Method for protecting a security module and arrangement for the implementation of the method

• US 7,194,443 B1
• Filed: 03/10/2000
• Issued: 03/20/2007
• Est. Priority Date: 03/12/1999
• Status: Expired due to Term

• Current Assignee: Francotyp-Postalia GmbH (Francotyp-Postalia Holding AG)
• Original Assignee: Francotyp-Postalia GmbH (Francotyp-Postalia Holding AG)
• Inventors: Schlaaff, Torsten, Rosenau, Dirk, Post, Peter
• Primary Examiner(s): Vig; Naresh
• Application Number:
  US09/522,619
• Time in Patent Office: 2,566 Days
• Field of Search: 705/405, 705/410, 426/34, 426/35, 426/16, 426/17
• US Class Current: 705/405
• CPC Class Codes: G07B 17/00733 Cryptography or similar special procedures in a franking system
• CPC Class Codes: G07B 2017/00233 Housing, e.g. lock or hardened casing
• CPC Class Codes: G07B 2017/00298 Visual, e.g. screens and their layouts
• CPC Class Codes: G07B 2017/00306 Acoustic, e.g. voice control or speech prompting
• CPC Class Codes: G07B 2017/00346 Power handling, e.g. power-down routine
• CPC Class Codes: G07B 2017/00403 Memory zones protected from unauthorized reading or writing
• CPC Class Codes: G07B 2017/00967 PSD [Postal Security Device] as defined by the USPS [US Postal Service]

Abstract

In a security module and a method for protecting a security module, wherein security-relevant data are stored in a memory in the module, proper insertion of the security module on a device motherboard is monitored with a first function unit and a second function in the security module. The first function unit signals the status of the security module. The second function unit detects improper use or improper replacement of the security module, and upon detection of improper use or improper replacement, the second function unit causes the security-relevant data to be erased.

Claims

1. A method for protecting a security module comprising the steps of:

storing security relevant data in a non-volatile memory of a security module and inserting said security module in a device motherboard;

monitoring proper insertion of said security module on said device motherboard with a first function unit and a second function unit in said security module;

signaling at least one security-related status of said security module with said first function unit;

in said monitoring of proper insertion, detecting a status indicating at least one of improper use and improper replacement of said security module with said second function unit and, upon a detection of said status indicating at least one of said improper use and said improper replacement, said second function unit causing said security-relevant data to be erased;

in said monitoring of proper insertion, monitoring a continued existence of said status with said second function unit and detecting, with said second function unit, when said status no longer exists;

when said second function unit detects that said status no longer exists, initiating re-initializing, with said first function unit, any erased, security-relevant data; and

after said re-initializing, enabling each of said first function unit and said second function unit to re-commission said security module.

2. A method as claimed in claim 1 comprising the additional steps of:

storing security relevant data in a security module and inserting said security module in a device motherboard;

normally operating said security module with system voltage from a device containing said device motherboard and, in an absence of said system voltage, operating said security module with a batter; and

monitoring a status of said battery with said second function unit as said status indicating at least one of said improper use and said improper replacement.

3. A method as claimed in claim 1 comprising providing a third function unit and inhibiting said security module with said third function unit during at least one of replacement of said security module on said device motherboard and damage to said security module.

4. A method as claimed in claim 3 comprising detecting said damage to said security module with said third function unit.

5. A method as claimed in claim 1 comprising evaluating a running time credit with said first function unit and, upon expiration of said time credit, signaling a suspicious status of said security module with said first function unit.

6. A method as claimed in claim 5 comprising the additional steps of:

after expiration of said time credit, said first function unit establishing a communication with a remote data source; and

restoring normal operation to said security module via said communication.

7. A method as claimed in claim 5 comprising selecting a duration of said time credit to obtain a time credit of selected duration, and loading said time credit of selected duration into a memory in said security module, said memory being accessible by said first function unit.

8. A method as claimed in claim 5 wherein said time credit is a first time credit, and comprising the additional steps of monitoring a second time credit with said first function unit, which is longer than said first time credit, and signaling a status designating a device containing said device motherboard as being inoperable when said second time credit expires.