Protection of a security element coupled to an NFC circuit

• US 10,440,575 B2
• Filed: 10/03/2017
• Issued: 10/08/2019
• Est. Priority Date: 01/14/2011
• Status: Active Grant

• Current Assignee: STMicroelectronics SAS (STMicroelectronics NV)
• Original Assignee: STMicroelectronics SAS (STMicroelectronics NV)
• Inventors: Charles, Alexandre
• Primary Examiner(s): Sabouri, Mazda
• Application Number:
  US15/723,917
• Publication Number:
  US 20180049031A1
• Time in Patent Office: 735 Days
• CPC Class Codes: G06Q 20/3227 using secure elements embedded in M-devices
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: H04M 1/67 by electronic means
• CPC Class Codes: H04M 1/72412 using two-way short-range wireless interfaces
• CPC Class Codes: H04M 2250/04 including near field communication means, e.g. RFID
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A method and a device for protecting a security module connected to a near-field communication router in a telecommunication device, wherein a transmission between the router and the security module is only allowed in the presence of a radio frequency communication flow detected by the router.

Claims

1. A mobile device, comprising:

a processing unit;

a security module communicatively bidirectionally coupled to the processing unit;

a contactless front end communicatively bidirectionally coupled to the processing unit and to the security module;

a detection circuit arranged to provide a detection signal, the detection signal indicating whether the mobile device is in detectable proximity to a contactless communications terminal arranged for communication with the contactless front end; and

a multiplexer circuit having a first signal input coupled to the processing unit, a second signal input coupled to the security module, an output coupled to the contactless front end, and a control input coupled to receive the detection signal, wherein the multiplexer circuit is arranged to;

disallow communication between the security module and the contactless front end and allow communication between the processing unit and the contactless front end in response to the detection signal indicating that the mobile device is not in detectable proximity to the contactless communications terminal; and

in response to the detection signal indicating that the mobile device is in detectable proximity to the contactless communications terminal, allow communication between the security module and the contactless front end and disallow communication between the processing unit and the contactless front end.

2. The mobile device according to claim 1, wherein the security module is arranged as a subscriber identification module, and the communicative bidirectional coupling between the security module and the processing unit conforms to an International Standards Organization (ISO) 7816-3 protocol.

3. The mobile device according to claim 1, comprising:

a first antenna arranged to wirelessly communicate data across a mobile telephony network; and

a second antenna distinct from the first antenna, the second antenna arranged to wirelessly communicate near field transactions with the contactless communications terminal.

4. The mobile device according to claim 3, comprising:

a third antenna distinct from the first antenna and the second antenna, the third antenna coupled to the detection circuit, wherein the detection circuit is arranged to provide the detection signal based on a detection of a near field signal passed through the third antenna.

5. The mobile device according to claim 1, wherein the detection circuit is arranged to provide the detection signal based on a detection of a voltage signal extracted by the contactless front end from a wireless near field transaction signal of the contactless communications terminal.

6. The mobile device according to claim 1, comprising:

a second security module communicatively bidirectionally coupled to the contactless front end, the second security module arranged as an electronic circuit having stored thereon at least one security application and at least one secret datum.

7. The mobile device according to claim 1, wherein the contactless front end is arranged to carry out near field transactions that conform to a near field communications (NFC) protocol.

8. The mobile device according to claim 1, further comprising a routing table associated with the contactless front end, wherein the contactless front end and the security module are configured to arrange at least some bidirectional communications according to the routing table.

9. A device, comprising:

processing means for directing operations of the device;

security means for providing, to the processing means, identification data and authentication data that enable a telecommunication operation over a network;

contactless front end means for performing near field transactions in cooperation with a contactless communications terminal;

detection means for generating a detection signal, the detection signal indicating whether the device is in detectable proximity to the contactless communications terminal; and

switch means having a first signal input coupled to the processing unit, a second signal input coupled to the security module, an output coupled to the contactless front end, and a control input coupled to receive the detection signal, wherein the switch means are for;

disallowing communication between the security means and the contactless front end means and allowing communication between the processing means and the contactless front end means in response to the generated detection signal indicating that the device is not in detectable proximity to the contactless communications terminal; and

allowing communication between the security means and the contactless front end and disallowing communication between the processing unit and the contactless front end in response to the detection signal indicating that the device is in detectable proximity to the contactless communications terminal.

10. The device according to claim 9, comprising:

a first antenna arranged to wirelessly communicate telecommunication data across the network, wherein the network is a mobile telephony network;

a second antenna distinct from the first antenna, the second antenna arranged to wirelessly communicate near field transaction data to and from the contactless communications terminal; and

a third antenna distinct from the first antenna and the second antenna, the third antenna coupled to the detection means, wherein the detection means include a circuit arranged to provide the detection signal based on a detection of a near field signal passed through the third antenna.

11. The device according to claim 9, wherein the detection means include a circuit that provides the detection signal when a voltage signal extracted from a wireless near field transaction signal is detected.

12. The device according to claim 9, wherein the telecommunication operation conforms to a Global System for Mobile Communications (GSM) protocol.

13. The device according to claim 9, wherein the protection means include a multiplexer.

14. A mobile device method, comprising:

directing operations of the device with a processing unit;

providing, from a security module, identification data and authentication data to the processing unit to enable telecommunication operations over a network;

performing, through a contactless front end, near field transactions in cooperation with a contactless communications terminal;

generating a detection signal to indicate whether the mobile device is in detectable proximity to the contactless communications terminal;

using a multiplexer, disallowing communication between the security module and the contactless front end and allowing communication between the processing unit and the contactless front end in response to the detection signal indicating that the mobile device is not in detectable proximity to the contactless communications terminal; and

allowing communication between the security module and the contactless front end and disallowing communication between the processing unit and the contactless front end in response to the detection signal indicating that the mobile device is in detectable proximity to the contactless communications terminal.

15. The mobile device method according to claim 14, comprising:

wirelessly communicating telecommunications data through a first antenna across the network;

wirelessly communicating near field transaction data through a second antenna, the second antenna distinct from the first antenna; and

detecting a presence of an electromagnetic field with a third antenna, the third antenna distinct from the first antenna and the second antenna, wherein generating the detection signal includes generating the detection signal based on detecting the presence of the electromagnetic field.

16. The mobile device method according to claim 14, wherein generating the detection signal includes detecting a voltage signal extracted by the contactless front end from a wireless near field transaction signal.

17. The mobile device method according to claim 14, wherein disallowing communication with the security module includes diverting data communicated from the contactless front end based on a state of the detection signal.

18. The mobile device method according to claim 14, comprising passing the identification data and authentication data provided to the processing unit over a bus that conforms to a Single Wire Protocol (SWP).