Secure Processor Key Encryption for Fast Memory Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing processor-based systems face challenges in maintaining the security of cryptographic keys, as they are vulnerable to unauthorized access due to advanced software attacks, compromising the encryption of stored data.
Innovation Solution
Implementing a secure processor circuit that generates and encrypts client and data keys using secure key-encryption keys, storing them in encrypted form in memory to prevent unauthorized access, ensuring quick access for high-speed data processing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If cryptographic keys are stored in memory protected by software-controlled security levels, then key access speed is improved, but security against software attacks deteriorates
Solution Approach 1:
The patent introduces a hardware security module (HSM) as an intermediary between the software application and the cryptographic keys. The HSM is a dedicated hardware device that stores cryptographic keys in a secure environment isolated from the main processor memory. This intermediary structure allows the system to maintain both fast key access through dedicated hardware interfaces and strong security protection by isolating keys from software-controlled memory spaces, thereby resolving the contradiction between access speed and security.
2Reliability
If cryptographic keys are stored in encrypted form in memory, then security is improved, but access complexity increases
Solution Approach 1:
The patent implements self-service key access mechanisms where the hardware security module automatically handles encryption and decryption operations without requiring complex software intervention. When a key is needed by software, the HSM autonomously decrypts the encrypted key using hardware-based cryptographic operations and provides the plain key through a controlled interface. This self-service approach maintains strong security through encrypted storage while simplifying access complexity by automating the cryptographic operations within the dedicated hardware module.
Data Source
AI summary
Data stored in a memory circuit may be encrypted using client keys that need to be available for high-speed data processing and yet held securely to avoid unauthorized access to the encrypted data. A secure processor circuit in a processor-based system obtains client keys associated with client applications and generates secure key-encryption keys that are used to encrypt the client keys so the client keys can be securely stored in the memory circuit. In some examples, data keys for encrypting data blocks associated with the client application may be generated from the client key, encrypted by a data key-encryption key generated in the secure processor circuit, and stored in the memory circuit. In such examples, because the client keys and data keys are encrypted while in memory, they are safer from software attacks on the memory circuit, which improves the security of the encrypted data blocks.