System and method for securing data from a remote input device

• US 20060133604A1
• Filed: 12/09/2005
• Published: 06/22/2006
• Est. Priority Date: 12/21/2004
• Status: Active Grant

• Current Assignee: NXP B.V. (NXP Semiconductors NV)
• Original Assignee: Broadcom Corporation (Broadcom, Inc.)
• Inventors: Buer, Mark, Frank, Ed
• Granted Patent: US 8,295,484 B2
• Time in Patent Office: Days
• US Class Current: 380/28
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/0877 using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]

Abstract

An input device with an integrated security module communicates with a processing component over an insecure medium. The insecure medium may be a wireless network, software stack, or the like. According to one embodiment, the security module is integrated into an existing chip of the input device. Data generated by the input device is encoded and/or authenticated by the security module prior its transmission to the processing device. The processing device receives the input data and processes it within its own security boundary for providing selected services or information to a user or application associated with the input device.

Claims

1. A secure data processing method comprising:

generating input data via an input device;

securing the input data at the input device via an integrated security module;

transmitting the secured input data over an insecure medium;

receiving the secured input data at a processing component; and

processing the secured input data within a security boundary of the processing component.

2. The method of claim 1, wherein the securing of the input data includes generating an asymmetric key pair.

3. The method of claim 2, wherein the asymmetric key pair includes a private key and a public key, wherein the private key is stored within the security module and the public key is exported to the processing component.

4. The method of claim 2, wherein the asymmetric key pair is generated within a security boundary provided by the security module.

5. The method of claim 2 further comprising establishing a secure data communications channel over the insecure medium based on the asymmetric key pair.

6. The method of claim 1, wherein the securing of the input data includes generating a symmetric key.

7. The method of claim 1, wherein the security module encodes or authenticates the input data based on the symmetric key.

8. The method of claim 1, wherein the input device is a sensor.

9. The method of claim 1, wherein the insecure medium is a wireless network.

10. The method of claim 1, wherein the insecure medium is software.

11. A secure data processing system comprising:

an input device generating input data, the input device including an integrated security module for securing the input data and transmitting the secured input data over an insecure medium; and

a processing component receiving the secured input data over the insecure medium and processing the input data within a security boundary of the processing component.

12. The system of claim 11, wherein the securing of the input data includes generating an asymmetric key pair.

13. The system of claim 12, wherein the asymmetric key pair includes a private key and a public key, wherein the private key is stored within the security module and the public key is exported to the processing component.

14. The system of claim 12, wherein the asymmetric key pair is generated within a security boundary provided by the security module.

15. The system of claim 12, wherein the security module establishes a secure data communications channel over the insecure medium based on the asymmetric key pair.

16. The system of claim 11, wherein the securing of the input data includes generating a symmetric key.

17. The system of claim 11, wherein the security module encodes or authenticates the input data based on the symmetric key.

18. The system of claim 11, wherein the input device is a sensor.

19. The system of claim 11, wherein the insecure medium is a wireless network.

20. The system of claim 11, wherein the insecure medium is software.

21. A data input device comprising:

an integrated security module for securing input data generated at the input device; and

means for transmitting the secured input data over an insecure medium, wherein a processing component receives the secured input data over the insecure medium and processes the input data within a security boundary of the processing component.

22. The data input device of claim 21, wherein the securing of the input data includes generating an asymmetric key pair.

23. The data input device of claim 22, wherein the asymmetric key pair includes a private key and a public key, wherein the private key is stored within the security module and the public key is exported to the processing component.

24. The data input device of claim 22, wherein the asymmetric key pair is generated within a security boundary provided by the security module.

25. The data input device of claim 22, wherein the security module establishes a secure data communications channel over the insecure medium based on the asymmetric key pair.

26. The data input device of claim 21, wherein the securing of the input data includes generating a symmetric key.

27. The data input device of claim 21, wherein the security module encodes or authenticates the input data based on the symmetric key.

28. The data input device of claim 21 further comprising a sensor for receiving user identification information.

29. The data input device of claim 21, wherein the insecure medium is a wireless network.

30. The data input device of claim 21, wherein the insecure medium is software.

31. A secure data processing method comprising:

providing to a processing component an identifier for an input device;

exporting a first cryptographic key to the processing component;

securely providing to the input device a second cryptographic key using the first cryptographic key;

generating input data via an input device;

securing the input data at the input device using the second cryptographic key; and

transmitting the secured input data over an insecure medium.

32. The method of claim 31, wherein the first cryptographic key is a public portion of an asymmetric key.

33. The method of claim 31, wherein the second cryptographic key is a symmetric key, and the securing the input data includes encrypting the input data using the symmetric key.