利索-全球专利检索

  1. 登录
  2. 注册
发明公开
CN103348357A 敏感数据处理装置及方法 有权

敏感数据处理装置及方法
摘要：
本发明涉及一种处理敏感数据的装置，该装置包括用于形成一个第一可信区的至少一个第一集成电路以及用于形成一个第二可信区的至少一个第二集成电路；其中该第一集成电路包括至少一个被适配成用于处理敏感数据的安全处理单元；该第二集成电路在其可信区中包括用于存储敏感数据的至少一个持久性存储区，其中该第二集成电路与该第一集成电路是分开的；该第一集成电路的处理单元被适配成将这种敏感数据从该第一可信区传送至该第二可信区，用于将所述数据安全地存储在该第二可信区的持久性存储区中；该第二集成电路被适配成用于将存储在其持久性存储区中的该敏感数据传送至该第一可信区的处理单元；其中该第一和第二集成电路包括基于一种对称密码方法使用一个安全密钥用于安全地传送该敏感数据的密码装置；并且其中该第二集成电路包括用于启动一个新密钥生成来替代这个激活安全密钥的装置。
摘要（英）：

The invention is related to a device for handling sensitive data comprising at least one first integrated circuitry for forming a first trust zone and at least one second integrated circuitry for forming a second trust zone wherein the first integrated circuitry comprises at least one secure processing unit adapted for processing sensitive data, the second integrated circuitry comprises at least one persistent memory area within its trust zone for storing the sensitive data wherein the second integrated circuitry is separated from the first integrated circuitry, the processing unit of the first integrated circuitry is adapted to transfer the sensitive data from the first trust zone to the second trust zone for securely storing said data in the persistent memory area of the second trust zone, the second integrated circuitry is adapted to transfer the sensitive data stored in its persistent memory area to the processing unit of the first trust zone, wherein the first and the second integrated circuitry comprise crypto means for securely transferring the sensitive data based on a symmetrical crypto method using a secure key, and wherein the second integrated circuitry comprises means for initiating a new key generation to replace the active secure key.

公开/授权文献
0/0