation, executes a first high-level operating system and a first application; and
one or more secure elements, which, in operation,
execute a first low-level operating system to verify a reliability, an authenticity, or a reliability and an authenticity of the first high-level operating system, and
execute a second low-level operating system to execute a second application and to perform wireless communication with the first application, wherein:
at each booting of the electronic device, the first low-level operating system, in operation, performs a verification of the reliability, of the authenticity, or of the reliability and the authenticity of the first high-level operating system, and
in response to a request from the first application to the second application, the second low-level operating system, in operation, requests a result of the verification from the first low-level operating system, and transmits the result to the second application.
2 . The electronic device according to claim 1 , wherein in response to the result indicating that the first high-level operating system is reliable or authentic, the second application accepts the request from the first application.
3 . The electronic device according to claim 1 , wherein in response to the result indicating that the first operating system is not reliable or authentic, the second application refuses, partially accepts, or fully accepts the request from the first application.
4 . The electronic device according to claim 1 , wherein the second application refuses, partially accepts, or fully accepts the request from the first application based on a list of rules of access authorization associated with the first application.
5 . The electronic device according to claim 1 , wherein when the first low-level operating system verifies the reliability of the first high-level operating system, the first low-level operating system stores the result of the verification of the reliability of the first high-level operating system.
6 . The electronic device according to claim 1 , wherein the second low-level operating system transmits the result to the second application via a first application programming interface.
7 . The electronic device according to claim 1 , wherein the first high-level operating system is a trust platform module.
8 . The electronic device according to claim 1 , wherein the second low-level operating system is a program compliant with:
a Global Platform standard;
a Java Card Virtual Machine; or
a Global Platform standard and a Java Card Virtual Machine.
9 . The electronic device according to claim 1 , wherein the first and second low-level operating systems, in operation, communicate via a dedicated communication channel.
10 . The electronic device according to claim 1 , wherein the one or more secure elements comprise a first chip, which, in operation, executes the first low-level operating system, and a second chip, different from the first chip, which, in operation, executes the second low-level operating system.
11 . The electronic device according to claim 10 , wherein the first chip is a first secure element, and the second chip is a second secure element of the one or more secure elements.
12 . The electronic device according to claim 6 , wherein the one or more secure elements, in operation, execute a second application programming interface, which, in operation, verifies whether a command received by the second application has been reliably sent.
13 . The electronic device according to claim 12 , wherein the second application programming interface, in operation, applies a plurality of verification tests.
14 . The device according to claim 12 , wherein the second application programming interface, in operation, verifies whether a sender of the command is reliable.
15 . A method, comprising:
executing, using a processor of an electronic device, a first high-level operating system and a first application;
executing, using one or more secure elements of the electronic device,
a first low-level operating system to verify a reliability, an authenticity, or a reliability and an authenticity of the first high-level operating system, and
a second low-level operating system to execute a second application and to perform wireless communication with the first application, wherein the method includes:
at each booting of the electronic device, performing, using the first low-level operating system, a verification of the reliability, of the authenticity, or of the reliability and the authenticity of the first high-level operating system; and
in response to a request from the first application to the second application, the second low-level operating system requests a result of the verification from the first low-level operating system, and transmits the result to the second application.
16 . The method according to claim 15 , wherein in response to the result indicating that the first high-level operating system is reliable or authentic, the second application accepts the request from the first application.
17 . The method according to claim 15 , wherein in response to the result indicating that the first operating system is not reliable or authentic, the second application refuses, partially accepts, or fully accepts the request from the first application.
18 . The method according to claim 15 , wherein the second application refuses, partially accepts, or fully accepts the request from the first application based on a list of rules of access authorization associated with the first application.
19 . The method according to claim 15 , comprising, storing, by the first low-level operating system, a result of the verification of the reliability of the first high-level operating system.
20 . The method according to claim 15 , comprising transmitting, by the second low-level operating system, the result to the second application via a first application programming interface.
21 . The method according to claim 20 , comprising executing, by the one or more secure elements, a second application programming interface to verify whether a command received by the second application has been reliably sent.
22 . A system, comprising:
a memory;
a processor coupled to the memory, wherein the processor, in operation and using the memory, executes a first high-level operating system and a first application; and
one or more secure elements, which, in operation,
execute a first low-level operating system to verify a reliability, an authenticity, or a reliability and an authenticity of the first high-level operating system, and
execute a second low-level operating system to execute a second application and to perform wireless communication with the first application, wherein
at each booting of the system, the first low-level operating system, in operation, performs a verification of the reliability, of the authenticity, or of the reliability and the authenticity of the first high-level operating system, and
in response to a request from the first application to the second application, the second low-level operating system, in operation, requests a result of the verification from the first low-level operating system, and transmits the result to the second application.
23 . The system according to claim 22 , wherein in response to the result indicating that the first high-level operating system is reliable or authentic, the second application accepts the request from the first application.
24 . The system of claim 22 , comprising a dedicated communication channel, wherein the first and second low-level operating systems, in operation, communicate via the dedicated communication channel.
25 . The system according to claim 22 , wherein the one or more secure elements comprise a first chip, which, in operation, executes the first low-level operating system, and a second chip, different from the first chip, which, in operation, executes the second low-level operating system.
26 . A non-transitory computer-readable medium having contents which configure an electronic device to perform a method, the method comprising:
executing, using a processor of the electronic device, a first high-level operating system and a first application;
executing, using one or more secure elements of the electronic device,
a first low-level operating system to verify a reliability, an authenticity, or a reliability and an authenticity of the first high-level operating system, and
a second low-level operating system to execute a second application and to perform wireless communication with the first application, wherein the method includes:
at each booting of the electronic device, performing, using the first low-level operating system, a verification of the reliability, of the authenticity, or of the reliability and the authenticity of the first high-level operating system; and
in response to a request from the first application to the second application, the second low-level operating system requests a result of the verification from the first low-level operating system, and transmits the result to the second application.
27 . The non-transitory computer-readable medium of claim 26 , wherein the contents comprise instructions executable by the electronic device.