Key transformation unit for a tamper resistant module

• US 20080091957A1
• Filed: 10/25/2007
• Published: 04/17/2008
• Est. Priority Date: 02/21/1997
• Status: Active Grant

• Current Assignee: Stepnexus Holdings
• Original Assignee: Stepnexus Holdings
• Inventors: Viner, John, Simmons, Ian, Miller, Stuart, Everett, David, Richards, Timothy, Peacham, Anthony
• Granted Patent: US 7,730,310 B2
• Time in Patent Office: Days
• US Class Current: 713/194
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/77 in smart cards
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06K 19/0719 at least one of the integrated circuit chips comprising an arrangement for application selection, e.g. an acceleration sensor or a set of radio buttons application selection on smart cards using pure software control, see G07F7/10
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/355 Personalisation of cards for use
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/3574 Multiple applications on card
• CPC Class Codes: G06Q 20/35765 Access rights to memory zones
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

Methods, apparati, and computer-readable media for securely transporting a software application onto a tamper resistant module (TRM) (103) by using an individualized TRM key set. A method embodiment of the present invention comprises: storing a key pair unique to the TRM (103) in a memory located on the TRM (103), where the key pair comprises a TRM public key (150) and a TRM private key (190); retrieving the TRM public key from the TRM; encrypting a portion of the software application using the TRM public key (150); transmitting the encrypted software application to the TRM (103); and recovering and decrypting the encrypted software application using the TRM private key(190).

Claims

1. A method performed by a tamper resistant module (TRM) for processing an incoming transmission of a software application to said TRM by using an individualized key set for the TRM, the method comprising the steps of:

receiving said incoming transmission, said incoming transmission comprising at least a portion of the software application encrypted with a TRM public key stored on said TRM, said TRM public key being part of said individualized key set;

retrieving a unique TRM private key for said TRM, said TRM private key being part of said individualized key set; and

decrypting said portion of said software application with said TRM private key to recover said portion of said software application.

2. The method of claim 1, further comprising the step of storing said portion of said software application on said TRM.

3. The method of claim 1, wherein said individualized key set is generated by asymmetric encryption.

4. The method of claim 1, wherein a certification authority (CA) having a CA public key digitally signs the TRM public key stored on said TRM to produce a public key certificate unique to said TRM and stored thereon, and wherein said public key certificate is verified prior to said receiving step.

5. The method of claim 4, wherein said public key certificate is retrieved prior to said receiving step.

6. The method of claim 4, wherein said public key certificate is verified using said CA public key.

7. Apparatus located on a tamper resistant module (TRM) for processing an incoming transmission by using an individualized key set for said TRM, the apparatus comprising:

means for receiving said incoming transmission, said incoming transmission comprising at least a portion of a secure software application encrypted with a TRM public key, said TRM public key being also stored on said TRM, and said TRM public key forming part of said individualized key set;

means for retrieving a unique TRM private key for said TRM, said TRM private key being part of said individualized key set; and

means for decrypting said portion of said software application with said TRM private key to recover said portion of the software application.

8. The apparatus of claim 7, further comprising means for storing said portion of said software application on said TRM.

9. The apparatus of claim 7, further comprising means for retrieving a public key certificate, said public key certificate being generated by a certificate authority (CA), said CA having a CA public key, and said CA digitally signing the TRM public key stored on said TRM.

10. The apparatus of claim 9, further comprising means for transmitting said public key certificate.

11. The apparatus of claim 9, wherein said public key certificate is verified using said CA public key.

12. A method, performed by a personal computer (PC) having at least one multiple application tamper resistant module (TRM), each combination of PC and TRM being referred to as a PC/TRM, for processing an incoming transmission of a software application to a PC/TRM by using an individualized key set for the PC/TRM, the method comprising the steps of:

receiving said incoming transmission, said incoming transmission comprising at least a portion of the software application encrypted with a PC/TRM public key stored on said PC/TRM, said PC/TRM public key being part of said individualized key set;

retrieving a unique PC/TRM private key for said PC/TRM, said PC/TRM private key being part of said individualized key set; and

decrypting said portion of said software application with said PC/TRM private key to recover said portion of said software application.

13. Apparatus located on a personal computer (PC) having at least one multiple application tamper resistant module (TRM), each combination of PC and TRM being referred to as a PC/TRM, for processing an incoming transmission by using an individualized key set for a PC/TRM, the apparatus comprising:

means for receiving said incoming transmission, said incoming transmission comprising at least a portion of a secure software application encrypted with a PC/TRM public key, said PC/TRM public key being also stored on said PC/TRM, and said PC/TRM public key forming part of said individualized key set;

means for retrieving a unique PC/TRM private key for said PC/TRM, said PC/TRM private key being part of said individualized key set; and

means for decrypting said portion of said software application with said PC/TRM private key to recover said portion of said software application.