公开(公告)号：US20160226661A1

公开(公告)日：2016-08-04

申请号：US14610832

申请日：2015-01-30

Applicant: QUALCOMM Incorporated

Inventor： Ron KEIDAR

IPC: H04L9/08 ,  H04L9/06 ,  H04L9/32

CPC classification number: H04L9/0838 ,  G06F21/74 ,  H04L9/06 ,  H04L9/0618 ,  H04L9/0869 ,  H04L9/0894 ,  H04L9/3231 ,  H04L63/0471

Abstract: A of a method of securely transferring information between execution environments includes: receiving, at a crypto engine, original plaintext from a first execution environment; obtaining a first cryptographic key by the crypto engine, the first cryptographic key being retained in memory such that the first cryptographic key is associated with the first execution environment and a second execution environment that is not the first execution environment; encrypting the original plaintext by the crypto engine using the first cryptographic key to produce encrypted information, and storing the encrypted information in an intermediate storage location; obtaining, at the crypto engine, the encrypted information from the intermediate storage location; decrypting the encrypted information by the crypto engine using the first cryptographic key to produce reconstituted plaintext; and making the reconstituted plaintext available to the second execution environment by the crypto engine.

Abstract translation: 在执行环境之间安全地传送信息的方法A包括：在密码引擎处从第一执行环境接收原始明文; 由所述密码引擎获取第一加密密钥，所述第一加密密钥保留在所述存储器中，使得所述第一加密密钥与所述第一执行环境相关联，所述第二执行环境不是所述第一执行环境; 通过加密引擎使用第一加密密钥加密原始明文以产生加密信息，并将加密信息存储在中间存储位置; 在所述密码引擎处获取来自所述中间存储位置的加密信息; 使用所述第一加密密钥对所述加密引擎解密所述加密信息，以产生重构的明文; 并且通过密码引擎使重构的明文可用于第二执行环境。

公开(公告)号：US20150269385A1

公开(公告)日：2015-09-24

申请号：US14220937

申请日：2014-03-20

Applicant: QUALCOMM INCORPORATED

Inventor： Ron KEIDAR

IPC: G06F21/60

CPC classification number: G06F21/79 ,  H04L9/004

Abstract: Disclosed is an apparatus and method to protect against key tampering. A computing device may include a cryptoprocessor that is configured to: write a first word including a first portion of a key; and write a plurality of subsequent words each including a portion of the key. If a same word is written more than once, the key is reset and not validated.

Abstract translation: 公开了一种防止钥匙篡改的装置和方法。 计算设备可以包括密码处理器，其被配置为：写入包括密钥的第一部分的第一个字; 并且写入多个后续字，每个后续字包括该键的一部分。 如果同一个字写入不止一次，则该键被重置并且未被验证。