Secure method to update software in a security module

• US 20050283777A1
• Filed: 06/08/2005
• Published: 12/22/2005
• Est. Priority Date: 06/17/2004
• Status: Active Grant

• Current Assignee: Nagravision SA (Kudelski SA)
• Original Assignee: Nagravision SA (Kudelski SA)
• Inventors: Osen, Karl
• Granted Patent: US 7,926,050 B2
• Time in Patent Office: Days
• US Class Current: 717/168
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/443 OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
• CPC Class Codes: H04N 21/4586 Content update operation triggered locally, e.g. by comparing the version of software modules in a DVB carousel to the version stored locally deployment, distribution, installation, update of software G06F8/65; error detection or correction of the data by redundancy during software upgrading G06F11/1433; arrangements for updating broadcast information or broadcast-related information H04H60/25
• CPC Class Codes: H04N 21/8193 dedicated tools, e.g. video decoder software or IPMP tool

Abstract

The aim of this invention is to propose a transmission method of a message containing a program block that allows to avoid the consequences of a possible malicious decryption of this message. This aim is achieved through a secure method to update software embedded in a security module, this method comprising the following steps: formation of a first updating program block (PBI), determination of a target memory zone of said security module, determination through said security module, of a pre-registered content (MM Ref) in said target memory zone, formation of a second program block (SBI) obtained by the mixing of all or a part of the pre-registered content with the first program block (PBI), transmission of the second program block (SBI) to the security module, reception of the second block by the security module, reading of the target memory zone (MEM), obtaining and writing in the target memory zone of the first block by the inverse mixing of all or part of the second block and of the target memory zone content.

Claims

1. Secure method to update software embedded in a security module, this method comprising the following steps:

formation of a first updating program block,

determination of a target memory zone of said security module,

determination through said security module, of a pre-registered content in said target memory zone,

formation of a second program block obtained by the mixing of all or a part of the pre-registered content with the first program block,

transmission of the second program block to the security module,

reception of the second block by the security module,

reading of the target memory zone,

obtaining and writing in the target memory zone of the first block by the inverse mixing of all or part of the second block and of the target memory zone content.

2. Method according to claim 1, wherein the target memory zone is pre-registered by randomly generated values.

3. Method according to claim 1 implementing a module that includes a microprocessor, wherein the target memory zone is pre-registered by a dummy programme not executed by the microprocessor of the security module.

4. Method according to claim 1, wherein the mixing operation is an exclusive OR function.

5. Method according to claim 2, wherein the mixing operation is an exclusive OR function.

6. Method according to claim 3, wherein the mixing operation is an exclusive OR function.

7. Method according to claim 1, wherein the mixing operation is an encryption function with the content of the pre-registered memory as the encryption key.

8. Method according to claim 2, wherein the mixing operation is an encryption function with the content of the pre-registered memory as the encryption key.

9. Method according to claim 3, wherein the mixing operation is an encryption function with the content of the pre-registered memory as the encryption key.