Telefonaktiebolaget Lm Ericsson (publ)

Ericsson Gmbh

Ben J Smeets

Paul Wilkinson Dent

Christian Gehrmann

Joakim Persson

Harri Hakala

Kar-Fat Poon

Michael Kornby

William J Croughwell

Harro Osthoff

Bernd Möller

Mattias Hansson

Ari Pietikäinen

Allan Bøgeskov

Yuri Chtarkov

Nicklas Ekstrand

B&eacute;la Rathonyi

A method of verifying the integrity of a virtual machine in a cloud computing deployment comprises: creating a virtual machine image derived from a trusted virtual machine, wherein the trusted virtual machine has a Keyless Signature Infrastructure signature stored in a signature store; and verifying that a computation resource can be trusted. If it is verified that a computation resource can be trusted, the method further comprises: submitting the virtual machine image to the trusted computation resource; checking a signature of the virtual machine image against the stored signature of the trusted virtual machine; launching the virtual machine image on the trusted computation resource, and creating a Keyless Signature Infrastructure signature of the virtual machine image; and storing the signature of the virtual machine image in a signature store.

Virtual machine integrity

A method of updating/recovering a configuration parameter of a mobile terminal having stored thereon a public key of a public-key cryptosystem and a current terminal identifier, the method comprising determining an updated configuration parameter by an update/recovery server in response to a received current terminal identifier from the mobile terminal; generating an update/recovery data package by a central signing server, the update/recovery data package including the current terminal identifier, the updated configuration parameter, and a digital signature based on a private key, where the digital signature is verifiable by said public key; storing the current terminal identifier and the updated configuration parameter by the central signing server; sending the update/recovery data package by the update/recovery server to the mobile terminal causing the mobile terminal to verify the received update/recovery data package and to store the! updated configuration parameter of the verified update/recovery data package in the mobile terminal.

Updating configuration parameters in a mobile terminal

A method of maintaining a version counter indicative of a version of memory content stored in a processing device. The method comprises selectively operating the device in a first or second mode. Access to the first mode is limited to authorized users and controlled separately from access to the second mode. In the first mode at least an initial integrity protection value is generated for cryptographically protecting an initial counter value of said version counter during operation of the processing device in the second mode; wherein the initial counter value is selected from a sequence of counter values, and the initial integrity protection value is stored as a current integrity protection value in a storage medium. In the second mode, a current counter value is incremented to a subsequent counter value; wherein incrementing includes removing the current integrity protection value from said storage medium.

Anti-roll-back mechanism for counter

A method and apparatus for performing cryptographic computations employing recursive algorithms to accelerate multiplication and squaring operations. Products and squares of long integer values are recursively reduced to a combination of products and squares reduced-length integer values in a host processor. The reduced-length integer values are passed to a co-processor. The values may be randomly ordered to prevent disclosure of secret data.

Recursive cryptoaccelerator and recursive VHDL design of logic circuits

An electrical device for generating a multi-rate pseudo random noise (PN) sequence. A sequence generator is adapted to output a plurality of sequence values based on a step control signal (S). A selection system is adapted to select one of a plurality of sequence values based on a select value (M). A step control is adapted to provide the step control signal (S). Also disclosed is a method of generating a multi-rate PN sequence.

Method and an electrical device for efficient generation of multi-rate pseudo random noise (PN) sequence

The integrity of a dynamic data object that comprises one or more dynamic data items is ensured by storing the dynamic data object and dynamic authorization data in a memory. The dynamic authorization data may, for example, be a count of how many failed attempts to gain authorization have previously been made, and this is modified at least whenever another failed attempt is made. Whenever the dynamic data object or the dynamic authorization data is changed, its corresponding hash value is recomputed and stored into the memory. The dynamic data object is considered authentic only if newly-generated values of the two hash signatures match those that were previously stored into the memory. Changes to the dynamic data object are permitted only after the user has executed passed an authorization procedure.

Data integrity mechanisms for static and dynamic data

A method of granting, to a user communications device, access to a service provided by a plurality of service communications devices where an access key code is generated during an initial communications session between the user communications device and one of the service communications devices. The established access key code is subsequently stored in the user communications device and made available to the service communications devices for use in subsequent communications sessions between the user communications device and any one of the service communications devices. The invention further relates to a communications system and a user communications device.

Method and system for authentication of units in a communications network

The present invention includes a method and device for calculating an encryption key, K', for use in the initialization of an encryption algorithm. The present invention discloses a method for calculating the encryption key, K&#x2032;(x), by obtaining a ciphering key, K(x), determining a maximum ciphering key length, L, based on the requirements of the two devices wishing to communicate, and determining a maximum usable encryption key length, L. The ciphering key, K(x), is then manipulated through an addition function or an exclusively-or function with a polynomial g(x). The result is multiplied with a polynomial g(x), which spreads the starting points of said encryption key, K&#x2032;(x). The encryption key is thus determined according to K&#x2032;(x)=g(x)[K(x) mod g(x)]. The method of calculating the encryption key, K&#x2032;, ensures that a maximum ciphering key length is not exceeded. In addition, the method provides new possible starting points each time a new encryption key, K&#x2032;, is generated.

Method and device for effective key length control

Device for processing data includes a processor for executing program routines, and a memory for storing program routines to be executed by the processor. Part of the memory includes a protected part from which data can be read but which is protected against being written into. The processor is arranged to necessarily execute a program routine stored in the protected part of the memory upon start-up.

System and method for data processing by executing a security program routine initially stored in a protected part of irreversibly blocked memory upon start-up

A method and device for use, e.g., in a mobile telephone, for self-clocked controlled pseudo random noise (PN) sequence generation comprises a plurality of sequence generator units for outputting a plurality of sequence values (Z ) on the basis of a plurality of clock values (C ), and step pattern generators for selecting a step pattern, comprising said plurality of clock values (C ), from a plurality of possible step patterns on the basis of a step pattern select signal (W ). Thus, a flexible and efficient self-clocked controlled pseudo random noise (PN) sequence generation is obtained.

Method and device for self-clock controlled pseudo random noise (PN) sequence generation

A method and system for performing cryptographic calculations on a bitstring using secret information. A cipher key is manipulated to obtain a modified cipher key. An indicator word is generated that corresponds to the modified cipher key and includes a plurality of indicator bits. A first product is computed with an insecure processor as a function of the bitstring and the modified cipher key. A second product is computed with a secure processor as a function of the bitstring and the indicator. A final product is then computed as a function of the first and second products.

Method and system of using an insecure crypto-accelerator

A telecommunications system and method is disclosed for implementing a message authentication code (MAC) for transmitted digital information signals. Digital information signals typically include an error detecting code, such as a Cyclic Redundancy Check (CRC) code, to ensure reliable delivery of the information. In order to verify the identity of the sending node, the CRC code can be modulated by a sequence known only to the participating nodes. Thus, the CRC code not only provides an error detecting function, but also serves as a message authentication code.

Modulated message authentication system and method

Method and system are disclosed for compressing the data in the request sequence of an ARQ algorithm. A probability estimation module receives the request sequence from the ARQ algorithm and estimates a probability associated with each symbol or bit in the sequence according to a customized Markov model. The estimated probabilities are thereafter provided to an entropy encoder module, which uses the estimated probabilities to encode each symbol or bit in the request sequence. The encoded request sequence is then transmitted in a repeat request in accordance with the ARQ algorithm.

Qualitative modeling and compression of request sequences in ARQ protocols

A pseudo-random number generator, and an associated method, generates a pseudo-random number. The pseudo-random number is a complex, linear combination of values of input sequences provided to the generator and exhibits little correlation with such input values. The generator includes a summation combiner and an IIR (infinite impulse response) filter connected in a feedback connection with the summation combiner. Because of the low correlation of the pseudo-random number and input values provided to the generator, the pseudo-random number is less susceptible to cryptanalysis by an unauthorized party.

Growing community of inventors

Dalby, Sweden

Ben J Smeets