Method and device for securely configuring a terminal

• US 9,071,599 B2
• Filed: 10/05/2011
• Issued: 06/30/2015
• Est. Priority Date: 02/21/2006
• Status: Active Grant

• Current Assignee: Orange S.A.
• Original Assignee: Orange S.A.
• Inventors: Charles, Olivier, Tinnes, Julien, Leclercq, Eric
• Primary Examiner(s): Williams, Jeffery
• Assistant Examiner(s): SARKER, SANCHIT K
• Application Number:
  US13/253,528
• Publication Number:
  US 20120089838A1
• Time in Patent Office: 1,364 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 9/4401 Bootstrapping security arrangements therefor G06F21/57
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

A method of configuring a terminal including initializing the terminal, and which automatically triggers at least: detecting presence of a memory by a basic input/output system of the terminal, accessing the memory by the basic input/output system, starting up an operating system stored in the memory, and starting up a driver of a telecommunication network access module, the driver of the access module being stored in the memory and configured to drive the access module through a communication link between the terminal and a telecommunication device including the access module.

Claims

1. A method of configuring a terminal comprising:

initializing the terminal, which automatically triggers at least;

detecting presence of a memory by a basic input/output system of the terminal, wherein the memory is distinct from any memory of the terminal and comprises an operating system of the terminal and a network access driver of a telecommunication device, which are stored thereon;

accessing the memory by the basic input/output system;

starting up the operating system of the terminal that is stored in the memory;

detecting, by the operating system of the terminal, presence of a telecommunication network access modem included in the telecommunication device, which is external to and distinct from the terminal, the telecommunication network access modem being configured to connect the telecommunication device to and access a telecommunication network and corresponding to the network access driver stored in the memory; and

starting up, automatically by said operating system of said terminal, the network access driver, wherein the driver is configured to drive the telecommunication network access modem from the terminal by dispatching commands to the network access modem through a communication link between the terminal and the telecommunication device, which drive the network access modem to connect the telecommunication device to and access the telecommunication network.

2. The configuration method as claimed in claim 1, further comprising:

establishing a communication link between the terminal and the communication network, by the telecommunication network access modem and connection parameters stored in the memory.

3. The configuration method as claimed in claim 1, further comprising:

starting up a driver of a chip card reading device configured to interrogate a chip card, the driver being stored in the memory and configured to drive the reading device through a communication link between the terminal and the reading device.

4. The configuration method as claimed in claim 3, further comprising:

establishing a secure communication tunnel between the terminal and a server of the telecommunication network, during which a strong authentication procedure is implemented by a chip card interrogatable via the driver of the chip card reading device.

5. The configuration method as claimed in claim 3, further comprising:

constructing at least one virtual partition based on enciphered data stored in the memory to render the enciphered data accessible by a user of the terminal.

6. The configuration method as claimed in claim 3, further comprising:

dispatching to a chip card, interrogatable via the driver of the chip card reading device, a request to decipher at least one enciphered deciphering key;

deciphering at least part of the enciphered data stored in means for storing data by at least one deciphered deciphering key.

11. The method of claim 1, wherein the driver is configured with connection parameters specific to a user for connection to the telecommunication network through the telecommunication network access modem.

7. A device for configuring a terminal, the device comprising:

a telecommunication device, which is external to and distinct from said terminal and comprising a telecommunication network access modem for accessing a telecommunication network;

a memory that is distinct from any memory of the terminal and accessible by a basic input/output system of the terminal during a phase of starting up of the terminal, the memory comprising;

an operating system of the terminal, and

a network access driver of the telecommunication device, which is configured to drive the telecommunication network access modem on the telecommunication device from the terminal through a communication link between the terminal and the telecommunication device,

wherein terminal is configured to trigger automatically, upon starting up of the terminal, at least;

detection by the basic input/output system of the terminal of presence of the memory,

access by the basic input/output system to the memory,

starting up of the operating system of the terminal stored in the memory,

detecting, by the operating system of the terminal, presence of the telecommunication network access modem included in the telecommunication device; and

starting up, automatically by said operating system of said terminal, the network access driver to drive the telecommunication network access modem on the telecommunication device from the terminal by dispatching commands to the network access modem through the communication link between the terminal and the telecommunication device, which drive the network access modem to connect the telecommunication device to and access the telecommunication network.

8. The device as claimed in claim 7, further comprising:

a chip card;

a reading device configured to interrogate the chip card;

the memory further comprising;

a driver of the reading device configured to drive the reading device from the terminal through a communication link between the terminal and the reading device,

the operating system configured to start up the driver of the reading device.

9. The device as claimed in claim 7, further comprising:

means for storing data comprising;

enciphered data, and at least one enciphered deciphering key;

the memory further comprising;

a data access management driver configured to construct at least one virtual partition based on enciphered data stored in the means for storing data, to render the enciphered data accessible by a user of the terminal, the data access management driver configured to dispatch to the chip card via the driver of the reading device a request to decipher at least one enciphered deciphering key and configured to trigger the decipherment of at least part of the enciphered data by at least one deciphered deciphering key,

the operating system configured to trigger execution of the deciphering driver.

10. The device as claimed in claim 8, the memory, the telecommunication network access modem, and the chip card being integrated into a mobile telecommunication terminal.

12. The device of claim 7, wherein the driver is configured with connection parameters specific to a user for connection to the telecommunication network through the telecommunication network access modem.