Secure time functionality for a wireless device

• US 8,756,427 B2
• Filed: 05/08/2007
• Issued: 06/17/2014
• Est. Priority Date: 05/09/2006
• Status: Expired due to Fees

• Current Assignee: Interdigital Technology Corporation (InterDigital, Inc.)
• Original Assignee: Interdigital Technology Corporation (InterDigital, Inc.)
• Inventors: Shah, Yogendra C., Cha, Inhyok
• Primary Examiner(s): Mehedi, Morshed
• Assistant Examiner(s): LANE, GREGORY A
• Application Number:
  US11/745,697
• Publication Number:
  US 20070266256A1
• Time in Patent Office: 2,597 Days
• Field of Search: 726/26
• US Class Current: 713/178
• CPC Class Codes: G06F 21/725 operating on a secure reference time value
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce data processing systems or methods, specially adapted for e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps
• CPC Class Codes: H04M 15/28 with meter at substation or with calculation of charges at terminal
• CPC Class Codes: H04M 15/47 Fraud detection or prevention means
• CPC Class Codes: H04M 15/48 Secure or trusted billing, e.g. trusted elements or encryption
• CPC Class Codes: H04M 17/103 using SIMs (USIMs) or calling cards
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 4/24 Accounting or billing

Abstract

The present invention is related to a wireless transmit/receive unit (WTRU) for providing advanced security functions. The WTRU includes trusted platform module (TPM) for performing trusted computing operations; and a secure time component (STC) for providing a secure measurement of a current time. The STC and the TPM are integrated to provide accurate trusted time information to internal and external to the WTRU. The STC may be located on an expanded a subscriber identity module (SIM), on the WTRU platform, or two STCs may be used, one in each location. Similarly, the TPM may be located on an expanded SIM, on the WTRU platform, or two TPMs may be used, one in each location. Preferably, the STC will include a real time clock (RTC); a tamper detection and power failure unit; and a time report and sync controller.

Claims

1. A wireless-communications device comprising:

a real time clock (RTC) for measuring a current time, wherein the wireless communications device is configured to re-synchronize the current time of the RTC with a secure time server to which the wireless communication device is coupled via a network;

a time report and sync controller configured to control functions of the RTC;

a trust platform module (TPM) comprising a memory protected by the TPM; and

a power failure unit configured to detect a failure of power in the wireless communications device and to alert the TPM of the power failure,

wherein the wireless communications device is further configured to securely store time related information from the RTC in the memory protected by the TPM upon detection of the failure of power by the power failure unit.

2. The wireless communications device of claim 1 further comprising:

an audit logging facility.

3. The wireless communications device of claim 1 wherein the TPM retrieves a last storable time record from the RTC before the power failure unit runs out of power.

4. The wireless communications device of claim 1 further comprising:

a subscriber identity module (SIM).

5. The wireless communications device of claim 4 wherein the TPM is located on the SIM.

6. The wireless communications device of claim 4 wherein the RTC is part of a secure time component (STC) that resides on the SIM.

7. The wireless communications device of claim 1 wherein the power failure unit is configured to store a charge such that the time related information from the RTC may be securely stored in the memory protected by the TPM upon detection of the power failure.

8. The wireless communications device of claim 1 wherein the wireless communications device is further configured to provide secure time information to a requesting application external to the wireless communications device.

9. The wireless communications device of claim 1 wherein the wireless communications device is configured to provide secure time information for authentication purposes.

10. The wireless communications device of claim 9 wherein the secure time information is protected by a message integrity check in authentication messages sent from the wireless communications device.

11. The wireless communications device of claim 1 wherein a secure time component (STC) and the TPM are configured to cryptographically secure and bind time information to the wireless communications device with a digital signature.

12. The wireless communications device of claim 1 wherein a secure time component (STC) and the TPM are configured to cryptographically secure and bind time information to the wireless communications device through encryption, wherein the encryption key is bound to the wireless communications device.

13. The wireless communications device of claim 1 wherein the secure time server is part of an operator network.

14. The wireless communications device of claim 1 wherein the wireless communications device is a digital rights management (DRM) device.

15. The wireless communications device of claim 14 wherein a secure time component (STC) and the TPM are configured to perform a run-time integrity check (RTIC) of the STC on a periodic basis.

16. The wireless communications device of claim 14 wherein a secure time component (STC) and the TPM are configured to perform a run-time integrity check (RTIC) of the STC on an event driven basis.

17. The wireless communications device of claim 14 wherein a secure time component (STC) and the TPM are configured to generate trusted time information for enhancing DRM messages and parameters.

18. The wireless communications device of claim 17 wherein the DRM messages and parameters include a time a rights object was last examined (T-ROLE).

19. The wireless communications device of claim 18 wherein the DRM messages and parameters include a time a rights object delivery (T-ROD).

20. The wireless communications device of claim 18 wherein the DRM messages and parameters include a time a rights issue time stamp (RITS).

21. An expanded subscriber identity module (SIM) for use in a wireless transmit/receive unit (WTRU), the SIM comprising:

a real time clock (RTC) for measuring a current time, wherein the SIM is configured to re-synchronize the current time of the RTC with a secure time server with which the WTRU can communicate via a network;

a time report and sync controller configured to control functions of the RTC;

a trust platform module (TPM) comprising a memory protected by the TPM; and

a power failure unit configured to detect a failure of power in the WTRU and to alert the TPM of the power failure,

wherein the SIM is further configured to securely store time related information from the RTC in the memory protected by the TPM upon detection of the failure of power in the WTRU by the power failure unit.

22. The SIM of claim 21 further comprising:

an audit logging facility.

23. The SIM of claim 21 wherein the TPM retrieves a last storable time record from the RTC before the power failure unit runs out of power.

24. The SIM of claim 21 wherein the power failure unit is configured to store a charge such that the time related information from the RTC may be stored in the memory protected by the TPM immediately upon detection of the power failure.

25. The SIM of claim 21 wherein a secure time component (STC) and the TPM are configured to cryptographically secure and bind time information to the WRTU with a digital signature.

26. The SIM of claim 21 wherein a secure time component (STC) and the TPM are configured to cryptographically secure and bind time information to the WRTU through encryption, wherein the encryption key is bound to the WTRU.

27. The SIM of claim 21 wherein the secure time server is part of an operator network.

28. The SIM of claim 21 wherein the TPM is located in a digital rights management (DRM) platform.

29. The SIM of claim 28 wherein a secure time component (STC) and the TPM are configured to perform a run-time integrity check (RTIC) of the STC on a periodic basis.

30. The SIM of claim 28 wherein a secure time component (STC) and the TPM are configured to perform a run-time integrity check (RTIC) of the STC on an event driven basis.

31. The SIM of claim 28 wherein a secure time component (STC) and the TPM are configured to generate trusted time information for enhancing DRM messages and parameters.

32. The SIM of claim 31 wherein the DRM messages and parameters include a time a rights object was last examined (T-ROLE).

33. The SIM of claim 31 wherein the DRM messages and parameters include a time of rights object delivery (T-ROD).

34. The SIM of claim 31 wherein the DRM messages and parameters include a rights issue time stamp (RITS).