System and method for controlling features on a device

• US 20090292926A1
• Filed: 12/12/2008
• Published: 11/26/2009
• Est. Priority Date: 12/13/2007
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Certicom Corporation (Blackberry Limited)
• Inventors: Wong, David, O'Loughlin, Daniel, Lattin, William, Sequino, David R., Daskalopoulos, Michael, Vadekar, Ashok
• Granted Patent: US 9,485,223 B2
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: G06F 21/1063 Personalisation
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network

Abstract

Trust between entities participating in an upgrade or enablement/disablement process is established and, to facilitate this remotely and securely, a highly tamper resistant point of trust in the system that is being produced is used. This point of trust enables a more efficient distribution system to be used. Through either a provisioning process or at later stages, i.e. subsequent to installation, manufacture, assembly, sale, etc.; the point of trust embodied as a feature controller on the device or system being modified is given a feature set (or updated feature set) that, when validated, is used to enable or disable entire features or to activate portions of the feature.

Claims

1. A method for controlling features on a system comprising the steps of:

providing at least one feature controller in said system capable of performing cryptographic operations;

establishing a connection between said feature controller and a feature control server;

receiving a feature set from said feature control server, said feature set having undergone cryptographic processing;

performing complimentary cryptographic processing on said received feature set to permit implementing said feature set in said system; and

implementing said feature set to control one or more of said features.

2. The method according to claim 1 wherein said feature set identifies one or more features in said system that should be activated or deactivated;

and said implementing said feature set comprises activating or deactivating said one or more features.

3. The method according to claim 2 wherein said one or more features are activated or deactivated by setting selected ones of an array of bits, each bit corresponding to one of said features.

4. The method according to claim 2 wherein said one or more features are activated by having said feature controller access a memory map.

5. The method according to claim 4 wherein said memory map comprises one or more permit masks and one or more forbid masks pertaining to operations for controlling said features.

6. The method according to claim 1 wherein said system comprises one feature controller for controlling a plurality of features.

7. The method according to claim 1 wherein said system comprises a plurality of feature controllers for controlling a plurality of respective features.

8. The method according to claim 1 wherein said complementary cryptographic processing comprises utilizing a symmetric key accessed by said feature controller, said symmetric key having been used to encrypt said feature set in performing said cryptographic processing, and said complementary cryptographic processing comprises decrypting said feature set.

9. The method according to claim 8 wherein said complementary cryptographic processing further comprises using a decrypted version of said feature set to generate a message authentication code (MAC) and using said MAC to verify said feature set prior to said implementing said feature set.

10. The method according to claim 1 wherein said cryptographic processing comprises signing said feature set using a unique identifier for said feature controller and said complementary cryptographic processing comprises verifying a signature on said feature set and implementing said feature set upon verifying said signature.

11. The method according to claim 10 wherein said complementary cryptographic processing further comprises validating a certificate provided by said feature control server.

12. The method according to claim 10 wherein said establishing said connection between said feature controller and said feature control server comprises generating a nonce, combining said nonce with said unique identifier, and providing the combination to said feature control server for use in generating said signature.

13. The method according to claim 1 wherein said complementary cryptographic processing comprises utilizing a session key established with said feature control server to decrypt an encrypted version of said feature set, said encrypted version having been generated by said feature control server during said cryptographic processing, said complementary cryptographic processing further comprising verifying a signature on said feature set, said signature having been generated using a public key of said feature controller.

14. The method according to claim 13 wherein said public key is an ephemeral public key, said signature also having been generated using a unique identifier generated by said feature controller, said unique identifier being generated using a static public key of said feature controller, and said ephemeral public key and said unique identifier being provided to said feature control server during a key agreement protocol.

15. The method according to claim 13 wherein upon verifying said signature, said feature controller receives further command or programming instructions encrypted by said feature control server using said session key.

16. The method according to claim 13 wherein said session key is established using the Menezes-Qu-Vanstone (MQV) key agreement protocol.

17. The method according to claim 1 further comprising providing feedback to said feature control server upon implementing said feature set.

18. A feature controller for controlling features on a system, said system being configured for establishing a connection with a feature control server to receive a feature set therefrom, said feature controller comprising:

access to a memory; and

a cryptographic unit, said cryptographic unit being configured to;

obtain said feature set from said system, said feature set having undergone cryptographic processing; and

to perform complimentary cryptographic processing on said received feature set using information stored in said memory to permit implementing said feature set in said system.

19. A computer readable storage medium comprising computer executable instructions for controlling features on a system comprising instructions for:

providing at least one feature controller in said system capable of performing cryptographic operations;

establishing a connection between said feature controller and a feature control server;

receiving a feature set from said feature control server, said feature set having undergone cryptographic processing;

performing complimentary cryptographic processing on said received feature set to permit implementing said feature set in said system; and

implementing said feature set to control one or more of said features.