Electronic module for making a message accessible to a targeted operating system

• US 9,767,286 B2
• Filed: 11/26/2013
• Issued: 09/19/2017
• Est. Priority Date: 11/27/2012
• Status: Active Grant

• Current Assignee: IDEMIA France (Advent International Corporation)
• Original Assignee: Oberthur Technologies SA
• Inventors: Bousquet, Nicolas
• Primary Examiner(s): ABEDIN, SHANTO
• Application Number:
  US14/089,914
• Publication Number:
  US 20140150093A1
• Time in Patent Office: 1,393 Days
• Field of Search: 726 4, 726 21, 726 17, 726 24- 30, 4554121, 455466, 709229, 709232, 709238, 713 1, 713 2, 713100
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits

Abstract

An electronic module that includes means for determining an operating system targeted by a message received by a transmitter-receiver of an electronic device, from among at least a Rich-OS operating system and a trusted operating system executed on a chipset of the electronic device, so that the message becomes accessible to the targeted operating system. The determining means may be set in operation in response to receipt of the message by the transmitter-receiver.

Claims

1. An electronic module comprising:

a microprocessor that;

determines an operating system targeted by a message received by a transmitter-receiver of an electronic device, said operating system being determined from among at least a Rich-OS operating system and a trusted operating system executed on a chipset of said electronic device; and

makes the message accessible to the targeted operating system;

wherein;

the determination of the operating system by the microprocessor is set in operation in response to receipt of the message by the transmitter-receiver;

the Rich-OS operating system, the trusted operating system, and the electronic module are distinct;

the electronic module intercepts the message before the message is transmitted to elements controlled by the Rich-OS operating system or any applications of the Rich-OS operating system; and

the message is only transmitted to the elements controlled by the Rich-OS operating system or any applications of the Rich-OS operating system if the Rich-OS operating system is the operating system targeted by the message; and

wherein;

the microprocessor initializes a communication channel between said electronic module and said operating system targeted by the message, and sends to said operating system targeted by the message, via said communication channel, a notification of receipt of the message, or

the microprocessor memorizes the message in a memory of the electronic module which is accessible by the trusted operating system and not accessible by the Rich-OS.

2. The electronic module according to claim 1, wherein the trusted operating system and the Rich-OS operating system are unable to send a command or a message to the electronic module.

3. The electronic module according to claim 1, wherein the determining of the operating system is set in operation without any operating system inter-positioned between the microprocessor and the electronic module.

4. The electronic module according to claim 1, wherein:

the message comprises a frame, and

the microprocessor reads a recipient field of said frame or said message to identify the targeted operating system.

5. The electronic module according to claim 4, wherein the microprocessor obtains the address of a communications means of the execution environment of the targeted operating system, from a destination address included in the recipient field of said frame or of said message.

6. The electronic module according to claim 1, wherein the microprocessor interprets a command contained in the message.

7. The electronic module according to claim 1, wherein the microprocessor makes said message available in a memory accessible to the targeted operating system.

8. A transmitter-receiver of an electronic device comprising an electronic module including a microprocessor, the microprocessor being configured to:

determine an operating system targeted by a message received by said transmitter-receiver, the operating system being determined from among at least a Rich-OS operating system and a trusted operating system executed on a chipset of said electronic device; and

make the message becomes accessible to the targeted operating system;

wherein;

the determination of the operating system by the microprocessor is set in operation in response to receipt of the message by the transmitter-receiver;

the Rich-OS operating system, the trusted operating system and the electronic module are distinct;

the electronic module intercepts the message before the message is transmitted to elements controlled by the Rich-OS operating system or any applications of the Rich-OS operating system; and

the message is only transmitted to the elements controlled by the Rich-OS operating system or any applications of the Rich-OS operating system if the Rich-OS operating system is the operating system targeted by the message; and

wherein the microprocessor is further configured to;

initialize a communication channel between said electronic module and said operating system targeted by the message, and send to said operating system targeted by the message, via said communication channel, a notification of receipt of the message;

or

memorize the message in a memory of the electronic module which is accessible by the trusted operating system and not accessible by the Rich-OS.

9. A terminal comprising:

a chipset, on which a Rich-OS operating system and a trusted operating system are executed,

a transmitter-receiver, and

an electronic module,

wherein the electronic module includes a microprocessor that;

determines an operating system targeted by a message received by the transmitter-receiver, the operating system being determined from among at least a Rich-OS operating system and a trusted operating system executed on the chipset, and

makes the message accessible to the targeted operating system,

wherein;

the determination of the operating system by the microprocessor is set in operation in response to receipt of the message by the transmitter-receiver,

the Rich-OS operating system, the trusted operating system and the electronic module are distinct;

the electronic module intercepts the message before the message is transmitted to elements controlled by the Rich-OS operating system or any applications of the Rich-OS operating system; and

the message is only transmitted to the elements controlled by the Rich-OS operating system or any applications of the Rich-OS operating system if the Rich-OS operating system is the operating system targeted by the message, and

wherein;

the microprocessor initializes a communication channel between said electronic module and said operating system targeted by the message, and sends to said operating system targeted by the message, via said communication channel, a notification of receipt of the message, or

the microprocessor memorizes the message in a memory of the electronic module which is accessible by the trusted operating system and not accessible by the Rich-OS.

10. The terminal according to claim 9, wherein the electronic module is integrated in the chipset.

11. The terminal according to claim 9, wherein the terminal is a mobile telephony terminal.

12. A terminal comprising:

a chipset, on which a Rich-OS operating system and a trusted operating system are executed,

a transmitter-receiver,

an electronic module, and

a communication channel between said trusted operating system and said transmitter-receiver, so that the trusted operating system generates a secure message transmitted directly to the transmitter-receiver,

wherein the electronic module includes a microprocessor that;

determines an operating system targeted by a message received by the transmitter-receiver, the operating system being determined from among at least a Rich-OS operating system and a trusted operating system executed on the chipset, and

makes the message accessible to the targeted operating system,

wherein the determination of the operating system by the microprocessor is set in operation in response to receipt of the message by the transmitter-receiver,

wherein the Rich-OS operating system, the trusted operating system and the electronic module are distinct; and

wherein the electronic module intercepts the message before the message is transmitted to elements controlled by the Rich-OS operating system or any applications of the Rich-OS operating system.

13. A message routing method implemented by an electronic module, the method comprising:

determining, by a microprocessor, an operating system targeted by a message received by a transmitter-receiver of an electronic device, said operating system being determined from among at least a Rich-OS operating system and a trusted operating system executed on a chipset of said electronic device; and

making, by the microprocessor, the message accessible to said targeted operating system,

wherein;

the determining operates in response to receipt of the message by the transmitter-receiver,

the Rich-OS operating system, the trusted operating system and the electronic module are distinct;

the electronic module intercepts the message before the message is transmitted to elements controlled by the Rich-OS operating system or any applications of the Rich-OS operating system;

the message is only transmitted to the elements controlled by the Rich-OS operating system or any applications of the Rich-OS operating system if the Rich-OS operating system is the operating system targeted by the message, and

wherein;

the microprocessor initializes a communication channel between said electronic module and said operating system targeted by the message, and sends to said operating system targeted by the message, via said communication channel, a notification of receipt of the message, or

the microprocessor memorizes the message in a memory of the electronic module which is accessible by the trusted operating system and not accessible by the Rich-OS.

14. A non-transitory computer-readable medium comprising instructions that, when executed by a processor, perform a method comprising:

determining an operating system targeted by a message received by a transmitter-receiver of an electronic device, said operating system being determined from among at least a Rich-OS operating system and a trusted operating system executed on a chipset of the electronic device,

wherein;

the message becomes accessible to said targeted operating system,

the determining operates in response to receipt of the message by the transmitter-receiver,

the Rich-OS operating system, the trusted operating system and the electronic module are distinct;

the electronic module intercepts the message before the message is transmitted to elements controlled by the Rich-OS operating system or any applications of the Rich-OS operating system; and

the message is only transmitted to the elements controlled by the Rich-OS operating system or any applications of the Rich-OS operating system if the Rich-OS operating system is the operating system targeted by the message, and

wherein;

the microprocessor initializes a communication channel between said electronic module and said operating system targeted by the message, and sends to said operating system targeted by the message, via said communication channel, a notification of receipt of the message, or

the microprocessor memorizes the message in a memory of the electronic module which is accessible by the trusted operating system and not accessible by the Rich-OS.