NEAR FIELD COMMUNICATION, SECURITY AND NON-VOLATILE MEMORY INTEGRATED SUB-SYSTEM FOR EMBEDDED PORTABLE APPLICATIONS

• US 20080155257A1
• Filed: 12/20/2006
• Published: 06/26/2008
• Est. Priority Date: 12/20/2006
• Status: Active Grant

• Current Assignee: Cypress Semiconductor Corporation (Infineon Technologies AG)
• Original Assignee: Spansion LLC (Infineon Technologies AG)
• Inventors: Werner, Jeremy Isaac Nathaniel, Minassian, George, Barck, Russell
• Granted Patent: US 8,117,445 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

An architecture is presented that facilitates integrating memory, security functionalities and near field communication (NFC) capabilities in a mobile device. A memory module is provided that comprises non-volatile memory that stores security software, sensitive data, and keys and a security processor that accesses the security software from the nonvolatile memory and performs security functions based on the security software stored. A NFC radio frequency transmitter and receiver (RF) is directly integrated into the security processor to facilitate NFC capabilities within the secure environment of the memory module. Further, the non-volatile memory directly interfaces to an NFC antenna positioned outside of the memory module via the integrated NFC RF. The integration of the security processor, memory, and NFC RF into the memory module provides a trusted environment for the manipulation and decryption of data received through the NFC antenna.

Claims

1. A memory module that facilitates integrating security functionality and near field communications (NFC) within a mobile device, comprising:

non-volatile memory that stores security software, sensitive data and keys;

a security processor that accesses the security software from the non-volatile memory and performs security functions based on the stored security software; and

a NFC radio frequency transmitter and receiver (RF) that couples NFC wireless protocol capabilities to the security functionalities of the security processor, the NFC RF communicates with a NFC antenna located outside of the memory module to transmit NFC wireless protocol capabilities.

2. The memory module of claim 1, wherein the NFC RF is directly integrated into the security processor such that the non-volatile memory interfaces directly to the NFC antenna.

3. The memory module of claim 1, wherein the NFC RF is a separate integrated circuit (IC) located within the memory module such that the non-volatile memory directly communicates with the NFC RF chip.

4. The memory module of claim 1, wherein the NFC RF, the security processor and the non-volatile memory are directly integrated into a single IC within the memory module.

5. The memory module of claim 1, wherein the NFC RF is a separate IC located outside of the memory module such that the non-volatile memory can directly communicate through the security processor, with the NFC RF chip.

6. The memory module of claim 5, wherein a dedicated bus is located between the NFC RF and the security processor to establish an interface for direct communications, the interface is an encrypted channel for secure communications.

7. The memory module of claim 1, further comprising volatile memory used for the temporary data and code storage needs of an external processor.

8. The memory module of claim 7, wherein the external processor is located outside of the memory module and arbitrates with the security processor for access to the non-volatile memory, and wherein the security processor sits in series between the external processor and the non-volatile memory.

9. The memory module of claim 8, further comprising a communication channel between the external processor and the security processor, the communication channel is a NOR, NAND or shared NOR/NAND bus interface.

10. The memory module of claim 1, wherein the non-volatile memory is flash memory.

11. The memory module of claim 10, wherein the flash memory is NOR and NAND flash memory.

12. The memory module of claim 10, wherein the flash memory is divided into multiple partitions of varying sizes and access rights, and wherein access rights are assigned to the partitions based on security requirements established for each partition.

13. The memory module of claim 1, wherein the security software comprises at least one of password access control software, authentication software, shared key authentication software, public key infrastructure (PKI) authentication software, integrity check software, encryption/decryption software, anti-virus software and anti-spyware software.

14. The memory module of claim 1, wherein the mobile device comprises one of a multimedia player, a Personal Digital Assistant (PDA), a cellular phone, and a hand held computing device.

15. A method of integrating security functionality and NFC capabilities within a memory module, comprising:

providing a security processor and a non-volatile memory within the memory module;

embedding security functionality directly into the non-volatile memory;

performing security functions via the embedded security functionality;

providing a NFC RF in communication with the security processor, such that the non-volatile memory interfaces to a NFC antenna, the NFC antenna located outside the memory module;

communicating NFC wireless protocol capabilities to the security processor via the NFC antenna; and

tightly coupling the non-volatile memory with the NFC wireless protocol capabilities to create a trusted, secure environment for the NFC wireless protocol capabilities.

16. The method of claim 15, further comprising:

utilizing the NFC wireless protocol capabilities for mobile payment via selecting a payment application on a mobile device to make a purchase;

selecting an account to use and entering a PIN number, wherein the account details are stored in the non-volatile memory;

placing the mobile device within range of a transaction terminal;

verifying the mobile device and completing the transaction; and

viewing a digital receipt received via NFC.

17. The method of claim 16, wherein the account comprises at least one of a credit account, a debit account and a pre-paid cash account.

18. The method of claim 15, further comprising directly integrating the NFC RF into the security processor such that the non-volatile memory interfaces directly to the NFC antenna via the security processor.

19. The method of claim 15, further comprising positioning the NFC RF as a separate integrated circuit (IC) located within the memory module such that the non-volatile memory directly communicates with the NFC RF chip via the security processor.

20. The method of claim 15, further comprising positioning the NFC RF as a separate IC located outside of the memory module such that the non-volatile memory directly communicates with the NFC RF chip via the security processor.

21. The method of claim 15, wherein the trusted, secure environment is utilized in authentication services and secure channel communications,

the authentication services comprise at least one of authenticating a user to the non-volatile memory, authenticating an external component to the non-volatile memory and authenticating a server to the non-volatile memory;

and

the secure channel communications comprise at least one of establishing a secure channel of communications between the external processor or component and the non-volatile memory and establishing a secure channel of communications between the server and the non-volatile memory.

22. A system that integrates security functionality and NFC capabilities into a mobile device, comprising:

means for providing a security processor and a flash memory within a memory module;

means for embedding security functionality directly into the flash memory;

means for performing security functions via the embedded security functionality;

means for providing a NFC RF integrated directly into the security processor, such that the non-flash memory interfaces directly to a NFC antenna;

means for communicating NFC wireless protocol capabilities to the security processor; and

means for tightly coupling the flash memory with the NFC wireless protocol capabilities to create a trusted, secure environment for the NFC wireless protocol capabilities.