SECURITY SYSTEM AND METHOD FOR SECURING THE INTEGRITY OF AT LEAST ONE ARRANGEMENT COMPRISING MULTIPLE DEVICES

• US 20100180321A1
• Filed: 06/23/2006
• Published: 07/15/2010
• Est. Priority Date: 06/29/2005
• Status: Abandoned Application

• Current Assignee: NXP B.V. (NXP Semiconductors NV)
• Original Assignee: NXP B.V. (NXP Semiconductors NV)
• Inventors: Graeber, Frank, Meyn, Hauke
• Application Number:
  US11/993,662
• Publication Number:
  US 20100180321A1
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24

Abstract

In order to provide a security system (100; 100′) for securing the integrity of at least one arrangement comprising multiple devices (10, 12; 10a, 12a, 12b, 12c), for example of at least one network and/or of at least one computer system, wherein manipulation of the arrangement comprising these multiple components or devices (10, 12; 10a, 12a, 12b, 12c) is prevented, it is proposed that the devices (10, 12; 10a, 12a, 12b, 12c) communicate with each other, in particular by exchanging messages (20) between and among each other, that each device (10, 12; 10a, 12a, 12b, 12c) comprises at least one respective security unit (30, 32) [a] for performing at least one authentication by means of exchanged messages (20) and [b.i] in case of a valid authentication for enabling operation of the respective device (10; 10a) and/or of at least one of the other devices (12; 12a, 12b, 12c) and [b.ii] otherwise, in particular in case of an invalid authentication, for disabling operation of the respective device (10; 10a) and/or of at least one of the other devices (12; 12a, 12b, 12c) and/or—of at least one undefined and/or unauthorized device (14), in particular of at least one device comprising no such security unit (30, 32).

Claims

1. A security system for securing the integrity of at least one arrangement comprising multiple devices, for example of at least one network and/or of at least one computer system, characterized in

that the devices communicate with each other, in particular by exchanging messages between and among each other,

that each device comprises at least one respective security unit

[a] for performing at least one authentication by means of exchanged messages and

[b.i] in case of a valid authentication for enabling operation of the respective device and/or of at least one of the other devices and

[b.ii] otherwise, in particular in case of an invalid authentication, for disabling operation

of the respective device and/or

of at least one of the other devices and/or

of at least one undefined and/or unauthorized device in particular of at least one device comprising no such security unit

2. The security system according to claim 1, characterized in that each device comprises at least one storage unit for storing

at least one predefined authentication profile defining under which conditions the authentication is to be assumed as valid, wherein the predefined authentication profile for example defines the kind and/or the identity and/or the number of the devices being comprised by the arrangement to be secured;

and/or

at least one secret key, particularly required for at least one mutual authentication scheme; and

/or

authentication information regarding the other devices, in particular authentication means for the other devices.

3. The security system according to claim 1 characterized in that the security unit is designed for providing its respective device, in particular via at least one interface unit,

with the mutual authentication scheme and/or

with at least one key functionality in case of a valid authentication, in particular by using R[emote]M[ethod]I[nvocation].

4. The security system according to claim 1, characterized in

that the security unit is embedded in its respective device and

that the security unit disables the operation of its respective device and/or of the other devices when starting up.

5. The security system according to claim 1, characterized in that all devices authenticate each other, in particular by means of the respective security units, wherein the respective device, in particular the respective security unit refusing the authentication of another device, in particular of another security unit, starts to advise all other devices, in particular all other security units, to stop operation.

10. Use of at least one security system according to claim 1

for protecting at least one computer component, in particular at least one component of a desktop computer or of a notebook, against unauthorized usage in a different computer system, for example in order to prevent the usage of at least one plug-in card in at least one undefined and/or unauthorized personal computer, and/or

for protecting at least one computer system, in particular at least one desktop computer or at least one notebook, against unauthorized usage of at least one computer component, for example in order to prevent the usage of at least one undefined and/or unauthorized plug-in card in a computer main board, and/or

for protecting at least one computer network against usage of at least one undefined and/or unauthorized network adapter device, for example in order to prevent the usage of at least one undefined and/or unauthorized network adapter card.

6. A method for securing the integrity of at least one arrangement comprising multiple devices, for example of at least one network and/or of at least one computer system, characterized in

(i) that the devices communicate with each other, in particular by exchanging messages between and among each other,

(ii) that at least one authentication is performed by means of the exchanged messages and

(iii) that the operation

of the respective device and/or

of at least one of the other devices and/or

of at least one undefined and/or unauthorized device

(iii.a) is enabled in case of a valid authentication and

(iii.b) is disabled otherwise, in particular in case of an invalid authentication.

7. The method according to claim 6, characterized in that the step (ii) of performing the authentication comprises

(ii.a) calculating at least one current authentication profile based on the information delivered by the exchanged messages and

(ii.b) comparing the current authentication profile with at least one predefined authentication profile defining under which conditions the authentication is valid.

8. The method according to claim 6, characterized in

that the device is provided with at least one mutual authentication scheme and/or

that

enabling (iii.a) the operation of the respective device and/or of at least one of the other devices is controlled by providing the respective device with at least one key functionality and

disabling (iii.b) the operation of the respective device and/or of at least one of the other devices and/or of the undefined and/or unauthorized device is controlled by denying the respective device any key functionality.

9. The method according to claim 6, characterized in that authentication is performed for all devices, in particular by means of at least one respective security unit, wherein the respective device, in particular the respective security unit refusing the authentication of another device, in particular of another security unit, advises all other devices, in particular all other security units, to stop operation.