Methods and apparatus for secure updates to persistent data in a near field communication controller

Patent metadata

Field	Value
Publication number	US-9337899-B2
Application number	US-201213591827-A
Country	US
Kind code	B2
Filing date	Aug 22, 2012
Priority date	Feb 13, 2012
Publication date	May 10, 2016
Grant date	May 10, 2016

Abstract

Disclosed are methods, apparatus, systems, computer program products, and other implementations, including a method that includes determining a source from which routing table information is to be obtained based, at least in part, on location data indicating the source, and receiving configuration information from a device host (DH). The method also includes removing DH-based routing table information included in the configuration information in response to the location data indicating that a near-field communication controller (NFCC) is configured to receive the routing table information from one or more secure computing environments or from the DH, and obtaining secure routing table information from at least one of the one or more secure computing environments.

First claim

What is claimed is:

1. A method comprising:
determining a source from which routing table information is to be obtained based, at least in part, on location data indicating the source;
receiving configuration information from a device host (DH); and
in response to the location data indicating that a near-field communication controller (NFCC) is configured to receive the routing table information from one or more secure computing environments or from the DH:
removing DH-based routing table information included in the configuration information so that routing table information, different from the DH-based routing table information, from a secured source can be loaded into one or more data routing tables of the NFCC, and
obtaining secure routing table information from at least one of the one or more secure computing environments to be loaded into the one or more data routing tables of the NFCC.

2. The method of claim 1 , wherein determining the source comprises:
determining that one or more routing table location option bits are set to allow the NFCC to receive the routing table information from the one or more secure computing environments or from the DH.

3. The method of claim 2 , wherein the one or more routing table location option bits are unchangeable and stored on a non-volatile memory.

4. The method of claim 2 , wherein the one or more routing table location option bits are changeable.

5. The method of claim 1 , wherein removing the DH-based routing table information included in the received configuration information comprises one of:
discarding the DH-based routing table information included in the configuration information received from the DH; and
storing the DH-based routing table information included in the configuration information received from the DH.

6. The method of claim 1 , further comprising:
in response to a determination of failure to obtain the secure routing table information from the at least one of the one or more secure computing environments, obtaining the DH-based routing table information, wherein obtaining the DH-based table information comprises one of:
obtaining the DH-based routing table information stored at the DH, and
obtaining the removed routing table information from a storage device coupled to the NFCC, the storage device storing the removed DH-based routing table information after the removal of the DH-based routing table information from the configuration information received from the DH.

7. The method of claim 1 , wherein the one or more secure computing environments include a first secure computing environment and a second secure computing environment, and wherein the method further comprises:
receiving first routing table information associated with the first secure computing environment and second routing table information associated with the second secure computing environment, and
selecting the first routing table information.

8. The method of claim 7 , further comprising:
selecting the first routing table information and the second routing table information; and
combining the first routing table information and the second routing table information to produce a hybrid routing table.

9. The method of claim 1 , further comprising:
receiving secure routing table information priority data associated with the one or more secure computing environments; and
determining based on the received secure routing table information priority data whether to utilize the secure routing table information obtained from the at least one of the one or more secure computing environments or to obtain the DH-based routing table information from the DH.

10. The method of claim 1 , wherein the at least one of the one or more secure computing environments is selected from the group consisting of a secure element, a virtual secure element, an NFC execution environment, a smart card, a universal integrated circuit card, a subscriber identity module, an SD Card containing the secure computing environment, and a Universal Serial Bus (USB)-based device containing the secure computing environment.

11. The method of claim 1 , wherein the one or more secure computing environments are removable.

12. The method of claim 1 , wherein the one or more secure computing environments are fixed.

13. An apparatus for wireless communication, comprising: means for determining a source from which routing table information is to be obtained based, at least in part, on location data indicating the source;
means for receiving configuration information from a device host (DH); and
means for performing in response to the location data indicating that a near-field communication controller (NFCC) is configured to receive the routing table information from one or more secure computing environments or from the DH:
removing DH-based routing table information included in the configuration information so that routing table information, different from the DH-based routing table information, from a secured source can be loaded into one or more data routing tables of the NFCC, and
obtaining secure routing table information from at least one of the one or more secure computing environments to be loaded into the one or more data routing tables of the NFCC.

14. The apparatus of claim 13 , wherein the means for determining the source comprise:
means for determining that one or more routing table location option bits are set to allow the NFCC to receive the routing table information from the one or more secure computing environments or from the DH.

15. The apparatus of claim 14 , wherein the one or more routing table location option bits are unchangeable and stored on a non-volatile memory.

16. The apparatus of claim 14 , wherein the one or more routing table location option bits are changeable.

17. The apparatus of claim 13 , wherein the means for removing the DH-based routing table information included in the received configuration information comprise one of:
means for discarding the DH-based routing table information included in the configuration information received from the DH; and
means for storing the DH-based routing table information included in the configuration information received from the DH.

18. The apparatus of claim 13 , further comprising:
means for obtaining the DH-based routing table information in response to a determination of failure to obtain the secure routing table information from the at least one of the one or more secure computing environments, wherein the means for obtaining the DH-based table information comprise one of:
means for obtaining the DH-based routing table information stored at the DH, and
means for obtaining the removed routing table information from a storage device coupled to the NFCC, the storage device storing the removed DH-based routing table information after the removal of the DH-based routing table information from the configuration information received from the DH.

19. The apparatus of claim 13 , wherein the one or more secure computing environments include a first secure computing environment and a second secure computing environment, and wherein the apparatus further comprises:
means for receiving first routing table information associated with the first secure computing environment and second routing table information associated with the second secure computing environment, and
means for selecting the first routing table information.

20. The apparatus of claim 19 , further comprising:
means for selecting the first routing table information an

Assignees

• Bhatia Neeraj
• O'Donoghue Jeremy R
• Haverinen Anssi Kaleva
• Qualcomm Inc

Inventors

• Bhatia Neeraj
• O'Donoghue Jeremy R
• Haverinen Anssi Kaleva

Classifications

• H04L63/0492 Primary

  by using a location-limited connection, e.g. near-field communication or limited proximity of entities · CPC title

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04B5/24

  Inductive coupling · CPC title

• H04B5/0031 Primary

  Electricity · mapped topic

• H04W12/00

  Security arrangements; Authentication; Protecting privacy or anonymity · CPC title