Abstract: A method for playing DRM-protected contents, the protected contents being downloaded by a user device from a media server in the form of protected segments, comprises executing a DRM proxy inside the user device, the DRM proxy interfacing the media server and a player configured to implement the HLS protocol; executing an HLS server in the DRM proxy; registering the DRM proxy to handle HTTP requests; producing by the DRM proxy a playlist in HLS format including a list of URLs locating the individual protected segments on the user device; processing the playlist in the player; in the DRM proxy, acquiring a license to access the protected segment identified by the URL of a current request; decrypting the protected segment in the DRM proxy based on the license; and returning a segment based on the decrypted segment to the player in response to the current URL request.
Abstract: A method for performing a transaction between a portable device and a transaction terminal includes establishing a communication channel between the portable device and the transaction terminal; establishing a first data link between the transaction terminal and the transaction server; and using an application program in the transaction server to perform the transaction with the transaction terminal through the data link, on behalf of the portable device.
Abstract: A method and apparatuses are disclosed for handling digital data packets at a logical borderline that separates an untrusted packet-switched information network from a protected domain. A packet processor part intercepts a packet that is in transit between the untrusted packet-switched information network and the protected domain. The packet is examined at the packet processor part in order to determine, whether the packet contains digital data that pertains to a certain protocol. If the packet is not found to contain such digital data, it is processed at the packet processor part. If the packet is found to contain digital data that pertains to said certain protocol, it gets redirected to an application gateway part that processes the packet according to a set of processing rules based on obedience to said certain protocol. The packet processor part is a kernel mode process running in a computer device and the application gateway part is a user mode process running in a computer device.
Type:
Grant
Filed:
September 30, 2009
Date of Patent:
October 22, 2013
Assignee:
Inside Secure
Inventors:
Tatu Ylönen, Tero Kivinen, Markus Levlin
Abstract: In an elliptic curve cryptographic system, point coordinates in a first coordinate system are transformed into a second coordinate system. The transformed coordinates are processed by field operations, which have been modified for operating on the transformed point coordinates. In some implementations, the point coordinates are transformed using a linear transformation matrix having coefficients. The coefficients can be fixed, variable or random. In some implementations, the transformation matrix is invertible.
Abstract: A content-addressable memory (CAM) for managing the reallocation of erasable objects within a non-volatile memory is conceptually separated into two tables: a first table provides verification of whether or not a logical address has been reallocated and, if so, a second table provides the physical address of the reallocated erasable object.
Abstract: A method for the secured loading of data into a first secured host processor of an NFC system comprising an NFC interface circuit for sending and receiving data, enabling a service to be accessed, the method comprising: generating a secret data, transmitting the secret data to the first host processor through a secured link, ciphering data to be loaded into the first host processor using a public key of the first host processor, and transmitting the ciphered data to the system for the first host processor which deciphers the data using a private key corresponding to the public key.
Type:
Grant
Filed:
December 7, 2007
Date of Patent:
September 10, 2013
Assignee:
Inside Secure
Inventors:
Bruno Benteo, Bruno Charrat, Philippe Martineau
Abstract: The invention relates to a method for managing non-volatile memory space in a secure processor comprising a secure non-volatile internal memory, the method comprising steps of: selecting data elements to remove from the internal memory, generating, by the secure processor, a data block comprising the selected data elements, and a signature computed from the selected data elements using a secret key generated by the secure processor, transmitting the data block by the secure processor, and storing the transmitted data block in an external memory.
Abstract: An antenna circuit for near-field communications includes a planar active winding, connected between a first and a second access terminal; an auxiliary winding coplanar with the active winding and connected by a first end to the first access terminal; and a tuning capacitor connected to the second end of the auxiliary winding. The turns of the active and auxiliary windings are interleaved.
Abstract: An apparatus including inductive coupling communication circuitry configured to communicate in peer-to-peer mode with an identical apparatus includes an antenna coil presenting, relative to a longitudinal median or a transversal median axis of the antenna coil, an asymmetry corresponding to a coverage rate less than or equal to 0.6 if the antenna coil comprises 4 or more loops, less than or equal to 0.7 if the antenna coil comprises 3 loops, or less than or equal to 0.8 if the antenna coil comprises 1 or 2 loops.
Abstract: A process for testing an integrated circuit includes collecting a set of points of a physical property while the integrated circuit is executing a multiplication, dividing the set of points into a plurality subsets of lateral points, calculating an estimation of the value of the physical property for each subset, and applying to the subset of lateral points a step of horizontal transversal statistical processing by using the estimations of the value of the physical property, to verify a hypothesis about the variables manipulated by the integrated circuit.
Type:
Grant
Filed:
March 31, 2010
Date of Patent:
June 4, 2013
Assignee:
Inside Secure
Inventors:
Benoit Feix, Georges Gagnerot, Mylene Roussellet, Vincent Verneuil
Abstract: A method for managing application data in an NFC system embedded or to be embedded in a portable object including a contactless data sending/receiving interface, one or more host processors and a data routing or transferring processor is described. The method includes generating complementary application data in response to the routing or transferring of external application data, and supplying the complementary application data to a host processor of the NFC system.
Abstract: A method for managing application data in an NFC system embedded or to be embedded in a portable object and including a contactless data sending/receiving interface, one or more host processors, and a data routing or transferring processor is described. The method includes generating internal application data in response to the occurrence of an internal event within the NFC system, and supplying the internal application data to a host processor of the NFC system.
Abstract: A microprocessor including a memory and a central processing unit configured to sign a binary word written in the memory, and during the reading of a binary word in the memory, verify the signature of the binary word and, if the signature is invalid, launching a protective action of the memory. According to the invention, the central processing unit is configured to execute a write instruction of a binary word accompanied by an invalid signature in a memory zone, so that a later read of the memory zone by the central processing unit launches the protective action.
Abstract: Fast scalar multiplication operations are disclosed for use in an elliptic curve cryptographic system The operations use binary representations of a secret key and points on an elliptic curve defined over a prime field expressed in a coordinate system (e.g., Jacobian coordinates). The operations can be based on a modified Montgomery ladder that uses modified Meloni addition formulas. The operations can be more efficient than a double-and-add operation, and can be more resistant to side-channel attacks by hackers.
Abstract: A method for adjusting an oscillator clock frequency, comprising: providing a first oscillator, applying a first setpoint value to the first oscillator, determining a first oscillator frequency value within a first time frame, providing a second oscillator, applying a second setpoint value to the second oscillator, determining a second oscillator frequency value within a second time frame, determining a new frequency setpoint value from the first and second frequency values, the first and second setpoint values, and a desired frequency value, and applying the new frequency setpoint value to one of the first and second oscillators.
Abstract: In a device having a plurality of circuits that can store at least a first value and a second value, a method can include configuring at least one circuit to persistently store the first value; determining whether the at least one circuit is storing the second value; and initiating a countermeasure if the at least one circuit is storing the second value. Determining whether the at least one circuit is storing the second value can include detecting whether the device has been attacked. Non-limiting examples of initiating a countermeasure can include resetting a portion of the device, powering down a portion of the device, activating an alarm circuit, causing protected data stored in the device to be erased, causing portions of the device to self-destruct, or causing the device to not respond to input applied to the interface.
Abstract: The invention relates to a method of conducting a transaction between an NFC device and a contactless integrated circuit of the passive reader type. The method includes providing, in the contactless integrated circuit, at least one reader application emulation program and, by an intermediary unit of the NFC device, establishing a communication with the contactless integrated circuit, receiving from the contactless integrated circuit reader application commands and transferring the commands to the first host processor, and receiving card application responses supplied by the first host processor and transferring the responses to the contactless integrated circuit.
Abstract: A contactless integrated circuit includes modulation and demodulation circuits configured to connect to an HF antenna circuit to emit and receive HF signals by inductive coupling in a reader mode, modulation and demodulation circuits configured to connect to a UHF antenna to emit and receive UHF signals by electric coupling in a reader mode, a data processing circuit connected to the modulation and demodulation circuits, and configured to provide data to be emitted to the modulation circuits, and to process received signals, transmitted by the demodulation circuits, the demodulation circuits including a common demodulation circuit to equally process signals received by the UHF and HF antennas.
Abstract: A microcontroller system, such as a system-on-a-chip integrated circuit, including a processor (e.g., a Von Neumann processor), memory, and a memory protection unit (MPU), where the MPU provides execute-only access rights for one or more protected areas of the memory. The MPU can allow instructions fetched from within a protected area to access data in the protected area while preventing instructions fetched from outside the protected area from accessing data in the protected area.
Type:
Grant
Filed:
February 16, 2011
Date of Patent:
December 4, 2012
Assignee:
Inside Secure
Inventors:
Sandrine Batifoulier, Stephane Godzinski, Vincent Dupaquis
Abstract: A system and method for encrypting data. The system includes a controller and a processing element (PE) array coupled to the controller. The PE array is operative to perform one or more of encryption functions and decryption functions using an encryption algorithm. According to the system and method disclosed herein, by utilizing the PE array, the system encrypts and decrypts data efficiently and flexibly.
Type:
Grant
Filed:
September 8, 2006
Date of Patent:
October 30, 2012
Assignee:
Inside Secure
Inventors:
Daniele Fronte, Eric Payrat, Annie Perez