Control unit

• US 20040187035A1
• Filed: 05/12/2004
• Published: 09/23/2004
• Est. Priority Date: 06/12/2001
• Status: Active Grant

• Current Assignee: Giesecke + Devrient Mobile Security GmBH (Giesecke & Devrient GmbH)
• Original Assignee: Giesecke & Devrient GmbH
• Inventors: Uebelacker, Hubert, Schwan, Olaf, Lindlbauer, Marc
• Granted Patent: US 7,698,737 B2
• Time in Patent Office: Days
• US Class Current: 713/202
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: G11C 16/22 Safety or protection circuits preventing unauthorised or accidental access to memory cells

Abstract

A control unit is described for technical installations, devices and/or machines having a microprocessor, a programmable memory and a housing enclosing the microprocessor and programmable memory. Data lines lead out of the housing for connection with an external device for writing data to the programmable memory. The control unit is enclosed in the housing such that the operability of the control unit is at least partly destroyed when the housing is opened. The control unit furthermore hag a check device that checks for authorization a write access by which data are written to the programmable memory over the data line, and causes the data to be written to the programmable memory only in case of a successful check of authorization.

Claims

1. A control unit (1) having a microprocessor, a programmable memory, a housing (2) and at least one data line (3, 4) leading out of the housing (2) for connection with an external device for writing and/or reading data to or from the programmable memory,

characterized in that

the control unit (1) is encapsulated in the housing (2) such that the operability of the control unit (1) is at least partly destroyed when the housing (2) is opened, and the control unit (1) has a check device (5) that checks for authorization a write and/or read access by which data are written to the programmable memory or read therefrom over the data line (3, 4) and causes the data to be read from/written to the programmable memory only in case of a successful check of authorization.

2. A control unit according to claim 1, characterized in that the check device comprises a memory with a secret check word and a comparing device for comparing with said check word for an authorization check a keyword transferred to the control device over a data line before a write access.

3. A control unit according to claim 1 or 2, characterized in that the check device comprises means for carrying out a challenge-response method for an authorization check.

4. A control unit according to any of claims 1 to 5, characterized in that the check device comprises means for encryption and/or decryption of data.

5. A control unit according to any of claims 1 to 3, characterized in that the check device (5) comprises means for checking a digital signature of the data transferred over the data line (3, 4).

6. A control unit according to any of claims 1 to 5, characterized in that the control unit is encapsulated in the housing such that memory areas containing a secret check word and/or secret key and/or secret encryption algorithm are erased and/or destroyed when the housing is opened.

7. A control unit according to any of claims 1 to 6, characterized in that the check device (5) contains means for establishing a connection to a third authority and a read/write access is permitted only when it has been released by said third authority.

8. Use of a control unit (5) according to any of claims 1 to 7 for controlling an automobile engine.