Huawei Technologies Co., Limited

Janne Hirvimies

Sampo Sovio

Panu Johansson

Antti Peuhkurinen

Antti Erik Peuhkurinen

Valentin Manea

An electronic device and a software provisioning server are provided. The electronic device is configured to obey an Anti-Roll Back (ARB) enforcement policy, obtain an ARB exception associated with a software, wherein the ARB exception comprises a signature of the ARB exception and a revision number of the software, check the validity of the signature of the ARB exception, and execute the software having the revision number so as to overrun the ARB enforcement policy if the signature of the ARB exception is valid. The software provisioning server is configured to determine an ARB exception associated with a software for overrunning an ARB enforcement policy in an electronic device, wherein the ARB exception comprises a signature of the ARB exception and a revision number of the software, provide the ARB exception to the electronic device.

Electronic device, software provisioning server and methods thereof

An apparatus includes a processor coupled to a memory wherein the processor and the memory are configured to provide a secure execution environment. The memory includes a shared secret value. The processor is configured to receive a certificate, wherein the certificate includes a device identifier and a digital signature. The processor validates the certificate based on the digital signature and the device identifier, recovers a cryptographic key based on the shared secret value and the device identifier, and performs a cryptographic operation based on the recovered cryptographic key.

Apparatus and method for certificate enrollment

An apparatus with a standard zone and a test zone, where the standard zone includes a standard execution environment providing access to genuine resources of the apparatus and the test zone includes a test execution environment providing access to mock resources, with a mock resource modeling a genuine resource of the apparatus. The application has access to the genuine resources when the application is executed in the standard zone. The application has access to the mock resources when the application is executed in the test zone and the application does not have access to the genuine resources when the application is executed in the test zone.

Growing community of inventors

Kista, Sweden

Janne Hirvimies