VERIFICATION OF PROCESS INTEGRITY

• US 20110203003A1
• Filed: 08/21/2009
• Published: 08/18/2011
• Est. Priority Date: 08/22/2008
• Status: Active Grant

• Current Assignee: Titan Intelligence Technology Limited
• Original Assignee: NXP B.V. (NXP Semiconductors NV)
• Inventors: Motte, Bruno, Peeters, Michael, Froidcoeur, Tim, Debast, Claude
• Granted Patent: US 8,776,247 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/52 during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow

Abstract

A system implements a secure transaction of data between a server and a remote device. The remote device comprises: processing means adapted to process input data according to a security process; data storage means adapted to store verification information derived from the input data according to an encryption algorithm; and communication means for communicating the input data which has been processed by the security process to the server. The server is adapted to transmit a verification request to the remote device, and to verify the integrity of the security process based on verification information received from the communication means of the remote device in response to the verification request.

Claims

1. A system comprising a server and a remote device and adapted to implement a secure transaction of data between the server and remote device,

wherein the remote device comprises:

processing means adapted to process input data according to a security process;

data storage means adapted to store verification information derived from the input data; and

communication means for communicating the input data which has been processed by the security process to the server,

and wherein the server is adapted to transmit a verification request to the remote device, and to verify the integrity of the security process based on verification information received from the communication means of the remote device in response to the verification request

and characterized in that the remote device further comprises secure processing means and wherein the verification information is derived from the input data according to an encryption algorithm implemented by the secure processing means.

2. A system according to claim 1, wherein the remote device is adapted to communicate verification information to the server only in response to receiving a verification request from the server.

3. A system according to claim 1, wherein the remote device is a vehicle mounted unit comprising a global navigation system receiver for implementing a position tracking function, and wherein the communication means comprise a mobile telephony receiver.

4. A system according to claim 3, wherein the input data is derived from data output from the global navigation system receiver.

5. A system according to claim 1, wherein the security process is adapted to process input data such that the processed data does not disclose information related to the content of the input data.

6. A system according to claim 5, wherein the security process is a cryptographically secure one-way hash function

7. A system according to claim 1, wherein the server is adapted to process verification information received from the remote device according to a supplementary security process so as to verify the integrity of the security process undertaken by the remote device.

8. A method of implementing a secure transaction of data between a server and a remote device, the method comprising,

processing input data in the remote device according to a security process;

storing verification information derived from the input data;

communicating the processed input data to the server;

transmitting a verification request from the server to the remote device;

communicating verification information to the server in response to the verification request; and

verifying at the server the integrity of the security process based on verification information communicated to the server,

and characterized in that the verification information is derived from the input data according to an encryption algorithm implemented by secure processing means.

9. A method as claimed in claim 8, wherein the remote device is a vehicle mounted unit comprising a global navigation system receiver for implementing a position tracking function, and wherein the step of communicating is implemented using a mobile telephony receiver.

10. A method as claimed in claim 9, wherein the input data is derived from data output from the global navigation system receiver.

11. A method as claimed in claim 8, wherein the step of processing input data comprises processing input data such that the processed data does not disclose information related to the content of the input data.

12. A method as claimed in claim 11, wherein the step of processing input data comprises processing input data using a cryptographically secure one-way hash function.

13. A method as claimed in claim 8, wherein the step of verifying comprises processing verification information received from the remote device according to a supplementary security process.

14. A computer program comprising computer program code means adapted to perform all of the steps of claim 8 when said program is run on a computer.

15. A computer program as claimed in claim 14 embodied on a computer readable medium.