Embedded secure element
    11.
    发明授权

    公开(公告)号:US12045336B2

    公开(公告)日:2024-07-23

    申请号:US17479275

    申请日:2021-09-20

    Abstract: An embedded electronic system includes a volatile memory and a processor configured to execute a low-level operating system that manages allocation of areas of the volatile memory to a plurality of high-level operating systems. Each high-level operating system executes one or more of applications. The volatile memory includes a first portion reserved for execution data of a first application and a second portion intended to store execution data of a second application. The system is configured so that once the execution data of the first application are loaded in the first portion, the low-level operating system forbids unloading of the execution data of the first application from the first portion so that the execution data of the first application remain in the volatile memory in case of a deactivation or of a setting to standby of the first application.

    Secure device operating with a secure tamper resistant platform, corresponding system, method and computer program product

    公开(公告)号:US11514197B2

    公开(公告)日:2022-11-29

    申请号:US17010391

    申请日:2020-09-02

    Abstract: A secure device operating with a secure tamper-resistant platform including a tamper-resistant hardware platform and a virtual primary platform operating with a low level operating system performing an abstraction of resources of the hardware platform, and a secondary platform with a high level operating system providing a further abstraction of resources to applications in which respective internal hosts are embedded, the secure device including an internal host domain including the internal hosts, the secure device including a plurality of physical and/or logical input/output interfaces through which external hosts can access the internal hosts, the virtual primary platform being configured to set interactions between the external hosts and the internal hosts, wherein the internal host domain includes a further set of virtual hosts each configured to operate as a proxy between an input/output interface and an application, each input/output interface being configured to address only one among the virtual hosts.

    METHOD FOR CONCEALING A SUBSCRIPTION IDENTIFIER AT A USER EQUIPMENT OF A MOBILE COMMUNICATION NETWORK, AND CORRESPONDING SYSTEM AND COMPUTER PROGRAM PRODUCT

    公开(公告)号:US20220330017A1

    公开(公告)日:2022-10-13

    申请号:US17655867

    申请日:2022-03-22

    Abstract: A method for concealing a subscription identifier at a user equipment including a mobile equipment and an integrated circuit card storing the subscription identifier, the method including receiving a corresponding request by a server to provide a corresponding subscription identifier, performing an elliptical curve encryption of the subscription identifier generating a concealed subscription identifier, the concealing operation including the mobile equipment sending an identity retrieve command to the card, performing, before receiving the identity retrieve command at the card, a pre-calculation of the ephemeral key pair including an ephemeral private key and ephemeral public key and the shared secret key, and in response to the respective state of completion indicating that completion of the computation of a valid ephemeral key pair or shared secret key, storing the corresponding values of the ephemeral key pair and shared secret key in a table in a memory of the card.

    SECURE DEVICE OPERATING WITH A SECURE TAMPER-RESISTANT PLATFORM, CORRESPONDING SYSTEM, METHOD AND COMPUTER PROGRAM PRODUCT

    公开(公告)号:US20210073425A1

    公开(公告)日:2021-03-11

    申请号:US17010391

    申请日:2020-09-02

    Abstract: A secure device operating with a secure tamper-resistant platform including a tamper-resistant hardware platform and a virtual primary platform operating with a low level operating system performing an abstraction of resources of the hardware platform, and a secondary platform with a high level operating system providing a further abstraction of resources to applications in which respective internal hosts are embedded, the secure device including an internal host domain including the internal hosts, the secure device including a plurality of physical and/or logical input/output interfaces through which external hosts can access the internal hosts, the virtual primary platform being configured to set interactions between the external hosts and the internal hosts, wherein the internal host domain includes a further set of virtual hosts each configured to operate as a proxy between an input/output interface and an application, each input/output interface being configured to address only one among the virtual hosts.

    METHOD FOR THE PERSONALIZATION OF INTEGRATED CIRCUIT CARDS, CORRESPONDING SYSTEM AND COMPUTER PROGRAM PRODUCT

    公开(公告)号:US20190306697A1

    公开(公告)日:2019-10-03

    申请号:US16366870

    申请日:2019-03-27

    Abstract: A method for the personalization of an integrated circuit card, includes: simulating a downloading of a single image corresponding to a fixed part of personalization data of the integrated circuit card; simulating an execution of a sequence of personalization commands for the integrated circuit card to generate a set of personalization data; combining the set of personalization data with the single image to obtain a card image comprising the fixed part of personalization data and the set of personalization data; encrypting the card image to obtain an encrypted single image; and downloading the encrypted single image in a memory of the integrated circuit card.

    SECURE PROVISION OF KEYS FOR FULLY HOMOMORPHIC ENCRYPTION

    公开(公告)号:US20230379136A1

    公开(公告)日:2023-11-23

    申请号:US18314534

    申请日:2023-05-09

    CPC classification number: H04L9/008 G06F9/4401

    Abstract: The present disclosure relates to a method including: the generation, by a computing device, of a first key and a bootstrapping key; the provision of the first key and an identifier of the bootstrapping key to an electronic device and the provision of the bootstrapping key and the identifier to a server; the fully homomorphic encryption, by the electronic device, of a first data value, stored in the electronic device, by using the first key; and the provision, by the electronic device, of the encrypted first data value and of the identifier, to the server.

    Tamper resistant device for an integrated circuit card

    公开(公告)号:US11582212B2

    公开(公告)日:2023-02-14

    申请号:US16655579

    申请日:2019-10-17

    Abstract: A tamper resistant device can be used for an integrated circuit card. The device includes memory storing a first security domain that includes a telecommunication profile and a second security domain that includes an application profile. A first physical interface is configured to be coupled to a baseband processor configured to operate with a mobile telecommunications network. A second physical interface configured to be coupled to an application processor. The first physical interface configured to allow the baseband processor to access the telecommunication profile and the second physical interface is configured to allow the application processor to access the application profile. The tamper resistant device is configured to enable accessibility to the application profile if corresponding commands are received at the first interface and to enable accessibility to the telecommunication profile if corresponding commands are received at the second interface.

    EMBEDDED SECURE ELEMENT
    18.
    发明申请

    公开(公告)号:US20220004625A1

    公开(公告)日:2022-01-06

    申请号:US17479275

    申请日:2021-09-20

    Abstract: An embedded electronic system includes a volatile memory and a processor configured to execute a low-level operating system that manages allocation of areas of the volatile memory to a plurality of high-level operating systems. Each high-level operating system executes one or more of applications. The volatile memory includes a first portion reserved for execution data of a first application and a second portion intended to store execution data of a second application. The system is configured so that once the execution data of the first application are loaded in the first portion, the low-level operating system forbids unloading of the execution data of the first application from the first portion so that the execution data of the first application remain in the volatile memory in case of a deactivation or of a setting to standby of the first application.

    Method for managing multiple operating systems in integrated circuit cards, corresponding system and computer program product

    公开(公告)号:US11106472B2

    公开(公告)日:2021-08-31

    申请号:US16375695

    申请日:2019-04-04

    Abstract: A method for managing storage of an operating system in an integrated circuit card, includes: subdividing an operating system into a plurality of operating system components; associating one or more operating system components of the plurality of operating system components to a descriptor indicating a version of the one or more operating system components; downloading the one or more operating system components to a memory of the integrated circuit card, wherein the downloading includes verifying if an operating system component stored in the integrated circuit card is a same version of the one or more operating system components being downloaded; based on the verifying, storing the one or more operating system components in the card if the version is different; and based on the verifying discarding the one or more operating system components from the download operation if the version is the same.

Patent Agency Ranking