-
公开(公告)号:US12045336B2
公开(公告)日:2024-07-23
申请号:US17479275
申请日:2021-09-20
Applicant: STMicroelectronics S.r.l. , Proton World International N.V.
Inventor: Olivier Van Nieuwenhuyze , Amedeo Veneroso
IPC: G06F21/53 , G06F12/0842 , G06F12/14 , G06F13/16
CPC classification number: G06F21/53 , G06F12/0842 , G06F12/14 , G06F13/1657 , G06F2221/034
Abstract: An embedded electronic system includes a volatile memory and a processor configured to execute a low-level operating system that manages allocation of areas of the volatile memory to a plurality of high-level operating systems. Each high-level operating system executes one or more of applications. The volatile memory includes a first portion reserved for execution data of a first application and a second portion intended to store execution data of a second application. The system is configured so that once the execution data of the first application are loaded in the first portion, the low-level operating system forbids unloading of the execution data of the first application from the first portion so that the execution data of the first application remain in the volatile memory in case of a deactivation or of a setting to standby of the first application.
-
公开(公告)号:US11514197B2
公开(公告)日:2022-11-29
申请号:US17010391
申请日:2020-09-02
Applicant: Proton World International N.V. , STMicroelectronics S.r.l.
Inventor: Amedeo Veneroso , Olivier Van Nieuwenhuyze
IPC: G06F21/82 , G06F21/86 , G06F21/77 , G06F13/362 , G06F9/54
Abstract: A secure device operating with a secure tamper-resistant platform including a tamper-resistant hardware platform and a virtual primary platform operating with a low level operating system performing an abstraction of resources of the hardware platform, and a secondary platform with a high level operating system providing a further abstraction of resources to applications in which respective internal hosts are embedded, the secure device including an internal host domain including the internal hosts, the secure device including a plurality of physical and/or logical input/output interfaces through which external hosts can access the internal hosts, the virtual primary platform being configured to set interactions between the external hosts and the internal hosts, wherein the internal host domain includes a further set of virtual hosts each configured to operate as a proxy between an input/output interface and an application, each input/output interface being configured to address only one among the virtual hosts.
-
公开(公告)号:US20220330017A1
公开(公告)日:2022-10-13
申请号:US17655867
申请日:2022-03-22
Applicant: STMicroelectronics S.r.l.
Inventor: Francesco Caserta , Amedeo Veneroso
IPC: H04W12/03 , H04W8/18 , H04W12/041 , H04W12/0431
Abstract: A method for concealing a subscription identifier at a user equipment including a mobile equipment and an integrated circuit card storing the subscription identifier, the method including receiving a corresponding request by a server to provide a corresponding subscription identifier, performing an elliptical curve encryption of the subscription identifier generating a concealed subscription identifier, the concealing operation including the mobile equipment sending an identity retrieve command to the card, performing, before receiving the identity retrieve command at the card, a pre-calculation of the ephemeral key pair including an ephemeral private key and ephemeral public key and the shared secret key, and in response to the respective state of completion indicating that completion of the computation of a valid ephemeral key pair or shared secret key, storing the corresponding values of the ephemeral key pair and shared secret key in a table in a memory of the card.
-
公开(公告)号:US20210073425A1
公开(公告)日:2021-03-11
申请号:US17010391
申请日:2020-09-02
Applicant: Proton World International N.V. , STMicroelectronics S.r.l.
Inventor: Amedeo Veneroso , Olivier Van Nieuwenhuyze
Abstract: A secure device operating with a secure tamper-resistant platform including a tamper-resistant hardware platform and a virtual primary platform operating with a low level operating system performing an abstraction of resources of the hardware platform, and a secondary platform with a high level operating system providing a further abstraction of resources to applications in which respective internal hosts are embedded, the secure device including an internal host domain including the internal hosts, the secure device including a plurality of physical and/or logical input/output interfaces through which external hosts can access the internal hosts, the virtual primary platform being configured to set interactions between the external hosts and the internal hosts, wherein the internal host domain includes a further set of virtual hosts each configured to operate as a proxy between an input/output interface and an application, each input/output interface being configured to address only one among the virtual hosts.
-
15.
公开(公告)号:US20190306697A1
公开(公告)日:2019-10-03
申请号:US16366870
申请日:2019-03-27
Applicant: STMicroelectronics S.r.l.
Inventor: Amedeo Veneroso , Pasquale Vastano
Abstract: A method for the personalization of an integrated circuit card, includes: simulating a downloading of a single image corresponding to a fixed part of personalization data of the integrated circuit card; simulating an execution of a sequence of personalization commands for the integrated circuit card to generate a set of personalization data; combining the set of personalization data with the single image to obtain a card image comprising the fixed part of personalization data and the set of personalization data; encrypting the card image to obtain an encrypted single image; and downloading the encrypted single image in a memory of the integrated circuit card.
-
公开(公告)号:US20230379136A1
公开(公告)日:2023-11-23
申请号:US18314534
申请日:2023-05-09
Applicant: STMicroelectronics S.r.l.
Inventor: Amedeo Veneroso , Vincenzo Pascariello , Alfonso Tramontano
IPC: H04L9/00 , G06F9/4401
CPC classification number: H04L9/008 , G06F9/4401
Abstract: The present disclosure relates to a method including: the generation, by a computing device, of a first key and a bootstrapping key; the provision of the first key and an identifier of the bootstrapping key to an electronic device and the provision of the bootstrapping key and the identifier to a server; the fully homomorphic encryption, by the electronic device, of a first data value, stored in the electronic device, by using the first key; and the provision, by the electronic device, of the encrypted first data value and of the identifier, to the server.
-
公开(公告)号:US11582212B2
公开(公告)日:2023-02-14
申请号:US16655579
申请日:2019-10-17
Applicant: STMicroelectronics S.r.l.
Inventor: Luca Di Cosmo , Amedeo Veneroso
IPC: H04L9/40 , G06K7/10 , H04W8/18 , H04W12/069
Abstract: A tamper resistant device can be used for an integrated circuit card. The device includes memory storing a first security domain that includes a telecommunication profile and a second security domain that includes an application profile. A first physical interface is configured to be coupled to a baseband processor configured to operate with a mobile telecommunications network. A second physical interface configured to be coupled to an application processor. The first physical interface configured to allow the baseband processor to access the telecommunication profile and the second physical interface is configured to allow the application processor to access the application profile. The tamper resistant device is configured to enable accessibility to the application profile if corresponding commands are received at the first interface and to enable accessibility to the telecommunication profile if corresponding commands are received at the second interface.
-
公开(公告)号:US20220004625A1
公开(公告)日:2022-01-06
申请号:US17479275
申请日:2021-09-20
Applicant: STMicroelectronics S.r.l. , Proton World International N.V.
Inventor: Olivier Van Nieuwenhuyze , Amedeo Veneroso
IPC: G06F21/53
Abstract: An embedded electronic system includes a volatile memory and a processor configured to execute a low-level operating system that manages allocation of areas of the volatile memory to a plurality of high-level operating systems. Each high-level operating system executes one or more of applications. The volatile memory includes a first portion reserved for execution data of a first application and a second portion intended to store execution data of a second application. The system is configured so that once the execution data of the first application are loaded in the first portion, the low-level operating system forbids unloading of the execution data of the first application from the first portion so that the execution data of the first application remain in the volatile memory in case of a deactivation or of a setting to standby of the first application.
-
公开(公告)号:US11106472B2
公开(公告)日:2021-08-31
申请号:US16375695
申请日:2019-04-04
Applicant: STMicroelectronics S.r.l.
Inventor: Pasquale Vastano , Amedeo Veneroso
Abstract: A method for managing storage of an operating system in an integrated circuit card, includes: subdividing an operating system into a plurality of operating system components; associating one or more operating system components of the plurality of operating system components to a descriptor indicating a version of the one or more operating system components; downloading the one or more operating system components to a memory of the integrated circuit card, wherein the downloading includes verifying if an operating system component stored in the integrated circuit card is a same version of the one or more operating system components being downloaded; based on the verifying, storing the one or more operating system components in the card if the version is different; and based on the verifying discarding the one or more operating system components from the download operation if the version is the same.
-
公开(公告)号:US20200314638A1
公开(公告)日:2020-10-01
申请号:US16823004
申请日:2020-03-18
Applicant: STMicroelectronics S.r.l.
Inventor: Amedeo Veneroso
Abstract: A communication device includes an integrated smart card and a software profile management module. The software profile management module is configured to store profiles in the smart card, receive an operation request that includes an indication of a requested operation and an identifier of the smart card, check whether the operation request corresponds to an identifier of the smart card that is available in a repository server, and perform the requested operation only if the operation request is available in the repository server.
-
-
-
-
-
-
-
-
-