Back to results
US 9,177,161 B2Granted
Systems and methods for secure access modules
AssigneeMaxim Integrated Products, Inc.
InventorsYann Yves Rene Loisel, Bhartendu Mishra
Life of this patent
Estimating the term…
Abstract
Various embodiments of the invention provide a strong logical link between a SAM and a secure terminal to combat SAM counterfeiting and misuse. The link is based on mutual validation methods using firmware and cryptographic protocols. Once the SAM is removed from a terminal that it has been tied to, or the link is broken by a tampering attempt of a potential intruder, the SAM and/or the terminal are disabled.
Claims18
A secure transaction system comprising:
- a secure element;
- a first memory coupled to the secure element, the first memory is configured to hold a first secret information;
- a terminal configured to couple to the secure element, the terminal comprises a second memory that is configured to hold a second secret information, wherein the secure element and the terminal communicate over a first cryptographic protocol at a start-up condition and a second cryptographic protocol at regular operation;
- and
- a battery coupled to the terminal, the battery is configured to provide energy to the second memory.
2 more elements
A method to establish a secure pairing, the method comprising:
- establishing communication between first and second secure elements;
- exchanging a secret between the first and second secure elements via a cryptographic protocol;
- mutually verifying the secret;
- and
- modifying the secret within a secure memory to indicate that a successful secure pairing between the first and second secure elements.
2 more elements
A method to perform a secure transaction, the method comprising:
- exchanging, at a start-up condition, a secret between a first secure element and a second secure element via a first cryptographic protocol;
- using the first cryptographic protocol to mutually verify the secret;
- communicating over a second cryptographic protocol;
- receiving and storing user data;
- identifying the user data;
- validating a transaction using the user data;
- and
- if validation fails, erasing the secret from the second secure element.
5 more elements
Dependencies are inferred from the claim text.