Proton World International N.v.

Stmicroelectronics (rousset) Sas

Stmicroelectronics Belgium

Stmicroelectronics S.r.l.

Stmicroelectronics (grenoble 2) Sas

Olivier Van Nieuwenhuyze

Alexandre Charles

Thierry Huque

Christophe Henri Ricard

Jean-Marc Grimaud

Pierre Rizzo

Alexandre Tramoni

Amedeo Veneroso

Frank Cuypers

Patrick Dumoulin

Jean Marc Grimaud

Arach Mohammed Brahim

Alexandra Ducati Manas

In an embodiment a method for implementing a NFC transaction between a mobile terminal and a distant module is disclosed. The terminal includes a processor hosting an application configured to establish the NFC transaction and an interface software configured to execute instructions of the application, a near-field communication module and a secure element distinct from the processor. The method includes requesting, by the application via the interface software, which verifies whether the application is authorized to communicate with the secure element, authorization to implement the NFC transaction from the secure element, sending, by the secure element, a first temporary authorization to the interface software, verifying, by the interface software, at least for a first time when the near-field communication module receives first data from the distant module, whether the interface software has received the first temporary authorization and transmitting, by the interface software, the first data to the application when the interface software has received the first temporary authorization.

NFC transaction

In an embodiment a method for implementing a NFC transaction between a mobile terminal and a distant module is disclosed. The terminal includes a processor hosting an application configured to establish the NFC transaction, a near-field communication module, and a secure element distinct from the processor. The method includes storing, by the near-field communication module in the secure element, first data from the distant module, sending, by the near-field communication module, second data to the application notifying it that the first data have been stored in the secure element and requesting, by the application, the first data from the secure element.

Provided are techniques for protecting a transaction in near-field communication. Provided is an electronic device including a processor hosting an application, a near-field communication module, and a secure element distinct from the processor. The near-field communication module is configured to identify the type of terminal emitting a polling frame, addressed to the application, that the communication module receives by analyzing the type of the polling frame. The device is configured to compare the result of the analysis with at least one command received from the terminal during the implementation of an NFC transaction.

Protection of a transaction in near-field communications

The present description discloses a secure element and a communication method comprising at least one operating system including at least one application having a register associated therewith, a buffer memory, and a router having a software layer. The software layer is configured to directing first messages using a first protocol and intended for the application to the buffer memory, and directing second messages using a second protocol different from the first protocol and intended for the application to the register.

Secure element and method

The present description concerns a method of implementation of an NFC transaction between a mobile terminal and a distant module. The terminal includes a processor hosting an application establishing the NFC transaction, a near-field communication module, and a secure element distinct from the processor. The method includes at least the following successive steps: (a) the near-field communication module ciphers first data sent by the distant module by using a first key supplied by the secure element and (b) the first application deciphers the first data by using a second key supplied by the secure elements.

The present description discloses a secure element and a communication method comprising a router managing first messages using a first communication protocol between applications of the secure element and the outside of the secure element, and a software layer performing a processing at the level of the router. The software layer is adapted to verify the compatibility of a second communication protocol, different from the first one, with which second messages are received, in the absence of a compatibility, convert the second messages into the first communication protocol, and transmit the second messages to the router.

Secure element and method for converting message communication protocols

The present description discloses a secure element and a communication method, configured to implement at least one first application, and including a circuit configured to record routing data and a list and parameters of communication protocols compatible with the first application, verify the compatibility of a first communication protocol used by first messages intended for the first application with the protocols of the list, convert the first messages into second messages by using a second communication protocol in response to the first protocol not being compatible with at least one of the protocols of the list, and direct the second messages to the first application by using the routing data of the first application.

Secure element and method for managing message communication protocols

A method of checking the authenticity of at least a first portion of the content of a non-volatile memory of an electronic device including a microcontroller and an embedded secure element is disclosed. The method includes starting the microcontroller with instructions stored in a first secure memory area associated with the microcontroller and starting the secure element. The secure element has a plurality of decipher keys, each associated with a portion of the content of a second reprogrammable non-volatile memory area associated with the microcontroller. The secure element performs a signature check on a first portion of the content of the second area. If the signature is verified, the secure element sends the decipher key associated with the first portion to the microcontroller. If the signature is not verified, the secure element executes a signature check on another portion of the content of the second memory area.

Secure starting of an electronic circuit

In accordance with an embodiment, an electronic device includes a secure element configured to implement a plurality of operating systems; and a near field communication module coupled to the secure element by a single bus and by a routing circuit configured to route routing data between the plurality of operating systems and a receive circuit of the near field communication module.

Electronic system

An embedded electronic system includes a volatile memory and a processor configured to execute a low-level operating system that manages allocation of areas of the volatile memory to a plurality of high-level operating systems. Each high-level operating system executes one or more of applications. The volatile memory includes a first portion reserved for execution data of a first application and a second portion intended to store execution data of a second application. The system is configured so that once the execution data of the first application are loaded in the first portion, the low-level operating system forbids unloading of the execution data of the first application from the first portion so that the execution data of the first application remain in the volatile memory in case of a deactivation or of a setting to standby of the first application.

Embedded secure element

A near field communication (NFC) router of a telecommunication device has communication pipes between gates of the NFC router. The pipes include a set of communication pipes to implement NFC transactions, which are coupled between radio-frequency gates of the NFC router and physical gates of the NFC router assigned to a security circuit. An attempt to use a pipe, other than one of the set, to implement an NFC transaction is detected by, in response to receiving a message in a NFC communication format via a pipe, comparing bits associated with the pipe with stored bits associated with the set of communication pipes. In response to the comparing indicating the pipe is not one of the set of communication pipes, implementation of the NFC transaction is blocked.

Detection of a rerouting of a communication channel of a telecommunication device connected to an NFC circuit

A method and associated circuits protect data stored in a secure data circuit of a telecommunication device equipped with a near-field communication (NFC) router, a microcontroller, and the secure data circuit. In the method, each message received with the NFC router is parsed to retrieve a communication pipe identifier and an instruction code. The communication pipe identifier and the instruction code are compared to corresponding information in a filter table. Instruction codes of particular messages that attempt to modify a communication pipe by reassigning one end of the communication pipe from the port of the NFC router to a different circuit are acted upon. These messages are blocked from reaching the secure data circuit when the instruction code is not authorized in the filter table, and these messages are permitted when the instruction code is authorized in the filter table.

Protection against rerouting a communication channel of a telecommunication device having an NFC circuit and a secure data circuit

A method of configuring a contactless communication device is provided. The contactless communication device includes integrated circuits hosting at least two applications compatible with different communication protocols or the same communication protocol and using different communication parameters and a contactless communication circuit. The method includes stopping, by the contactless communication circuit, the transmission of answers of the contactless communication device to requests transmitted by a proximity coupling reader during a transaction initiated by the reader to cause the initiation by the reader of a new transaction.

Configuration of a transaction in a contactless electronic device

The present description concerns a method of starting a first application configured to be implemented by at least one low-level operating system of a secure element, including the verification of at least a first piece of information updated after each operation of resetting of the secure element, the first piece of information being associated with the at least one low-level operating system.

Growing community of inventors

Wezembeek-Oppem, Belgium

Olivier Van Nieuwenhuyze