Upgradable Security Module

• US 20080307499A1
• Filed: 11/30/2006
• Published: 12/11/2008
• Est. Priority Date: 11/30/2005
• Status: Active Grant

• Current Assignee: Nagravision SA (Kudelski SA)
• Original Assignee: NagraCard SA (Kudelski SA)
• Inventors: Hill, Michael John
• Granted Patent: US 8,782,767 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: G06F 21/123 by using dedicated hardware, e.g. dongles, smart cards, cryptographic processors, global positioning systems [GPS] devices
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/77 in smart cards
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/443 OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
• CPC Class Codes: H04N 7/163 by receiver means only

Abstract

The aim of the present invention is to provide a security module capable of supporting the different functions of the latest and the previous generations, by avoiding any possible attack due to this adaptability.

This aim is attained by a security module comprising first communication means to a host device, first storage means (MEM0) and first decryption means (ENC0), characterized in that it includes a state module (SM) and second communication means (COM1) and physical activation or deactivation means (TSB) of said second means, such activation or deactivation being managed by the state module (SM).

Claims

1. A security module comprising:

a first communication port connectable to a host device;

a first storage device;

a first decryption means;

a state module;

a second communication port; and

an insulating circuit configured to isolate said second communication port, said insulating circuit being controlled by the state module;

wherein the state module is configured to receive a security message and modify the state of said state module.

2. The security module according to claim 1, wherein the state module includes means to detect activity on a communication port and to determine, according to this activity, the state of said state module.

3. The security module according to claim 1, wherein the second communication port is connected to the host device by a contact physically different from a contacts of the first communication port.

4. The security module according to claim 1, wherein the insulating circuit comprises conductor/insulating elements of the tri-state or high voltage bidirectional MOSFET kind.

5. A security module according to claim 1, wherein the insulating circuit is placed in series with said first communication port such that it is operable to electrically insulate said first communication port.

6. A security module according to claim 1, wherein the insulating circuit is also placed in series with at least one connection path such that the insulating circuit is operable to electrically insulate said connection path.

7. A security module according to claim 1, wherein the security module comprises a second storage device, the state module comprising activation/deactivation means of said second storage device.

8. A security module according to claim 1, wherein the state module comprises modules and/or functions that are authorized or forbidden according to the state of the state module.

9. A security module according to claim 8, wherein the state of the state module includes means to limit the access level to the second storage device in read only, in writing only, and in reading/writing mode.

10. A security module according to one of claim 1, wherein the security module includes second decryption means, these second decryption means being activated/deactivated by the state module.

11. A security module according to claim 10, wherein the second decryption means are supplied power under control of the state module.

12. A security module according to claim 1, wherein the state module includes supervision means of the current working parameters of all the connection paths of the security module, and means allowing the state of the state module to be changed according to the supervision result.

13. A security module according to claim 12, wherein the supervision means are connected also to the connection paths (RST, Vdd, Vss, CLK) of said module.

14. A security module according to claim 12, wherein the supervision means comprises a supervision profile of the communication paths that can be specific to each state of the state module.