SECURE TIME FUNCTIONALITY FOR A WIRELESS DEVICE

• US 20070266256A1
• Filed: 05/08/2007
• Published: 11/15/2007
• Est. Priority Date: 05/09/2006
• Status: Active Grant

• Current Assignee: Interdigital Technology Corporation (InterDigital, Inc.)
• Original Assignee: Interdigital Technology Corporation (InterDigital, Inc.)
• Inventors: Cha, Inhyok, Shah, Yogendra
• Granted Patent: US 8,756,427 B2
• Time in Patent Office: Days
• US Class Current: 713/178
• CPC Class Codes: G06F 21/725 operating on a secure reference time value
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps
• CPC Class Codes: H04M 15/28 with meter at substation or with calculation of charges at terminal
• CPC Class Codes: H04M 15/47 Fraud detection or prevention means
• CPC Class Codes: H04M 15/48 Secure or trusted billing, e.g. trusted elements or encryption
• CPC Class Codes: H04M 17/103 using SIMs (USIMs) or calling cards
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 4/24 Accounting or billing

Abstract

The present invention is related to a wireless transmit/receive unit (WTRU) for providing advanced security functions. The WTRU includes trusted platform module (TPM) for performing trusted computing operations; and a secure time component (STC) for providing a secure measurement of a current time. The STC and the TPM are integrated to provide accurate trusted time information to internal and external to the WTRU. The STC may be located on an expanded a subscriber identity module (SIM), on the WTRU platform, or two STCs may be used, one in each location. Similarly, the TPM may be located on an expanded SIM, on the WTRU platform, or two TPMs may be used, one in each location. Preferably, the STC will include a real time clock (RTC); a tamper detection and power failure unit; and a time report and sync controller.

Claims

1. A wireless transmit/receive unit (WTRU) for providing advanced security functions, the WTRU comprising:

a trust platform module (TPM) for performing trusted computing operations; and

a secure time component (STC) for providing a secure measurement of a current time, wherein the STC and the TPM are integrated to provide accurate trusted time information to applications on the WTRU.

2. The WTRU of claim 1 wherein the STC comprises:

a real time clock (RTC);

an audit logging facility;

a tamper detection and power failure unit; and

a time report and sync controller.

3. The WTRU of claim 2 wherein the RTC is includes a crystal oscillator.

4. The WTRU of claim 2 wherein the tamper detection and power failure unit includes circuitry to detect tampering at a software or hardware level.

5. The WTRU of claim 4 wherein the tamper detection and power failure unit is configured to trigger an alarm when tampering is detected.

6. The WTRU of claim 1 further comprising:

a subscriber identity module (SIM).

7. The WTRU of claim 6 wherein the TPM is located on the SIM.

8. The WTRU of claim 6 wherein the STC is located on the SIM.

9. The WTRU of claim 6 wherein the SIM includes an STC and a TPM.

10. The WTRU of claim 2 wherein the tamper detection and power failure unit is configured to store a charge such that time related information from the RTC may be securely stored upon detection of a power failure.

11. The WTRU of claim 1 wherein the WTRU is further configured to provide secure time information to a requesting application external to the WTRU.

12. The WTRU of claim 1 wherein the STC is configured to provide secure time information for authentication purposes.

13. The WTRU of claim 12 wherein the secure time information is protected by a message integrity check in authentication messages sent from the WTRU.

14. The WTRU of claim 1 wherein the STC and the TPM are configured to cryptographically secure and bind time information to the WTRU with a digital signature.

15. The WTRU of claim 1 wherein the STC and the TPM are configured to cryptographically secure and bind time information to the WTRU through encryption, wherein the encryption key is bound to the WTRU.

16. The WTRU of claim 1 wherein the STC is configured to re-synchronize the RTC with a secure external time source.

17. The SIM of claim 16 wherein the secure external time source is an operator network.

18. The WTRU of claim 16 wherein the secure external time source is a network time server.

19. The WTRU of claim 6 wherein the STC and TPM are configured to enhance applications performed by the SIM with secure time information.

20. The WTRU of claim 19 wherein the applications performed by the SIM include phone book applications.

21. The WTRU of claim 19 wherein the applications performed by the SIM include authentication and key management applications.

22. The WTRU of claim 19 wherein the applications performed by the SIM include financial transaction applications.

23. The WTRU of claim 1 wherein the WTRU is a digital rights management (DRM) device.

24. The WTRU of claim 23 wherein the STC and the TPM are configured to perform a run-time integrity check (RTIC) of the STC on a periodic basis.

25. The WTRU of claim 23 wherein the STC and the TPM are configured to perform a run-time integrity check (RTIC) of the STC on an event driven basis.

26. The WTRU of claim 23 wherein the STC and the TPM are configured to generate trusted time information for enhancing DRM messages and parameters.

27. The WTRU of claim 26 wherein the DRM messages and parameters include a time a rights object was last examined (T-ROLE).

28. The WTRU of claim 27 wherein the DRM messages and parameters include a time of rights object delivery (T-ROD).

29. The WTRU of claim 27 wherein the DRM messages and parameters include a rights issue time stamp (RITS).

30. An expanded subscriber identity module (SIM) for use in a wireless transmit/receive unit (WTRU) for providing advanced security functions, the SIM comprising:

a secure time component (STC) for providing a secure measurement of a current time.

31. The SIM of claim 30 further comprising:

a trusted platform module (TPM) for performing trusted computing operations;

wherein the STC and the TPM are integrated to provide accurate trusted time information to applications on the WTRU.

32. The SIM of claim 30 wherein the STC comprises:

a real time clock (RTC);

an audit logging facility;

a tamper detection and power failure unit; and

a time report and sync controller.

33. The SIM of claim 32 wherein the RTC is driven by a crystal oscillator.

34. The SIM of claim 32 wherein the tamper detection and power failure unit includes circuitry to detect tampering at a software or hardware level.

35. The SIM of claim 32 wherein the tamper detection and power failure is configured to trigger an alarm when tampering is detected.

36. The SIM of claim 30 wherein the WTRU includes a TPM.

37. The SIM of claim 30 wherein the tamper detection and power failure unit is configured to store a charge such that time related information from the RTC may be securely stored immediately upon detection of a power failure.

38. The SIM of claim 30 wherein the WTRU is further configured to provide secure time information to a requesting application external to the WTRU.

39. The SIM of claim 30 wherein the STC is configured to provide secure time information for authentication purposes.

40. The SIM of claim 39 wherein the time information is protected by a message integrity check in authentication messages sent from the WTRU

41. The SIM of claim 31 wherein the STC and the TPM are configured to cryptographically secure and bind time information to the WTRU with a digital signature.

42. The SIM of claim 31 wherein the STC and the TPM are configured to cryptographically secure and bind time information to the WTRU through encryption, wherein the encryption key is bound to the WTRU.

43. The SIM of claim 30 wherein the STC is configured to re-synchronize with a secure external time source.

44. The SIM of claim 43 wherein the secure external time source is an operator network.

45. The SIM of claim 44 wherein the secure external time source is a network time server.

46. The SIM of claim 31 wherein the STC and TPM are configured to enhance applications performed by the SIM with secure time information.

47. The SIM of claim 46 wherein the applications performed by the SIM include phone book applications.

48. The SIM of claim 46 wherein the applications performed by the SIM include authentication and key management applications.

49. The SIM of claim 46 wherein the applications performed by the SIM include financial transaction applications.

50. The SIM of claim 31 wherein the STC and the TPM are located in a digital rights management (DRM) platform, said platform including DRM processing software.

51. The SIM of claim 50 wherein the STC and the TPM are configured to perform a run-time integrity check (RTIC) of the STC on a periodic basis.

52. The SIM of claim 50 wherein the STC and the TPM are configured to perform a run-time integrity check (RTIC) of the STC on an event driven basis.

53. The SIM of claim 50 wherein the STC and the TPM are configured to generate trusted time information for enhancing DRM messages and parameters.

54. The SIM of claim 53 wherein the DRM messages and parameters includes a Time a rights object was last examined (T-ROLE).

55. The SIM of claim 53 wherein the DRM messages and parameters includes a time of rights object delivery (T-ROD).

56. The SIM of claim 53 wherein the DRM messages and parameters include a rights issue time stamp (RITS).

57. The SIM of claim 54 wherein the DRM processing software is include the STC information as part of the DRM processing.