Abstract: The invention relates to a method of executing a secure application in an NFC device, the method comprising steps during which: a contactless link is established between first and second NFC devices, the first NFC device transmits by the contactless link an identifier of a secure processor of the first NFC device, the second NFC device transmits by the contactless link an application identifier, the secure processor transmits by the contactless link first authentication data allowing the authentication of the secure processor of the first NFC device, the second NFC device transmits to an application server the first authentication data, the application server transmits to an authentication server the first authentication data and second authentication data) to authenticate the application and authorizes the two NFC devices to execute the application only if the secure processor and the application are authenticated.

Abstract: A data emission/reception device by inductive coupling includes an inductive antenna circuit in which an antenna signal appears, a mechanism configured to for extracting a first periodic signal from the antenna signal, a synchronous oscillator receiving the first periodic signal and supplying a second periodic signal, and an active load modulation circuit configured to apply bursts of the second periodic signal to the antenna circuit. The device is configured to place the oscillator in the synchronous oscillation mode before each application of a burst of the second periodic signal to the antenna circuit, then place the oscillator in the free oscillation mode.

Abstract: A method of loading an operating program in a secure microcircuit, includes the steps of: downloading and installing in the microcircuit a boot program, which is launched upon activation of the microcircuit, loading into the microcircuit initialization data including a first public key, performing a mutual authentication procedure between the microcircuit and a first server having a private key corresponding to the first public key, and if the mutual authentication is successful, loading from the first server operating program profile data holding a second public key, performing a mutual authentication procedure between the microcircuit and a second server having a private key corresponding to the second public key, and if the mutual authentication is successful, loading an operating program from the second server and installing it in the microcircuit, and activating the operating program when it is in the microcircuit.

Abstract: A method for adjusting an oscillator clock frequency, comprising: providing a first oscillator, applying a first setpoint value to the first oscillator, determining a first oscillator frequency value within a first time frame, providing a second oscillator, applying a second setpoint value to the second oscillator, determining a second oscillator frequency value within a second time frame, determining a new frequency setpoint value from the first and second frequency values, the first and second setpoint values, and a desired frequency value, and applying the new frequency setpoint value to one of the first and second oscillators.

Abstract: An NFC card includes an antenna circuit including an antenna coil having at least one magnetic axis, and at least one integrated circuit linked to the antenna circuit. The magnetic axis of the antenna coil is substantially parallel to at least one side of the card, and the card further includes at least one electrically conductive screen extending near the antenna coil, which does not cross the magnetic axis. The card does not include any magnetically permeable material between the at least one conductive screen and the antenna coil. Embodiments of the invention are applicable in particular to SIM-NFC card and SD-NFC cards.

Abstract: A method for playing DRM-protected contents, the protected contents being downloaded by a user device from a media server in the form of protected segments, comprises executing a DRM proxy inside the user device, the DRM proxy interfacing the media server and a player configured to implement the HLS protocol; executing an HLS server in the DRM proxy; registering the DRM proxy to handle HTTP requests; producing by the DRM proxy a playlist in HLS format including a list of URLs locating the individual protected segments on the user device; processing the playlist in the player; in the DRM proxy, acquiring a license to access the protected segment identified by the URL of a current request; decrypting the protected segment in the DRM proxy based on the license; and returning a segment based on the decrypted segment to the player in response to the current URL request.

Abstract: An NFC card includes an antenna circuit including an antenna coil having at least one magnetic axis, and at least one integrated circuit linked to the antenna circuit. The magnetic axis of the antenna coil is substantially parallel to the plane of the card, and is at an angle of 45°±25° with respect to a longitudinal axis LX of the card. Embodiments of the invention are applicable in particular to SIM-NFC card and SD-NFC cards.

Abstract: A circuit for calculating a sum of products, each product having a q-bit binary operand and a k-bit binary operand, where k is a multiple of q, includes a q-input carry-save adder (CSA); a multiplexer (10) by input of the adder, having four k-bit channels respectively receiving the value 0, a first (Yi) of the k-bit operands, the second k-bit operand (M[63:0], mi), and the sum of the two k-bit operands, the output of a multiplexer of rank t (where t is between 0 and q?1) being taken into account by the adder with a t-bit left shift; and each multiplexer having first and second path selection inputs, the bits of a first of the q-bit operands being respectively supplied to the first selection inputs, and the bits of the second q-bit operand being respectively supplied to the second selection inputs.

Abstract: This document discloses data security systems and methods of securing data. A cache memory can be connected between a decryption engine and a central processing unit (“CPU”) to increase security of encrypted data that is stored in a datastore. The decryption engine can retrieve the encrypted data from the datastore, decrypt the data, and store the decrypted data in the cache. In turn, the decrypted data can be accessed by the CPU. The data can be encrypted with a secret key, so that decryption can be performed with the secret key. The key can be varied based on a memory address associated with the data. The key can be protected by restricting direct access to the decryption engine by the CPU.

Abstract: An authentication method between a secure host processor and a controller of an NFC system, the controller being equipped with an NFC interface circuit sending and receiving contactless data, includes connecting the host processor to the controller and checking that there is a predefined relation between a first secret data stored by the host processor and a second secret data stored by the controller. The method further includes transmitting the second secret data to the controller and storing of the second secret data by the controller. The host processor may be removably associated with a contactless component storing the second secret data which is contactlessly transmitted to the controller.

Abstract: A method for routing incoming or outgoing application data in an NFC system includes an NFC interface circuit performing contactless data sending and receiving. The routing of incoming application data received by the interface circuit includes routing at least a first portion of the incoming application data to a destination point located in the NFC system and designated as arbitration point of incoming application data routing; analyzing by the arbitration point the first portion of the incoming application data to identify the application for which the data is sent to the NFC system; designating by the arbitration point a point of destination of the application data and application processing; and routing a second portion of the incoming application data to the destination and processing point.

Abstract: A virtual private network (VPN) system may include a VPN server configured to generate a configuration message comprising a VPN character configuration string, and a VPN client device configured to receive the configuration message and initiate a VPN connection with the VPN server over a communications network based upon the VPN character configuration string. The VPN server may be configured to provide the configuration message to the VPN client device in a non-human-readable form, and the VPN client device may be configured to initiate the VPN connection without user entry of VPN configuration data.

Abstract: The method and system are for playing digital contents protected by a DRM scheme, wherein the digital contents are stored in a server and downloaded or streamed to a user device. The approach includes executing a DRM application inside the user device implementing a proxy between the server and a native player of the user device, and connecting the DRM proxy application to the server, selecting a digital content to be downloaded and retrieving a corresponding remote playlist. Also, the approach includes transforming the remote playlist into a local playlist having a format readable from the native player and executing a plurality of local packets of the local playlist inside the native player.

Abstract: The approach is for controlling a data rate of proxy server of a user device that includes a multimedia player, and a proxy server adapted to communicate with the multimedia player. The proxy server also communicates with a multimedia server. The approach includes receiving a request for a multimedia content from the multimedia player, requesting the multimedia content to the multimedia server, receiving a plurality of packets for the multimedia content from the multimedia server, estimating a data rate between the user device and the multimedia server, and sending a data stream for the multimedia content to the multimedia player based on the estimated data rate.

Abstract: An approach for protecting digital contents includes a content delivery phase wherein a client stores digital contents or retrieves them in streaming, transmits to a user device the digital content in a protected format along with an enabling code for enabling the user device to access or read the protected digital content. The approach includes a key generation phase in a DRM (Digital Right Management) server which derives at least one key for encrypting the digital contents. A key transmission phase involves the derived key being transmitted from the DRM server to the client. For decrypting the digital content, the user device requests the key from the DRM server, with the request including a key identification defined by the enabling code transmitted by the client to the user device which is used by the DRM server to derive the key for the user device.

Abstract: A method of access control to a communication interface of an integrated circuit, includes intercepting an event transmitted between a communication interface and an application performed by the integrated circuit, and transmitting the intercepted event if a specific parameter of the application indicates that the application is authorized to use the communication interface.

Abstract: An elliptic curve cryptographic system where point coordinates are transformed from a first coordinate system to a second coordinate system. The transformed coordinates are processed by field operations, which have been modified for operating on the transformed point coordinates. In some implementations, the point coordinates are transformed from an affine coordinate system to a projective coordinate system using a non-random value for the projective coordinate. In some implementations, the transformed projective representation of the point can be changed from a first representation of the point in projective coordinates to a second representation of the point in projective coordinates, where the projective coordinate used in the representation change is a random value.

Abstract: A process for establishing a data link between a first processor configured to supply, upon a contact communication port, a first data carrying signal, and a second processor configured to supply, upon a contact communication port, a second data carrying signal is described. The process includes providing a first coupler and a second coupler, establishing a contactless coupling between the first and second couplers and, by the intermediary of the couplers and at least one RF signal, transferring the first data carrying signal to the second processor and transferring the second data carrying signal to the first processor. The second processor is, for example, a secure processor of a SIM card and the first processor is an NFC controller.

Abstract: A device includes a radio transceiver equipped with a UHF antenna, a clock generator associated with the radio transceiver, a processor configured to periodically connect to the radiotelephony network by way of the radio transceiver, and a UHF tag reader configured to conduct a transaction with a UHF tag only outside periods of connection of the processor to the radiotelephony network. The device is particularly directed for use in mobile telephones.

Abstract: A method for sending data by inductive coupling includes: extracting an antenna signal from an antenna circuit, extracting from the antenna signal a first periodic signal, producing a second periodic signal by way of a synchronous oscillator, placing the oscillator in a free oscillation mode and applying to the antenna circuit the second periodic signal, modifying the impedance of the antenna circuit, restoring the amplitude of the antenna signal, then resynchronizing the oscillator on the first periodic signal.