Nxp B.v.

Peter Maria Franciscus Rombouts

Jan Hoogerbrugge

Philippe Teuwen

Frank Michaud

Ventzislav Nikov

Jan René Brands

Timotheus Arthur Van Roermund

Vincent Cedric Colnot

Eric Vos

A public key architecture () includes a dual certificate hierarchy which facilitates two independent authentication functions. One of the authentication functions authenticates an authentication device () to a verification device (). The other authentication function authenticates a configuration device () to the authentication device (). In some embodiments, the authentication process uses a lightweight certificate formed in conjunction with a lightweight signature scheme ().

Authentication device and system

A control flow enforcement solution for ensuring that a program or portion thereof behaves as expected during execution upon a processor. A reference control flow is pre-determined for the program using, for example, a control flow graph (CFG). The CFG is then analysed to provide a set of rules which describe how the program should behave under normal execution. As the program executes it is monitored and the rules are evaluated to enable detection of any unexpected control flow. An embodiment of this disclosure is configured to respond upon detection that a rule has been violated. The response can take the form of any appropriate intervention such as a processor interrupt, memory fault, processor reset or generation of an alert. In this way, an embodiment of this disclosure may provide a particularly effective mechanism for detecting and defending against malicious activities such as return oriented programming attacks. The invention can be utilised to effect with any program but may be particularly suited for use with programs executing upon embedded processors.

Method and apparatus for ensuring control flow integrity

In order to reduce latency of elliptical curve digital signature generation a portion of the digital signature is pre-calculated before receipt of the message hash using an unmodified ECDSA computing engine. After the message hash is received, the digital signature is completed without using the ECDSA computing engine. Applications include generating digital signatures for the safety messages in Intelligent Transport Systems.

Method to reduce the latency of ECDSA signature generation using precomputation

A method of binding a software to a device is disclosed. Accordingly, during a setup of the software in the device, a unique identifier is derived from contents stored in the device and the derived unique identifier is encrypted. The derived unique identifier is then stored in a configuration of the software. During a next invocation of the software in the device, a new unique identifier is derived from the contents stored in the device. The newly derived unique identifier is then matched with the stored unique identifier. The execution of the software is terminated if the matching fails.

Constellation based device binding

Various embodiments include a method for binding a secure software application to a mobile device wherein the mobile device includes a processor and a subscriber identity module (SIM) card, including transmitting, by the processor, an authentication challenge to the SIM card; receiving an authentication response from the SIM card; verifying the authentication response from the SIM card; and enabling the secure software application when the authentication response from the SIM card is verified.

Binding mobile device secure software components to the SIM

A method of securely implementing functions in a secure software application, including: determining, by a processor, two functions to be implemented by the secure software application; generating a first function lookup table; encrypting the first function lookup table; sorting the first function lookup table by encrypted operand; generating a second function lookup table; encrypting the second function lookup table; sorting the second function lookup table by encrypted operand; generating a flattened lookup table from a combination of the encrypted first and second function lookup tables; permutating the flattened table indices e.g. by use of public key cryptography encryption; and sorting the flattened table by the permutated flattened table indices.

Secure software components anti-reverse-engineering by table interleaving

Disclosed is a method of generating a structure comprising at least one virtual machine, the method comprising: obfuscating a first virtual machine source code, thereby yielding a first obfuscated virtual machine (OVM) source code; associating a processor identifier with the first OVM source code, thereby yielding a processor-specific first OVM source code; compiling the processor-specific first OVM source code, thereby yielding a processor-specific first OVM. Furthermore, a structure generated by said method is disclosed.

Method of generating a structure and corresponding structure

A mobile device, including: a wireless communication interface; a memory storing a secure software application; and a processor in communication with the memory, the processor being configured to: transmit an authentication challenge to the SIM card; receive an authentication response from the SIM card; verify the authentication response from the SIM card; and enable the secure software application when the authentication response from the SIM card is verified.

There is provided a method () of authenticating a first device () to a second device () based on a number of data elements and based on a predefined recombination function known by the first device and the second device. The method is executable by the first device and comprises receiving () an input signal by the first device from the second device, the input signal being indicative of selected ones of the data elements, generating (), by the first device, an authentication signal by using the recombination function and based on the selected data elements as input elements, wherein the authentication signal represents a basis for the second device for authenticating the first device, and sending () the authentication signal to the second device.

Growing community of inventors

Sint-Katelijne-Waver, Belgium

Peter Maria Franciscus Rombouts