Storing and using data with secure circuitry

Patent metadata

Field	Value
Publication number	US-2016239686-A1
Application number	US-201615046097-A
Country	US
Kind code	A1
Filing date	Feb 17, 2016
Priority date	Feb 17, 2015
Publication date	Aug 18, 2016
Grant date	—

Abstract

An electronic device is provided. The electronic device includes a processor, a memory configured to connect to the processor, and secure circuitry configured to connect to the processor over a physical channel receive data sent by the processor over the physical channel, and store the data.

First claim

What is claimed is:

1 . An electronic device comprising:
a processor; a memory configured to connect to the processor; and secure circuitry configured to connect to the processor over a physical channel receive data sent by the processor over the physical channel, and store the data.

2 . The electronic device of claim 1 , wherein the data comprises at least one of biometric information, payment information, health information, and privacy information, which corresponds to the electronic device.

3 . The electronic device of claim 1 , wherein the processor is configured to encrypt the data and store the encrypted data or a secure key used to encrypt the data in the secure circuitry.

4 . The electronic device of claim 3 , wherein if the secure key is stored in the secure circuitry, the processor deletes the secure key stored in the processor.

5 . The electronic device of claim 1 , wherein the physical channel comprises a serial port interface (SPI).

6 . The electronic device of claim 1 , wherein the processor is configured to be independent of a general environment and a secure environment, and
wherein the secure environment is configured to one of store the data in the secure circuitry over the physical channel and import stored data from the secure circuitry.

7 . The electronic device of claim 6 , wherein the secure environment establishes a session according to a key shared with the secure circuitry, and one of stores the data in the secure circuitry and imports stored data through the established session.

8 . The electronic device of claim 6 , wherein if there is no key shared with the secure circuitry, the secure environment stores the data in the secure environment and shares a key with the secure circuitry through a provisioning process.

9 . The electronic device of claim 6 , further comprising:
a biometric sensing module configured to collect biometric information of a user, wherein the processor is configured to generate the data using the biometric information.

10 . The electronic device of claim 9 , wherein the biometric sensing module includes a channel that is connected to one of the general environment, the secure environment, and the secure circuitry.

11 . The electronic device of claim 9 , wherein the secure environment encrypts the biometric information, which is recognized through the biometric sensing module, using a secure key.

12 . The electronic device of claim 11 , wherein the secure environment stores the encrypted biometric information in one of the general environment and the secure environment.

13 . The electronic device of claim 11 , wherein the secure environment stores the secure key in one of the secure environment and the secure circuitry.

14 . The electronic device of claim 13 , wherein if the secure key is stored in the secure circuitry, the secure environment deletes the secure key stored in the secure environment.

15 . The electronic device of claim 9 , wherein the general environment sends a request to authenticate the biometric information to the secure environment and sends first biometric information, which is recognized through the biometric sensing module, to the secure environment.

16 . The electronic device of claim 15 , wherein if receiving the request to authentication the biometric information, the secure environment establishes a session according to a key shared with the secure circuitry, requests the secure circuitry to send the secure key, which is stored in the secure circuitry, through the session, and decrypts previously stored encrypted second biometric information.

17 . The electronic device of claim 6 , wherein if a provisioning event occurs, the secure environment sends a first certificate to the secure circuitry such that the secure circuitry verifies the validity of the secure environment, and
wherein the secure environment requests the secure circuitry to send a second certificate and verifies the validity of the secure circuitry according to the second certificate.

18 . The electronic device of claim 17 , wherein the secure environment sends the first certificate and a channel certificate to the secure circuitry, and
wherein the secure circuitry is configured to verify the first certificate and the channel certificate according to a previously stored certificate relating to the electronic device.

19 . The electronic device of claim 17 , wherein the secure environment sends a request to send a second certificate to the secure circuitry, and
wherein if receiving the second certificate from the secure circuitry in response to the request, the secure environment is configured to verify the second certificate according to a previously stored certificate relating to the secure circuitry.

20 . A data storing method performed in an electronic device, the method comprising:
obtaining data, which is requested to perform authentication; and storing at least part of the data in an embedded secure element (eSE) of the electronic device that is connected to a processor over a physical channel.

Assignees

• Samsung Electronics Co Ltd

Inventors

• Kwon Eun Young
• Kim Bum Han
• Kim Jong Su
• Pak Michael
• Cho Dae Haeng
• Jang Dong Ho

Classifications

• H04L9/3231

  Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861) · CPC title

• G06F21/606

  by securing the transmission between two devices or processes · CPC title

• G06F21/72

  in cryptographic circuits · CPC title

• G06F21/602

  Providing cryptographic facilities or services · CPC title

• H04L9/3268 Primary

  using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL] · CPC title