Secure storage of protected data in a wireless communication device

A method of operating a wireless communication device, wherein the wireless communication device comprises first processing circuitry and second processing circuitry, the first processing circuitry having a shared secret encryption key hardcoded therein, the first processing circuitry configured to execute a radio frequency (RF) operating system and the second processing circuitry configured to execute an open operating system and a plurality of user applications executing on the open operating system, wherein the first processing circuitry is linked to a secure memory device inaccessible to the second processing circuitry, and wherein the shared secret encryption key is shared with a communication service provider associated with the wireless communication device, the method comprising:

• in the RF operating system, receiving protected data comprising critical parameters encrypted by the communication service provider using the shared secret encryption key, decrypting the protected data using the shared secret encryption key, and storing the protected data in the secure memory device without encryption;
• in the open operating system, receiving a request for the protected data from one of the user applications and transferring the request to the RF operating system;
• and
• in the RF operating system, in response to the request for the protected data, retrieving the protected data from the secure memory device, encrypting the protected data with the shared secret encryption key to generate encrypted protected data, and transferring the encrypted protected data to the open operating system for delivery to the one of the user applications associated with the request.

A computer apparatus to operate a wireless communication device, wherein the wireless communication device comprises first processing circuitry and second processing circuitry, the first processing circuitry having a shared secret encryption key hardcoded therein, the first processing circuitry configured to execute a radio frequency (RF) operating system and the second processing circuitry configured to execute an open operating system and a plurality of user applications executing on the open operating system, wherein the first processing circuitry is linked to a secure memory device inaccessible to the second processing circuitry, and wherein the shared secret encryption key is shared with a communication service provider associated with the wireless communication device, the computer apparatus comprising:

• the RF operating system configured, when executed by the first processing circuitry, to direct the first processing circuitry to receive protected data comprising critical parameters encrypted by the communication service provider using the shared secret encryption key, decrypt the protected data using the shared secret encryption key, and store the protected data in the secure memory device without encryption;
• the open operating system configured, when executed by the second processing circuitry, to direct the second processing circuitry to receive a request for the protected data from one of the user applications and transfer the request to the RF operating system;
• the RF operating system configured to direct the first processing circuitry to, in response to the request for the protected data, retrieve the protected data from the secure memory device, encrypt the protected data with the shared secret encryption key to generate encrypted protected data, and transfer the encrypted protected data to the open operating system for delivery to the one of the user applications associated with the request;
• and
• at least one non-transitory computer-readable storage medium storing the RF operating system and the open operating system.