IP Library Granted Patent US 8,650,639
Granted Patent B2
US 8,650,639 · App. 12/893,522 · Granted Feb 11, 2014

System and method for hindering a cold boot attack

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,650,639
App. No.
12/893,522
Granted
Feb 11, 2014
Kind
B2
Abstract

A method for hindering a cold boot attack on a user equipment (UE) is provided. The method includes, in response to detection of the cold boot attack, executing prioritized security procedures. A user equipment (UE) is also provided that includes a processor configured to execute prioritized security procedures responsive to detection of a cold boot attack.

Claims (26)

1. A method for hindering a cold boot attack on a user equipment (UE), wherein the UE comprises a processor configured to implement the method, the method comprising:

in response to determining that a temperature of one or more memory components of the UE fall below a threshold, executing prioritized security procedures, wherein the prioritized security procedures comprise:

creating a message indicating a vulnerability to a cold boot attack on the UE;

encrypting the message using a transport key stored on the UE;

erasing the transport key in response to encrypting the message, thereby preventing the UE from conducting subsequent secure communication sessions on a network; and

notifying a back end system by sending the encrypted message to the back end system, in response to erasing the transport key.

2. The method of claim 1 , wherein the prioritized security procedures comprise securing the UE.

3. The method of claim 2 , wherein securing the UE comprises, in response to erasing the transport key, erasing one or more of a content protection key, passwords, messages, private keys, and remaining data.

4. The method of claim 3 , wherein the erasing is prioritized to be executed in the following order: the content protection key, the passwords, the messages, the private keys, and the remaining data.

5. The method of claim 3 , wherein the notifying the back end system is executed concurrently with the erasing of one or more of the content protection key, the passwords, the messages, the private keys, and the remaining data.

6. The method of claim 1 , wherein the message further comprises a location of the UE.

7. The method of claim 2 , wherein the prioritized security procedures further comprises notifying one or more peripheral devices connected to the UE to enable the one or more peripheral devices to erase keys and data stored on the one or more peripheral devices.

8. A user equipment (UE), comprising:

a temperature sensor; and

memory storing instructions executable by a processor and configured such that when executed, cause the processor to execute prioritized security procedures responsive to the temperature sensor detecting that a temperature of one or more memory components of the UE fall below a threshold, wherein the prioritized security procedures comprise:

creating a message indicating a vulnerability to a cold boot attack on the UE;

encrypting the message using a transport key stored on the UE;

erasing the transport key in response to encrypting the message, thereby preventing the UE from conducting subsequent secure communication sessions on a network; and

notifying a back end system by sending the encrypted message to the back end system, in response to erasing the transport key.

9. The UE of claim 8 , wherein the prioritized security procedures comprise securing the UE.

10. The UE of claim 9 , wherein the prioritized security procedures further comprise notifying one or more peripheral devices connected to the UE and disabling the UE from booting.

11. The UE of claim 10 , wherein the notifying one or more peripheral devices connected to the UE and the disabling the UE from booting are executed subsequent to the notifying the back end system and the securing the UE.

12. The UE of claim 9 , wherein the securing the UE comprises, in response to erasing the transport key, erasing a content protection key, passwords, messages, private keys, and remaining data.

13. The UE of claim 12 , wherein the erasing is prioritized to be executed in the following order: the content protection key, the passwords, the messages, the private keys, and the remaining data.

14. The UE of claim 12 , wherein the notifying the back end system is executed concurrently with the erasing of one or more of the content protection key, the passwords, the messages, the private keys, and the remaining data.

15. The UE of claim 8 , wherein the message to the back end system comprises a location of the UE.

Assignments (6)
NUNC PRO TUNC ASSIGNMENT Recorded Jun 19, 2023
From: BLACKBERRY LIMITED
To: MALIKIE INNOVATIONS LIMITED
Reel/Frame 064270/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 16, 2023
From: BLACKBERRY LIMITED
To: MALIKIE INNOVATIONS LIMITED
Reel/Frame 064104/0103 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 2, 2019
From: CERTICOM CORP.
To: BLACKBERRY LIMITED
Reel/Frame 050610/0937 →
CHANGE OF NAME Recorded Jan 1, 2014
From: RESEARCH IN MOTION LIMITED
To: BLACKBERRY LIMITED
Reel/Frame 031896/0305 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 1, 2010
From: LAMBERT, ROBERT JOHN; MENEZES, ALFRED JOHN
To: CERTICOM CORP.
Reel/Frame 025435/0056 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 1, 2010
From: ADAMS, NEIL PATRICK; BROWN, MICHAEL STEPHEN
To: RESEARCH IN MOTION LIMITED
Reel/Frame 025435/0343 →