SECURITY MODULE, SECURITY SYSTEM AND MOBILE STATION

Abstract: The present invention relates to implementing services and devices affording a high level of data security. In particular, the present invention relates to a security module, a security system and a mobile station for using these. The invention makes it possible to use standard devices easily and without any modifications to implement banking services and other services requiring a high level of data security. In the invention, a security module is formed which uses a standardized local interface for the transmission of the messages to be transmitted. Messages can be transmitted in real time without any delay caused by the telecommunication network.

Description: SECURITY MODULE, SECURITY SYSTEM AND MOBILE STATION FIELD OF THE INVENTION The present invention relates to a security module. In particular, the invention concerns a new and improved security module and a security system for processing and transmitting various messages requiring a high degree of data security. The invention also concerns a mobile station utilizing the security mod- ule. BACKGROUND OF THE INVENTION In mobile communication networks, e. g. GSM networks (GSM, Global System for Mobile communica- tions) , heavy encryption is used in conjunction with the transmission of speech over the radio link between the mobile station and the base station. Besides speech communication, communication using text or data messages has increased. With a rising service level, services relying on text or data communication have gained ground. Text communication can be utilized in various service functions, in paying for services, etc. At present, a source of difficulties in en- crypting messages is the fact that, in mobile telephones consistent with the current standard concerning mobile communication, it is not possible to make any changes to facilitate encryption because the user interfaces used in the telephones are manufacturer- specific. The only component that is sufficiently standardized and sufficiently open in respect of encryption is the subscriber identity module (SIM) . Mobile telephones consistent with a current mobile communication standard, such as the GSM stan- dard, do not directly provide a possibility of en- crypting text communication via mobile stations. Text communication can be used to implement services, such as bank services, which require a high level of data security. However, services requiring a high level of data security cannot become popular before sufficient encryption of message communication is possible. A further problem with the use of a mobile communication network is that the message transmission services implemented in it are not necessarily real- time services and the transmission of messages may take time. This may be a problem e.g. when a user wants to pay for his/her shopping at the cash register of a store. In this situation, even a slight delay in message transmission will significantly retard the execution of the payment transaction. At present, no part of the mobile communication standard supports local communication between a mobile station and a cash register terminal. A group of the world's leading enterprises in telecommunication and information technology has developed a technology that makes it possible to establish a wireless connection between a mobile telephone and e.g. a portable computer. This technology is designated as "Bluetooth" and it is based on short-range radio technology, which can be used to interconnect many types of terminals. A more detailed description of this technology can be found e.g. on the WWW page www . bluetooth . com. The Bluetooth technology enables devices to be interconnected via a short-range radio link. By using the Bluetooth technology, it is possible to establish a connection e.g. between a mobile station and a portable computer without cumbersome cabling. Printers, work stations, telefax devices, keyboards and virtually any digital apparatus may be parts of a Bluetooth system or network. The technology forms a universal bridge to existing data networks and peripher- als and provides means for forming small private groups via interconnected devices without a fixed network infrastructure. In addition, encryption and authentication can be used in the communication be- tween the devices, e.g. so that only a given user's mobile telephone may be used in connection with a given portable computer. Previously known is also a smart card that enables reliable personal authentication and genuine signature. Its sphere of application is unlimited. Examples of possible applications are a national electronic identity card (EID) , encryption of files, telecommunication and electronic mail, a means for signing documents, an electronic currency, driver's license, ballot, and so on. Although the smart card can be used in the ways described above, the problem remains that the smart card still requires a separate reading device for communicating with the smart card. Moreover, the smart card alone is incapable of communicating over any telecommunication network, which means that updating information e.g. using short messages is impossible. In addition, even if it were possible to con- nect a mobile station locally to a cash register terminal using Bluetooth technology and thus utilize the mobile station as a payment instrument, there is still the problem of encrypted and secure data communication needed for payment transactions. In prior art, no general-purpose security module is known which could be connected to different cash register and automated systems, mobile stations or other portable devices and which would be able to safely communicate e.g. with a host device on the one hand and a service provider's device on the other hand utilizing e.g. the Bluetooth technology using encryp- tion so as to meet the high data security requirements imposed by banks and authorities. The object of the present invention is to eliminate the problems referred to above. A specific object of the invention is to disclose a new type of general-purpose security module which can be used in many kinds of application environments for establishing an encrypted and secure local connection. A further object of the invention is to disclose a security system which provides means for encrypted data communication between user and service provider. A further object of the invention is to disclose a new type of mobile station which can be us-ed for local communication with a service provider's terminal at a high level of data security. Using this solution together with the security module, it is possible to implement a general-purpose security apparatus which can be connected and used in any environment. An additional object of the invention is to disclose a device the manufacturer of which can be directly certified as a so-called reliable third party. This obviates the need to have an encryption property separately added by a reliable third party to a device manufactured by a given manufacturer, such as a mobile telephone manufacturer. BRIEF DESCRIPTION OF THE INVENTION The present invention concerns a security module comprising connection means for connecting the security module to a terminal, such as a mobile station, cash register terminal, on-line banking terminal, portable computer, telephone or any corresponding terminal. The security module is intended to be a gen- eral-purpose module to be connected to telecommunication networks and telecommunication terminals which will make it possible to implement the required en- cryption operations for the implementation of applications requiring a high level of data security. According to the invention, the security module comprises encryption means for encrypting elec- tronic data transfer effected via the security module, decrypting encrypted information and for implementing an electronic signature. The encryption means preferably comprise a processor which encrypts, decrypts and implements an electronic signature. In addition, said means comprise a memory connected to the processor for the storage of the keys and parameters it needs. Further, according to the invention, the security module comprises a first connection interface for connecting the security module to an external de- vice for electronic data transfer and a power source for supplying power to power consuming security module components, i.e. the processor and the memory. The power source may also be replaced by the power source of the host device to which the security module is connected, by supplying power to the security module directly from the host device. The connection interface can be implemented using e.g. Bluetooth technology, which is a technology known in itself and the standardization of which has not yet been completed. Anyway, we shall not describe it here as it is previously known. In addition, the security module may comprise a smart card unit arranged to implement smart card functions with the security module. The smart card unit can use the connection interface for communication with external devices, such as cash register terminals, on-line banking terminals and equivalent to use and download electronic money. Thus, the invention makes the use of a smart card easier and more attrac- tive to the client and the user. The security module can be integrated e.g. with the power source of a mobile station, in which case the security module preferably comprises a frame fitted to correspond to the shapes of e.g. the power source of the mobile station and a connector attached to the frame and used to connect the security module electrically to the mobile station in place of its power source. In this case, the security module is connected to the mobile station in order to supply power to it and to implement communication by means of the mobile station. The security module can now be op- erated using the keypad of the mobile station. The invention also concerns a security system comprising a service provider's terminal, such as an on-line banking terminal, cash register, vending machine or equivalent, and a service user's termina-1, such as a mobile station. In the system, the terminals are electrically interconnected via a preselected communication link, e.g. using the Bluetooth technology. According to the invention, the security system comprises a first security module connected to the service provider's terminal and a second security module connected to the service user's terminal. By means of the security modules, the communication between the terminals is encrypted and decrypted. The security modules preferably comprise encryption means, a first interface and a power source, as described above in conjunction with the security module. The security system may also comprise a service provider' s server electrically connected to the service provider's terminal. This connection can be established via a telecommunication network, such as a GSM network or some other suitable network. The first security module can be further connected via the telecommunication network to the service provider's terminal to update functions executed via the service user's terminal and to save them to the server. This refers to so-called clearing functions used to trans- fer electronic money paid for services or shopping by the service user to the service provider's account. The invention also concerns a mobile station, which here means a terminal known in itself, compris- ing a keypad, a display, a radio unit and a power source. A preferred example of this kind of mobile station is a GSM-compatible terminal or GSM mobile telephone (GSM, Global Standard for Mobile Communication) . According to the invention, the mobile station comprises a security module integrated with the power source and comprising encryption means and a first connection interface, as described above in conjunction with the security module. The security modurle is preferably arranged to process information transmitted by the mobile station over a telecommunication network and/or via a local communication interface of the mobile station. The security module may communicate with the mobile station and/or external terminal by using Bluetooth technology. As compared with prior art, the present invention has the advantage that existing mobile telephones currently used need not necessarily be modified in any way in order to use them for secure communica- tion. A further advantage of the invention is that the security module is a general-purpose device which can be connected to almost any terminal in which encrypted data transfer is needed. In addition, the invention makes it possible to implement secure systems which can be used by service providers to provide services requiring a high level of data security, such as on-line banking services . LIST OF ILLUSTRATIONS In the following, the invention will be described by the aid of preferred examples of its em- bodiments with reference to the attached drawing, in which Fig. 1 presents a security module according to the present invention, Fig. 2 presents a preferred security system according to the present invention; and Fig. 3 presents a preferred mobile station according to the present invention comprising an integrated security module as provided by the invention. DETAILED DESCRIPTION OF THE INVENTION The security module presented in Fig. 1 comprises connection means 1 for connecting the security module to a terminal SP, MS. The terminal may be a mo- bile station, a cash register terminal, an on-line banking terminal or any corresponding device used to implement applications requiring a high level of data security. Moreover, the security module comprises encryption means 2 for encrypting electronic data trans- fer in the security module, decrypting encrypted information and generating an electronic signature when required. To implement a local network interface or equivalent, the security module further comprises a first connection interface IFl allowing the security module to be connected to a terminal e.g. via a radio link for electronic data transfer. In conjunction with the connection interface it is possible to provide a so-called Bluetooth component, as presented in Fig. 1, for implementing the actions required by the technology in question. The security module is also provided with a power source 3, which may be a chargeable accumulator, a mains transformer or equivalent, for supplying power to the security module components that need electric power. The encryption means presented in Fig. 1 further comprise a processor 4, which can be designed and optimized especially for encryption functions and which encrypts and decrypts and implements an electronic signature, and a memory 5 connected to the processor for the storage of the keys and parameters needed by the processor. The personal key security module user, parameters of the encryption algorithm used and other data needed can be stored in the memory. A preferred example of the encryption algorithm is the RSA method, but other unsymmetrical algorithms may also be used, depending on the application. Furthermore, the security module comprises a smart card component SC for implementing smart card functions by means of the security module. The smart card component can utilize the other components of the security module, e.g. the interface IFl for telecommunication connections. The processor 4 or the smart card component SC of the security module further comprises a clock for synchronizing and clocking the functions of the security module. The clock is synchronized with the clock of the device to which the security module is connected. Another possibility is that the clock is synchronized with the clock of the Bluetooth system. The frame 6 of the security module has been fitted to conform to the shapes of the power source of a mobile station. In addition, the frame 6 is provided with a connector 7 for connecting the security module to a mobile station. The power and data communication between the security module and the mobile station can be connected via the connector 7. In this embodiment, the power source of the security module substantially corresponds to the power source of the mobile station in respect of capacity and is therefore also chargeable. The security module can be easily connected to the mobile station both mechanically and electrically. Fig. 2 presents an example of the security system of the invention. The security system presented in Fig. 2 comprises a service provider's terminal SP, in this example an on-line banking terminal, and a service user's terminal MS, in this example a GSM mobile telephone, which are electrically connected to each other via a preselected communication link. In this example, the communication link is established using Bluetooth technology. The security system presented in Fig. 2 additionally comprises a first security module SMI con- nected to the service provider' s terminal and a second security module SM2 connected to the service user's terminal, these security modules being arranged to process information transmitted via a telecommunication link between the terminals. Appropriate keys and other parameters are placed in the memories of the security modules SMI and SM2. Public keys can be loaded beforehand e.g. from special public key servers reserved for this purpose. In addition, the security system presented in Fig. 2 comprises a service provider's server 8. The first security module is connected to the service provider's server 8 via a telecommunication network, in this example a telephone network. Thus, functions executed by the service user' s terminal can be updated and saved to the server. On the other hand, the service provider's terminal SP and server 8 may be physically the same thing. Fig. 3 is a diagrammatic representation of a preferred mobile station according to the invention. The mobile station in Fig. 3 comprises a keypad 9, a display 10, a radio unit 11 and a power source 12 and naturally other necessary components that are not mentioned here. Integrated with the power source 12 is a security module SM, which comprises, as above, encryp- tion means 2 for encrypting electronic data transfer effected via the security module, decrypting encrypted information and generating an electronic signature when required, a first connection interface IFl for connecting the security module to a mobile station MS and/or and external device SP to allow electronic data transfer. The security module SM is preferably arranged to process information transmitted by means of the mobile station via a telecommunication network and/or a local interface 13 of the mobile station. Thus, the security module is also able to utilize the data transmission properties of the mobile station e.g. in such manner that the security module first establishes a connection to the mobile station e.g. using Bluetooth technology and further to the service provider' s terminal SP, using the same technology. Referring to Fig. 2, a preferred embodiment of the use of the security system, security module and mobile station will now be described. The user wants to load money from his bank account to his electric cash device, i.e. mobile station. The user starts the mobile station e.g. in bank mode, whereupon the security module is activated and beings contacting other devices supporting the Bluetooth technology in the environment. This can be implemented in the manner described in the Bluetooth descriptions. Once the secu- rity module SMI connected to the user's mobile station MS and its cash card or smart card component SC detect an on-line banking terminal SP, they initialize a secure connection with the banking terminal by sending their own public key and receiving the bank' s public key. Thus, the user's security module SMI and the online banking terminal's security module SM2 are able to use encryption when exchanging messages. Using the keypad 9 and display 10 of the mobile station MS, the user gives the amount of money to be loaded, and this information is sent in an encrypted form to the banking terminal SP. After this, the banking terminal asks the user to give his electronic signature, which the user gives via his security module SMI. After the on-line banking terminal SP has approved the cash load operation, it sends the specified sum to the user's smart card SC via the security modules SMI and SM2 and updates the bank server 8 with this transaction. Although not described here, it is obvious that, with appropriate modifications, the above-described function can be applied in various service and vending operations. The invention is not restricted to the examples of its embodiments described above, but many variations are possible within the scope of the inventive idea defined in the claims.

Claims: CLAIMS 1. Security module comprising connection means (1) for connecting the security module to a terminal device (SP) , such as a mobile station, cash reg- ister terminal, on-line banking terminal or equivalent, characteri zed in that the security module comprises encryption means (2) for encrypting electronic data transfer effected via the security module, decrypting encrypted information and implementing an electronic signature; a first connection interface (IFl) for connecting the security module to an external device to allow electronic data transfer, and a power source (3) for supplying power to the security module components that need power. 2. Security module as defined in claim 1, characteri zed in that the encryption means comprise a processor (4) which encrypts, decrypts and implements an electronic signature, and a memory (5) connected to the processor for the storage of keys and parameters needed by it. 3. Security module as defined in claim 1 or 2, characterized in that the security mod- ule comprises a smart card component (SC) arranged to implement smart card functions via the security module. 4. Security module as defined in any one of the preceding claims 1 - 3, characteri zed in that the first connection interface is implemented using Bluetooth technology. 5. Security module as defined in any one of the preceding claims 1 - 4, characteri zed in that the security module comprises a frame fitted to conform to the shapes of the power source of the a mobile station, and a connector (7) attached to the frame for connecting the security module substantially in the place of the power source of the mobile station and supplying power from the power source (3) to the mobile station. 6. Security system comprising a service pro- vider's terminal (SP) and a service user's terminal (MS) electrically interconnected via a preselected communication link, characteri zed in that the security system comprises a first security module (SMI) connected to the service provider's terminal and a second security module (SM2) connected to the service user's terminal, said security modules being arranged to process information transmitted via the communication link between the terminals; and that the first and second security modules preferably comprise encryption means (2) for encrypting electronic data transfer effected via security module, decrypting encrypted information and implementing an electronic signature; a first interface (IFl) for connecting the security module to a terminal for electronic data transfer; and a power source (3) for supplying power to the security module components that need power. 7. Security system as defined in claim 6, characteri zed in that the service provider's terminal (SP1) is an on-line banking terminal, cash register, vending machine or equivalent. 8. Security system as defined in claim 6 or 7, characteri zed in that the service user's terminal (SP2) is a mobile station, portable computer or equivalent. 9. Security system as defined in any one of the preceding claims 6 - 8, characteri zed in that the security system comprises a service pro- vider's server (8); and that the first security module is connected via the telecommunication network to the service provider's server (8) for updating the func- tions executed by the service user' s terminal and saving them to the server. 10. Mobile station comprising a keypad (9), a display (10), a radio unit (11) and a power source (12) , cha ract e r i z ed in that the mobile station comprises a security module (SM) integrated with the power source and comprising encryption means (2) for encrypting electronic data transfer effected via the security module, decrypting encrypted information and implementing an electronic signature; and a first interface (IFl) for connecting the security module to the mobile station (MS) and/or an external device (SP) to allow electronic data trarts- fer. 11. Mobile station as defined in claim 10, cha ra ct e r i zed in that the security module (SM) has been arranged to process the information transmitted by means of the mobile station via a tele- communication network and/or a local interface (13) of the mobile station. 12. Mobile station as defined in claim 10 or 11, cha ra cte ri z ed in that the security module (SM) has been arranged to communicate with the mo- bile station (MS) and/or the service provider's terminal (SP) by using Bluetooth technology.

Inventors: VATANEN HARRI, VATANEN, HARRI
Applicants: SONERA OY, VATANEN HARRI, VATANEN, HARRI
Application year: 1999
Main classification: H04Q7
IPC codes: G06F12, G06F21, G06K19, G09C1, H04L9, H04W88