Claims Analysis
Total Claims: 26
Claim 1
Independent Claim
240 words
A terminal security system for processing received
signals that include encrypted data, said system
comprising an information processor having means (11) for receiving
said encrypted data and means (14, 24) for processing
one of said received signals using a working key and said system further comprising means (28) for
generating said working key characterized in that said information processor (10) comprises a receptacle
(26) for receiving a replaceable security element (12); that said information processor (10) comprises means
(22, 26) for communicating at least a portion of said
received encrypted data to said replaceable security
element (12); that said security element (12) comprises means (34) for
decrypting said encrypted data; that said means (28) for generating said working key is
part of said security element (12) and generates said
working key according to said decrypted data; that said security element (12) comprises means (34) for
encrypting said generated working key with a secret key
(A(M)) of said information processor (10); that said security element (12) comprises means (36, 26)
for communicating said generated working key encrypted
with said secret key to said information processor (10); and that said information processor (10) comprises means
(22, 24) for receiving said working key encrypted with
said secret key and communicated by said security
element (12), for decrypting said working key encrypted
with said secret key and for communicating said
decrypted working key to said means (14) for processing
one of said received signals.
Claim 2
Dependent Claim
42 words
A system in accordance with claim 1 wherein
said information processor (10) comprises: means (14, 20, 24) for at least partially decrypting
said received data; and means (22, 26) for communicating at least partially
decrypted data to said replaceable security element
(12).
Claim 3
Dependent Claim
36 words
A system in accordance with claim 1 or 2 wherein said
information processor comprises: means (14, 20, 24) for further encrypting said data
before communicating it to said security element (12)
with said secret key (A(M)).
Claim 4
Dependent Claim
64 words
A system in accordance with claim 3 wherein: said secret key (A(M)) comprises a first authentication
key assigned to said information processor (10); said means (14, 20, 24) for further encrypting encrypts
said data under said first authentication key before
communicating it to said security element (12); and said security element (12) includes means (34) for
decrypting said data with said first authentication key.
Claim 5
Dependent Claim
52 words
A system in accordance with claim 4 wherein: said security element (12) includes a second
authentication key (A(C)) assigned thereto; and said means (14, 20, 24) for further encrypting encrypts
said data under said second authentication key (A(C))
and said first authentication key (A(M)) before
communicating it to said security element (12).
Claim 6
Dependent Claim
44 words
A system in accordance with claim 3 wherein: said security element (12) includes an authentication
key (A(C)) assigned hereto; and said means (14, 20, 24) for further encrypting encrypts
said data under said authentication key (A(C)) before
communicating it to said security element (12).
Claim 7
Independent Claim
99 words
A system in accordance with any of the preceding claims
wherein: said data is received by the information processor (10)
encrypted under a first unit key (U(M)) assigned to said
information processor (10) and a second unit key (U(C))
assigned to said security element (12); said information processor (10) partially decrypts said
data with said first unit key (U(M)); the partially decrypted data is communicated to said
security element (12) still encrypted under said second
unit key (U(C)); and said security element (12) decrypts said data with said
second unit key (U(C)) for use in generating said
working key.
Claim 8
Independent Claim
72 words
A system in accordance with any of the preceding claims
wherein said security element (12) further comprises: an authentication key (A(C)) assigned thereto; and means (34) for encrypting said working key with said
authentication key in addition to said secret key for
communication to said information processor (10)
wherein said information processor (10) includes means
(14, 20, 24) for decrypting said working key with both
said authentication key and said secret key.
Claim 9
Dependent Claim
54 words
A system in accordance with claim 8 wherein said
security element (12) includes: a unit key (U(C)) assigned thereto; means (26, 36) for receiving data from said information
processor (10) encrypted under said unit key; and means (34) for decrypting said data with said unit key
(U(C)) for use in generating said working key.
Claim 10
Dependent Claim
59 words
A system in accordance with claim 9 wherein: said information processor (10) comprises means (14, 20,
24) for encrypting said data under said first
authentication key (A(M)) before communicating it to
said security element (12); and said security element (12) includes means (34) for
decrypting said data with both said unit key (U(C)) and
said first authentication key (A(M)).
Claim 11
Dependent Claim
63 words
A system in accordance with claim 10 wherein: said information processor (10) comprises means (14, 20,
24) for encrypting said data under said second
authentication key (A(C)) before communicating it to
said security element (12); and said security element (12) includes means (34) for
decrypting said data with said unit key (U(C)), said
first authentication key (A(M)) and said second
authentication key (A(C)).
Claim 12
Dependent Claim
58 words
A system in accordance with claim 9 wherein: said information processor (10) comprises means (14, 20,
24) for encrypting said data under said second
authentication key (A(C)) before communicating it to
said security element (12); and said security element (12) includes means (34) for
decrypting said data with said unit key (U(C)) and said
second authentication key (A(C)).
Claim 13
Dependent Claim
134 words
A security element for use in combination with an
information processor (10) at a terminal, said security
element comprising: means (28) for generating a working key for use by said
information processor in processing a signal; characterized in that said security element (12) is replaceably connectable
with said information processor (10); that said security element (12) comprises means (26, 36)
for receiving a secret key from said information
processor; that said security element (12) comprises means (34) for
encrypting said working key with said secret key and an
authentication key (A(C)) associated with said
replaceable security element (12); that said security element (12) comprises means (36, 26)
for communicating the encrypted working key to said
information processor (10) and that said working key is generated according to data
received from said information processor (10).
Claim 14
Dependent Claim
48 words
A security element in accordance with claim 13 further
comprising: means (26, 36) for receiving data encrypted under a unit
key (U(C)) assigned to said security element (12), and means (34) for decrypting the encrypted data with said
unit key (U(C)) for use in generating said working key.
Claim 15
Dependent Claim
49 words
A security element in accordance with claim 14 wherein
said data is received encrypted under said unit key
(U(C)) and said secret key, and said decrypting means
(34) decrypt the encrypted data with both said unit key
(U(C)) and said secret key for use in generating said
working key.
Claim 16
Dependent Claim
56 words
A security element in accordance with claim 15 wherein
said data is received encrypted under said unit key
(U(C)), said secret key, and said authentication key
(A(C)), and said decrypting means (34) decrypt the
encrypted data with said unit key (U(C)), said secret
key and said authentication key (A(C)) for use in
generating said working key.
Claim 17
Dependent Claim
50 words
A security element in accordance with claim 14 wherein
said data is received encrypted under said unit key
(U(C)) and said authentication key (A(C)), and said
decrypting means (34) decrypt the encrypted data with
said unit key (U(C)) and said authentication key (A(C))
for use in generating said working key.
Claim 18
Dependent Claim
40 words
A security element in accordance with claim 13 further
comprising: means (26, 36) for receiving data encrypted under said
secret key, and means (34) for decrypting the encrypted data with said
secret key for use in generating said working key.
Claim 19
Dependent Claim
48 words
A security element in accordance with claim 18 wherein
said data is received encrypted under said secret key
and said authentication key (A(C)) and said decrypting
means (34) decrypt the encrypted data with said secret
key and said authentication key (A(C)) for use in
generating said working key.
Claim 20
Dependent Claim
42 words
A security element in accordance with claim 13 further
comprising: means (36, 26) for receiving data encrypted under said
authentication key (A(C)), and means (34) for decrypting the encrypted data with said
authentication key (A(C)) for use in generating said
working key.
Claim 21
Dependent Claim
143 words
An information processor, for use in processing a signal
that includes encrypted data, said processor comprising: means (11) for receiving said encrypted data; characterized in that said information processor (10) is used in combination
with a replaceable security element (12); that said information processor (10) comprises an
interface (22, 26) for receiving said replaceable
security element; that said information processor (10) comprises
means (14, 20, 24) for partially decrypting said
encrypted received data and means (14, 22, 26) for communicating at least a portion
of the partially decrypted, received data to said
security element (12) for use in generating a working
key; wherein said security element processes said partially
decrypted received data to generate said working key for
use by said information processor in processing said
signal and encrypts said working key according to a
secret key (A(M)) of said information processor (10).
Claim 22
Dependent Claim
28 words
An information processor in accordance with claim 21
comprising: means (14, 20, 24) for further encrypting said partially
decrypted data before communicating it to said security
element (12).
Claim 23
Dependent Claim
29 words
An information processor in accordance with claim 22
wherein said partially decrypted data is further
encrypted under said secret key (A(M)) before
communicating it to said security element (12).
Claim 24
Dependent Claim
37 words
An information processor in accordance with claim 22 or
23 wherein: said partially decrypted data is further encrypted under
an authentication key (A(C)) assigned to said security
element (12) before communicating it to said security
element (12).
Claim 25
Dependent Claim
74 words
An information processor in accordance with any of
claims 21 to 24 wherein: data is received encrypted under a first unit key (U(M))
assigned to said information processor and a second unit
key (U(C)) assigned to said security element (12); said information processor (10) partially decrypts said
data with said first unit key (U(M)); and the partially decrypted data is communicated to said
security element (12) still encrypted under said second
unit key (U(C)).
Claim 26
Dependent Claim
72 words
An information processor in accordance with any of
claims 21 to 25 comprising: means (22, 26) for receiving said working key from said
replaceable security element (12), said working key
being encrypted by said replaceable security element
with a first authentication key (A(M)) assigned to said
information processor (10) and a second authentication
key (A(C)) assigned to said security element (12), and means (14, 20, 24) for decrypting said encrypted working
key.