Enhanced wireless communication security

• US 9,398,448 B2
• Filed: 12/14/2012
• Issued: 07/19/2016
• Est. Priority Date: 12/14/2012
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Stotzer, Reinhard, Reese, Kenneth, Nagaraj, Raviprakash
• Primary Examiner(s): Armouche, Hadi
• Assistant Examiner(s): Khan, Sher A
• Application Number:
  US13/715,611
• Publication Number:
  US 20140169560A1
• Time in Patent Office: 1,313 Days
• Field of Search: 713/156, 713/159, 713/168, 713/179, 380/270, 380/247, 380/248, 380/249, 726 2- 3, 726/6, 726 26- 29
• US Class Current: 1/1
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

Systems, methods, and devices are directed to an electronic device that includes a first wireless communication module configured to facilitate transmission and reception of data via a wireless communication link and a first secure element while a wireless communication device includes a processor, an operating system executed by the processor, a second wireless communication module configured to facilitate transmission and reception of data via the wireless communication link, and a second secure element. The second secure element exchanges information with the first secure element via the wireless communication link to establish a secure channel within the wireless communication link, and the wireless communication device employs logic configured to route the data to the second secure element for processing prior to forwarding the data to the operating system, upon establishing the secure channel.

Claims

1. A wireless communication device, comprising:

a processor;

an operating system executed by the processor;

a wireless communication module comprising hardware configured to execute instructions to establish a wireless communication link and facilitate transmission and reception of wireless data via the wireless communication link; and

a secure element comprising a hardware platform configured to establish a secure channel related to the wireless communication link, wherein the secure element is triggered to establish the secure channel responsive to the establishment of the wireless communication link by the wireless communication module,

wherein, in operation, upon establishment of the wireless communication link and the secure channel, the wireless communication module executes instructions to route the wireless data received at the wireless communication module to the secure element for processing, and the secure element is configured to operate in accordance with a Secure Channel Protocol and encrypt the wireless data received from the wireless communication module prior to forwarding the wireless data to the operating system,

wherein the secure element is to request security-related information including one or more of the following;

identification data, secure element configuration data, secure element operating system/security application data, authentication data, and security/encryption key establishment data.

2. The wireless communication device of claim 1, wherein the secure element is communicatively coupled to the wireless communication module.

3. The wireless communication device of claim 1, wherein the secure element includes one or more of the following:

core root of trust measurement module, encryptor module, decryptor module, key generator, a random number generator, hash engine, secure storage, and platform configuration registers.

4. The wireless communication device of claim 1, wherein the wireless communication link comprises a communication link based on a standard for a wireless personal area network.

5. The wireless communication device of claim 1, wherein the secure element operates in accordance with a GlobalPlatform standard.

6. A wireless communication system, comprising:

an electronic device including;

a first wireless communication module comprising hardware configured to execute instructions to facilitate transmission and reception of wireless data via a wireless communication link; and

a first secure element comprising a first hardware platform; and

a wireless communication device including;

a processor;

an operating system executed by the processor;

a second wireless communication module comprising hardware configured to execute instructions to establish the wireless communication link and facilitate transmission and reception of wireless data via the wireless communication link; and

a second secure element comprising a second hardware platform, wherein, the second secure element is configured to exchange information with the first secure element via the wireless communication link to establish a secure channel related to the wireless communication link, wherein the second secure element is triggered to establish the secure channel responsive to the establishment of the wireless communication link by the second wireless communication module, and

wherein, in operation, upon establishment of the wireless communication link and the secure channel, the second wireless communication module executes instructions to route the wireless data received at the second wireless communication module to the second secure element for processing, and the second secure element is configured to operate in accordance with a Secure Channel Protocol and encrypt the wireless data received from the second wireless communication module prior to forwarding the wireless data to the operating system,

wherein the first and second secure elements are to exchange security-related information including one or more of the following;

identification data, secure element configuration data, secure element operating system/security application data, authentication data, and security/encryption key establishment data.

7. The wireless system of claim 6, wherein the first and second secure elements are communicatively coupled to the first and second wireless communication modules, respectively.

8. The wireless system of claim 6, wherein the first and second secure elements include one or more of the following:

core root of trust measurement module, encryptor module, decryptor module, key generator, a random number generator, hash engine, secure storage, and platform configuration registers.

9. The wireless system of claim 6, wherein the wireless communication link comprises a communication link based on a standard for a wireless personal area network.

10. The wireless system of claim 6, wherein the first and second secure elements operate in accordance with a GlobalPlatform standard.

11. A method, comprising:

establishing, a wireless communication module comprising hardware, a wireless communication link to facilitate transmission and reception of wireless data via the wireless communication link;

establishing, using a secure element comprising hardware, a secure channel related to the wireless communication link responsive to the establishment of the wireless communication link, wherein the secure element is configured to operate in accordance with a Secure Channel Protocol;

routing wireless data received via the wireless communication link from the wireless communication module to the secure element for processing; and

encrypting, at the secure element, the wireless data prior to forwarding the wireless data to an operating system executing in a device,

wherein the secure element is to request security-related information including one or more of the following;

identification data, secure element configuration data, secure element operating system/security application data, authentication data, and security/encryption key establishment data.

12. The method of claim 11, wherein the secure element includes one or more of the following:

core root of trust measurement module, encryptor module, decryptor module, key generator, a random number generator, hash engine, secure storage, and platform configuration registers.

13. The method of claim 11, wherein the establishing a wireless communication link is based on a standard for a wireless personal area network.

14. The method of claim 11, wherein the secure element is to operate in accordance with a GlobalPlatform standard.