Security module for radio telephone

• US 5,150,412 A
• Filed: 04/29/1991
• Issued: 09/22/1992
• Est. Priority Date: 04/28/1990
• Status: Expired due to Term

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: Maru, Tsuguo
• Primary Examiner(s): Tarcza, Thomas H.
• Assistant Examiner(s): CAIN, DAVID C
• Application Number:
  US07/692,419
• Time in Patent Office: 512 Days
• Field of Search: 380/3, 380/4, 380/23, 380/24, 380/25, 380/43, 380/52
• US Class Current: 380/43
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A security module for a radio telephone prevents a KEY code stored in a non-volatile memory from being read out for illicit use. The security module deletes the KEY code stored in the memory when accessed from the outside. Hence, although a KEY code can be written to the memory or the operation of the memory can be tested from the outside, the KEY code is prevented from being read out by an unauthorized person.

Claims

1. A security module for use with a radio telephone and preventing a KEY code from being read out from outside the security module comprising:

an electrically rewritable non-volatile memory to which the KEY code is written;

encrypting means for encrypting data entered from outside the security module on the basis of the KEY code stored in said non-volatile memory, and outputting said encrypted data;

interface means for receiving data from outside the security module and outputting said encrypted data; and

control means for enabling said non-volatile memory to be accessed via an internal bus and an external bus and, when said non-volatile memory is accessed, deleting the KEY code.

2. A security module as claimed in claim 1, wherein said non-volatile memory, said encrypting means, said interface means and said control means are implemented as a 1-chip microcomputer.

3. A security module as claimed in claim 1, said non-volatile memory comprises an E² ROM.

4. A security module as claimed in claim 1, wherein said encrypting means comprises a CPU, a ROM, and a RAM.

5. A security module as claimed in claim 1, wherein said interface means comprises a serial interface circuit.

6. A security module as claimed in claim 1, wherein said control means comprises a test terminal which isolates said internal bus from said external bus when inactive or connects said internal bus and said external bus to allow access to occur when active, and a differentiating circuit for outputting a clear pulse for deleting said KEY code.

7. A device adapted to be connected to a communication apparatus, comprising:

means for storing a KEY code;

means for enciphering input data using the stored KEY code to produce enciphered data;

means for interchanging said input and enciphered data with said communication device; and

means for erasing said KEY code from said storing means in response to access to said storing means from outside the security module.

8. A device as claimed in claim 7, further comprising means for interfacing said storing and enciphering means, said interfacing means being isolated from outside the security module.

9. A device as claimed in claim 7, wherein said interchanging means comprises a serial bus.

10. An apparatus comprising:

means for sending a call-up signal with an identification (ID) code to a remote station;

means for receiving random data from said remote station;

means for storing a first KEY code;

means for encrypting the received random data with the stored first KEY code to produce a first encrypted data;

means for transmitting said first encrypted data to said remote station; and

means for erasing said first KEY code from said storing means when said storing means is accessed from outside the security module.

11. An apparatus as claimed in claim 10, further comprising at said remote station:

means for receiving said call-up signal and the transmitted first encrypted data;

means responsive to the received call-up signal for generating said random data based on said ID code;

means for transmitting the generated random data;

means for encrypting the generated random data with a second KEY code corresponding to said ID code to produce a second encrypted data; and

means for comparing the received first encrypted data with said second encrypted data.

12. A method of preventing a KEY code in a memory from being stolen, comprising the steps of:

storing said KEY code in said memory;

incorporating said memory in a module;

encrypting data in said module by using said KEY code; and

erasing said KEY code from said memory when said memory is accessed from outside of said module.