Method and system to provide a trusted channel within a computer system for a SIM device

• US 20050108532A1
• Filed: 11/17/2003
• Published: 05/19/2005
• Est. Priority Date: 11/17/2003
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Bajikar, Sundeep M.
• Granted Patent: US 7,636,844 B2
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

Exchanging data between a SIM device and an application executed in a trusted platform, wherein the data to be exchanged is secured from unauthorized access. In one embodiment, the exchanging data includes exchanging an encryption key via a trusted path within a computer system, and exchanging data encrypted with the encryption key, via an untrusted path with the computer system.

Claims

1. A method comprising:

exchanging data between a SIM device and an application executed in a trusted platform, wherein the data to be exchanged is secured from unauthorized access.

2. The method of claim 1, wherein the exchanging of data include:

exchanging an encryption key via a trusted path within a computer system; and

exchanging data encrypted with the encryption key, via an untrusted path within the computer system.

3. The method of claim 2, wherein the exchanging the encryption key includes the application transmitting the encryption key to a protected section of memory within the computer system;

and

a SIM device accessing the encryption key from the protected section of memory.

4. The method of claim 2, wherein the exchanging the encryption key includes the application accessing the encryption key from the SIM device, the application accessing the encryption key via a trusted port of a chipset.

5. The method of claim 2, wherein the exchanging the encryption key includes exchanging multiple encryption keys, and the exchanging data includes exchanging separate units of data, with each unit of data separately encrypted with an encryption key selected from the multiple encryption keys.

6. The method of claim 2, wherein the exchanging data includes a host controller transmitting data from the SIM device to an unprotected section of memory.

7. The method of claim 6, wherein the exchanging data includes a driver transmitting data from the unprotected section of memory to the application.

8. The method of claim 7, wherein the host controller is a Universal Serial Bus (USB) host controller and the driver is a USB driver.

9. The method of claim 2, wherein the exchanging a encryption key includes the SIM device reading the encryption key from a protected section of memory via a trusted port of a chip set.

10. The method of claim 2 further including:

the application decrypting the encrypted data using the encryption key.

11. The method of claim 2 further including

prior to exchanging the encryption key, the application authenticating the SIM device.

12. The method of claim 6, further including:

exchanging a new encryption key based on a predetermined event selected from a group comprising of, each new transaction, passage of a predetermined period of time, and exchange of a predetermined amount of data.

14. The system of claim 11, wherein the exchange of data is to include an exchange of an encryption key via a trusted path within a computer system, and an exchange of data encrypted with the encryption key, via an untrusted path within the computer system.

16. The system of claim 14, wherein the exchange of the encryption key includes the application to access the encryption key from the SIM device, the application to access the encryption key via a trusted port of a chipset.

17. The system of claim 14, wherein the exchange of the encryption key includes an exchange of multiple encryption keys, and the exchange of data includes an exchange of separate units of data, with each unit of data separately encrypted with an encryption key selected from the multiple encryption keys.

18. The system of claim 12, wherein the system further includes a host controller to transmit data from the SIM device to an unprotected section of memory.

19. The system of claim 14, wherein the system further includes a driver to transmit data from the unprotected section of memory to the application.

20. The system of claim 19, wherein the host controller is a Universal Serial Bus (USB) host controller and the driver is a USB driver.

21. The system of claim 14, wherein the SIM device is to read the encryption key from the protected section of memory via a trusted port of the chip set.

22. The system of claim 14, wherein the application is to decrypt the encrypted data using the encryption key.

23. The system of claim 19, wherein the application is to authenticate the SIM device prior to the exchange of the encryption key.

24. The system of claim 14, wherein a new encryption key is to be exchanged based on a predetermined event selected from a group comprising of, each new transaction, passage of a predetermined period of time, and exchange of a predetermined amount of data.

13. A system comprising:

a processor;

a memory having a protected section and an unprotected section;

a SIM device; and

a chipset to Exchange data between the SIM device and an application executed in a trusted platform, wherein the data to be exchanged is secured from unauthorized access.

15. The system of claim 13, wherein the exchange of the encryption key includes the application to transmit the encryption key to the protected section of memory, and the SIM device to access the encryption key from the protected section of memory.