Secure storage of protected data in a wireless communication device

摘要

A wireless communication device comprises first processing circuitry configured to execute an RF operating system and second processing circuitry configured to execute an open operating system, wherein the first processing circuitry is linked to a secure memory device inaccessible to the second processing circuitry. The RF operating system is configured to receive protected data and store the protected data in the secure memory device. The open operating system is configured to receive a request for the protected data from one of a plurality of user applications and transfer the request to the RF operating system. In response to the request for the protected data, the RF operating system is configured to retrieve the protected data from the secure memory device, encrypt the protected data, and transfer the encrypted protected data to the open operating system for delivery to the one of the user applications associated with the request.

主权项

1. A wireless communication device comprising:
first processing circuitry having a shared secret encryption key hardcoded therein, the first processing circuitry configured to execute a radio frequency (RF) operating system, wherein the first processing circuitry is linked to a secure memory device inaccessible to second processing circuitry and wherein the shared secret encryption key is shared with a communication service provider associated with the wireless communication device; the second processing circuitry configured to execute an open operating system and a plurality of user applications executing on the open operating system; the RF operating system configured to receive protected data comprising critical parameters encrypted by the communication service provider using the shared secret encryption key, decrypt the protected data using the shared secret encryption key, and store the protected data in the secure memory device without encryption; the open operating system configured to receive a request for the protected data from one of the user applications and transfer the request to the RF operating system; and in response to the request for the protected data, the RF operating system is configured to retrieve the protected data from the secure memory device, encrypt the protected data with the shared secret encryption key to generate encrypted protected data, and transfer the encrypted protected data to the open operating system for delivery to the one of the user applications associated with the request.