Certicom Corporation

Motorola Corporation

Sirius Xm Radio Inc.

Other

Blackberry Corporation

Certicon Corp.

Ashok Vadekar

Patrick Xu

Tony Rosati

Brian Neill

Anthony J. Walters

Robert John Lambert

Scott Alexander Vanstone

Robert Philip Gallant

James Douglas Dworkin

Michael J Torla

Daniel O'Loughlin

Paul D Marko

William Lundy Lattin

Alfred John Menezes

Mark Rindsberg

Daniel Richard Brown

Richard Andrew Michalski

David R Sequino

Michael Daskalopoulos

David Wong

P Michael Glaser

Daniel Richard L Brown

Craig P Wadin

Adrian Antipa

Keelan Smith

Darryl L Parisien

Daniel O'loughlin

Donald B Johnson

Anthony J Walters

Aleksandar Jurisic

Michael Nickola Slavitch

Paul Marko

Richard Michalski

Marcel Fernand Villaflor

William Lattin

Various multiple methods of data transport, and combinations thereof, may be used to initialize or update conditional access information on various devices. In an integrated device having both a broadcast receiver, such as an SDARS receiver, and a two-way communications transceiver, such as an LTE, 3G, 4G or 5G modem, or the like, conditional access information for the broadcast receiver may be sent to the transceiver, and then passed to the broadcast receiver, or vice versa. Additionally, for example, the broadcast receiver may be sent, over the broadcast communications channel, a 'wake-up' message for the two-way transceiver, which message may then be passed to the two-way transceiver, so as to make it ready to receive conditional access information over the two-way communications channel, or vice versa. Moreover, because of the presence of a two-way communications path, various acknowledgements of conditional access status updates received and processed by the broadcast receiver may be sent&#x2014;thus realizing a significant improvement over the current practice of sending multiple periodic messages over the broadcast channel, to insure (but never have confirmation of) receipt.

Systems and methods for transmitting conditional access information

Trust between entities participating in an upgrade or enablement/disablement process is established and, to facilitate this remotely and securely, a highly tamper resistant point of trust in the system that is being produced is used. This point of trust enables a more efficient distribution system to be used. Through either a provisioning process or at later stages, i.e. subsequent to installation, manufacture, assembly, sale, etc.; the point of trust embodied as a feature controller on the device or system being modified is given a feature set (or updated feature set) that, when validated, is used to enable or disable entire features or to activate portions of the feature.

System and method for controlling features on a device

In exemplary embodiments of the present invention, a V2V unit in a vehicle (OBE) can, for example, store a plurality of years of encrypted certificates. The certificates can, for example, be programmed at an OBE factory using a secure server, and access to all certificates can be locked until an unlock key is computed for a given window (certificate validity period). An in-vehicle satellite receiver can then receive, over, for example, a dedicated satellite control channel, unlock codes for a current time window and a next time window, and provide them to the V2V device. Using those unlock codes, the V2V device (OBE) can compute an unlock key from an unlock code provided by the satellite receiver. In this manner an in-vehicle device may be directly messaged, but only to unlock one or more certificates at a controlled time. Without the received lock codes, the stored certificates are not useable.

Satellite receiver option for certificate distribution

A system and method for controlling a production process for producing a product is provided in which overproduction may be inhibited by introducing a separation of duties within a production process. Typically a producer will contract out the various stages of a production process to multiple contractors. In general, separation of duties involves purposefully separating production stages, for silicon chips or other products, so that the end product has been handled or 'touched', by each subcontractor, in order for the end product to be fully functional.

System and method for product registration

A partial revocation list and a system and method for using the partial revocation list for tracking the authenticity of replacement cartridges in a manufactured device to inhibit cloning of the cartridges is provided. A revocation pool is maintained by a manufacturer who chooses a partial revocation list from the revocation pool to store in the memory of the cartridge. The device stores its own revocation list, informs the manufacturer of cartridges which have been used and checks when a new device is installed to ensure a cloned replacement is not being used. The partial revocation list distributes enough revocation information to devices to statistically impair the cartridge yield of a cloning operation.

Partial revocation list

A system and method for remote device registration, to monitor and meter the injection of keying or other confidential information onto a device, is provided. A producer who utilizes one or more separate manufacturers, operates a remote module that communicates over forward and backward channels with a local module at the manufacturer. Encrypted data transmissions are sent by producer to the manufacturer and are decrypted to obtain sensitive data used in the devices. As data transmissions are decrypted, credits from a credit pool are depleted and can be replenished by the producer through credit instructions. As distribution images are decrypted, usage records are created and eventually concatenated, and sent as usage reports back to the producer, to enable the producer to monitor and meter production at the manufacturer.

System and method for remote device registration

A method of generating a key by a first correspondent. The key is computable by a second correspondent. The method comprises the steps of:

Method and apparatus for computing a shared secret key

The present invention provides an inexpensive, software-based security-retrofit solution to verify the integrity of program code in embedded systems, or accessories, without resorting to expensive hardware changes. All unused memory on an accessory that could be used to store a program code image is filled with random data. A host system also locally stores a copy of the accessory's program image containing the random data. The host system sends the accessory a list of memory addresses or memory ranges on the accessory, which is always different and random in nature. The accessory will then produce a digest using values stored in the memory addresses as inputs to a secure hash function. The host system verifies the integrity of the embedded program code by verifying the resulting digest produced by and returned from the accessory.

Retrofitting authentication onto firmware

A method and system are provided for authenticating and securing an embedded device using a secure boot procedure and a full non-volatile memory encryption process that implements Elliptic Curve Pinstov-Vanstone Signature (ECPV) scheme with message recovery on a personalized BIOS and master boot record. The signature includes code that is recovered in order to unlock a key that is in turn used to decrypt the non-volatile memory. The use of ECPVS provides an implicit verification that the hardware is bound to the BIOS since the encrypted memory is useless unless properly decrypted with the proper key.

System and method for authenticating a gaming device

A potential bias in the generation of a private key is avoided by selecting the key and comparing it against the system parameters. If a predetermined condition is attained it is accepted. If not it is rejected and a new key is generated.

Method of public key generation

A method of generating a key stream for a precomputed state information table. The method comprises initializing a counter and an accumulator with non-zero values; combining state information identified by the counter with the accumulator; swapping state information identified by the counter with state information identified by the accumulator; combining the two pieces of state information; outputting the state information identified by the combination as a byte of the key stream; adding a predetermined number odd number to the counter; and repeating the above steps to produce each byte of the key stream.

Method and apparatus for generating a key stream

Growing community of inventors

Rockwood, Canada

Ashok Vadekar