Near field communication, security and non-volatile memory integrated sub-system for embedded portable applications

• US 8,117,445 B2
• Filed: 12/20/2006
• Issued: 02/14/2012
• Est. Priority Date: 12/20/2006
• Status: Active Grant

• Current Assignee: Cypress Semiconductor Corporation (Infineon Technologies AG)
• Original Assignee: Spansion LLC (Infineon Technologies AG)
• Inventors: Werner, Jeremy Isaac Nathaniel, Barck, Russell, Minassian, George
• Primary Examiner(s): Moazzami, Nasser
• Assistant Examiner(s): McNally, Michael S
• Application Number:
  US11/613,620
• Publication Number:
  US 20080155257A1
• Time in Patent Office: 1,882 Days
• Field of Search: 713/168
• US Class Current: 713/168
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

An architecture is presented that facilitates integrating memory, security functionalities and near field communication (NFC) capabilities in a mobile device. A memory module is provided that comprises non-volatile memory that stores security software, sensitive data, and keys and a security processor that accesses the security software from the nonvolatile memory and performs security functions based on the security software stored. A NFC radio frequency transmitter and receiver (RF) is directly integrated into the security processor to facilitate NFC capabilities within the secure environment of the memory module. Further, the non-volatile memory directly interfaces to an NFC antenna positioned outside of the memory module via the integrated NFC RF. The integration of the security processor, memory, and NFC RF into the memory module provides a trusted environment for the manipulation and decryption of data received through the NFC antenna.

Claims

1. A memory module, comprising:

a non-volatile memory that stores security software, sensitive data, and keys;

a security processor that accesses the security software from the non-volatile memory and performs security functions based on the stored security software;

an external processor that concurrently processes non-security functions, allowing the security processor to process security functions without the external processor executing interrupts to process security functions; and

a near field communications (NFC) radio frequency transmitter and receiver (RF) that couples NFC wireless protocol capabilities to security functionalities of the security processor, wherein the memory module directly couples to an NFC antenna located outside of the memory module via a dedicated bus, wherein the dedicated bus provides a secure execution environment for the NFC wireless protocol capabilities and the security functions to be executed, and wherein the NFC RF is directly integrated into the security processor, interfacing the non-volatile memory directly to the NFC antenna and communicates with an external terminal via the NFC antenna to transmit information related to the NFC wireless protocol capabilities.

2. The memory module of claim 1, wherein the NFC RF is a separate integrated circuit (IC) located within the memory module such that the non-volatile memory directly communicates with the NFC RF chip.

3. The memory module of claim 1, wherein the NFC RF, the security processor and the non-volatile memory are directly integrated into a single IC within the memory module.

4. The memory module of claim 1, wherein the NFC RF is a separate IC located outside of the memory module such that the non-volatile memory can directly communicate through the security processor, with the NFC RF chip.

5. The memory module of claim 4, wherein a dedicated bus is located between the NFC RF and the security processor to establish an interface for direct communications, the interface is an encrypted channel for secure communications.

6. The memory module of claim 1, further comprising volatile memory used for the temporary data and code storage needs of an external processor.

7. The memory module of claim 6, wherein the external processor is located outside of the memory module and arbitrates with the security processor for access to the non-volatile memory, and wherein the security processor sits in series between the external processor and the non-volatile memory.

8. The memory module of claim 7, further comprising a communication channel between the external processor and the security processor, the communication channel is a NOR, NAND or shared NOR/NAND bus interface.

9. The memory module of claim 1, wherein the non-volatile memory is flash memory.

10. The memory module of claim 9, wherein the flash memory is NOR and NAND flash memory.

11. The memory module of claim 9, wherein the flash memory is divided into multiple partitions of varying sizes and access rights, and wherein access rights are assigned to the partitions based on security requirements established for each partition.

12. The memory module of claim 1, wherein the security software comprises at least one of password access control software, authentication software, shared key authentication software, public key infrastructure (PKI) authentication software, integrity check software, encryption/decryption software, anti-virus software and anti-spyware software.

13. The memory module of claim 1, wherein the mobile device comprises one of a multimedia player, a Personal Digital Assistant (PDA), a cellular phone, and a hand held computing device.

14. A method comprising:

providing a dedicated security processor and a non-volatile memory within a memory module;

embedding security functionality directly into the non-volatile memory;

processing non-security functions via an external processor;

performing security functions related to the embedded security functionality via the security processor;

providing a near field communications (NFC) radio frequency transmitter and receiver (NRC RF) directly integrated into the security processor such that the non-volatile memory directly interfaces to an NFC antenna located outside the memory module, wherein the memory module is directly coupled to the NFC antenna via a dedicated bus, and wherein the NFC RF communicates with an external terminal via the NFC antenna to transmit information related to NFC wireless protocol capabilities;

executing the security functions and the NFC wireless protocol capabilities in a secure execution environment provided by the dedicated bus;

communicating other information related to the NFC wireless protocol capabilities to the security processor via the NFC antenna; and

at least one of;

authenticating access rights associated with access to the non-volatile memory via the NFC RF;

or

establishing a secure channel of communications between the external terminal and the non-volatile memory via the NFC RF.

15. The method of claim 14, further comprising:

utilizing the NFC wireless protocol capabilities for receiving, via a mobile device, a payment related to a purchase;

receiving a selection of an account and entry of a personal identification number (PIN), wherein details of the account are stored in the non-volatile memory;

verifying the PIN number;

determining whether the mobile device is within a range of a transaction terminal within a predetermined amount of time of the verifying the PIN number;

completing the payment based on the determining whether the mobile device is within the range; and

viewing a digital receipt received via the NFC based on the completing the payment.

16. The method of claim 14, further comprising positioning the NFC RF as a separate integrated circuit (IC) located within the memory module such that the non-volatile memory directly communicates with the NFC RF chip via the security processor.

17. The method of claim 14, further comprising positioning the NFC RF as a separate IC located outside of the memory module such that the non-volatile memory directly communicates with the NFC RF chip via the security processor.

18. A non-transitory computer readable medium having stored thereon instructions that cause a computer to perform a process, the process comprising:

utilizing a dedicated security processor and a flash memory within a memory module to perform security functions;

utilizing an external processor to perform non-security functions, wherein the external processor allows the dedicated security processor to perform security functions without the external processor executing interrupts to process security functions;

accessing security functionality embedded directly into the flash memory;

processing security protocols via the embedded security functionality;

interfacing a near field communications (NFC) radio frequency transmitter and receiver (NFC RF) that is directly integrated into the security processor, such that non-flash memory in the memory module interfaces directly to an NFC antenna via a dedicated bus that enables a secure execution environment, and wherein the NFC RF communicates with an external terminal via the NFC antenna to transmit information associated with NFC wireless protocol capabilities;

communicating information related to the NFC wireless protocol capabilities to the security processor; and

at least one of;

authenticating access rights associated with access to the non-volatile memory via the NFC RF;

or

establishing a secure channel of communications between the external terminal and the non-volatile memory via the NFC RF.