ENHANCED WIRELESS COMMUNICATION SECURITY

• US 20140169560A1
• Filed: 12/14/2012
• Published: 06/19/2014
• Est. Priority Date: 12/14/2012
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Nagaraj, Raviprakash, STOTZER, Reinhard, Reese, Kenneth
• Granted Patent: US 9,398,448 B2
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

Systems, methods, and devices are directed to an electronic device that includes a first wireless communication module configured to facilitate transmission and reception of data via a wireless communication link and a first secure element while a wireless communication device includes a processor, an operating system executed by the processor, a second wireless communication module configured to facilitate transmission and reception of data via the wireless communication link, and a second secure element. The second secure element exchanges information with the first secure element via the wireless communication link to establish a secure channel within the wireless communication link, and the wireless communication device employs logic configured to route the data to the second secure element for processing prior to forwarding the data to the operating system, upon establishing the secure channel.

Claims

1. A wireless communication device, comprising:

a processor;

an operating system executed by the processor;

a wireless communication module configured to facilitate transmission and reception of data via a wireless communication link;

a secure element configured to establish a secure channel within the wireless communication link; and

logic configured to route the data to the secure element for processing prior to forwarding the data to the operating system, upon establishing the secure channel.

2. The wireless communication device of claim 1, wherein the secure element is communicatively coupled to the wireless communication module.

3. The wireless communication device of claim 1, wherein the secure element includes one or more of the following:

core root of trust measurement module, encryptor module, decryptor module, key generator, a random number generator, hash engine, secure storage, and platform configuration registers.

4. The wireless communication device of claim 1, wherein the secure element transmits transactional messages requesting security-related information.

5. The wireless communication device of claim 4, wherein the security-related information includes one or more of the following:

identification data, secure element configuration data, secure element operating system/security application data, authentication data, and security/encryption key establishment data.

6. The wireless communication device of claim 1, wherein the wireless communication link comprises a BlueTooth communication link.

7. The wireless communication device of claim 1, wherein the secure element operates in accordance with a GlobalPlatform standard.

8. The wireless communication device of claim 1, wherein the secure channel operates in accordance with a Secure Channel Protocol.

9. A wireless communication system, comprising:

an electronic device including;

a first wireless communication module configured to facilitate transmission and reception of data via a wireless communication link; and

a first secure element;

a wireless communication device including;

a processor;

an operating system executed by the processor;

a second wireless communication module configured to facilitate transmission and reception of data via the wireless communication link; and

a second secure element,

wherein, the second secure element exchanges information with the first secure element via the wireless communication link to establish a secure channel within the wireless communication link, and

wherein, the wireless communication device further includes logic configured to route the data to the second secure element for processing prior to forwarding the data to the operating system, upon establishing the secure channel.

10. The wireless system of claim 9, wherein the first and second secure elements are communicatively coupled to the first and second wireless communication modules, respectively.

11. The wireless system of claim 9, wherein the first and second secure elements include one or more of the following:

core root of trust measurement module, encryptor module, decryptor module, key generator, a random number generator, hash engine, secure storage, and platform configuration registers.

12. The wireless system of claim 9, wherein the information exchanged between the first and second secure elements comprises transactional messages regarding security-related information.

13. The wireless system of claim 12, wherein the security-related information includes one or more of the following:

identification data, secure element configuration data, secure element operating system/security application data, authentication data, and security/encryption key establishment data.

14. The wireless system of claim 9, wherein the wireless communication link comprises a BlueTooth communication link.

15. The wireless system of claim 9, wherein the first and second secure elements operate in accordance with a GlobalPlatform standard.

16. The wireless system of claim 9, wherein the secure channel operates in accordance with a Secure Channel Protocol.