# US 10,484,338 B2 · Secure zone for digital communications

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,484,338 B2
- Document ID: US10484338B2
- Status: Granted
- Kind: B2
- Application number: 16/034,611
- Filed: 2018-07-13
- Published: 2019-03-14
- Granted: 2019-11-19
- Earliest claimed: 2012-04-13
- Assignees: OLogN Technologies AG
- Applicants: OLogN Technologies AG
- Inventors: Sergey Ignatchenko
- Web page: https://patentgrep.com/patent/US10484338B2

## CPC

- H04L 63/04: {for providing a confidential data exchange among entities communicating through data packet networks}
- G06F 21/44: Program or device authentication
- G06F 21/53: by executing in a restricted environment, e.g. sandbox or secure virtual machine
- G06F 21/57: Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
- G06F 21/74: operating in dual or compartmented mode, i.e. at least one secure mode
- G06F 21/84: output devices, e.g. displays or monitors
- G06F 2221/2143: Clearing memory, e.g. to prevent the data from being stolen
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

The systems, methods and apparatuses described herein provide a computing environment that includes a secure zone for executing tasks. An apparatus according to the present disclosure may comprise a screen, a secure zone and an indicator operatively controlled by the secure zone. The secure zone may be configured to execute a task and to assume control over an output to the screen while the apparatus is operating in a secure mode and to transfer control over the output to the screen to a non-secure zone while the apparatus is operating in a non-secure mode.

## Claims

### Claim 1

An apparatus, comprising:
a screen;
an indicator;
a non-secure zone; and
a secure zone comprising:
a non-volatile storage configured to store at least one digital certificate and at least one encryption key;
a secure processor configured to execute a task comprising task certificate information representing a task signer; and
a supervisor configured to:
control access to the at least one digital certificate and the at least one encryption key;
assume control over an output of the screen when the apparatus operates in a secure mode and to transfer control over the output of the screen to the non-secure zone when the apparatus operates in a non-secure mode; and
control operation of the indicator, wherein the supervisor activates the indicator when the apparatus operates in the secure mode and deactivates the indicator when the apparatus operates in the non-secure mode.

### Claim 2 (depends on 1)

The apparatus of claim 1, wherein the supervisor is further configured to delegate the control over the output to the entire screen to the task executed by the secure processor when the apparatus is operating in the secure mode.

### Claim 3 (depends on 2)

The apparatus of claim 2, wherein the supervisor is further configured to deactivate the indicator when the supervisor delegates the control over the output to the entire screen to the task executed by the secure processor.

### Claim 4 (depends on 1)

The apparatus of claim 1, wherein the supervisor is further configured, when the apparatus is operating in the secure mode, to delegate control of a first portion of the screen to the task executing within the secure zone, and display the task certificate information in a second portion of the screen.

### Claim 5 (depends on 1)

The apparatus of claim 1, wherein the secure mode is a full-screen secure mode or a partial-screen secure mode.

### Claim 6 (depends on 5)

The apparatus of claim 5, wherein the supervisor is further configured to activate the indicator when the apparatus is operating in the partial-screen secure mode.

### Claim 7 (depends on 5)

The apparatus of claim 5, wherein the supervisor is further configured to:
delegate the control over the output of the entire screen to the task executed by the secure processor when the apparatus is operating in the full-screen secure mode; and
deactivate the indicator.

### Claim 8 (depends on 1)

The apparatus of claim 1, further comprising an input device, and a switch connected to the input device, wherein the switch is configured to direct input received through the input device to the secure zone in the secure mode and to the non-secure zone in the non-secure mode.

### Claim 9 (depends on 1)

That apparatus of claim 1, wherein apparatus further comprises a mixer, and the secure zone further comprises a decoder and an image processor; wherein the mixer is configured to receive input from one or more of: the decoder, the image processor, and the non-secure zone; and wherein the mixer is configured to provide the output to the screen.

### Claim 10 (depends on 9)

The apparatus of claim 9, wherein the mixer is configured to receive the task certificate information, and information from the decoder, and provide to the screen an output comprising in part the task certificate information.

### Claim 11 (depends on 10)

The apparatus of claim 10, wherein the mixer is configured to exclude input received from the non-secure zone from the output to the screen when the apparatus is operating in the secure mode.

### Claim 12 (depends on 1)

The apparatus of claim 1, wherein the secure zone further comprises a memory inaccessible to the non-secure zone, the memory of the secure zone configured to store executable code; and wherein the supervisor is configured to load the executable code of the task into the memory and let the secure processor execute the executable code.

### Claim 13 (depends on 12)

The apparatus of claim 12, wherein the supervisor is further configured to decrypt the task.

### Claim 14

A method of operating an apparatus, comprising:
receiving a task, at a secure zone of the apparatus, from a non-secure zone of the apparatus, wherein the task comprises task certificate information representing a task signer;
assuming control, by a supervisor of the secure zone, over an output to a screen of the apparatus;
executing the task, by a secure processor of the secure zone, utilizing data stored in a memory of the secure zone, wherein the memory of the secure zone is inaccessible to the non-secure zone;
activating, by the supervisor, an indicator of the secure zone when the task is being executed by the secure processor; and
transferring control, by the supervisor, over the output to the screen to the non-secure zone after the task execution is complete.

### Claim 15 (depends on 14)

The method of claim 14, wherein the output to the screen comprises the task certificate information.

### Claim 16 (depends on 14)

The method of claim 14, further comprising decrypting, by the supervisor, the task using an encryption key stored in a non-volatile storage of the secure zone.

### Claim 17 (depends on 14)

The method of claim 14, further comprising validating, by the supervisor, a digital signature associated with the task using a corresponding digital certificate stored in a non-volatile storage of the secure zone.

### Claim 18 (depends on 14)

The method of claim 14, wherein the secure zone comprises an interface separating the non-secure zone from the secure zone, and the secure zone receives the task from the non-secure zone through the interface.

### Claim 19 (depends on 14)

The method of claim 14, further comprising executing an operating system and at least one application in the non-secure zone.

### Claim 20 (depends on 14)

The method of claim 14, further comprising switching input received from a peripheral device to the secure zone when the task is being executed; and switching input received from the peripheral device to the non-secure zone after the task execution is completed.

### Claim 21 (depends on 14)

The method of claim 14, wherein the apparatus further comprises a mixer and the secure zone further comprises of a decoder and an image processor, and wherein the method further comprises:
receiving input at the mixer from the decoder and the image processor, wherein the input from the image processor comprises the task certificate information representing the task signer; and
generating an output by the mixer to the screen, wherein the output comprises the task certificate information representing the task signer to be displayed on a designated area of the screen when the task is being executed by the secure processor.

### Claim 22 (depends on 14)

The method of claim 14, wherein the task certificate information representing the task signer comprises an identity image.

### Claim 23 (depends on 14)

The method of claim 14, further comprising excluding input received from the non-secure zone from the output to the screen when the task is being executed by the secure processor.