Secure time functionality for a wireless device

Patent metadata

Field	Value
Publication number	US-9774457-B2
Application number	US-201615250211-A
Country	US
Kind code	B2
Filing date	Aug 29, 2016
Priority date	May 9, 2006
Publication date	Sep 26, 2017
Grant date	Sep 26, 2017

Abstract

The present invention is related to a wireless transmit/receive unit (WTRU) for providing advanced security functions. The WTRU includes trusted platform module (TPM) for performing trusted computing operations; and a secure time component (STC) for providing a secure measurement of a current time. The STC and the TPM are integrated to provide accurate trusted time information to internal and external to the WTRU. The STC may be located on an expanded a subscriber identity module (SIM), on the WTRU platform, or two STCs may be used, one in each location. Similarly, the TPM may be located on an expanded SIM, on the WTRU platform, or two TPMs may be used, one in each location. Preferably, the STC will include a real time clock (RTC); a tamper detection and power failure unit; and a time report and sync controller.

First claim

What is claimed:

1. A wireless communications device comprising:
a clock for maintaining a current time value, the clock resuming counting from a fixed date and time upon restoration of power to the wireless communications device;
a secure time component (STC) comprising a memory protected by a trusted platform module (TPM), the STC being further configured to retrieve from the protected memory a last saved time when the wireless communications device was active before a current restoration of power to the wireless communications device; and
the STC being further configured to restore the clock to the last saved time value when the current time of the clock is less than the last saved time.

2. The wireless communications device of claim 1 , wherein the TPM is further configured to perform an integrity check of the clock.

3. The wireless communications device of claim 2 , wherein the TPM is further configured to perform integrity checks of the clock on a periodic basis.

4. The wireless communications device of claim 1 , wherein the wireless communications device is configured to re-synchronize the clock with a secure time server to which the wireless communication device communicates with via a network.

5. The wireless communications device of claim 4 , wherein the STC is configured to save the clock value obtained from a secure time server securely under TPM control.

6. The wireless communications device of claim 1 , wherein the wireless communications device is configured to securely save under TPM control the time value obtained from a trusted external time source during communications with the trusted external time source.

7. The wireless communications device of claim 6 , wherein the device is configured to compare a current time value of the clock to a time value previously stored securely under TPM control; and wherein the STC is further configured to set the clock to the saved time value when the current time of the clock is ahead of the saved time value retrieved from the memory protected by the TPM by an amount that exceeds a predetermined threshold.

8. The wireless communications device of claim 6 , wherein the device is configured to compare a current time value of the clock to a time value previously stored securely under TPM control; and wherein the STC is further configured to restore the clock to the saved time value when the current time of the clock is less than the value from the trusted external time source.

9. In a wireless communications device comprising a clock, which resumes counting from a fixed date and time upon restoration of power to the wireless communications device, and a secure time component (STC) comprising a memory protected by a trusted platform module (TPM), a method for secure time processing comprising:
maintaining, by the clock, a current time value;
retrieving, by the STC, from the protected memory, a last saved time when the wireless communications device was active before a current restoration of power to the wireless communications device; and
restoring, by the STC, the clock to the last saved time value when the current time of the clock is less than the last saved time.

10. The method of claim 9 , further comprising performing, by the TPM, an integrity check of the clock.

11. The method of claim 10 , further comprising performing, by the TPM, integrity checks of the clock on a periodic basis.

12. The method of claim 9 , further comprising re-synchronizing the clock with a secure time server to which the wireless communication device communicates with via a network.

13. The method of claim 12 , further comprising saving, by the STC, the clock value obtained from a secure time server securely under TPM control.

14. The method of claim 9 , further comprising securely saving under TPM control the time value obtained from a trusted external time source during communications with the trusted external time source.

15. The method of claim 14 , further comprising:
comparing a current time value of the clock to a time value previously stored securely under TPM control; and
setting, by the STC, the clock to the saved time value when the current time of the clock is ahead of the saved time value retrieved from the memory protected by the TPM by an amount that exceeds a predetermined threshold.

16. The method of claim 14 , further comprising:
comparing a current time value of the clock to a time value previously stored securely under TPM control; and
restoring, by the STC, the clock to the saved time value when the current time of the clock is less than the value from the trusted external time source.

Assignees

• Interdigital Tech Corp

Inventors

• Shah Yogendra C
• Cha Inhyok

Classifications

• H04L2463/102

  applying security measure for e-commerce · CPC title

• H04L63/0853

  using an additional device, e.g. smartcard, SIM or a different communication terminal (cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234) · CPC title

• H04L2463/101

  applying security measures for digital rights management · CPC title

• H04L9/3234

  involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853) · CPC title

• H04W12/12

  Detection or prevention of fraud · CPC title