公开(公告)号：US09282086B2

公开(公告)日：2016-03-08

申请号：US13904426

申请日：2013-05-29

Applicant: Broadcom Corporation

Inventor： Philippe Klein ,  Jacob Mendel ,  Shlomo Markel

IPC: G06F7/04 ,  H04L29/06 ,  H04W12/06 ,  H04L29/08

CPC classification number: H04L63/105 ,  H04L63/08 ,  H04L63/107 ,  H04L67/34 ,  H04L2463/082 ,  H04W12/06

Abstract: A secured communication network can include a server including an authentication backend, the authentication backend configured to communicate with an authentication front end of a communication device. A server applet can be associated with the authentication backend. The server applet can authenticate an access right associated with the communication device and establish a security level for the communication with the communication device based on information received from the authentication front end.

Abstract translation: 安全通信网络可以包括包括认证后端的服务器，认证后端被配置为与通信设备的认证前端进行通信。 服务器小程序可以与身份验证后端相关联。 服务器小应用程序可以认证与通信设备相关联的访问权限，并且基于从认证前端接收的信息来建立与通信设备的通信的安全级别。

公开(公告)号：US09165163B2

公开(公告)日：2015-10-20

申请号：US13730766

申请日：2012-12-28

Applicant: Broadcom Corporation

Inventor： Mark Buer ,  Jacob Mendel

IPC: G06F12/14 ,  G06F21/76 ,  G06F21/64 ,  G06F21/57 ,  G06F21/60

CPC classification number: G06F21/76 ,  G06F12/1408 ,  G06F21/57 ,  G06F21/572 ,  G06F21/606 ,  G06F21/64 ,  G06F2221/2107

Abstract: An apparatus may comprise a secure portion of a chip and an external memory device. The secure portion of the chip may be configured to receive an encryption key, and the memory device may be configured to receive an encrypted processing code. The secure portion of the chip may be configured to verify the encrypted processing code by decrypting the encrypted processing code using the encryption key. A non-secure portion of the chip may be configured to write the encrypted processing code on the memory device while the memory device is coupled to the chip. The encryption key may be associated with an identifier of the chip.

Abstract translation: 装置可以包括芯片的安全部分和外部存储器装置。 芯片的安全部分可以被配置为接收加密密钥，并且存储器设备可以被配置为接收加密的处理代码。 芯片的安全部分可以被配置为通过使用加密密钥解密加密的处理代码来验证加密的处理代码。 芯片的非安全部分可以被配置为在存储器件耦合到芯片的同时将加密的处理代码写入存储器件。 加密密钥可以与芯片的标识符相关联。

公开(公告)号：US20140325594A1

公开(公告)日：2014-10-30

申请号：US13904426

申请日：2013-05-29

Applicant: Broadcom Corporation

Inventor： Philippe Klein ,  Jacob Mendel ,  Shlomo Markel

IPC: H04L29/06 ,  H04W12/06

CPC classification number: H04L63/105 ,  H04L63/08 ,  H04L63/107 ,  H04L67/34 ,  H04L2463/082 ,  H04W12/06

Abstract: A secured communication network can include a server including an authentication backend, the authentication backend configured to communicate with an authentication front end of a communication device. A server applet can be associated with the authentication backend. The server applet can authenticate an access right associated with the communication device and establish a security level for the communication with the communication device based on information received from the authentication front end.

Abstract translation: 安全通信网络可以包括包括认证后端的服务器，认证后端被配置为与通信设备的认证前端进行通信。 服务器小程序可以与身份验证后端相关联。 服务器小应用程序可以认证与通信设备相关联的访问权限，并且基于从认证前端接收到的信息建立与通信设备的通信的安全级别。

公开(公告)号：US20140122342A1

公开(公告)日：2014-05-01

申请号：US13664770

申请日：2012-10-31

Applicant: BROADCOM CORPORATION

Inventor： Yasantha N. Rajakarunanayake ,  William S. Bunch ,  Jacob Mendel

IPC: G06F21/24

CPC classification number: H04L9/007 ,  G06F21/10 ,  H04L9/3265 ,  H04L63/0823 ,  H04L63/0892 ,  H04L63/10 ,  H04L2209/603 ,  H04L2463/101 ,  H04N21/234381 ,  H04N21/24 ,  H04N21/442 ,  H04N21/6582 ,  H04W12/04 ,  H04W12/06

Abstract: Host based content security and protection. Security is achieved via a third-party device serving as an intermediary or host (e.g., certificate authority (CA)) between two or more user device is associated with two or more users. Any number of security measures may be employed to ensure that the content and/or identity associated with a given user is protected, including on a per communication or content basis. Various authentication, authorization, and accounting (AAA) protocols may be employed to govern the respective sharing of content and/or identity between respective users within the system, and such AAA protocols may be dynamically allocated differently with respect to different pairings of users at different respective times. In addition, with respect to digital rights management (DRM) employed to govern the security of content and/or identity between users, a third-party device (e.g., intermediary) and/or any respective user may establish specific rules for secure content and/or identity communications.

Abstract translation: 基于主机的内容安全和保护。 通过用作两个或多个用户设备之间的中间人或主机（例如，证书颁发机构（CA））的第三方设备与两个或更多个用户相关联来实现安全性。 可以采用任何数量的安全措施来确保与给定用户相关联的内容和/或身份受到保护，包括在每个通信或内容的基础上。 可以采用各种认证，授权和计费（AAA）协议来管理系统内的各个用户之间的内容和/或身份的相应共享，并且这样的AAA协议可以相对于不同的用户的不同配对被动态地分配 各自的时代。 另外，关于用于管理用户之间的内容和/或身份的安全性的数字版权管理（DRM），第三方设备（例如，中介）和/或任何相应的用户可以建立用于安全内容的特定规则， /或身份通信。

公开(公告)号：US09400892B2

公开(公告)日：2016-07-26

申请号：US13930280

申请日：2013-06-28

Applicant: Broadcom Corporation

Inventor： Yasantha Rajakarunanayake ,  William Bunch ,  Jacob Mendel

IPC: G06F7/04 ,  G06F21/62 ,  H04W12/04 ,  H04W12/08

CPC classification number: G06F21/6218 ,  H04L9/14 ,  H04L9/3228 ,  H04L2209/805 ,  H04W4/80 ,  H04W12/04 ,  H04W12/08

Abstract: A secure integrated circuit (IC) to provide access to an electronic storage, the secure IC including a memory and a processor. The processor may generate a first key and a second key, and enable storing the first key in the memory and storing the second key in a device memory of a device. The processor may then receive the second key from the device when the device wants to access the electronic storage, and grant the device access to the electronic storage by using the first key and the second key received from the device.

Abstract translation: 一种用于提供对电子存储器的访问的安全集成电路（IC），所述安全IC包括存储器和处理器。 处理器可以生成第一密钥和第二密钥，并且使得能够将第一密钥存储在存储器中并将第二密钥存储在设备的设备存储器中。 然后，当设备想要访问电子存储器时，处理器可以从设备接收第二密钥，并且通过使用从设备接收的第一密钥和第二密钥来授权设备对电子存储器的访问。

公开(公告)号：US20150271181A1

公开(公告)日：2015-09-24

申请号：US14731977

申请日：2015-06-05

Applicant: Broadcom Corporation

Inventor： Jacob Mendel ,  Alexander Potievsky ,  Eyal Webber-Zvik

IPC: H04L29/06 ,  G06F21/57

CPC classification number: H04L63/10 ,  G06F21/00 ,  G06F21/57 ,  G06F21/629 ,  G06F21/72 ,  G06F2221/034 ,  G06F2221/2141 ,  G06F2221/2153

Abstract: A device includes a receiver configured to receive a request to perform a function. A secure element connected with the receiver, the secure element to verify the request to perform the function, where the secure element is configured to operate in either a report mode or a silent mode. Details about a status of the performance of the function are displayed when the device operates in the report mode, and no details about the status of the performance of the function are displayed when the device operates in the silent mode.

Abstract translation: 一种设备包括被配置为接收执行功能的请求的接收器。 与接收器连接的安全元件，安全元件，用于验证执行功能的请求，其中安全元件被配置为以报告模式或静音模式操作。 当设备以报告模式运行时，将显示功能状态的详细信息，当设备以静音模式运行时，不会显示功能性能状态的详细信息。

公开(公告)号：US20140123209A1

公开(公告)日：2014-05-01

申请号：US13708269

申请日：2012-12-07

Applicant: BROADCOM CORPORATION

Inventor： Yasantha Rajakarunanayake ,  William Bunch ,  Jacob Mendel

IPC: G06F21/60

CPC classification number: G06F21/606 ,  G06F2221/2111 ,  H04W12/08

Abstract: Disclosed are various embodiments providing a portable wireless communication device that includes a secure element configured to route a set of input/output (I/O) channels to host processing circuitry of a mobile communication device. The secure element includes an application executable by the secure element, the application being configured to obtain a policy via an I/O channel of the set of I/O channels. The application is further configured to prevent the host processing circuitry from accessing data corresponding to at least a portion of the set of I/O channels according to the policy.

Abstract translation: 公开了提供便携式无线通信设备的各种实施例，其包括被配置为将一组输入/输出（I / O）信道路由到移动通信设备的主机处理电路的安全元件。 所述安全元件包括可由所述安全元件执行的应用，所述应用被配置为经由所述一组I / O通道的I / O通道获得策略。 该应用还被配置为防止主机处理电路根据策略访问对应于该组I / O信道的至少一部分的数据。

公开(公告)号：US20130340090A1

公开(公告)日：2013-12-19

申请号：US13971578

申请日：2013-08-20

Applicant: Broadcom Corporation

Inventor： Jacob Mendel ,  Alexander Potievsky ,  Eyal Webber-Zvik

IPC: H04L29/06

CPC classification number: H04L63/10 ,  G06F21/00 ,  G06F21/57 ,  G06F21/629 ,  G06F21/72 ,  G06F2221/034 ,  G06F2221/2141 ,  G06F2221/2153

Abstract: A device includes a receiver configured to receive a request to perform a function. A secure element connected with the receiver, the secure element to verify the request to perform the function, where the secure element is configured to operate in either a report mode or a silent mode. Details about a status of the performance of the function are displayed when the device operates in the report mode, and no details about the status of the performance of the function are displayed when the device operates in the silent mode.

Abstract translation: 一种设备包括被配置为接收执行功能的请求的接收器。 与接收器连接的安全元件，安全元件，用于验证执行功能的请求，其中安全元件被配置为以报告模式或静音模式操作。 当设备以报告模式运行时，将显示功能状态的详细信息，当设备以静音模式运行时，不会显示功能性能状态的详细信息。

公开(公告)号：US09344747B2

公开(公告)日：2016-05-17

申请号：US13859675

申请日：2013-04-09

Applicant: Broadcom Corporation

Inventor： Mark Leonard Buer ,  Andrew Dellow ,  Jacob Mendel

IPC: H04N7/167 ,  G06F11/30 ,  H04N21/2347 ,  H04N21/2543 ,  H04N21/41 ,  H04N21/4627

CPC classification number: H04N21/2347 ,  H04N21/2543 ,  H04N21/4126 ,  H04N21/4627

Abstract: A secure element operating in conjunction with a secure partition of a system-on-a-chip (SoC) having set top box (STB) functionality allows for digital rights management (DRM) key handling in a mobile platform. The secure element can include a secure processing system (SPS) to be implemented as a hard macro, thereby isolating the SPS from a peripheral processing system (PPS). The secure element and the secure partition of the SoC may be operatively connected by a secure cryptographic channel.

Abstract translation: 与具有机顶盒（STB）功能的片上系统（SoC）的安全分区结合操作的安全元件允许在移动平台中的数字版权管理（DRM）密钥处理。 安全元件可以包括要被实现为硬宏的安全处理系统（SPS），从而将SPS与外围处理系统（PPS）隔离开来。 SoC的安全元件和安全分区可以通过安全加密通道可操作地连接。

公开(公告)号：US20160078223A1

公开(公告)日：2016-03-17

申请号：US14949306

申请日：2015-11-23

Applicant: Broadcom Corporation

Inventor： Mark BUER ,  Theodore Trost ,  Jacob Mendel

IPC: G06F21/53 ,  G06F12/14 ,  G06F13/42 ,  G06F21/60 ,  G06F13/16 ,  G06F13/40

CPC classification number: G06F21/53 ,  G06F12/1408 ,  G06F13/16 ,  G06F13/4068 ,  G06F13/4282 ,  G06F21/602 ,  G06F21/76 ,  G06F2212/1052 ,  G06F2221/034 ,  Y02D10/14 ,  Y02D10/151

Abstract: Systems and methods are provided that allow a secure processing system (SPS) to be implemented as a hard macro, thereby isolating the SPS from a peripheral processing system (PPS). The SPS and the PPS, combination, may form a secure element that can be used in conjunction with a host device and a connectivity device to allow the host device to engage in secure transactions, such as mobile payment over a near field communications (NFC) connection. As a result of the SPS being implemented as a hard macro isolated from the PPS, the SPS may be certified once, and re-used in other host devices without necessitating re-certification.

Abstract translation: 提供了允许将安全处理系统（SPS）实现为硬宏的系统和方法，从而将SPS与外围处理系统（PPS）隔离。 SPS和PPS的组合可以形成可以与主机设备和连接设备结合使用的安全元件，以允许主机设备进行安全交易，例如通过近场通信（NFC）的移动支付， 连接。 由于SPS被作为与PPS隔离的硬宏实现，SPS可以被认证一次，并且在其他主机设备中重新使用，而不需要重新认证。