Protection against rerouting a communication channel of a telecommunication device having an NFC circuit and a secure data circuit

A device, comprising:

• a secure data circuit;
• a microprocessor;
• and
• a router communicatively coupled between the secure data circuit and the microprocessor, wherein the router, in operation, responds to receipt of a message directed to the secure data circuit by:
• determining whether the received message includes an instruction to reassign an end of a communication pipe associated with a communication pipe identifier from a port of the router to a port of another circuit of the device;
• and
• responding to a determination that the received message includes the instruction to reassign the end of the communication pipe associated with the communication pipe identifier from the port of the router to the port of another circuit of the device by:
• comparing the instruction to a parameter associated with the communication pipe identifier and stored in a filter table, the parameter indicating whether the instruction requesting reassignment of the end of the associated communication pipe to the another circuit is authorized;
• and
• blocking the received message from reaching the secure data circuit of the device or passing the received message to the secure data circuit based on the comparison.

A method, comprising:

• determining whether a message received via a router of a telecommunication device is directed to a secure data circuit of the telecommunication device;
• and
• responding to a determination that the received message is directed to the secure data circuit by:
• identifying a communication pipe identifier and an instruction code associated with the received message;
• determining whether the instruction code includes an instruction to reassign an end of a communication pipe associated with the communication pipe identifier from a port of the router to a port of another circuit of the telecommunication device;
• and
• responding to a determination that the instruction code includes the instruction to reassign the end of the communication pipe associated with the communication pipe identifier from the port of the router to the port of another circuit of the telecommunication device by:
• comparing the instruction code to a parameter associated with the communication pipe identifier and stored in a filter table, the parameter indicating whether the instruction requesting reassignment of the end of the associated communication pipe to the another circuit is authorized;
• and
• blocking the received message from reaching the secure data circuit of the telecommunication device or passing the received message to the secure data circuit hbased on the comparison.