# US 8,751,811 B2 · Integrated circuit and system for installing computer code thereon > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,751,811 B2 - Document ID: US8751811B2 - Status: Granted - Kind: B2 - Application number: 12/967,349 - Filed: 2010-12-14 - Published: 2011-06-16 - Granted: 2014-06-10 - Earliest claimed: 2009-12-14 - Assignees: NXP B.V. - Applicants: Hauke Meyn; Ralf Malzahn - Inventors: Hauke Meyn; Ralf Malzahn - Web page: https://patentgrep.com/patent/US8751811B2 ## CPC - H04L 9/3247: {involving digital signatures} - G06F 21/57: Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities - G06F 21/72: in cryptographic circuits - G11B 20/00086: {Circuits for prevention of unauthorised reproduction or copying, e.g. piracy (indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G11B: INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER (recording measured values in a way that does not require playback through a transducer G01D9/00; recording or playback apparatus using mechanically marked tape, e.g. punched paper tape, or using unit records, e.g. punched or magnetically marked cards G06K; transferring data from one type of record carrier to another G06K1/18; circuits for coupling output of reproducer to radio receiver H04B1/20; gramophone pick-ups or like acoustic electromechanical transducers or circuits therefor H04R) ## Abstract An integrated circuit 100 is provided, which is configured for authentication itself and technical information concerning the integrated circuit or its installed software to an external computing device 200. The integrated circuit 100 comprises a signer 130 for producing a signature over the information and a challenge using a cryptographic signing key, and a communication module 110 for providing the information and the signature to the computing device 200. In response to receiving the information and the authentication, the computing device 200 may install new application code on the integrated circuit. After the installation, the integrated circuit may authenticate information concerning the new application code to other computing devices. The integrated circuit is advantageously a multiple application smart card, since it allows application providers to obtain trust in the multiple application smart card without having a relationship with its manufacturer. ## Claims ### Claim 1 An integrated circuit comprising: a communication circuit configured to provide technical information representing capabilities of the integrated circuit to a computing device external to the integrated circuit; a combiner configured to obtain a cryptographic challenge and combine the technical information with the cryptographic challenge, wherein the combiner concatenates the technical information and the challenge; a key storage comprising a cryptographic signing key; and a signer configured to produce a signature over the combined technical information and the cryptographic challenge using the cryptographic signing key and provide the signature to the external computing device; and an application receiver configured to receive, after the signature is provided to the external computing device, application computer code, install the received application computer code in a code memory of the integrated circuit to enable the integrated circuit with a new functionality, and receive application information from the external computing device, wherein the combiner is configured to combine a further challenge with the application information after the application computer code has been installed. ### Claim 2 (depends on 1) The integrated circuit as in claim 1, wherein the communication circuit is further configured to receive the cryptographic challenge from the external computing device. ### Claim 3 (depends on 1) The integrated circuit as in claim 1, wherein the integrated circuit comprises a clock and the cryptographic challenge comprises a timestamp obtained from the clock. ### Claim 4 (depends on 1) The integrated circuit as in claim 1, wherein the integrated circuit comprises a counter, the cryptographic challenge comprises a nonce obtained from the counter, and the counter is configured to increase a count when the nonce is obtained. ### Claim 5 The integrated circuit as in any one of the preceding claims, wherein the integrated circuit comprises: a code memory configured to store computer code; and a processor configured to execute code stored in the code memory, wherein the combiner is configured to combine the cryptographic challenge with the technical information representing the capabilities of the computer code. ### Claim 6 (depends on 1) The integrated circuit as in claim 1, wherein the cryptographic signing key is a private key from a public-private key pair. ### Claim 7 (depends on 6) The integrated circuit as in claim 6, wherein providing the technical information comprises: providing a certificate to the external computing device; and authenticating the certificate, wherein the certificate comprises a public key from the public-private key pair. ### Claim 8 (depends on 1) A system configured to install application computer code, the system comprising the integrated circuit and the external computing device of claim 1, wherein the external computing device is configured to use a signature verifier configured to verify the signature. ### Claim 9 (depends on 8) The system of claim 8, wherein the signing key is a symmetric key and the signature verifier is configured to contact a third party server to verify the signature. ### Claim 10 (depends on 8) The system of claim 8, wherein the external computing device comprises: 1. an information comparator configured to compare the technical information received from the integrated circuit with a predetermined set of required technical capabilities, wherein the external computing device is configured to allow installing application computer code based on the comparison. ### Claim 11 A method comprising: 2. obtaining a cryptographic challenge combining technical information representing capabilities of an integrated circuit to a computing device external to the integrated circuit with the cryptographic challenge, wherein the technical information and the challenge are concatenated; 3. producing a signature over the combined technical information and the cryptographic challenge using a cryptographic signing key; 4. providing the signature to the external computing device; 5. receiving application computer code after the providing of the signature to the external computing device; 6. installing the received application computer code in a code memory of the integrated circuit to enable the integrated circuit with a new functionality; 7. receiving application information from the external computing device; and 8. combining a further challenge with the application information after the application computer code has been installed. ### Claim 12 (depends on 11) The method of claim 11, comprising: verifying the signature by the external computing device: and installing the application computer code on the integrated circuit. ### Claim 13 (depends on 1) The integrated circuit of claim 1, wherein the combiner queries components of the integrated circuit for the technical information concerning their capabilities. ### Claim 14 (depends on 1) The integrated circuit of claim 1, wherein the combiner obtains the technical information from an operating system of the integrated circuit. ### Claim 15 (depends on 1) The integrated circuit of claim 1, wherein the combiner computes a hash function over the challenge and the technical information. ### Claim 16 (depends on 10) The integrated circuit of claim 10, wherein the information comparator is integrated in an application uploader of the external computing device. ### Claim 17 (depends on 1) The integrated circuit of claim 1, wherein the combiner is configured to only use the technical information stored in a Read Only Memory (ROM). ### Claim 18 (depends on 1) The integrated circuit of claim 1, wherein the communication circuit comprises connector pads. ### Claim 19 (depends on 1) The integrated circuit of claim 1, wherein the key storage is a Read Only Memory (ROM).