Security and privacy enhancements for security devices

• US 20060288407A1
• Filed: 09/17/2003
• Published: 12/21/2006
• Est. Priority Date: 10/07/2002
• Status: Abandoned Application

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Goldbeck-Lowe, Tomas, Naslund, Mats, Norman, Karl
• Application Number:
  US10/530,293
• Publication Number:
  US 20060288407A1
• Time in Patent Office: Days
• US Class Current: 726/9
• CPC Class Codes: H04L 12/06 Answer-back mechanisms or circuits
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware
• CPC Class Codes: H04W 74/00 Wireless channel access

Abstract

The invention generally relates to a tamper-resistant security device, such as a subscriber identity module or equivalent, which has an AKA (Authentication and Key Agreement) module for performing an AKA process with a security key stored in the device, as well as means for external communication. The idea according to the invention is to provide the tamper-resistant security device with an application adapted for cooperating with the AKA module and means for interfacing the AKA module and the application. The application cooperating with the AKA module is preferably a security and/or privacy enhancing application. The application is advantageously a software application implemented in an application environment of the security device. For increased security, the security device may also be adapted to detect whether it is operated in its normal secure environment or a foreign less secure environment, and set access rights to resident files or commands that could expose the AKA process or corresponding parameters accordingly.

Claims

1-43. -43. (canceled)

44. A tamper-resistant security device having means for storing user credentials, including at least a security key, an Authentication and Key Agreement (AKA) module for performing an AKA process with said security key, and means for external communication,

wherein said tamper-resistant security device further comprises:

an application for cooperation with said AKA module; and

means for interfacing said AKA module and said cooperating application.

45. The tamper-resistant security device according to claim 44, wherein said cooperating application performs enhanced security processing of at least one parameter associated with said AKA process.

46. The tamper-resistant security device according to claim 45, wherein said enhanced security processing includes at least one of:

pre-processing of at least one AKA input parameter; and

post-processing of at least one AKA output parameter.

47. The tamper-resistant security device according to claim 45, wherein said enhanced security processing includes encapsulation of said at least one AKA parameter.

48. The tamper-resistant security device according to claim 45, wherein said cooperating application is receiving at least one AKA parameter from said AKA process to generate a further AKA parameter that has higher security than said received AKA parameter.

49. The tamper-resistant security device according to claim 45, wherein said enhanced security processing includes evaluation of a predetermined number of consecutive AKA input parameters for verifying that said AKA input parameters can be used securely.

50. The tamper-resistant security device according to claim 49, wherein said enhanced security processing further includes combination of a predetermined number of consecutive AKA output parameters generated in response to a number of corresponding unique AKA input parameters.

51. The tamper-resistant security device according to claim 44, further comprising means for performing security policy processing based on information representative of security conditions in relation to said tamper-resistant security device.

52. The tamper-resistant security device according to claim 51, wherein the security conditions reflect at least one of the environment in which said security device is operated and the network interface over which a request for AKA processing originates.

53. The tamper-resistant security device according to claim 51, wherein said security policy processing includes at least one of a security policy decision process and a security policy enforcement process.

54. The tamper-resistant security device according to claim 51, wherein said means for performing security policy processing comprises means for selectively disabling direct access to said AKA module.

55. The tamper-resistant security device according to claim 51, wherein said tamper-resistant security device comprises means for detecting whether said tamper-resistant security device is operated in its normal environment or in an environment considered insecure, and said means for performing security policy processing comprises means for disabling direct access to said AKA module when operated in said insecure environment.

56. The tamper-resistant security device according to claim 44, wherein said cooperating application includes a security enhancing application, and said security device further comprises means for transferring a request for AKA processing directly to said AKA module if said security device is operated in an environment considered secure, and means for transferring said request to said security enhancing application if said security device is operated in an environment considered insecure.

57. The tamper-resistant security device according to claim 44, wherein said cooperating application is performing at least part of the computations in connection with end-to-end key agreement between users.

58. The tamper-resistant security device according to claim 44, wherein said cooperating application is masking key information generated by said AKA module.

59. The tamper-resistant security device according to claim 44, wherein said cooperating application is a software application installed in an application environment of said tamper-resistant security device.

60. The tamper-resistant security device according to claim 59, wherein said application is securely downloaded into said tamper-resistant security device from a trusted party.

61. The tamper-resistant security device according to claim 44, wherein said cooperating application is a privacy enhancing application, which participates in managing a user pseudonym.

62. The tamper-resistant security device according to claim 61, wherein said privacy enhancing application is requesting an AKA response from said AKA module based on an old user pseudonym and for generating a new user pseudonym based on the received AKA response.

63. A tamper-resistant security device having means for storing user credentials, including at least a security key, an Authentication and Key Agreement (AKA) module for performing an AKA process with said security key, and means for external communication,

wherein said tamper-resistant security device further comprises a software application implemented in an application environment of said tamper-resistant security device and adapted for cooperating with said AKA module, and said AKA module is also implemented, at least partly, as a software application in said application environment.

64. A user terminal provided with a tamper-resistant security device, said tamper-resistant security device having means for storing user credentials, including at least a security key, an Authentication and Key Agreement (AKA) module for performing an AKA process with said security key, and means for communication with said user terminal,

wherein said tamper-resistant security device further comprises:

an application for cooperation with said AKA module; and

means for interfacing said AKA module and said cooperating application.

65. The user terminal according to claim 64, wherein said cooperating application is at least one of a security enhancing application and a privacy enhancing application.

66. The user terminal according to claim 64, wherein said cooperating application is performing enhanced security processing of at least one parameter associated with said AKA process.

67. The user terminal according to claim 66, wherein said enhanced security processing includes encapsulation of said at least one AKA parameter for producing an output parameter of higher security than said at least one AKA parameter.

68. The user terminal according to claim 64, further comprising means for performing security policy processing based on information representative of security conditions in relation to said tamper-resistant security device.

69. The user terminal according to claim 68, wherein the security conditions reflect at least one of the environment in which said security device is operated, the network interface over which a request for AKA processing comes, and the network used by the user terminal for network communication.

70. The user terminal according to claim 68, wherein said security policy processing includes at least one of a security policy decision process and a security policy enforcement process.

71. The user terminal according to claim 68, wherein said means for performing security policy processing is implemented in said tamper-resistant security device for selectively disabling direct access to said AKA module.

72. The user terminal according to claim 64, wherein said cooperating application is a security enhancing application, and said security device further comprises means for transferring a request for AKA processing directly to said AKA module if said security device is operated in an environment considered secure, and means for transferring said request to said security enhancing application if said security device is operated in an environment considered insecure.

73. The user terminal according to claim 64, wherein said cooperating application includes a security enhancing application, and said user terminal further comprises means for transferring a request for AKA processing directly to said AKA module if said request comes over an interface considered secure, and means for transferring said request to said security enhancing application if said request comes over an interface considered insecure.

74. The user terminal according to claim 73, wherein said security enhancing application comprises a number of different security enhancing modules, and said security enhancing application is for selecting among said security enhancing modules in dependence on the type of interface.

75. The user terminal according to claim 64, wherein said cooperating application is a software application installed in an application environment of said tamper-resistant security device.

76. The user terminal according to claim 64, wherein said cooperating application includes a security enhancing application authenticating a network over which said user terminal intends to communicate.

77. A network server managed by a trusted party sharing a security key with a tamper-resistant security device implemented in a user terminal, said tamper-resistant security device having an Authentication and Key Agreement (AKA) module for performing an AKA process with said security key,

wherein said network server comprises means for downloading a software application adapted for interfacing and cooperating with said AKA module into an application environment of said tamper-resistant device.

78. The network server according to claim 77, wherein said download application is at least one of a security enhancing application, a privacy enhancing application, and a security policy application.