Abstract: A method and system for secure boot key rotations with a secret hardware key is disclosed. To securely update and rotate the secure boot key, a new secure boot key is generated outside of a device. The new secure boot key is signed with the old secure boot key and sent to the device. The device verifies the new secure boot key with the old secure boot key that it already has in read/writable persistent memory. If the verification is successful, the old secure boot key is replaced with the new secure boot key.

Abstract: In some implementations, a device may receive, from a mobile device, a request to associate a dynamic electronic identification of a user with an electronic card of the user. The device may validate, based at least in part on receiving the request to associate the dynamic electronic identification with the electronic card, the dynamic electronic identification. The device may configure, at the mobile device, based at least in part on validating the dynamic electronic identification, an association of the dynamic electronic identification with the electronic card. The device may receive, based at least in part on an exchange associated with the electronic card, a request to validate information associated with the dynamic electronic identification. The device may validate the information associated with the dynamic electronic identification.

Abstract: Chains of cryptographic certificates are used for server authentication in a recursive manner. A device requires a Root certificate to authenticate a server, where the Root certificate is changed periodically. Each Root certificate is signed using a prior Root certificate. When a device is required to perform an authentication, multiple Root certificates forming a chain are provided to the device. The device authenticates the first Root certificate in the chain using a previously stored Root certificate, and authenticates each other Root certificate in the chain using a prior Root certificate in the chain. Upon authenticating the last Root certificate in the chain, the authentication can be completed. An associated server is also provided. The device can store the last Root certificate in the chain for use in defining subsequent chains.

Abstract: There is provided methods and apparatuses for secure updating of firmware/software. The methods and apparatus can be enabled by making use of the Online Certificate Status Protocol (OCSP) to request the revocation status of certificates in the certificate chain. In particular, a method called ‘OCSP stapling’ can ensure the validity of the certificates or verify authenticity of the software/firmware. By virtue of features of the OCSP stapling, the user device does not need to contact CAs directly for the purpose of verifying the status of the certificates that ensure authenticity and integrity of the delivered software/firmware and thus is not required to open an extra communication channel to obtain status of certificates. This process can also reduce the burden on CAs because the CAs are neither required to keep a large volume of CRLs nor to maintain connection with user devices for which the CAs are responsible.

Abstract: There is provided methods and apparatuses for secure updating of firmware/software. The methods and apparatus can be enabled by making use of the Online Certificate Status Protocol (OCSP) to request the revocation status of certificates in the certificate chain. In particular, a method called ‘OCSP stapling’ can ensure the validity of the certificates or verify authenticity of the software/firmware. By virtue of features of the OCSP stapling, the user device does not need to contact CAs directly for the purpose of verifying the status of the certificates that ensure authenticity and integrity of the delivered software/firmware and thus is not required to open an extra communication channel to obtain status of certificates. This process can also reduce the burden on CAs because the CAs are neither required to keep a large volume of CRLs nor to maintain connection with user devices for which the CAs are responsible.

Abstract: The present invention provides methods, systems and computer program products for facilitating loading, configuration and interaction of modular applications and/or modular components of an application on wireless devices such as M2M terminals. Modular elements may be connected to each other based on a system of permissions which determines which elements are permitted to access given services offered by other elements. Once connected, modular elements may communicate directly via a standardized interface.

Abstract: The present invention provides methods, systems and computer program products for facilitating loading, configuration and interaction of modular applications and/or modular components of an application on wireless devices such as M2M terminals. Modular elements may be connected to each other based on a system of permissions which determines which elements are permitted to access given services offered by other elements.

Abstract: A portable sensor system that uses acceleration-insensitive, three-dimensional angle sensors located at various points on the patient's body, and collects data on the frequency and nature of the movements over extended periods of time.