公开(公告)号：US10949546B2

公开(公告)日：2021-03-16

申请号：US16023401

申请日：2018-06-29

Applicant: Samsung Electronics Co., Ltd.

Inventor： Young-Jin Chung ,  Jae-Chul Park ,  Ki-Seok Bae ,  Jong-Hoon Shin ,  Yun-Ho Youm ,  Hye-Soo Lee ,  Hong-Mook Choi ,  Jin-Su Hyun

IPC: G06F21/60 ,  G06F21/78 ,  G06F21/85 ,  H04L9/06 ,  G06F21/57 ,  H04L9/32 ,  H04L9/08

Abstract: A security device includes a secure processor, a mail box, a cryptographic intellectual property (IP), a secure direct memory access (DMA) circuit, and an internal memory. The secure processor provides an isolated execution environment. The mail box transfers a request from a CPU to the secure processor. The cryptographic IP performs one or more secure operations, including a signature certification operation, an encryption/decryption operation, and an integrity verification operation, on secure data within the isolated execution environment and without intervention of the CPU. The secure DMA circuit controls the one or more secure operations within the isolated execution environment, wherein only the secure processor is configured to control the secure DMA circuit. The internal memory stores the secure data on which the one or more secure operations are performed. The cryptographic IP includes a DMA circuit configured to control data access to an external storage.

公开(公告)号：US10749672B2

公开(公告)日：2020-08-18

申请号：US15585253

申请日：2017-05-03

Applicant: SAMSUNG ELECTRONICS CO., LTD.

Inventor： Heonsoo Lee ,  Jaechul Park ,  Jonghoon Shin ,  Youngjin Chung ,  Hong-Mook Choi

IPC: H04L9/08 ,  G06F12/06 ,  G06F13/40 ,  G06F21/78 ,  G06F12/14

Abstract: A path for transmitting encrypted data is completely separated from a path for transmitting unencrypted data. To this end, a virtual secure memory is created on an address space. If a central processing unit (CPU) writes data in the virtual secure memory, hardware stores the data in a specific area of a dynamic random access memory (DRAM) after automatically encrypting the data. In the case where the CPU intents to read data, the hardware sends the data to the CPU after automatically decrypting the data read from a specific area of the DRAM.

公开(公告)号：US10291390B2

公开(公告)日：2019-05-14

申请号：US15915789

申请日：2018-03-08

Applicant: Samsung Electronics Co., Ltd.

Inventor： Hong-Mook Choi ,  Yun-Ho Youm ,  Yong-Ki Lee ,  Jin-Su Hyun

IPC: H04L9/00 ,  H04L9/06

Abstract: An endecryptor and a control device are provided. The endecryptor includes a first SBOX configured to replace first input data with first substitution data, a transformation unit configured to replace the first input data with second substitution data and an output terminal configured to output encrypted or decrypted output data based on the first and second substitution data.

公开(公告)号：US20170346628A1

公开(公告)日：2017-11-30

申请号：US15585253

申请日：2017-05-03

Applicant: SAMSUNG ELECTRONICS CO., LTD.

Inventor： Heonsoo Lee ,  Jaechul Park ,  Jonghoon Shin ,  Yougjin Chung ,  Hong-Mook Choi

IPC: H04L9/08 ,  G06F12/14

CPC classification number: H04L9/0861 ,  G06F12/063 ,  G06F12/1408 ,  G06F13/40 ,  G06F13/404 ,  G06F21/78 ,  G06F2212/1052 ,  H04L9/0838

Abstract: A path for transmitting encrypted data is completely separated from a path for transmitting unencrypted data. To this end, a virtual secure memory is created on an address space. If a central processing unit (CPU) writes data in the virtual secure memory, hardware stores the data in a specific area of a dynamic random access memory (DRAM) after automatically encrypting the data. In the case where the CPU intents to read data, the hardware sends the data to the CPU after automatically decrypting the data read from a specific area of the DRAM.

公开(公告)号：US09721113B2

公开(公告)日：2017-08-01

申请号：US14657006

申请日：2015-03-13

Applicant: SAMSUNG ELECTRONICS CO., LTD.

Inventor： Ju-Hee Park ,  Seok-Min Park ,  Dong-Jin Park ,  Heon-Soo Lee ,  Hong-Mook Choi ,  Sang-Hyun Park

IPC: H04L29/06 ,  G06F21/62 ,  G06F21/72 ,  G06F21/80 ,  G06F21/85

CPC classification number: G06F21/6218 ,  G06F21/72 ,  G06F21/805 ,  G06F21/85 ,  G06F2221/2107

Abstract: A host controller that controls a storage device includes an encryption unit that is selectively configured in response to file encryption information and disk encryption information to encrypt data. The encryption unit encrypts the data using a file encryption operation based on the file encryption information and/or a disk encryption operation based on the disk encryption information.

公开(公告)号：US20170054550A1

公开(公告)日：2017-02-23

申请号：US15227499

申请日：2016-08-03

Applicant: Samsung Electronics Co., Ltd.

Inventor： Hong-Mook Choi ,  Heonsoo LEE ,  Sang-Hyun PARK

IPC: H04L9/06 ,  H04L9/30 ,  G06F21/60

CPC classification number: G06F21/602 ,  H04L9/0637 ,  H04L2209/12 ,  H04L2209/34

Abstract: A method for encryption, decryption, or encryption and decryption of data in a crypto device having at least one crypto core may include: generating a tweak value corresponding to block data, which is placed at a random position from which the encryption, decryption, or encryption and decryption starts, from among sequential block data; and/or performing the encryption, decryption, or encryption and decryption from the block data using the tweak value. A method for encryption, decryption, or encryption and decryption of block data may include: generating a tweak value corresponding to the block data at a random position; and/or performing the encryption, decryption, or encryption and decryption of the block data using the tweak value.

Abstract translation: 一种用于在具有至少一个密码核心的加密装置中对数据进行加密，解密或加密和解密的方法可以包括：生成对应于块数据的调整值，该块数据位于随机位置，加密，解密或 从顺序块数据开始加密和解密; 和/或使用调整值从块数据执行加密，解密或加密和解密。 块数据的加密，解密或加密和解密方法可以包括：在随机位置生成对应于块数据的调整值; 和/或使用调整值来执行块数据的加密，解密或加密和解密。

公开(公告)号：US08861719B2

公开(公告)日：2014-10-14

申请号：US13759476

申请日：2013-02-05

Applicant: Samsung Electronics Co., Ltd.

Inventor： Yong-Ki Lee ,  Hong-Mook Choi ,  Jong-Hoon Shin

IPC: H04L9/00 ,  H04L9/28 ,  G06F7/76 ,  G06F7/58 ,  H04L9/06

CPC classification number: G06F7/582 ,  G06F7/766 ,  H04L9/0631 ,  H04L2209/08 ,  H04L2209/24

Abstract: Generating a random permutation by arranging a sequence N numbers in a matrix, performing random arrangement operations on the rows of the matrix to generate an intermediary matrix, performing random arrangement operations on the columns of the intermediary matrix to generate a second intermediary matrix, and arranging the N numbers of the second intermediary matrix as a rearranged sequence of the N numbers.

Abstract translation: 通过在矩阵中排列序列N个数来生成随机排列，对矩阵的行执行随机排列操作以生成中间矩阵，对中间矩阵的列执行随机排列操作以生成第二中间矩阵，并且布置 作为N个数的重排顺序的第二中间矩阵的N个数。