METHOD OF UPDATING THE OPERATING SYSTEM OF A SECURE MICROCIRCUIT

• US 20140244993A1
• Filed: 02/27/2014
• Published: 08/28/2014
• Est. Priority Date: 02/27/2013
• Status: Abandoned Application

• Current Assignee: Inside Secure SA
• Original Assignee: Inside Secure SA
• Inventors: CHEW, Gary
• Application Number:
  US14/192,114
• Publication Number:
  US 20140244993A1
• Time in Patent Office: Days
• US Class Current: 713/2
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 9/4406 Loading of operating system
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

A method of loading an operating program in a secure microcircuit, includes the steps of: downloading and installing in the microcircuit a boot program, which is launched upon activation of the microcircuit, loading into the microcircuit initialization data including a first public key, performing a mutual authentication procedure between the microcircuit and a first server having a private key corresponding to the first public key, and if the mutual authentication is successful, loading from the first server operating program profile data holding a second public key, performing a mutual authentication procedure between the microcircuit and a second server having a private key corresponding to the second public key, and if the mutual authentication is successful, loading an operating program from the second server and installing it in the microcircuit, and activating the operating program when it is in the microcircuit.

Claims

1. A method of loading an operating program in a secure microcircuit, comprising the steps of:

downloading and installing in the microcircuit a boot program, which is launched upon activation of the microcircuit,

loading into the microcircuit initialization data including a first public key,

performing a mutual authentication procedure between the microcircuit and a first server having a private key corresponding to the first public key, and if the mutual authentication is successful, loading from the first server operating program profile data holding a second public key,

performing a mutual authentication procedure between the microcircuit and a second server having a private key corresponding to the second public key, and if the mutual authentication is successful, loading an operating program from the second server and installing it in the microcircuit, and

activating the operating program when it is in the microcircuit.

2. The method of claim 1, comprising the steps of:

performing a mutual authentication procedure between the microcircuit and a third server having a private key corresponding to a third public key held in the operating program profile data, and

if the mutual authentication procedure is successful, loading an application from the third server and installing it in the microcircuit, and/or loading user data in the microcircuit.

3. The method of claim 1, comprising the steps of:

performing a mutual authentication procedure between the microcircuit and a third server having a private key corresponding to a third public key held in the operating program profile data, and

if the mutual authentication procedure is successful, running a command for erasing the operating program and operating program profile data in the microcircuit, wherein the erase command is transmitted to the microcircuit from the third server, and placing the microcircuit in a state where it is ready to receive new operating program profile data from the first server.

4. The method according to claim 1, wherein the operating program profile data and/or the operating program are transmitted in encrypted form using a secret key shared between the microcircuit and the first and/or second server during mutual authentication.

5. The method according to claim 1, comprising a step of receiving by the microcircuit a signal for enabling a control mode wherein the microcircuit can receive commands from a server, including an operating program erase command.

6. The method of claim 5, wherein the activation signal of the control mode includes a sequence of several reset signals received during a period of time.

7. The method according to claim 1, comprising a step of checking the integrity of the boot program upon start-up of the microcircuit.

8. The method according to claim 1, wherein the installation of the operating program in the microcircuit is followed by an integrity check of the installed operating program, wherein the operating program is erased from the microcircuit if the integrity check fails.

9. A secure microcircuit configured by a boot program for:

loading into the microcircuit initialization data comprising a first public key,

performing a mutual authentication procedure between the microcircuit and a first server having a private key corresponding to the first public key, and if the mutual authentication is successful, loading from the first server operating program profile data holding a second public key, and

performing a mutual authentication procedure between the microcircuit and a second server having a private key corresponding to the second public key, and if the mutual authentication is successful, loading an operating program from the second server and installing it in the microcircuit, and

activating the operating program when it is in the microcircuit.

10. The microcircuit according to claim 9, configured by the operating program for:

performing a mutual authentication procedure between the microcircuit and a third server having a private key corresponding to a third public key held in the operating program profile data, and

if the mutual authentication is successful, receiving an application from the third server and installing it in the microcircuit, and/or loading user data in the microcircuit.

11. The microcircuit according to claim 9, configured by the boot program for:

performing a mutual authentication procedure between the microcircuit and a third server having a private key corresponding to a third public key held in the operating program profile data, and

if the mutual authentication is successful, receiving from the third server and executing a command for erasing the operating program and the operating program profile data from the microcircuit, and placing the microcircuit in a state where it is ready to receive new operating program profile data from the first server.

12. The microcircuit according to claim 9, configured by the boot program for receiving a signal for enabling a control mode, wherein the microcircuit can receive commands from a server, including an operating program erase command.

13. The microcircuit according to claim 12, wherein the control mode enable signal includes a sequence of a number of reset signals received during a period of time.

14. The microcircuit according to claim 9, configured by the boot program to control the integrity of the boot program at start-up of the microcircuit.

15. The microcircuit according to claim 9, configured by the boot program to control the integrity of the operating program once it is installed, and to erase the operating program from the microcircuit if the integrity check failed.