Secure Key Storage via Model-Specific Registers and Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The security of keys used in cryptographic algorithms is compromised due to the lack of secure storage solutions, particularly in regulated industries where sensitive information needs to be protected from unauthorized access and tampering.
Innovation Solution
A data processing device and method that utilizes a processor with model-specific registers to securely store symmetric wrapping keys, executing encryption and decryption instructions in a hardware-acceleration instruction-set to enhance key security, and encrypts unused keys for external storage to manage scalability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If symmetric wrapping keys are stored in processor registers, then key security is improved, but storage capacity is limited
Solution Approach 1:
The patent segments key storage into two parts: frequently used symmetric wrapping keys are stored in secure processor registers (MSRs), while less frequently used keys are stored externally in encrypted form. This segmentation allows the system to maintain high security for active keys while achieving scalable storage capacity through external storage solutions.
2Quantity of substance
If more symmetric wrapping keys are stored in external storage, then storage scalability is improved, but key security may be compromised
Solution Approach 1:
The system performs preliminary encryption of symmetric wrapping keys using the processor's private key before storing them externally. This preliminary security measure ensures that even if external storage is compromised, the keys remain protected. When needed, keys are decrypted in-memory and used temporarily, maintaining security while achieving scalable storage.
3Adaptability or versatility
If symmetric wrapping keys are encrypted and stored externally, then storage flexibility is improved, but access speed may decrease
Solution Approach 1:
The patent applies different storage qualities to different keys based on their usage patterns. Frequently accessed symmetric wrapping keys are kept in secure processor registers for fast access, while less frequently used keys are stored externally in encrypted form. This local differentiation optimizes both access speed for active keys and storage flexibility for the overall key management system.
Data Source
AI summary
A data processing method includes the following steps: a processor receives a symmetric wrapping key, and when an application needs to use a user private key, the processor executes an encryption and decryption instruction in a hardware-acceleration instruction-set. The encryption and decryption instruction is configured to apply the symmetric wrapping key to decrypt a wrapped private key that corresponds to the application to obtain the user private key. In addition, the symmetric wrapping key is stored in a model specific register of the processor.