# US 9,436,940 B2 · Embedded secure element for authentication, storage and transaction within a mobile terminal > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,436,940 B2 - Document ID: US9436940B2 - Status: Granted - Kind: B2 - Application number: 13/544,893 - Filed: 2012-07-09 - Published: 2014-01-09 - Granted: 2016-09-06 - Earliest claimed: 2012-07-09 - Assignees: Maxim Integrated Products, Inc. - Applicants: Christophe Tremlet - Inventors: Christophe Tremlet - Web page: https://patentgrep.com/patent/US9436940B2 ## CPC - G06Q 20/3227: {using secure elements embedded in M-devices} - G06F 21/32: using biometric data, e.g. fingerprints, iris scans or voiceprints - G09C 1/00: Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system (cryptographic typewriters G09C3/00) - H04L 2209/12: Details relating to cryptographic hardware or logic circuitry - H10W 90/754: {between a chip and a stacked insulating package substrate, interposer or RDL} - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G09C: CIPHERING OR DECIPHERING APPARATUS FOR CRYPTOGRAPHIC OR OTHER PURPOSES INVOLVING THE NEED FOR SECRECY - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H10W: GENERIC PACKAGES, INTERCONNECTIONS, CONNECTORS OR OTHER CONSTRUCTIONAL DETAILS OF DEVICES COVERED BY CLASS H10 ## Abstract Various embodiments of the present invention relate to incorporating an embedded secure element into a mobile device, and more particularly, to systems, devices and methods of incorporating the embedded secure element into a mobile device for identity authentication, data storage and processing in trusted transactions. These trusted transactions require a high security level to protect sensitive data or programs in bank account management, purchasing orders, contactless payment, passport verification, and many other high-security applications. The secure element will provide a root of trust such that that applications running on the mobile device are executed in a controlled and trusted environment. In addition to conventional password or encryption protection, alternative security features are introduced from both software and hardware levels based on the embedded secure element. Therefore, the security level of the mobile device is not only enhanced, but also may potentially exceed that of the conventional POS terminals. ## Claims ### Claim 1 A secure element, comprising: a secure memory that stores a sensitive data; a secure processor that receives a request for a trusted transaction and processes the request, the trusted transaction being associated with an operation selected from writing the sensitive data into the secure memory and reading the sensitive data from the secure memory, the secure memory being coupled to and accessed by the secure processor only; a verification/authentication (V/A) unit, coupled to the secure processor, the V/A unit verifying and authenticating the trusted transaction and a user that makes the request as the secure processor receives the request for the trusted transaction; and wherein the secure element is embedded in a mobile device and authorized to process the trusted transaction, and an initial credential, provided by an entity that is different from a manufacturer of the mobile device and provides a user specific credential encrypted with the initial credential to authenticate the trusted transaction, is programmed into the secure element before the secure element is assembled into the mobile device and wherein the secure memory is a component separate from a memory that is coupled to and accessed by only a central processing unit of the mobile device. ### Claim 2 (depends on 1) The secure element according to claim 1, further comprising: a cryptographic processor, coupled between the secure processor and the secure memory, the cryptographic processor encrypting the sensitive data prior to writing the sensitive data into the secure memory and decrypting the sensitive data prior to reading the sensitive data from the secure memory. ### Claim 3 (depends on 1) The secure element according to claim 1, wherein the secure processor is coupled to a device selected from a group consisting of: the central processing unit that implements conventional functions within the mobile device, the central processing unit and the secure processor being coupled via a secure link; and a near field communication (NFC) modem, the NFC modem being coupled to an antenna and allowing the secure element to communicate through radio with other external NFC devices. ### Claim 4 (depends on 1) The secure element according to claim 1, wherein the secure element is a generic secure element that is not associated with a particular user or entity when the mobile device is delivered to the user, and the initial credential is used to authorize the entity to program the user specific credential and the V/A to verify authenticity of secure application software before its installation on the mobile device. ### Claim 5 (depends on 1) The secure element according to claim 1, wherein the secure element is a specialized secure element that is configured particularly for a high-security application when the mobile device is delivered to the user, the high-security application authorizing the user specific credential according to the initial credential. ### Claim 6 (depends on 1) The secure element according to claim 1, further comprising: a key storage, coupled to the cryptographic processor, the key storage providing a cryptographic key to the cryptographic processor to process the sensitive data; and a tamper monitor, coupled to the secure processor and the key storage, the tamper monitor detecting tamper attempts ranging from breaking through a physical anti-tamper security mesh to identifying a disguised fake identity use. ### Claim 7 (depends on 1) The secure element according to claim 1, wherein tamper attempts are constantly monitored, regardless of the mobile device being switched on and off. ### Claim 8 (depends on 1) The secure element according to claim 1, wherein the secure processor is coupled to a security indicator, the security indicator showing a security level on real time and sending warnings to the user once a tamper attempt is detected by the tamper monitor. ### Claim 9 (depends on 1) The secure element according to claim 1, wherein the V/A unit is coupled to a biometric sensor that collects a biometric data of the user, such that the user is verified and authenticated within the V/A unit based on the biometric data, and wherein the biometric data is selected from a group consisting of finger print, retina configuration, and voice feature. ### Claim 10 A secure element, comprising: an interface to a processor, the processor implementing conventional functions for a mobile device and being configured with at least one privileged mode of program execution; a secure processor coupled to the processor via a secure link; a power management integrated circuit (PMIC), coupled to the processor, the PMIC implementing conventional power management functions and comprising a storage area where a cryptographic key and sensitive data are stored; wherein the cryptographic key and the sensitive data are provided to the processor such that in the at least one privileged mode of program execution, the processor is enabled to implement a trusted operation that is selected from a group consisting of identification (ID) document reading, identification (ID) document emulation, financial transaction, and user authentication; and wherein an initial credential is programmed into the secure element in a factory before the secure element is assembled into a mobile device in the factory and is provided by an entity that is different from a manufacturer of the mobile device and provides a user specific credential encrypted with the initial credential to authenticate the trusted operation. ### Claim 11 (depends on 10) The secure element of claim 10, wherein tamper attempts are constantly monitored, regardless of the mobile device being switched on and off. ### Claim 12 A method of processing a trusted transaction in a secure element, comprising: receiving a request for the trusted transaction, the trusted transaction being associated with an operation selected from a write operation and a read operation, the sensitive data being written into a secure memory in a write operation and read from the secure memory in a read operation; processing the request for the trusted transaction; verifying and authenticating the trusted transaction and a user that makes the request; processing the sensitive data when the trusted transaction and the user are verified, wherein the sensitive data is encrypted and written into the secure memory in the write operation, and read from the secure memory and decrypted in the read operation; wherein the secure element is embedded in a mobile device and authorized to process the trusted transaction, and an initial credential, provided by an entity that is different from a manufacturer of the mobile device, is programmed into the secure element in a factory before the secure element is assembled into the mobile device in the factory; and wherein the request includes a user specific credential that is encrypted with the initial credential and generated by the entity. ### Claim 13 (depends on 12) The method according to claim 12, wherein the secure element is coupled to a device selected from a group consisting of: a central processing unit that implements conventional functions within the mobile device, the central processing unit and the secure processor being coupled via a secure link; and a near field communication (NFC) modem, the NFC modem being coupled to an antenna and allowing the secure element to communicate through radio with other external NFC devices. ### Claim 14 (depends on 12) The method according to claim 12, wherein the secure element is a generic secure element that is not associated with a particular user or entity when the mobile device is delivered to the user, and the initial credential is used to authorize the entity to program the user specific credential and to verify authenticity of secure application software before its installation on the mobile phone. ### Claim 15 (depends on 12) The method according to claim 12, wherein the secure element is a specialized secure element that is configured particularly for a high-security application when the mobile device is delivered to the user. ### Claim 16 (depends on 12) The method according to claim 12, further comprising the step of monitoring tamper attempts ranging from breaking through a physical anti-tamper security mesh to identifying a disguised fake identity use. ### Claim 17 (depends on 12) The method according to claim 12, wherein the secure element is coupled to a security indicator, the security indicator showing a security level on real time and sending warnings to the user once a tamper attempt is detected. ### Claim 18 (depends on 12) The method according to claim 12, wherein the user is verified and authenticated using a biometric sensor that collects a biometric data, and the biometric data is selected from a group consisting of finger print, retina configuration, and voice feature. ### Claim 19 (depends on 1) The secure element according to claim 1, wherein the secure element is disposed between top and bottom ball grid array (BGA) packages of a power management integrated circuit (PMIC) chip in the mobile device and each of the top and bottom BGA packages includes a substrate having a physical anti-tamper security mesh. ### Claim 20 (depends on 12) The method according to claim 12, wherein the secure element is disposed between top and bottom ball grid array (BGA) packages of a power management integrated circuit (PMIC) chip within the mobile device and each of the top and bottom BGA packages includes a substrate having a physical anti-tamper security mesh.