Arrangement for effecting secure transactions in a communication device

• US 6,662,020 B1
• Filed: 08/25/2000
• Issued: 12/09/2003
• Est. Priority Date: 08/27/1999
• Status: Expired due to Term

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Bergman, Mats, Aaro, Ingvar, Ekbom, Kristofer
• Primary Examiner(s): Nguyen, Lee
• Assistant Examiner(s): TRAN, TUAN A
• Application Number:
  US09/645,918
• Time in Patent Office: 1,201 Days
• Field of Search: 455/403, 455/410, 455/418, 455/419, 455/552.1, 455/553.1, 455/411, 455/556-558, 325/380-382, 380/247, 380/249, 380/255, 380/266, 380/270
• US Class Current: 455/552.1
• CPC Class Codes: G06Q 20/3226 Use of secure elements separate from M-devices
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

An arrangement for effecting secure transactions having a device interfaced to at least one communications network is proposed. The device has two modes of operation, and includes a controller that controls the device in a first mode of operation and a display coupled to the controller in the first mode. The device further includes a secure part for controlling the device in a secure mode of operation. This secure part has a secure memory for storing data. This memory is directly coupled to the display in the secure mode of operation. Preferably, the device also includes a keypad or other input device that is directly coupled to the secure memory in the second mode. The hardwired connections to secure memory in the secure mode ensures that data shown on the display is indeed the data that is processed and signed off in the secure mode of operation.

Claims

1. An arrangement for effecting secure transactions, comprising:

a device having an interface to at least one communication network and having a non-secure mode and a secure mode of operation, said secure mode providing for encryption and decryption of data sent over the communication network for effecting secure transactions;

a controller for controlling the device in the non-secure mode of operation;

a display coupled to the controller in the non-secure mode of operation; and

secure means for controlling the device in the secure mode of operation, the secure means including a memory for storing secure data;

wherein the display is directly coupled to the secure-data memory in the secure mode of operation.

2. The arrangement of claim 1, further comprising an input device that is coupled to the controller in the non-secure mode of operation and directly coupled to the memory in the secure mode of operation.

3. The arrangement of claim 2, wherein the input device is coupled to the memory by a hardwired connection comprising a second switch.

4. The arrangement of claim 1, wherein the display is coupled to the memory by a hardwired connection comprising a second switch.

5. The arrangement of claim 1, further comprising a first switch for switching the mode of operation of the device between the non-secure and secure modes.

6. The arrangement of claim 5, wherein the second switch is controlled by the first switch.

7. The arrangement of claim 5, wherein the first switch includes a manually operable switch disposed on the device.

8. The arrangement of claim 1, further comprising an indicator for indicating the operating mode of the device.

9. The arrangement of claim 1, wherein the secure means includes at least one application for processing secure data.

10. The arrangement of claim 9, wherein the secure means includes a processor for executing the at least one application when the device is in the secure mode of operation, wherein execution of the application results in generation, verification, and storage of keys, and encryption and decryption of data sent and received over the communications network.

11. The arrangement of claim 10, wherein the processor is inoperative when the device is in the non-secure mode of operation.

12. The arrangement of claim 1, wherein the secure means includes a data generator that is coupled to the memory and that generates secure data.

13. The arrangement of claim 1, wherein at least a portion of the secure means is disposed on a carrier adapted to connect with the device.

14. The arrangement of claim 13, wherein the carrier is a smart card.

15. The arrangement of claim 1, wherein the device is a mobile communication device.

16. An arrangement for effecting secure transactions, comprising:

at least one application for processing secure data;

a processor for executing the at least one application, thereby generating encrypted data;

a secure memory for storing secure data; and

means for connecting with a communications device having a display, said connecting means comprising;

means for passing the encrypted data to and from a communications device that transmits and receives the encrypted data over a communications network; and

at least one line for directly coupling the secure memory with the display on the communications device.

17. The arrangement of claim 16, wherein the communications device also has an input device, and the connecting means includes at least one further line for directly coupling the secure memory with the input device.

18. The arrangement of claim 16, further including a data generator for generating secure data.

19. The arrangement of claim 16, wherein the arrangement is disposed on a carrier.