External secure unit

• US 10,303,867 B2
• Filed: 06/18/2014
• Issued: 05/28/2019
• Est. Priority Date: 07/25/2013
• Status: Active Grant

• Current Assignee: Giesecke + Devrient Mobile Security GmBH (Giesecke & Devrient GmbH)
• Original Assignee: Giesecke + Devrient Mobile Security GmBH (Giesecke & Devrient GmbH)
• Inventors: Schroder, Sonke
• Primary Examiner(s): Jeudy, Josnel
• Application Number:
  US14/907,336
• Publication Number:
  US 20160171201A1
• Time in Patent Office: 1,805 Days
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: H04B 5/26 using coils
• CPC Class Codes: H04B 5/72 for local intradevice communication
• CPC Class Codes: H04B 5/77 for interrogation
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 92/18 between terminal devices

Abstract

A method for operating an external secure unit comprises at least a memory for storing data, a processor for processing the data, at least one interface for receiving data from a communication device or sending them thereto, wherein the communication device comprises at least a memory for storing at least one application program, a processor for processing and executing the application program, at least a first interface for sending data to the external secure unit or receiving them therefrom, at least a second interface for sending data to a transmission network or receiving them therefrom, wherein the method is wherein security-relevant data necessary for executing the application program in the communication device are stored in the external secure unit, and the communication device requests the security-relevant data from the external secure unit for executing the application program.

Claims

1. A method for operating an external secure unit,

in which the external secure unit comprises at least the following:

an antenna coil configured to operate at a first frequency;

a

memory for storing data;

a chip module including a processor for processing the data, the chip module further including a second antenna coil configure to operate at a second, different frequency, wherein the chip module is electroconductively connected to the first antenna coil, and wherein the antenna coil and the second antenna coil are positioned orthogonally to each other, allowing the chip module to select which antenna coil has an optimal coupling position relative to a reader, and to implement the selected antennal coil to transmit or receive data; and

one or more interfaces disposed on the external secure unit for receiving data from a communication device or sending data thereto, wherein at least one of the one or more interfaces is not supported by the communication device, wherein the at least one interface not supported by the communication device allows the communication device to communicate through the interface not supported by the communication device to other communication devices that have the interface not supported by the communication device;

wherein the communication device comprises at least;

a memory for storing at least one application program;

a processor for processing and executing the application program;

at least a first interface for sending data to the external secure unit or receiving them therefrom; and

at least a second interface for sending data to a transmission network or receiving them therefrom;

wherein security-relevant data necessary for executing the application program in the communication device are stored in the external secure unit, and the communication device requests the security-relevant data from the external secure unit for executing the application program.

2. The method according to claim 1, wherein at least one application program is assigned a security level in dependence on its application.

3. The method according to claim 1, wherein data are transferred contactlessly between the communication device and the external secure unit.

4. The method according to claim 3, wherein the external secure unit employs as an interface a near field communication (NFC) interface for communication with the communication device.

5. The method according to claim 1, wherein the external secure unit employs two- and/or three-dimensionally arranged antennas for communication with the communication device.

6. The method according to claim 1, wherein the external secure unit employs a sensor for capturing biometric features.

7. The method according to claim 1, wherein as an external secure unit there is employed a finger-ring which consists of at least two components, with an electronic component being inserted into at least one component.

8. The method according to claim 7, wherein the finger-ring consists of a strip-shaped material, with the material being shaped into a ring.

9. The method according to claim 7, wherein a near field communication (NFC) module is inserted into the ring, with the NFC module being replaceable.

10. The method according to claim 1, wherein a mobile telephone is employed as a communication device.

11. The method according to claim 1, wherein a mobile radio network is employed as a transmission system.

12. An external secure unit, comprising the following:

an antenna coil configured to operate at a first frequency;

a memory for storing data;

a processor for processing the data;

a second antenna coil configure to operate at a second, different frequency, wherein the antenna coil and the second antenna coil are positioned orthogonally to each other, allowing the processor to select which antenna coil has an optimal coupling position relative to a reader, and to implement the selected antenna coil to transmit or receive data; and

one or more interfaces disposed on the external secure unit for receiving data from a communication device or sending data thereto, wherein at least one of the one or more interfaces is not supported by the communication device, wherein the at least one interface not supported by the communication device allows the communication device to communicate through the interface not supported by the communication device to other communication devices that have the interface not supported by the communication device, the communication device including;

a memory for storing at least one application program;

a processor for processing and executing the application program;

at least a first interface for sending data to the external secure unit or receiving them therefrom; and

at least a second interface for sending data to a transmission network or receiving them therefrom;

wherein security-relevant data necessary for executing the application program in the communication device are stored in the external secure unit, and the communication device requests the security-relevant data from the external secure unit for executing the application program.

13. A system comprising:

an external secure unit that includes the following;

an antenna coil configured to operate at a first frequency;

a memory for storing data;

a processor for processing the data;

a second antenna coil configure to operate at a second, different frequency, wherein the antenna coil and the second antenna coil are positioned orthogonally to each other, allowing the processor to select which antenna coil has an optimal coupling position relative to a reader, and to implement the selected antennal coil to transmit or receive data; and

one or more interfaces disposed on the external secure unit for receiving data from a communication device or sending data thereto, wherein at least one of the one or more interfaces is not supported by the communication device, wherein the at least one interface not supported by the communication device allows the communication device to communicate through the interface not supported by the communication device to other communication devices that have the interface not supported by the communication device; and

the communication device which includes the following;

a memory for storing at least one application program;

a processor for processing and executing the application program;

at least a first interface for sending data to the external secure unit or receiving them therefrom; and

at least a second interface for sending data to a transmission network or receiving them therefrom;

wherein security-relevant data necessary for executing the application program in the communication device are stored in the external secure unit, and the communication device requests the security-relevant data from the external secure unit for executing the application program.

14. The system according to claim 13, wherein a mobile telephone is employed as a communication device.