METHOD AND DEVICE FOR SECURELY CONFIGURING A TERMINAL

• US 20120089838A1
• Filed: 10/05/2011
• Published: 04/12/2012
• Est. Priority Date: 02/21/2006
• Status: Active Grant

• Current Assignee: Orange S.A.
• Original Assignee: Orange S.A.
• Inventors: Tinnes, Julien, Leclercq, Eric, CHARLES, Olivier
• Granted Patent: US 9,071,599 B2
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: G06F 9/4401 Bootstrapping security arrangements therefor G06F21/57
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

A method of configuring a terminal including initializing the terminal, and which automatically triggers at least: detecting presence of a memory by a basic input/ouput system of the terminal, accessing the memory by the basic input/ouput system, starting up an operating system stored in the memory, and starting up a driver of a telecommunication network access module, the driver of the access module being stored in the memory and configured to drive the access module through a communication link between the terminal and a telecommunication device including the access module.

Claims

1. A method of configuring a terminal comprising:

initializing the terminal, and which automatically triggers at least;

detecting presence of a memory by a basic input/ouput system of the terminal;

accessing the memory by the basic input/ouput system;

starting up an operating system of the terminal stored in the memory; and

starting up by said operating system a driver of an access module for accessing a telecommunication network, the access module being included in a telecommunication device distinct from the terminal, the driver of the access module being stored in the memory and configured to drive the access module from the terminal through a communication link between the terminal and the telecommunication device.

2. The configuration method as claimed in claim 1, further comprising:

establishing a communication link between the terminal and the communication network, by the access module and connection parameters stored in the memory.

3. The configuration method as claimed in claim 1, further comprising:

starting up a driver of a chip card reading device configured to interrogate a chip card, the driver being stored in the memory and configured to drive the reading device through a communication link between the terminal and the reading device.

4. The configuration method as claimed in claim 3, further comprising:

establishing a secure communication tunnel between the terminal and a server of the telecommunication network, during which a strong authentication procedure is implemented by a chip card interrogatable via the driver of the chip card reading device.

5. The configuration method as claimed in claim 3, further comprising:

constructing at least one virtual partition based on enciphered data stored in the memory to render the enciphered data accessible by a user of the terminal.

6. The configuration method as claimed in claim 3, further comprising:

dispatching to a chip card, interrogatable via the driver of the chip card reading device, a request to decipher at least one enciphered deciphering key;

deciphering at least part of the enciphered data stored in means for storing data by at least one deciphered deciphering key.

7. A device for configuring a terminal, the device comprising:

a memory;

a telecommunication device, distinct from said terminal and comprising an access module for accessing a telecommunication network,

the memory being accessible by a basic input/ouput system of the terminal during a phase of starting up of the terminal, the memory comprising;

an operating system of the terminal,

a driver of the access module configured to drive the access module from the terminal through a communication link between the terminal and the telecommunication device,

the starting up of the terminal automatically triggering at least;

detection by the basic input/ouput system of the terminal of presence of the memory,

access by the basic input/ouput system to the memory,

starting up of the operating system stored in the memory, and

starting up by said operating system of the driver of the access module.

8. The device as claimed in claim 7, further comprising:

a chip card;

a reading device configured to interrogate the chip card;

the memory further comprising;

a driver of the reading device configured to drive the reading device from the terminal through a communication link between the terminal and the reading device,

the operating system configured to start up the driver of the reading device.

9. The device as claimed in claim 7, further comprising:

means for storing data comprising;

enciphered data, and at least one enciphered deciphering key;

the memory further comprising;

a data access management driver configured to construct at least one virtual partition based on enciphered data stored in the means for storing data, to render the enciphered data

accessible by a user of the terminal, the data access management driver configured to dispatch to the chip card via the driver of the reading device a request to decipher at least one enciphered deciphering key and configured to trigger the decipherment of at least part of the enciphered data by at least one deciphered deciphering key,

the operating system configured to trigger execution of the deciphering driver.

10. The device as claimed in claim 8, the memory, the access module, and the chip card being integrated into a mobile telecommunication terminal.