Broadcom Corporation

Avago Technologies General IP (singapore) Pte. Ltd.

Nxp B.v.

Koninklijke Philips Corporation N.V.

Avago Technologies International Sales Pte. Limited

Philips Electronics North America Corporation

Avago Technologies General IP Pte, Ltd.

Mark Leonard Buer

Jeyhan Karaoguz

Arya Behzad

John S Walley

Nambirajan Seshadri

Thomas J Quigley

Alexander Garland MacInnis

Charles Abraham

David Garrett

David Albert Lundgren

Alexander G Macinnis

Zheng Qi

David Murray

Edward H Frank

Joseph John Tardo

Ed Frank

Dave Murray

Jacob Mendel

Ronald Squires

Nambi Seshadri

David K Chin

Uri Elzur

Scott Sterling McDaniel

Kambiz Rahimi

Jianjun Luo

Theodore Trost

Douglas Allen

Don Matthews

Rolando Ogot

Jeyhan Karoguz

Patrick Y Law

Timothy R Paaske

Kan Frankie Fan

Jeffrey Douglas Carr

Matthew Vernon Kaufmann

Donald P Matthews

Roger Luo

Yongbum Kim

Nicholas Ilyadis

Andrew R Dellow

Franklyn H Story

Meg Pei Lin

Bora Akyol

Andreas Lessiak

Mohamed Awad

Jaku Jose

Jayanth Mandayam

Nathan D Hindman

Gregory Clayton Eslinger

Alexander G Maclnnis

Kunyan Liu

Rajeev Sethia

Nambi Seshardi

Pradeep Dubey

Ford Tamer

Weiyang Zhou

Tim Paaske

Scott S Mcdaniel

Scott Mcdaniel

A first electronic device may enable generation, updating, and/or storage of user configuration information. The user configuration information may comprise information pertaining to device configuration and/or operational preferences specific to the device user and/or various use settings, connectivity, and/or use of available resources. The generation, updating, and/or storage of the user configuration information may be performed manually and/or automatically, and may be performed directly within the first electronic device and/or via networked devices, which may communicatively coupled to the first electronic device. A second electronic device may be enabled to be communicatively coupled to the first electronic device and/or the networked devices. The second electronic device may then be enabled to download existing user configuration information from the first electronic device and/or the networked device, and the downloaded user configuration may be utilized to configure the second electronic device.

Method and system for a networked self-configuring communication device utilizing user preference information

In accordance with a first aspect of the present disclosure, a system is provided for applying patches to executable codes, comprising: a plurality of execution environments configured to execute said codes in different execution contexts; a control unit configured to apply the patches to said codes; wherein the control unit is configured to apply a specific patch to a specific code upon or after an execution environment configured to execute said specific code switches to an execution context corresponding to said specific code. In accordance with other aspects of the present disclosure, a corresponding method is conceived for applying patches to executable codes, and a corresponding computer program is provided.

System and method for applying patches to executable codes

Systems and methods are provided that allow a secure processing system (SPS) to be implemented as a hard macro, thereby isolating the SPS from a peripheral processing system (PPS). The SPS and the PPS, combination, may form a secure element that can be used in conjunction with a host device and a connectivity device to allow the host device to engage in secure transactions, such as mobile payment over a near field communications (NFC) connection. As a result of the SPS being implemented as a hard macro isolated from the PPS, the SPS may be certified once, and re-used in other host devices without necessitating re-certification.

Hardware isolated secure processing system within a secure element

A method and system for secure and scalable key management for cryptographic processing of data is described herein. A method of secure key handling and cryptographic processing of data, comprising receiving a request from an entity to cryptographically process a block of data, the request including a key handle, wherein the key handle includes an authentication tag and an index; authenticating the requesting entity using the authentication tag; and referencing a plaintext key from a plurality of plaintext keys using the index if the requesting entity is authenticated successfully.

Scalable and secure key management for cryptographic data processing

Methods and systems are provided that use smartcards, such as subscriber identity module (SIM) cards to provide secure functions for a mobile client. One embodiment of the invention provides a mobile communication network system that includes a mobile network, a mobile terminal, a server coupled to the mobile terminal via the mobile network, and a subscriber identity module (SIM) card coupled to the mobile terminal. The SIM card includes a first key and a second key. The first key is used to authenticate an intended user of the mobile terminal to the mobile network. Upon successful authentication of the intended user to the mobile network, the mobile terminal downloads a function offered from the server through the mobile network. The second key is then used by the mobile terminal to authenticate the intended user to the downloaded function so that the intended user can utilize the function.

Systems and methods for providing security to different functions

A first personal electronic (PE) device may enable generation, updating, and/or storage of user configuration information. The user configuration information may comprise information pertaining to device configuration and/or operational preferences specific to the device user and/or various use settings, connectivity, and/or use of available resources. The generation, updating, and/or storage of the user configuration information may be performed manually and/or automatically, and may be performed directly within the first PE device and/or via networked devices, which may communicatively coupled to the first PE device. A second PE device may be enabled to be communicatively coupled to the first PE device and/or the networked devices. The second PE device may then be enabled to download existing user configuration information from the first PE device and/or the networked device, and the downloaded user configuration may be utilized to configure the second PE device.

Embodiments of the present disclosure provide systems and methods for implementing a secure processing system having a first processor that is certified as a secure processor. The first processor only executes certified and/or secure code. An isolated second processor executes non-secure (e.g., non-certified) code within a sandbox. The boundaries of the sandbox are enforced (e.g., using a hardware boundary and/or encryption techniques) such that code executing within the sandbox cannot access secure elements of the secure processing system located outside the sandbox. The first processor manages the memory space and the applications that are permitted to run on the second processor.

Security controlled multi-processor system

Wireless mobile communication (WMC) devices located in near proximity of each other may be enabled to form a mesh (ad hoc wireless) network. WMC devices may form and/or tear down intra-mesh connection with other WMC devices in the same mesh network. WMC devices may utilize information related to other WMC devices in the mesh network in determining formation and tearing down of intra-mesh connections. This information may comprise relative speeds, locations, and directions of movement of the WMC devices forming/tearing intra-mesh connections. Other information including data bandwidth and/or power consumption may be utilized in such determination. This information may also comprise available services advertised by WMC devices in the mesh network.

Mesh network connections

Methods and systems are provided for non-cryptographic capabilities of a token such as a smartcard to be used as an additional authentication factor when multi-factor authentication is required. Smartcards are configured to generate a transaction code each time a transaction is attempted by the smartcard. The transaction code is dynamic, changing with each transaction, and therefore is used as a one-time password. When a user attempts to access a service or application requiring at least two authentication factors, a secure processor is used to read transaction code from the smartcard. The secure processor establishes a secure communication with the remote computer hosting the service or application. The transaction code can then be encrypted prior to transmission over the public Internet, providing an additional layer of security.

Multi-factor authentication using a smartcard

Embodiments of the present disclosure describe a system and method for providing anti-replay protection. One embodiment describes a system comprising: a security device; and an anti-replay protected flash device comprising: a flash memory array; an authentication unit; and a secure memory, wherein the authentication unit and the secure memory are disposed in a security boundary.

Anti-replay protected flash

A mesh grid protection system is provided. The protection system includes a plurality of grid lines forming a mesh grid proximate to operational logic. The protection system also includes tamper-detection logic coupled to the plurality of grid lines and configured to toggle a polarity of a signal on at least one grid line at each clock cycle and to detect attempts to access the operational logic by comparing a reference signal driving a first end of a grid line to a signal at the opposite end of the grid line.

Mesh grid protection

One or more methods and systems of sharing an external memory between functional modules of an integrated circuit chip are presented. The invention provides a system and method of reducing the amount of off-chip memory utilized by one or more integrated circuit chips. In one embodiment, a method for sharing an off-chip memory among one or more on-chip functional modules comprises arbitrating the communication of data between one or more on-chip functional modules and the off-chip memory. In one embodiment, the arbitration is facilitated by using an internal data bus that is controlled by a bus arbiter control unit. In one embodiment, a system for sharing an off-chip memory between functional modules of an integrated circuit comprises a security processing module, a media access controller module, a data interface, and a data bus.

System and method of sharing memory by arbitrating through an internal data bus

Growing community of inventors

Payson, AZ, United States of America

Mark Leonard Buer