Programmable Cryptography Module Security Policy Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current programmable cryptography modules, such as the Sierra series, require extensive custom software development and NSA certification for each embedment, leading to high manpower and financial costs, as well as time-consuming processes for security policy implementation and algorithm upgrades.
Innovation Solution
A system and method for creating security applications for programmable cryptography modules, which includes a security policy software module and mirror security policy data structures, allowing for the generation of a binary security policy file that can be compared and approved without re-signing the cryptographic system, enabling flexible security policy delivery and streamlined certification processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If custom module software is created for each Sierra embedment and NSA software evaluation/certification is performed for every module, then security requirements are met, but manpower resource costs and time for each embedment increase significantly
Solution Approach 1:
The patent segments the security policy from the cryptographic module software. The security policy is extracted as a separate, configurable component that can be modified without requiring re-certification of the entire module. This allows the core cryptographic functionality to remain certified while enabling flexible security policy updates for different embedments.
Solution Approach 2:
The patent performs NSA certification on the base cryptographic module in advance, before specific embedment applications are developed. This preliminary certification establishes a foundation that can support multiple security policies without requiring repeated full certification processes, significantly reducing manpower and time costs for subsequent embedments.
2Reliability
If NSA software evaluation and certification is performed for every module embedment, then security approval is obtained, but the process becomes time-consuming and costly
Solution Approach 1:
The patent divides the certification process into two stages: comprehensive certification of the base module performed once, and simplified validation of security policies performed subsequently for each embedment. This segmentation eliminates the need for repeated full certification cycles, reducing time loss while maintaining security standards.
Solution Approach 2:
The base cryptographic module undergoes complete NSA evaluation and certification in advance, establishing a pre-approved foundation. Subsequent embedments only require validation of their specific security policies against this certified base, dramatically accelerating the approval process while ensuring continued compliance.
3Adaptability or versatility
If custom software development is required for each embedment, then specific security policies are implemented, but NRE and manpower resource costs increase
Solution Approach 1:
The patent separates security policy configuration from core software development. Security policies are defined as independent, parameterizable settings that can be customized for each embedment without requiring custom software development. This segmentation enables high adaptability at minimal cost, as only policy parameters need to be configured rather than entire software systems developed.
Solution Approach 2:
The patent creates a universal base software platform that can support multiple different security policies through configuration rather than custom development. This single multi-functional platform serves various embedment requirements, eliminating the need for separate custom software development for each application and significantly reducing NRE and manpower costs.
4Adaptability or versatility
If algorithm updates are required for customers, then cryptographic functionality is improved, but reevaluation by NSA is required increasing costs
Solution Approach 1:
The patent segments algorithm updates into two categories: core cryptographic algorithms that require NSA reevaluation, and security policy parameters that can be updated without reevaluation. This allows most algorithm improvements and adjustments to be made through policy configuration rather than requiring costly and time-consuming NSA reevaluation processes.
Solution Approach 2:
The base module is certified with a framework that anticipates future algorithm updates. This preliminary certification includes approval for controlled algorithm modifications within defined parameters, allowing customers to receive algorithm updates without triggering full NSA reevaluation, thus reducing update costs while maintaining security integrity.
Data Source
AI summary
A system and method of the present invention creates a security application for a programmable cryptography module, which includes a security policy software module and mirror security policy data structures. A processor determines a security policy for an implementation specific application as a set of rules governing cryptographic security policy functions of the security policy software module. The processor is operative for generating a binary security policy file representative of the security policy and comparing the binary security policy file with the mirror security policy data structures to determine a violation of the security policy or a successful comparison.