Method and a system for performing testing in a device, and a device

• US 7,418,593 B2
• Filed: 02/03/2004
• Issued: 08/26/2008
• Est. Priority Date: 02/03/2003
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Paatero, Lauri, Kiiveri, Antti
• Primary Examiner(s): Jung; David
• Application Number:
  US10/771,164
• Publication Number:
  US 20040255117A1
• Time in Patent Office: 1,666 Days
• Field of Search: 711/164, 713/166, 713/150, 713/164
• US Class Current: 713/166
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control

Abstract

The present invention relates to a method and a system for performing testing in a device (1), in which at least one program (110, 112) is loaded and at least one item of mode data relating to the program is determined. Furthermore, at least one key (111) is generated for use in said program. In the method, at least two different security levels are determined for the keys to be used in the device (1). In the method, said security level determined for the key and at least one mode data relating to the program are examined, and on the basis of the examination, it is decided if said key is available for use in the mode indicated in the mode data of the program. The invention also relates to a device, a mobile communication device and a storage medium.

Claims

1. A method comprising loading a program into a protected block of a device, said device for carrying out said method by:

determining a mode data relating to the program,

determining at least two different security levels for keys to be used in the device,

forming a first key for use in said program,

examining a security level determined for said first key and a mode of the program indicated by the mode data relating to the program,

determining, based on said examining, if said security level determined for said first key is available in the mode of the program indicated by said mode data,

wherein if the determining indicates that said security level determined for said first key is not available in the mode indicated by said mode data, the method comprises using a second key instead of said first key to perform testing in said device.

2. The method according to claim 1, wherein the first security level is a lower security level and the second security level is a higher security level.

3. The method according to claim 1, wherein said security level is program specific, wherein the method comprises determining the same security level for all keys to be used in the program.

4. The method according to claim 1, wherein said security level is key specific, wherein the method comprises determining the security level for each key to be used in the program, substantially irrespective of the other keys.

5. The method according to claim 1, wherein for a key which cannot be used in connection with the testing, a test key is determined to be used instead of the key during testing.

6. The method according to claim 1, wherein said keys, for which the security level is determined, are keys intended for internal use in the system.

7. The method according to claim 1, wherein at least one of said keys, for which the security level is determined, are keys intended for use in two programs in communication between the programs.

8. The method according to claim 1, wherein said mode data of the program indicates that the program mode is the test mode or the normal mode.

9. The method according to claim 1, wherein the device has at least a normal mode and a test mode, and that the programs are informed of the mode of the device.

10. A system comprising

a program loaded into a memory of a device, said memory coupled to a processor of said device for storing mode data relating to the program, and for storing a first key to be used in said program, and wherein the system is configured to determine at least two different security levels for keys to be used in the device,

an examining element for examining said security levels and the mode data relating to the program, and

a determining element for determining if said first key is available in a mode indicated by said mode data of the program,

wherein the system is configured to use a second key instead of said first key if the determining indicates that a security level determined for said first key is not available in the mode indicated by said mode data to perform testing in said device.

11. The system according to claim 10, wherein the first security level is a lower security level and the second security level is a higher security level.

12. The system according to claim 10, wherein said security level is program specific, wherein the same security level has been determined for all keys to be used in the program.

13. The system according to claim 10, wherein said security level is key specific, wherein the security level has been determined for each key to be used in the program, substantially irrespective of the other keys.

14. The system according to claim 10, wherein for a key which cannot be used in connection with the testing, a test key has been determined to be used instead of the key during testing.

15. A device comprising

a processor coupled to a memory;

a program loaded in the memory of the device, wherein the device is configured

to determine at least one item of mode data relating to the program,

to determine at least two different security levels for keys to be used in the device,

to examine said security level and the mode data relating to the program, and

to determine if said first key is available in the mode indicated by said mode data of the program,

wherein the device is configured to use a second key instead of said first key if the device determines that said security level for said first key is not available in the mode indicated by said mode data to perform testing in said device.

16. A mobile communication device comprising

a processor:

a memory coupled to the processor;

a program loaded in the memory of the mobile communication device with mode data relating to the program,

wherein the mobile communication device is configured

to examine a security level of the program and the mode data relating to the program,

to determine if a first key is available in the mode indicated by said mode data of the program, and

to use a second key instead of said first key if the security level for said first key is not available in the mode indicated by said mode data to perform testing in said device.

17. A computer readable storage medium, in which device program is arranged to be loaded to be executed in the device, said program having mode data relating thereto, and wherein at least two different security levels are determined for keys for use in the device, and that the computer readable storage medium has program commands stored thereon to examine a security level determined for a first key and the mode data relating to the program and, on the basis of the examination, to determine whether said first key is available for use in the mode indicated by said mode data, wherein if the determining indicates that said security level determined for said first key is not available in the mode indicated by said mode data the storage medium also has program commands stored thereon to use a second key instead of said first key to perform said testing in said device.

18. An apparatus configured:

for determining at least one item of mode data relating to a program loaded in a memory of a device;

for determining at least two different security levels for keys to be used in the device,

for examining said security level and the mode data relating to the program, and

for determining if said first key is available in the mode indicated by said mode data of the program,

for using a second key instead of said first key if it is determined that said security level for said first key is not available in the mode indicated by said mode data to perform testing in said device.