Nxp B.v.

Telit Automotive Solutions Nv

Jan Rene Brands

Piotr Polak

Friso Jedema

Jan Hoogerbrugge

Lukasz Szostek

Timotheus Arthur Van Roermund

Zoran Zivkovic

Philippe Teuwen

Marc Vauclair

Romano Hoofman

Hans De Jong

Timo Van Roermund

Timotheus Van Roermund

Peter Rombouts

Ruud J G Van Heugten

Sander Matthijs Rijnswou Van

There is disclosed a method for facilitating transactions carried out by a mobile device, wherein: the mobile device executes a smart card application; the smart card application receives a cryptographic algorithm from a transaction server external to the mobile device; the smart card application further receives transaction data from said transaction server; the cryptographic algorithm encrypts said transaction data and stores the encrypted transaction data in a storage unit of the mobile device. Furthermore, a corresponding computer program product and a corresponding mobile device for carrying out transactions are disclosed.

Method for facilitating transactions, computer program product and mobile device

A method is provided for authenticating an IC device. The method includes provisioning an integrated circuit (IC) device with a unique identification number (UID). The IC device is configured to calculate a device-specific key (DSK) using the UID. The UID is used with a secure application separate from the IC device to calculate the DSK. The DSK calculated by the IC device is the same as the DSK calculated by the secure application. The UID and the DSK calculated by the secure application is provided to a provider of an online service. The provider of the online service is enabled to authenticate the IC device using the UID and the DSK calculated with the secure application in response to the IC device contacting the online service. The provider may authenticate the device using a standard cryptographic challenge-response protocol. If the IC device has knowledge of a particular DSK, then the IC device is a legitimate authorized device.

Method for authenticating an integrated circuit device

A method is provided for generating a public/private key pair and certificate. The method includes providing an integrated circuit (IC) with an IC specific initial public and private key pair and a public key certificate signed by a manufacturer of the IC. A smartcard having stored thereon customer unique configuration data related to the IC is provided to a customer of the IC manufacturer. The smartcard enables the customer to generate a customization value and a customized public key using the customer unique configuration data. In response to the customer receiving the public key certificate signed by the IC manufacturer from the IC, the customer is enabled to provide the customization value, the customized public key, and a public key certificate signed by the customer to the IC. The IC is thus enabled to generate a customized private key, thus providing an IoT device with a public/private key pair and a certificate signed by the device manufacturer without the use of a trusted party.

Method for generating a public/private key pair and public key certificate for an internet of things device

A method of producing a secure integrated circuit (IC), including: loading the IC with a unique identification number (UID); loading the IC with a key derivation data (KDD) that is based upon a secret value K and the UID; producing a secure application configured with a manufacturer configuration parameter (MCP) and the secret value K and configured to receive the UID from the IC; producing a manufacturer diversification parameter (MDP) based upon the MCP and the secret value K and loading the MDP into the IC; wherein secure IC is configured to calculate a device specific key (DSK) based upon the received MDP and the KDD, and wherein the secure application calculates the DSK based upon the MCP, K, and the received UID.

Distributed cryptographic key insertion and key delivery

Aspects of the present disclosure relate to phase-change materials. In accordance with an example embodiment, a phase-change material has a crystalline structure that manifests changes that increase as a function of time. For example, such changes may be implemented for monitoring the time that a perishable item has been exposed to an environment having a temperature that is greater than a threshold temperature. Based on the changes, a characterization is provided, indicative of the exposure of the phase-change material to the environment having the temperature that is greater than the threshold temperature.

Temperature monitoring

The invention relates to a road toll system using a vehicle-mounted satellite navigation receiver, from which routes taken and road prices incurred are determined. A billing system bills a user in dependence on the road prices incurred. A portable activation device transmits information concerning the owner of the portable activation device to the vehicle-mounted unit, and the vehicle-mounted unit provides information to the billing system to enable identification of the owner of the portable activation device. In combination, the portable activation device and the vehicle-mounted unit can be considered to function in a similar way to a known vehicle-mounted OBU. However, by separating the data necessary to provide user-personalization into the portable activation device, the vehicle-mounted unit can become more standard, and the user is able to drive other vehicles more easily.

Road toll system and method

There is disclosed a portable security device for securing a data exchange between a host device and a remote device, said portable security device comprising a processing unit, a secure element and a data interface, wherein: the secure element is arranged to store an encryption key and a decryption key; the processing unit is arranged to control the encryption of data to be transmitted from the host device to the remote device, wherein said encryption is performed using said encryption key; the processing unit is further arranged to control the decryption of data transmitted from the remote device to the host device, wherein said decryption is performed using said decryption key. Furthermore, a corresponding method for securing a data exchange between a host device and a remote device using a portable security device is disclosed, as well as a corresponding computer program product.

Portable security device, method for securing a data exchange and computer program product

A time manager controls one or more timing functions on a circuit. The time manager includes a data storage and a time calculator. The data storage device stores a first indication of a performance characteristic of a memory cell at a first time. The data storage device also stores a second indication of the performance characteristic of the memory cell at a second time. The time calculator is coupled to the data storage device. The time calculator calculates a time duration between the first time and the second time based on a change in the performance characteristic of the memory cell from the first indication to the second indication.

Time management using time-dependent changes to memory

There is provided a display device comprising a processing unit, a display unit coupled to the processing unit and a near field communication unit coupled to the processing unit, wherein said processing unit is arranged to synchronize display messages to be displayed by the display unit with corresponding near field communication messages to be stored in the near field communication unit. Furthermore, a corresponding method of operating a display device is conceived. Furthermore, a corresponding computer program product is provided.

Display device, method of operating a display device, and computer program product

A method for obfuscating functionality of computer software is disclosed. In an embodiment, the method involves determining a first set of instructions needed to perform a target operation and a second set of instructions for at least one or more additional operations. The second set of instructions is tuned to contain instructions such that, by executing the second set of instructions, the function of the first set of instructions can be performed. Once the first and second sets of instruction are determined and tuned, a code library is created and code fragments in the library correspond to code needed to perform the function of the first set of instructions when executed. Instructions are then added to the second set of instructions such that, when executed, will cause the functionality of the first set of instructions to be achieved.

Return-oriented programming as an obfuscation technique

The invention provides an electric vehicle charging system in which the charging station and the vehicle each have a power transfer measurement unit, and a communication system for communicating data at least from the vehicle to the station. The power delivery is controlled based on a comparison of power transfer measurements made by the charging station and by the electric vehicle control system.

Electric vehicle charging system and method

A proximity check ensures that a card is physically close to the reader device in order to inhibit relay attacks. The proximity check makes relay attacks more difficult because an additional channel must be intercepted and/or spoofed or relayed. This solution can be used for any kind of short-range communication, including Near Field Communications (NFC).

Proximity assurance for short-range communication channels

A method and apparatus are disclosed wherein positioning data and road charging data depending on a vehicle position may be inserted into a combined data stream. The positioning data and road charging data may be provided with the same protocol type such as a national marine electronics association, NMEA, protocol or NMEA 0183 protocol. The combined data stream therefore comprises a mixed sequence of positioning data protocol messages and road charging data protocol messages.

Integration of position and road charging data

An authentication system includes a plurality of electronic tags () that are each associated with a respective unique identity ID. The tags include a memory () with a first memory location () for storing a pre-computed challenge and a second memory location () for storing a pre-computed response that is associated with the challenge. The first memory location () is non-readable from outside the tag. An access circuit () only provides the response after having received a challenge that matches the challenge stored in the first memory location. A reader station () obtains the identity associated with a tag. It then determines a corresponding challenge and sends the challenge to the tag. It receives a response from the tag and verifies the authenticity of the tag by comparing the received response to a response that corresponds to the challenge.

Growing community of inventors

Nijmegen, Netherlands

Jan Rene Brands