Security module, security system and mobile station

• US 6,957,342 B2
• Filed: 03/05/2001
• Issued: 10/18/2005
• Est. Priority Date: 09/04/1998
• Status: Expired due to Fees

• Current Assignee: Harri Vatanen
• Original Assignee: Harri Vatanen
• Inventors: Vatanen, Harri
• Primary Examiner(s): Sheikh, Ayaz
• Assistant Examiner(s): Baum, Ronald
• Application Number:
  US09/799,444
• Publication Number:
  US 20020114467A1
• Time in Patent Office: 1,688 Days
• Field of Search: 455572-5751, 380 37- 42, 380/247, 380/270, 713192-200, 713/300
• US Class Current: 713/192
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A security module, a security system and a mobile station for utilizing and use with the module and system enable ready implementation of services and devices that afford a high level of data security using standard devices without required modifications of the standard devices to implement banking and other services requiring high data security. A security module uses a standardized local interface for transmission of the messages to be transmitted. Messages can be transmitted in real time without any significant delays introduced by the telecommunication network to effect the encryption functionality.

Claims

1. A security module for use with a terminal device, comprising:

a frame comprising a connection device arranged and dimensioned for connecting the security module to a receptacle on the terminal device;

encryption means for encrypting electronic data transferred by the terminal device to the security module, for decrypting encrypted electronic data and for implementing an electronic signature, wherein said encryption means is arranged in said frame and comprises a processor for encrypting and decrypting electronic data and for implementing the electronic signature, and a memory connected to the processor for storing of encryption keys and parameters;

a first connection interface arranged in said frame for effecting a wireless electronic data transfer communication connection between the security module and the external device, wherein said wireless electronic data transfer communication connection comprises a radio link; and

a second interface arranged in said frame and dimensioned for receiving electrical operating power for the security module from the terminal device when said security module is connected to the receptacle on the terminal device by said connection device.

2. A security module in accordance with claim 1, further comprising a smart card component configured and operable for implementing smart card functions on the security module.

3. A security module in accordance with claim 1, wherein said first connection interface is configured for implementing a Bluetooth-based wireless data transfer communication connection.

11. A security module in accordance with claim 1, wherein said connection device for connecting the security module to the terminal device includes a wireless communication connection.

12. A security module in accordance with claim 1, wherein said radio link uses Bluetooth technology.

4. In a security system for a service provider terminal and a service user terminal electrically interconnected via a predetermined communication link,

a first security module connected to the service provider terminal, and

a second security module connected to the service user terminal,

said first and second security modules being configured for processing information transmitted between the service provider terminal and the service user terminal, and each of said first and second security modules comprising

a frame having a connection device arranged and dimensioned for connection of said first and second security modules to respective receptacles on the service provider terminal and the service user terminal,

encryption means for encrypting electronic data transferred via the each security module, for decrypting encrypted electronic data and for implementing an electronic signature, wherein said encryption means comprises a processor for encrypting and decrypting electronic data and for implementing the electronic signature, and a memory connected to the processor for storing of encryption keys and parameters,

a first connection interface for effecting a wireless electronic data transfer communication connection between the each security module and the respective terminal of the other of said each security module, wherein said wireless electronic data transfer communication connection is a radio link, and

a second interface for receiving electrical operating power for the each security module from a respective one of the service provider terminal and the service user terminal.

5. In the security system of claim 4, the service provider terminal comprising one of an online banking terminal, a cash register, and a vending machine.

6. In the security system of claim 4, the service user terminal comprising one of a mobile station and a portable computer.

7. In the security system of claim 4, a service provider server to which the first security module is connectable via a telecommunication network for updating, at the service provider server, functions executed from the service user terminal and for saving the updated functions to the service provider server.

8. In a mobile station operable for communication over a telecommunication network and having a keypad, a display, a radio unit, a power source, and a security module, the security module comprising:

a frame including connection device arranged a dimensioned for connecting said security module to a receptacle on the mobile station;

encryption means for encrypting electronic data transferred through the telecommunication network by the mobile station through the security module, for decrypting encrypted electronic data and for implementing an electronic signature, wherein said encryption means is arranged on said frame and comprises a processor for encrypting and decrypting electronic data and for implementing the electronic signature, and a memory connected to the processor for storing of encryption keys and parameters;

a first connection interface arranged in said frame and separate from said radio unit of said mobile station for effecting a wireless electronic data transfer communication connection between the security module and an external device, wherein said wireless electronic data transfer communication connection is a radio link; and

a second interface arranged on said frame and dimensioned for receiving electrical operating power for the security module from the mobile station when said security module is connected to the receptacle on the mobile station by said connection means.

9. In the mobile station of claim 8, said security module being configured for processing information transmitted by the mobile station to one of the telecommunication network and a local interface of the mobile station.

10. In the mobile station of claim 8, said security module being configured for effecting said wireless electronic data transfer communication connection using a Bluetooth-based wireless data transfer communication connection.