Intel Corporation

Nokia Technologies Oy

Nokia Corporation

Rauno Tamminen

Uttam K Sengupta

Jari Lukkarila

Sampo Juhani Sovio

Janne Takala

Markus Osa

Janne Johannes Jarvinen

Jari Juhani Lukkarila

Martti Takala

Suvi Lehtinen

Olli Pekka Juhani Muukka

Various techniques for the management and control of service operations using near-field communication (NFC) technologies are disclosed. In an example, a master computing system operates to identify a device configuration that enables a service operation upon a remote client device, identify an authentication value to authenticate permission to enable the service operation with the remote client device, and generate an NFC data payload including the authentication value and device configuration. This data payload is then provided to a client computing device that operates an NFC reader. In response, the client computing device processes and authenticates the payload, and enables the indicated service operation(s) within the client computing device. Further examples to conduct the NFC data transaction and perform the service operation(s) using active and passive NFC tags are also disclosed.

Service operation management using near-field communications

Embodiments of the disclosure implement techniques to create secure Original Equipment Manufacturer (OEM) identifiers. In one embodiment, a processing system is disclosed. The processing system includes a memory to store an Original Equipment Manufacturer (OEM) key and a processing device, operatively coupled to the memory. The processing device is to receive the OEM key for an OEM system as input to a cryptographic hash function. A device key is produced by applying the cryptographic hash function to the OEM key and a global key associated with a vendor of the OEM system. The device key is provided to a security firmware device to authenticate the OEM system.

Creating secure original equipment manufacturer (OEM) identification

A processing device implementing creation of secure Original Equipment Manufacturer (OEM) identifiers (IDs) in a processing device is disclosed. A processing device of the disclosure includes a one-time programmable storage device and an execution unit. The execution unit can implement a one-way cryptographic hash function that is to receive a secret OEM key from an OEM system, generate an OEM public ID from the secret OEM key, and send the OEM public ID to the one-time programmable storage device for storage.

Systems and methods are provided for enchancing pseudo random number generation to thwart various security attacks to a system that relies on digital signature security measures. For example, a random number may be bound to a message that is to be signed using a digital signature. Alternatively, a random number may be bound to a secret seed value, which may be updated subsequent to each signing. Alternatively still, a random number may be bound to both the message to be signed using a digital signature and a secret seed value.

Method and apparatus for improving digital signatures

An apparatus for managing software versions may include a processor. The processor may be configured to determine whether a security identifier of a first security certificate matches a trusted security identifier. In this regard, the first security certificate may include software version criteria. The processor may also be configured to determine whether a software version of a software application satisfies software version criteria of the first security certificate. The processor may be configured to make this determination in response to determining that the security identifier of the first certificate matches the trusted security identifier. Further, the processor may also be configured to permit execution of the software application, in response to determining that the software version satisfies the software version criteria. Associated methods and computer program products may also be provided.

Method, apparatus, and computer program product for managing software versions

An apparatus with at least one secure memory area comprising a plurality of pre-installed public keys for verifying software authenticity. The apparatus is caused to receive an indication that a software package signed with a private key according to public key infrastructure has been received; check from the secure memory area, whether a public key associated with the private key with which the software package has been signed, is disabled; and if the public key associated with the private key is disabled, prevent execution of the received software package, and otherwise, proceed to verify authenticity of the received software package using the public key associated with the private key.

Growing community of inventors

Tampere, Finland

Rauno Tamminen