Telefonaktiebolaget Lm Ericsson (publ)

Patrik Ekdahl

Magnus Åström

Bengt Lindoff

Bernard Smeets

Andres Reial

Fredrik Nordström

Lars M Andersson

Alexander Maximov

Petri Mikael Johansson

Lars Andersson

Arash Vahidi

Magnus ÅSTRÖM

Fredrik NORDSTRÖM

A substitution box, SBox, circuit that performs an SBox computational step when comprised in cryptographic circuitry. The SBox circuit comprises: a first circuit part comprising digital circuitry that generates a 4-bit first output signal (Y) from an 8-bit input signal (U); a second circuit part, configured to operate in parallel with the first circuit part and to generate a 32-bit second output signal (L) from the 8-bit input signal (U), wherein the 32-bit second output signal (L) consists of four 8-bit sub-results; and a third circuit part configured to produce four preliminary 8-bit results (K) by scalar multiplying each of the four 8-bit sub-results by a respective one bit of the 4-bit first output signal (Y), and to produce an 8-bit output signal (R) by summing the four preliminary 8-bit results (K). The first circuit part is configured to generate the 4-bit first output signal (Y) from the input signal (U) by performing a calculation that comprises a first linear matrix operation, a Galois Field (GF) multiplication, and a GF inversion; and the second circuit part is configured to generate the second output signal (L) from the input signal (U) by performing a calculation that comprises a second linear matrix operation.

Low depth AES SBox architecture for area-constraint hardware

Disclosed herein is a method of a communication device, wherein the communication device is configured to operate in connection with an access node associated with a wireless communication network. The method comprises receiving a first data packet comprising a write request for writing code and/or data to a non-volatile memory comprised in the communication device and determining whether a second data packet comprising an identifier associated with the first data packet is received. When it is determined that the second data packet comprising the identifier is received, the method comprises extracting the identifier from the second data packet, wherein the identifier is a radio access layer parameter, determining whether the identifier is trusted, determining whether the identifier is validated when it is determined that the identifier is trusted and accepting at least a subset of the write request when it is determined that the identifier is trusted and validated. Also disclosed is an arrangement of a communication device, method and arrangement of an access node and, a communication device, an access node and computer program product.

Method for restricting memory write access in IoT devices

There is provided mechanisms for enabling secure communication between a first communications device and a second communications device. A method is performed by the first communications device. The method comprises performing a network attachment procedure with an authentication server. The method comprises establishing, during the network attachment procedure, a shared secret between the first communications device and the authentication server. The shared secret is established by running an authentication and key agreement protocol as part of the network attachment procedure with a network access identity of the first communications device as input. The method comprises deriving an application level shared key for the first communications device from the shared secret. The shared key is to be used for secure communication between the first communications device and the second communications device.

Secure communications using network access identity

There is provided mechanisms for handling a reconfiguration request for a communications device. A method is performed by the communications device. The method comprises wirelessly receiving the reconfiguration request from a radio access network node. The reconfiguration request originates from a server and is received together with digitally signed radio access layer information of the radio access network node. The method comprises verifying the digitally signed radio access layer information using an authorization process. The method comprises accepting the reconfiguration request only when having successfully verified the digitally signed radio access layer information.

Reconfiguration of communications devices

A method performed in a server node associated with a cellular communication system is disclosed. The method is for validation of a first position indication of a wireless communication device, wherein the wireless communication device is adapted to operate in connection with the cellular communication system. The first position indication is obtained via the wireless communication device by a first positioning system. The method comprises obtaining a serving cell identification of the wireless communication device, obtaining a second position indication of the wireless communication device based on the serving cell identification, and determining whether the first position indication is valid based on whether a metric based on the first and second position indications meets a validation criterion. In some embodiments, obtaining the serving cell identification of the wireless communication device may comprises receiving a first message, which comprises the serving cell identification, signed by a first signature associated with the serving cell, and verifying the serving cell identification based on the first signature. Corresponding computer program product, arrangement and server node are also disclosed.

Validation of position indication

A method and an integrated circuit () for executing a trusted application within a trusted runtime environment () of the integrated circuit () are disclosed. The integrated circuit () comprises an internal memory () and the integrated circuit () is connected to an external memory (). The trusted runtime environment () is restricted to use the internal memory () and the external memory (). The integrated circuit () identifies () a call, by the trusted application, to a command of the trusted runtime environment (). The trusted runtime environment () allows the command to be executed when the trusted application resides in the internal memory () only. Next, the integrated circuit () executes () the command while using the internal memory () only.

Method and an integrated circuit for executing a trusted application within a trusted runtime environment

Disclosed herein is a processing device comprising a secured execution environment comprising means for bringing the processing device into a predetermined operational state; and a timer; a communication interface for data communication between the processing device and a remote device management system external to the processing device; wherein the secured execution environment is configured, responsive to an expiry of the timer, to bring the processing device into said predetermined operational state; and responsive to a receipt, from the remote device management system via said communications interface, of a predetermined signal, to restart the timer.

Processing device

Security can be improved in electronic devices that use authentication images and trusted user interfaces (TUIs), and it can still be easy for users to see the TUIs by making more dynamic use of the authentication images and possibly adding color effects.

Growing community of inventors

Dalby, Sweden

Patrik Ekdahl