Telecommunication terminal comprising two execution spaces

• US 7,865,724 B2
• Filed: 12/17/2004
• Issued: 01/04/2011
• Est. Priority Date: 12/23/2003
• Status: Active Grant

• Current Assignee: Orange S.A., Thales DIS France SAS (Thales SA)
• Original Assignee: Orange S.A., Trusted Logic (Thales SA)
• Inventors: Frey, Alexandre, Blanchet, Jean-Bernard, Montel, Geoffroy, Vetillard, Eric, Frerebeau, Laurent, Alvarado, Cuihtlauac, Maupetit, Matthieu
• Primary Examiner(s): Cervetti; David Garcia
• Application Number:
  US10/584,702
• Publication Number:
  US 20080032668A1
• Time in Patent Office: 2,209 Days
• Field of Search: 726/17, 726/27, 713/166
• US Class Current: 713/166
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

The invention relates to a user interface-equipped computing device comprising means for implementing a series of applications, said means including two execution spaces. According to the invention, the applications of the second execution space (100, P1, 200, P2) have a level of security specifically higher than that of the applications of the first execution space (100, P1, 200, P2), said two execution spaces being hosted by a physical processing means which is designed such that it cannot be separated into two parts without destroying the physical processing means.

Claims

1. Computing device with user interface comprising a physical processing means, said physical processing means including:

a first virtual machine

a second virtual machine;

wherein an execution space is defined in each virtual machine;

wherein the execution spaces of the first and second virtual machines host applications;

wherein the applications hosted in the execution space of the second virtual machine have a higher level of security than that of the applications hosted in the execution space of the first virtual machine;

wherein the applications of the execution space of the first virtual machines are user-modifiable applications;

wherein the applications of the execution space of the second virtual machines are user-unmodifiable applications;

wherein the two virtual machines are separable only by destruction of the physical processing means; and

wherein the first and second virtual machines are distinct and each of the first and second virtual machines is associated with a single corresponding execution profile.

2. Device as in claim 1, wherein the applications hosted in the execution space of the second virtual machines are application modifiable by a security operator chosen among:

telephone operators, banks, providers of multimedia items with selective or paying distribution, service providers operating in exchange of electronic signature via said device.

3. Device as in claim 1, wherein said device is a telephone terminal.

4. Device as in claim 3, wherein said device is a mobile telephone terminal.

5. Device as in claim 1, further comprising means for communicating between the first and second execution spaces.

6. Device as in claim 5, wherein one execution space comprises processing means, and wherein the means for communicating between the first and second execution spaces are configured such that the processing means is usable by an application hosted in the other execution space.

7. Device as in claim 5, wherein one execution space comprises resources accessible by selected applications, and wherein the means for communicating between the first and second execution spaces comprises an API stub enabling use of resources of the execution space by the other execution space.

8. Device as in claim 5, wherein the means for communicating between the first and second execution spaces comprises means for implementing serialization/deserialization or marshalling/unmarshalling.

9. Device as in claim 1, wherein each of the first and second execution spaces comprises at least one separate API.

10. Device as in claim 1, wherein one execution space comprises a STIP type profile.

11. Device as in claim 1, wherein one execution space comprises a MIDP-type profile.

12. Device as in claim 1, wherein one execution space comprises a STIP-type profile and the other execution space comprises a profile, the type of which is chosen amidst:

STIP, MIDP, OSGI and “

.net”

.