EP1902404A1 - Systeme comprenant plusieurs appareils electroniques et un module de secrite - Google Patents

Systeme comprenant plusieurs appareils electroniques et un module de secrite

Info

Publication number
EP1902404A1
EP1902404A1 EP06776134A EP06776134A EP1902404A1 EP 1902404 A1 EP1902404 A1 EP 1902404A1 EP 06776134 A EP06776134 A EP 06776134A EP 06776134 A EP06776134 A EP 06776134A EP 1902404 A1 EP1902404 A1 EP 1902404A1
Authority
EP
European Patent Office
Prior art keywords
electronic device
interface
security module
data
contactless
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
EP06776134A
Other languages
German (de)
English (en)
Inventor
Klaus Finkenzeller
Florian Gawlas
Gisela Meister
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Giesecke and Devrient Mobile Security GmbH
Original Assignee
Giesecke and Devrient GmbH
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Giesecke and Devrient GmbH filed Critical Giesecke and Devrient GmbH
Publication of EP1902404A1 publication Critical patent/EP1902404A1/fr
Ceased legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/44—Program or device authentication
    • G06F21/445—Program or device authentication by mutual authentication, e.g. between devices or programs
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
    • G06F21/577—Assessing vulnerabilities and evaluating computer system security
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/606—Protecting data by securing the transmission between two devices or processes
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6209—Protecting access to data via a platform, e.g. using keys or access control rules to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/82—Protecting input, output or interconnection devices
    • G06F21/85—Protecting input, output or interconnection devices interconnection devices, e.g. bus-connected or in-line devices
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0876—Network architectures or network communication protocols for network security for authentication of entities based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3234—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H04W12/069—Authentication using certificates or pre-shared keys
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2101—Auditing as a secondary aspect
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2129—Authenticate client device independently of the user
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2153—Using hardware token as a secondary aspect
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/56—Financial cryptography, e.g. electronic payment or e-cash
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/80—Wireless
    • H04L2209/805—Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/80—Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Definitions

  • the invention relates to a system with a plurality of electronic devices and a security module which is firmly bound to one of the electronic devices. Furthermore, the invention relates to an electronic device with a security module, which is firmly bound to the electronic device.
  • TPM Trusted Piatform Module
  • the computer system can be marked as trustworthy and protected against manipulation. This is of particular interest if security-relevant operations are to be carried out with the computer system.
  • the security module can be addressed via a defined interface by the operating system or the application software of the computer system.
  • the security module can be used as a secure, ie protected against unauthorized access memory.
  • the state of the computer system can be stored in the security module.
  • the stored state of the computer system can be requested by a third party, for example a server.
  • the security module can, for example, perform an authentic transmission with an RSA signature function.
  • the security module the execution of other cryptographic algorithms, such as HMAC, generation of random numbers, etc. serve.
  • a security module which serves to two electronic devices, such as a mobile phone and a bank terminal to authenticate against each other and to secure the communication between the two by encryption, so as to carry out, for example, a secure transactions to enable a bank terminal using a mobile phone.
  • the security module has a first interface for connection to a first device, such as a mobile phone, and a second interface designed in particular as a Bluetooth interface for communication with a second electronic device, such as a corresponding security module in a bank terminal.
  • the security module is connected to one of the devices, such as a cell phone, by means of which a user subsequently receives communication with another device, such as a bank terminal, and, for example, carries out a transaction.
  • the security module acts as a secure mediator.
  • the invention has for its object to reliably ensure the usability of a firmly bound to an electronic device security module.
  • the system according to the invention comprises a first electronic device, a security module and a second electronic device.
  • the security module is firmly bound to the first electronic device and has a security device for secure storage of data and / or for performing cryptographic operations and a first interface for communication with the first electronic device.
  • the special feature of the system according to the invention is that the security module has a second interface for the autonomous implementation of direct contactless communication with the second electronic device.
  • the second electronic device may, in particular, be an external device.
  • the invention has the advantage that the possibility of communication of the second electronic device with the security module of the first electronic device is reliably ensured. Since it takes place independently of the connection between the first electronic device and the security module, this communication is still possible and trustworthy, particularly in the case of a manipulation or a malfunction of the first electronic device, and can be carried out in a standardized manner. This means that with the help of the security module, the trustworthiness of the first electronic device can be checked at a high security level.
  • the first interface is preferably galvanically connected to the first electronic device.
  • the second interface may be formed as an integral part of the safety device.
  • the second interface is designed as a passive contactless interface.
  • the second interface is designed as an active contactless interface. This also enables communication with a second electronic device, which itself is not able to generate a field for contactless data transmission. It is particularly advantageous if the active contactless interface can be operated in different communication modes. This enables communication with differently trained communication partners.
  • the security module has a passive contactless interface and an active contactless interface.
  • the security module to a control device for optional Activation of the passive contactless interface or the active contactless interface.
  • the control device can make the activation depending on whether the operating module is supplied with an operating voltage from the first electronic device. As a result, it can be ensured, for example, that the safety module is still accessible via the passive contactless interface in the event of a failure of the operating voltage.
  • the active contactless interface is preferably designed according to the NFC standard.
  • data stored in the security device can be transmitted to the second electronic device.
  • the data may be diagnostic data of the first electronic device or cryptographic data.
  • the data is only transmitted when the first electronic device and the second electronic device belong to a group of electronic devices for which a data transmission has been enabled among each other. In this way, an uncomplicated data transmission between electronic devices that belong, for example, the same person.
  • the second electronic device may include a security module communicating directly with the security module of the first electronic device without contact.
  • transactions of the cashless payment transaction can be processed via the second interface, with which rights stored in the security device are acquired.
  • a password entered into the second electronic device is transmitted to the security module of the first electronic device.
  • the first electronic device may be, for example, a computer or a mobile phone.
  • the second electronic device may be, for example, an RFID reader, an NFC device, a contactless chip card, a computer or a mobile phone.
  • the security module is preferably designed as a trusted platform module.
  • the invention further relates to an electronic device with a security module, which is firmly bound to the electronic device.
  • the security module has a security device for secure storage of data and / or for carrying out cryptographic operations and a first interface for communication with the electronic device.
  • the special feature of the electronic device according to the invention is that the security module has a second interface for the autonomous implementation of an external contactless communication independently of the electronic device.
  • 1 is a schematic diagram of a first embodiment of a system with an inventively designed security module
  • 2 is a schematic diagram of a second embodiment of a system with the security module
  • FIG. 3 is a schematic diagram of a third embodiment of a system with the security module and
  • Fig. 4 is a schematic diagram of a fourth embodiment of a system with the security module.
  • the security module 1 shows a schematic representation of a first exemplary embodiment of a system having a security module 1 designed according to the invention.
  • the security module 1 is designed as a component of an electronic device 2, for example a personal computer, a personal digital assistant (PDA) or a mobile telephone, and has security device 3, a device interface 4 and a passive contactless device
  • the security device 3 provides a number of security functionalities, such as access-protected storage of data, execution of cryptographic operations, etc. according to the specifications of the Trusted Computing Group (TGC), so that the security module 1 can be used as a Trusted Platform Module (TPM). With the help of the security module 1 can thus be implemented in the intrinsically unsafe electronic device 2, a certain security standard.
  • TGC Trusted Computing Group
  • TPM Trusted Platform Module
  • the device interface 4 and the passive contactless interface 5 are each connected to the safety device 3. Via the device interface 4 there is a communication connection to a software 6 of the electronic device 2.
  • the software 6 of the electronic device 2 is, for example, an operating system or an application.
  • the Communication link is formed as a galvanic connection, for example to a motherboard of the personal computer, to a microprocessor of the PDA or to a controller of the mobile telephone.
  • a communication of the security device 3 with the software 6 of the electronic device 2 required for ensuring the trustworthiness of the electronic device 2 is handled via this communication connection.
  • a connection to a network 7, for example the Internet can also be established via the communication connection.
  • a communication connection independent of the communication connection of the device interface 4 for carrying out a communication with a second electronic device 9, 10 can be produced.
  • communication via the passive contactless interface 5 can be carried out autonomously.
  • the communication can be carried out via the interface 5 at any time.
  • the second electronic device 9, 10 may be an external device.
  • An antenna coil 8 for contactless communication is connected to the passive contactless interface 5.
  • the antenna coil 8 can be arranged directly on the security module 1, which is designed, for example, as a security chip.
  • antenna on chip Antennas mounted on semiconductor chips are known per se by the term "coil on chip.”
  • the range of the contactless communication is very low and is generally limited to a few mm to a few cm Devices 2 require that the electronic device 2 must first be mechanically opened to an external communication partner to enable contactless communication with the security module 1.
  • the antenna coil 8 can also be attached to a readily accessible point of the electronic device 2 and connected to the passive contactless interface 5 of the security module 1 via a cable connection, for example a coaxial line.
  • a cable connection for example a coaxial line.
  • a possible installation location for the antenna coil 8 is, for example, a 5 1 A "drive bay of a personal computer
  • the antenna coil 8 may be accommodated, for example, in an attractively designed housing, which is set up separately from the electronic device 2.
  • an RFID reader 9 and an NFC device 10 are shown by way of example in FIG. 1.
  • RFID stands for Radio Frequency Identification.
  • NFC stands for Near Field Communication and refers to a data transmission by means of high-frequency magnetic alternating fields, for example with the frequency 13.56 MHz.
  • the RFID reader 9 is designed, for example, in accordance with the ISO / IEC 14443 standard and has an antenna coil 11.
  • the NFC device 10 has an antenna coil 12 and is operated as a reader for communication with the passive contactless interface 5 of the security module 1.
  • the electronic device 2 When the electronic device 2 is switched on, it supplies the safety module 1 with the necessary operating voltage, so that the safety module 1 is ready for operation and, for example, is able to operate via the device interface 4 received operating parameters of the electronic device 2 to perform cryptographic operations for the electronic device 2, etc.
  • the illustrated in Fig. 1 training of the security module 1 also allows operation of the security module 1, even if the electronic device 2 is turned off or for any other reason provides no operating voltage for the security module 1.
  • Such operation of the security module 1 independently of the electronic device 2 is always possible when the antenna coil 8 of the security module 1 is in the range of a sufficiently strong field.
  • the voltage induced in the antenna coil 8 and supplied to the passive contactless interface 5 can be used as the operating voltage for the security module 1.
  • a field suitable for this purpose can be generated both with the RFID reader 9 and with the NFC device 10 and has, for example, a frequency of 13.56 MHz.
  • the safety module 1 is always supplied with the operating voltage provided by the electronic device 2 when an operating voltage is provided by the electronic device 2. If no operating voltage is available via the electronic device 2 and nevertheless an operation of the security module 1 is desired, then the operating voltage is generated by a contactless energy transfer via the antenna coil 8 to the passive contactless interface 5.
  • the passive contactless interface 5 serves not only for the reception of energy, but also for the contactless transmission and reception of data, preferably by means of the same fields with which the energy is transmitted.
  • the security module 1 is independent of the func- ons or operating state of the electronic device 2 is operational and in particular is able to communicate with the outside world. This communication can neither be prevented nor manipulated by the electronic device 2, so that the transmitted data is very reliable.
  • the security module 1 is able to perform a secure communication via the passive contactless interface 5, for. Via a trusted channel. In this way, with the security module 1, for example, a reliable monitoring of the electronic device 2 or a reliable protection against loss of important data can be realized. Specific applications of the security module 1 will be described in more detail below.
  • the security module 1 has an active contactless interface 13 instead of the passive contactless interface 5. This makes it possible to additionally provide a contactless chip card 14 as a communication partner for the security module 1. Otherwise, the second embodiment corresponds to the first embodiment shown in FIG.
  • the active contactless interface 13 is able to generate a high-frequency magnetic alternating field itself, for example with the frequency 13.56 MHz.
  • the active contactless interface 13 can perform communication even when the antenna coil 8 is not in a field of a communication partner.
  • This allows for example the communication of the active contactless interface 13 with the contactless smart card 14, which is similar in terms of their communication capabilities of the passive contactless interface 5 of the security module 1 according to the first embodiment.
  • operation of the security module 1 and in particular communication via the active contactless interface 13 are only possible if the security module 1 from the electronic device 2, a sufficient operating voltage is supplied.
  • the active contactless interface 13 is designed, for example, as an NFC interface and then has similar communication options as the NFC device 10.
  • the active contactless interface 13 can be operated in different communication modes.
  • the active contactless interface 13 is operated in a "being card” communication mode for communication with the RFID reader 9.
  • the active contactless interface 13 behaves like a card and communicates, for example, with the ISO / IEC 14443 standard RFID reader 9.
  • the active contactless interface 13 is operated in a "peer to peer" communication mode, ie communication takes place under similar communication partners.
  • a communication mode "being reader” is provided in which the active contactless interface 13 behaves like a reading device and communicates according to, for example, ISO / IEC 14443 or ISO / IEC 15693.
  • the active contactless interface 13 thus offers more communication options than the passive contactless interface 5.
  • the active contactless interface 13 can only be used if the security module 1 is supplied by the electronic device 2 with an operating voltage, whereas the passive contactless interface 5 one from the electronic Device 2 independent operation of the security module 1 allows. All these advantages are present together in another embodiment, which is shown in Fig. 3.
  • the security module 1 has both the passive contactless interface 5 of the first embodiment and the active contactless interface 13 of the second embodiment, which are connected in parallel and can be operated optionally.
  • the security module 1 has a first switching device 15, a second switching device 16 and a voltage detector 17.
  • the first switching device 15 connects the safety device 3 depending on the switching state either with the passive contactless interface 5 or with the active contactless interface 13.
  • the second switching device 16 connects the antenna coil 8 depending on the switching state either with the passive contactless interface 5 or with the active contactless interface 13.
  • the voltage detector 17 monitors the security module 1 supplied from the electronic device 2 operating voltage and controls the two switching devices 15 and 16.
  • the voltage detector 17 If the voltage detector 17 detects a sufficient operating voltage, then he controls the two switching devices 15 and 16 so that the safety device. 3 and the antenna coil 8 are respectively connected to the active non-contact interface 13. In this case, the functionalities described in the second embodiment are available. supply. On the other hand, if the voltage detector 17 detects a too low operating voltage, it controls the two switching devices 15 and 16 so that the safety device 3 and the antenna coil 8 are each connected to the passive contactless interface 5. Thus, the functionalities described in the first embodiment are now available.
  • FIG. 4 shows a schematic representation of a fourth exemplary embodiment of a system with the security module 1.
  • the security module 1 is designed in a corresponding manner as in the first exemplary embodiment illustrated in FIG.
  • the electronic device 2, in which the security module 1 is installed, has a software stack 18, a system software 19 and an application software 20 and is connected to the network 7.
  • a further electronic device 21 is shown in Fig. 4, which communicates with the security module 1 of the electronic device 2 without contact.
  • the further electronic device 21 has an RFID reader 9 with an antenna coil 11, an NFC device 10 with an antenna coil 12, a safety device 22, a device interface 23, a software stack 24, a system software 25, an application software 26 and a keyboard 27 on. Via the RFID reader 9 or the NFC device 10, the further electronic device 21 can communicate in a contactless way directly with the passive contactless interface 5 of the security module 1 of the electronic device 2.
  • the passive contactless interface 5 is used to establish a backup of the data of the security module 1.
  • This application is of particular interest when the electronic device 2 is no longer functional because, for example, the power supply is defective or there is another hardware error or software error.
  • a manipulation of the software 6 or the system software 19 or the application software 20 could be present, so that it is no longer trustworthy.
  • the further electronic device 21 illustrated in FIG. 4 communicates with the security module 1 via the passive contactless interface 5 with the aid of the RFID reader 9 or the NFC device 10.
  • the data of the Safety device 3 transmitted to the other electronic device 21 and stored there.
  • these data may be keys to cryptographic algorithms, such as asymmetric RSA
  • Keys for encryption or decryption and / or signature creation of data or to pass passwords can be stored in the security device 22 of the further electronic device 21 or in a security module of a other functioning and trusted electronic device. If keys for hard disk encryption or keys for encryption of such keys are read out, they can be used to decrypt encrypted data on memories of the electronic device 2. Such data would not be reconstructed in a defective electronic device 2 without other backup mechanisms.
  • a second application is to read out diagnostic data of the electronic device 2 from the security module 1 using the RFID reader 9 or the NFC device 10 via the passive contactless interface 5.
  • Diagnostic data can be measured data about the system state, eg. B. BIOS, operating system, application, be.
  • the measurement data are measured according to the concept of the TCG during booting of the electronic device 2 and stored in the safety device 3 in so-called Platform Configuration Registers (PCR).
  • PCR Platform Configuration Registers
  • An authorized user can read out the measurement data directly from the PCRs.
  • Defective or manipulated system software 19 or application software 20 can not prevent the transmission of the measured data to the authorized user.
  • the user for example an administrator, can use the PCR values that have been reliably obtained to ascertain which areas of the software 6 or the system software 19 or the application software 20 are still trustworthy and which areas are untrustworthy.
  • the reading out of the measurement data from the security module 1 is possible even in the event of total failure of the electronic device 2.
  • a third application concerns the secure acquisition and storage of benefit entitlements.
  • the entitlements may constitute a ticket for public transport, a ticket or other monetary benefits.
  • the benefit claims can, for example, over the network 7 can be safely loaded onto the security module 1.
  • special protocols are provided in the TCG, such. B. a TCG compliant TLS connection.
  • the payment process can take place with the aid of the RFID reader 9 or the NFC device 10 via the passive contactless interface 5 of the security module 1.
  • a secure transmission is performed via a secure channel.
  • Such a secure channel may be constructed using the RFID reader 9 or the NFC device 10, the security device 22 and the software stack 23.
  • a fourth application relates to the secure password input via the keyboard 27 or another input unit of the further electronic device 21, wherein the password using the RFID reader 9 or the NFC device 10 via the passive contactless interface 5 towasheinrich- device. 3 of the electronic device 2 is transmitted.
  • the contactless transmission allows a direct transmission path. This reduces the risk that passwords will be spied on by the possibly manipulated system software 19 or application software 20 of the electronic device 2.
  • the password transmission can also be effected by a cryptographically secured channel between the electronic device 2 and the further electronic device 21.
  • the secure channel can be constructed in accordance with the concepts of the TCG, in particular with the aid of the safety devices 3 and 22.
  • a fifth application concerns the copy protection of a portable data carrier, e.g. B. a CD.
  • the portable data carrier is designed such that it contains a contactless data carrier which can communicate with the security module 1 via the active contactless interface 13 in an analogous manner as the contactless chip card 14 shown in FIG. there Rights can be managed with special protection mechanisms that prevent unauthorized copying of rights.
  • Such a protection mechanism can be realized, for example, by means of an access-controlled read command.
  • the read command allows the copying of special data, such as: B. rights to listen to a piece of music, only if the rights are subsequently deleted on the electronic device 2. In the case of defective electronic devices 2, the rights could be secured without the risk of misuse of the unauthorized duplication.
  • Another possible protection mechanism involves the storage of safety-critical data, which are stored in the installation of software on the portable data carrier and the security module 1 of the electronic device 2.
  • the stored data can prevent unauthorized duplication of the data of the portable data carrier.
  • a sixth application is the secure transmission of large amounts of data.
  • the security module 1 of the electronic device 2 exchanges with the security module of another electronic device via the passive contactless interface 5 or the active contactless interface 13 only safety-critical data, such.
  • the security modules 1 in this application also take over the task of encrypting the large amounts of data and after the transfer via a fast interface such. B. IRDA or WLAN, to decrypt again.
  • a seventh application is to group together a plurality of electronic devices 2 each having a security module 1.
  • mobile phones and landline phones, and other electronic devices 2, z. A PDA a group belong.
  • actions can be performed that can not be performed with electronic devices 2 outside the group. So z. B. a data match take place, or on request, data can also be read by other electronic devices 2.
  • a user of a landline connection could then z. B. also call on telephone numbers of his mobile phone without this turn on. So that data can not be corrupted by a defective or manipulated electronic device 2, a password mechanism of the safety device 3 can be used. In this case, critical data are "encrypted" with the password via an HMAC and are only readable if the password is entered correctly.
  • At least one electronic device 2 each has a security module 1.
  • the communication partner of the electronic device 2 may also have a security module 1 with security device 3, device interface 4 and passive contactless interface 5 or active contactless interface 13. In this case, a direct communication between the security modules 1 of the electronic device 2 and the communication partner can be provided.
  • the communication partner only has a security device 3 and an associated device interface 4 or even has no TPM security.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Bioethics (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Health & Medical Sciences (AREA)
  • General Health & Medical Sciences (AREA)
  • Computing Systems (AREA)
  • Technology Law (AREA)
  • Power Engineering (AREA)
  • Multimedia (AREA)
  • Databases & Information Systems (AREA)
  • Storage Device Security (AREA)
  • Telephone Function (AREA)

Abstract

La présente invention concerne un système comprenant un premier appareil électronique (2), un module de sécurité (1) et un second appareil électronique (9, 10, 14, 21). Le module de sécurité (1) est relié fixement au premier appareil électronique (2) et présente un système de sécurité (3) permettant d'enregistrer de manière sécurisée des données et/ou d'effectuer des opérations cryptographiques, ainsi qu'une première interface (4) pour communiquer avec le premier appareil électronique (2). Le système selon cette invention est caractérisé en ce que le module de sécurité (1) présente une seconde interface permettant une communication directe et sans contact avec le second appareil électronique (9, 10, 14, 21).
EP06776134A 2005-07-06 2006-07-05 Systeme comprenant plusieurs appareils electroniques et un module de secrite Ceased EP1902404A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE102005031629A DE102005031629A1 (de) 2005-07-06 2005-07-06 System mit mehreren elektronischen Geräten und einem Sicherheitsmodul
PCT/EP2006/006565 WO2007003429A1 (fr) 2005-07-06 2006-07-05 Systeme comprenant plusieurs appareils electroniques et un module de secrite

Publications (1)

Publication Number Publication Date
EP1902404A1 true EP1902404A1 (fr) 2008-03-26

Family

ID=36968652

Family Applications (1)

Application Number Title Priority Date Filing Date
EP06776134A Ceased EP1902404A1 (fr) 2005-07-06 2006-07-05 Systeme comprenant plusieurs appareils electroniques et un module de secrite

Country Status (6)

Country Link
US (1) US20080297313A1 (fr)
EP (1) EP1902404A1 (fr)
JP (1) JP5107915B2 (fr)
CN (2) CN101243452A (fr)
DE (1) DE102005031629A1 (fr)
WO (1) WO2007003429A1 (fr)

Families Citing this family (21)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102007044602A1 (de) * 2007-09-19 2009-04-23 Continental Automotive Gmbh Multilayer-Leiterplatte und Verwendung einer Multilayer-Leiterplatte
WO2009069971A2 (fr) 2007-11-30 2009-06-04 Samsung Electronics Co., Ltd. Procédé et système pour une communication sécurisée dans un réseau de communication en champ proche
CN101946453B (zh) * 2007-12-19 2014-03-05 佩塞特股份公司 用于接收和发送加密数据的系统
DE102010013200A1 (de) * 2010-03-29 2011-09-29 Giesecke & Devrient Gmbh System zum Eingeben eines Geheimnisses
DE102010003581A1 (de) * 2010-04-01 2011-10-06 Bundesdruckerei Gmbh Elektronisches Gerät, Datenverarbeitungssystem und Verfahren zum Lesen von Daten aus einem elektronischen Gerät
US20120294445A1 (en) * 2011-05-16 2012-11-22 Microsoft Corporation Credential storage structure with encrypted password
JP2015513738A (ja) 2012-02-29 2015-05-14 モビーウェイブ インコーポレイテッド 装置上でセキュアな金融取引を行うための方法、装置及びセキュア要素
US9514138B1 (en) * 2012-03-15 2016-12-06 Emc Corporation Using read signature command in file system to backup data
CN103780387A (zh) * 2012-10-25 2014-05-07 联芯科技有限公司 硬件保密模块与保密终端及其实现方法
US9398448B2 (en) * 2012-12-14 2016-07-19 Intel Corporation Enhanced wireless communication security
WO2014136505A1 (fr) * 2013-03-08 2014-09-12 株式会社村田製作所 Dispositif d'entrée à touches et appareil électronique
DE102013012791A1 (de) * 2013-07-31 2015-02-05 Giesecke & Devrient Gmbh Übermittlung einer Zugangskennung
CN103530161B (zh) * 2013-10-22 2018-03-27 北京深思数盾科技股份有限公司 一种无线信息安全设备系统及安全保护方法
CN103532697B (zh) * 2013-10-22 2017-08-25 北京深思数盾科技股份有限公司 一种无线信息安全设备的实现方法及系统
DE102014208853A1 (de) * 2014-05-12 2015-11-12 Robert Bosch Gmbh Verfahren zum Betreiben eines Steuergeräts
CN105404820A (zh) * 2014-09-15 2016-03-16 深圳富泰宏精密工业有限公司 文件安全存取系统与方法
KR20160035427A (ko) * 2014-09-23 2016-03-31 삼성전자주식회사 전자 장치 및 액세서리 장치와 액세서리 장치 인증 방법
CN105763593B (zh) * 2014-12-19 2020-01-24 中兴通讯股份有限公司 多用户共享环境下的设备共享方法、装置、服务器及终端
CN108536427B (zh) * 2017-03-06 2021-05-14 北京小米移动软件有限公司 应用程序的编译方法及装置
US10698752B2 (en) * 2017-10-26 2020-06-30 Bank Of America Corporation Preventing unauthorized access to secure enterprise information systems using a multi-intercept system
DE102018215361A1 (de) * 2018-09-10 2020-03-12 MTU Aero Engines AG Schnittstellenanordnung für einen Triebwerksregler

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20020177407A1 (en) * 2001-05-23 2002-11-28 Fujitsu Limited Portable telephone set and IC card
US20050103839A1 (en) * 2002-05-31 2005-05-19 Infineon Technologies Ag Authorization means security module terminal system

Family Cites Families (24)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JPH01205397A (ja) * 1988-02-12 1989-08-17 Asahi Chem Ind Co Ltd Ｉｃカード
US5237609A (en) * 1989-03-31 1993-08-17 Mitsubishi Denki Kabushiki Kaisha Portable secure semiconductor memory device
JPH08221531A (ja) * 1995-02-16 1996-08-30 Hitachi Ltd 携帯可能電子装置のグルーピング方法
JP3764517B2 (ja) * 1996-01-26 2006-04-12 株式会社ルネサステクノロジ 通信装置
US6353406B1 (en) * 1996-10-17 2002-03-05 R.F. Technologies, Inc. Dual mode tracking system
FI981902A (fi) * 1998-09-04 2000-03-05 Sonera Oyj Turvamoduuli, turvajärjestelmä ja matkaviestin
WO2001008111A1 (fr) * 1999-07-22 2001-02-01 Koninklijke Philips Electronics N.V. Support de donnees pour le stockage de donnees et systeme de circuit pour ce support de donnees
JP3800010B2 (ja) * 2001-01-26 2006-07-19 株式会社デンソー 携帯電話装置並びにｉｃタグ
JP2002245427A (ja) * 2001-02-20 2002-08-30 Toshiba Corp Ｉｃカード、ｉｃカード端末装置およびｉｃカード複製方法
JP2003067684A (ja) * 2001-08-24 2003-03-07 Taku Yamaguchi Ｉｃカード、及びｉｃカード機能を具備した通信端末
JP2003078516A (ja) * 2001-08-30 2003-03-14 Dainippon Printing Co Ltd 電子鍵格納ｉｃカード発行管理システム、再発行ｉｃカード及び電子鍵格納ｉｃカード発行管理プログラム
US7194762B2 (en) * 2001-11-30 2007-03-20 Lenovo (Singapore) Pte. Ltd. Method of creating password list for remote authentication to services
US20030150915A1 (en) * 2001-12-06 2003-08-14 Kenneth Reece IC card authorization system, method and device
JP2004215225A (ja) * 2002-12-17 2004-07-29 Sony Corp 通信システムおよび通信方法、並びにデータ処理装置
JP4065525B2 (ja) * 2003-02-25 2008-03-26 キヤノン株式会社 物品管理装置
JP2004295710A (ja) * 2003-03-28 2004-10-21 Hitachi Ltd 電子乗車券決済方法およびシステム
JP2005011273A (ja) * 2003-06-23 2005-01-13 Dainippon Printing Co Ltd Ｉｃカード
US7472834B2 (en) * 2003-07-09 2009-01-06 Stmicroelectronics S.A. Dual-mode smart card
ATE451658T1 (de) * 2003-07-22 2009-12-15 Nokia Corp Lesereinrichtung für einen hochfrequenz- identifikations-transponder mit transponder- funktionalität
FR2859560B1 (fr) * 2003-09-05 2007-08-17 Samsung Electronics Co Ltd Carte a puce et procede de traitement de donnees sur la carte
JP2007507786A (ja) * 2003-10-06 2007-03-29 コーニンクレッカ フィリップス エレクトロニクス エヌ ヴィ 電気機器のハードウェア及び／又はソフトウェア並びに電気機器と協働するデータキャリアを識別及び／又は検証するための方法及び回路
JP4539071B2 (ja) * 2003-10-23 2010-09-08 ソニー株式会社 携帯無線通信装置。
US7298272B2 (en) * 2005-04-29 2007-11-20 Hewlett-Packard Development Company, L.P. Remote detection employing RFID
US8286004B2 (en) * 2009-10-09 2012-10-09 Lsi Corporation Saving encryption keys in one-time programmable memory

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20020177407A1 (en) * 2001-05-23 2002-11-28 Fujitsu Limited Portable telephone set and IC card
US20050103839A1 (en) * 2002-05-31 2005-05-19 Infineon Technologies Ag Authorization means security module terminal system

Also Published As

Publication number Publication date
DE102005031629A1 (de) 2007-01-11
WO2007003429A1 (fr) 2007-01-11
US20080297313A1 (en) 2008-12-04
JP5107915B2 (ja) 2012-12-26
JP2009500735A (ja) 2009-01-08
CN101243452A (zh) 2008-08-13
CN102722676A (zh) 2012-10-10

Similar Documents

Publication Publication Date Title
EP1902404A1 (fr) Systeme comprenant plusieurs appareils electroniques et un module de secrite
DE60209589T2 (de) Elektronisches Gerät und Verfahren für Fehlerbeseitigungsberechtigung
EP2982046A1 (fr) Dispositif pourvu de moyens de communication et d'un logement pour une carte à puce
EP0355372A1 (fr) Terminal commandé par support de données dans un système d'échange de données
EP2417550A1 (fr) Procédé d'exécution d'une application au moyen d'un support de données portable
EP3391278B1 (fr) Jeton d'identification à microcontrôleur protégé
EP2709052A1 (fr) Dispositif de protection de transactions électroniques avec des signatures électroniques sécurisées
EP2673731B1 (fr) Procédé de programmation d'une puce pour terminal mobile
WO2011124333A1 (fr) Procédé de transmission sûre d'une application d'un serveur à une unité lecteur
EP2885907B1 (fr) Procédé d'installation des applications de sécurite dans un élèment de sécurité d'un terminal
EP2272025A1 (fr) Système et procédé de production de supports utilisateur
DE602004011965T2 (de) Verfahren und schaltung zum identifizieren und/oder verifizieren von hardware und/oder software eines geräts und eines mit dem gerät arbeitenden datenträgers
EP2169579A1 (fr) Procédé et dispositif d'accès à un document lisible sur machine
WO2013050112A1 (fr) Marquage de données non sûres au moyen d'un module nfc
EP2234030B1 (fr) Carte à puce, système informatique, procédé d'activation d'une carte à puce et procédé de personnalisation d'une carte à puce
DE102012022875A1 (de) Verfahren und System zur Applikationsinstallation
EP1748398A2 (fr) Système muni d'au moins une plateforme de calcul et d'au moins un symbole d'utilisateur
EP2465067B1 (fr) Procédé et appareil pour l'exécution d'applications dans un environnement autonome et sécurisé
EP1904980A1 (fr) Procede pour faire fonctionner un support de donnees portable
DE102005044953A1 (de) Tragbare Verschlüsselungsvorrichtung für Finanz-Transferaktionen und Verfahren unter deren Verwendung
EP1714203A1 (fr) Systeme comprenant au moins un ordinateur et au moins un support de donnees portatif
WO2023072423A1 (fr) Autorisation d'une application sur un élément de sécurité
EP1416449A2 (fr) Module de sécurité et méthode pour effectuer des transactions électroniques confidentielles
DE102010013200A1 (de) System zum Eingeben eines Geheimnisses
DE10216601A1 (de) Programmsicherungsverfahren

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20080206

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU LV MC NL PL PT RO SE SI SK TR

DAX Request for extension of the european patent (deleted)
17Q First examination report despatched

Effective date: 20081007

DAX Request for extension of the european patent (deleted)
RAP1 Party data changed (applicant data changed or rights of an application transferred)

Owner name: GIESECKE+DEVRIENT MOBILE SECURITY GMBH

REG Reference to a national code

Ref country code: DE

Ref legal event code: R003

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION HAS BEEN REFUSED

18R Application refused

Effective date: 20171223