DATA SECURITY
    1.
    发明申请
    DATA SECURITY 有权
    数据安全

    公开(公告)号:US20100215173A1

    公开(公告)日:2010-08-26

    申请号:US12600068

    申请日:2008-05-19

    IPC分类号: H04L9/28

    摘要: A system 100 for increasing data security comprises predetermined system data 104 to be protected. A cryptographic unit 108 is used for cryptographic processing of respective blocks of the content data in dependence on respective keys. A key provider 106 determines the respective key used for the processing of a respective block of the content data in dependence on a respective portion 112 of the predetermined system data 104, the portion not including all the predetermined system data, wherein different respective portions of the predetermined system data are selected for the respective blocks of content data. A server system 200 for increasing data security comprises an output 202 for providing processed content data 110 to a client system 100, the client system comprising predetermined system data 104 to be protected. The server system 200 also comprises a cryptographic unit 208 and a key provider 206.

    摘要翻译: 用于增加数据安全性的系统100包括要保护的预定系统数据104。 密码单元108用于根据各个密钥对内容数据的各个块的密码处理。 密钥提供器106根据预定系统数据104的相应部分112确定用于处理内容数据的相应块的各个密钥,该部分不包括所有预定系统数据,其中不同的部分 为各个内容数据块选择预定的系统数据。 用于增加数据安全性的服务器系统200包括用于向客户端系统100提供经处理的内容数据110的输出202,该客户系统包括要保护的预定系统数据104。 服务器系统200还包括密码单元208和密钥提供者206。

    Data security
    2.
    发明授权
    Data security 有权
    数据安全

    公开(公告)号:US09025765B2

    公开(公告)日:2015-05-05

    申请号:US12600068

    申请日:2008-05-19

    IPC分类号: H04L9/28 G06F21/52 G06F21/10

    摘要: A system 100 for increasing data security comprises predetermined system data 104 to be protected. A cryptographic unit 108 is used for cryptographic processing of respective blocks of the content data in dependence on respective keys. A key provider 106 determines the respective key used for the processing of a respective block of the content data in dependence on a respective portion 112 of the predetermined system data 104, the portion not including all the predetermined system data, wherein different respective portions of the predetermined system data are selected for the respective blocks of content data. A server system 200 for increasing data security comprises an output 202 for providing processed content data 110 to a client system 100, the client system comprising predetermined system data 104 to be protected. The server system 200 also comprises a cryptographic unit 208 and a key provider 206.

    摘要翻译: 用于增加数据安全性的系统100包括要保护的预定系统数据104。 密码单元108用于根据各个密钥对内容数据的各个块进行密码处理。 密钥提供器106根据预定系统数据104的相应部分112确定用于处理内容数据的相应块的各个密钥,该部分不包括所有预定的系统数据,其中不同的各部分 为各个内容数据块选择预定的系统数据。 用于增加数据安全性的服务器系统200包括用于向客户端系统100提供经处理的内容数据110的输出202,该客户系统包括要保护的预定系统数据104。 服务器系统200还包括密码单元208和密钥提供者206。

    UPDATING CRYPTOGRAPHIC KEY DATA
    3.
    发明申请
    UPDATING CRYPTOGRAPHIC KEY DATA 审中-公开
    更新CRYPTOGRAPHIC KEY DATA

    公开(公告)号:US20100303231A1

    公开(公告)日:2010-12-02

    申请号:US12600057

    申请日:2008-05-14

    IPC分类号: H04N7/167 H04L9/06 H04L9/08

    摘要: A system 100 for updating cryptographic key data 120 comprises a key input 106 for receiving sequential key updates 114; and a key data updater 108 for changing a portion (116) of the cryptographic key data in response to a received one of the sequential key updates (114), the portion not including all the cryptographic key data, wherein different respective portions of the cryptographic key data are selected for respective ones of the sequential key updates. The system further comprises a content input 104 for receiving content data 112 to be processed; and a cryptographic unit 110 for cryptographic processing of the content data in dependence on the key data to obtain processed content data 118. The content input is arranged for receiving a content data stream, successive portions of the content data stream being encrypted based on successive keys corresponding to the successive key updates.

    摘要翻译: 用于更新加密密钥数据120的系统100包括用于接收顺序密钥更新114的密钥输入106; 以及密钥数据更新器108,用于响应于所接收到的顺序密钥更新(114)中的一个来更改密码密钥数据的一部分(116),该部分不包括所有密码密钥数据,其中密码的不同部分 为顺序密钥更新中的各个选择密钥数据。 该系统还包括用于接收要处理的内容数据112的内容输入104; 以及密码单元110,用于根据密钥数据对内容数据进行密码处理,以获得处理后的内容数据118.内容输入被安排用于接收内容数据流,内容数据流的连续部分是基于连续键加密的 对应于连续的密钥更新。

    CRYPTOGRAPHIC METHOD FOR A WHITE-BOX IMPLEMENTATION
    4.
    发明申请
    CRYPTOGRAPHIC METHOD FOR A WHITE-BOX IMPLEMENTATION 审中-公开
    用于白盒实施的CRYPTOGRAPHIC方法

    公开(公告)号:US20100080395A1

    公开(公告)日:2010-04-01

    申请号:US12514922

    申请日:2007-11-09

    IPC分类号: H04L9/28 H04L9/08 H04L9/00

    摘要: A cryptographic method is implemented in a white-box implementation thereof. The method comprises applying a plurality of transformations (802) each replacing an input word by an output word, and applying a diffusion operator (804) to a concatenation of a plurality of the output words for diffusing information represented by the output words among the output words. A key (806) to the cryptographic method comprises information representing the diffusion operator. The diffusion operator satisfies a property that a change of one bit in an input to the diffusion operator corresponds to a change of more than one bit in an output of the diffusion operator.

    摘要翻译: 密码方法在其白盒实现中实现。 该方法包括:应用多个变换(802),每个变换用输出字代替输入字;以及将扩散运算符(804)应用于多个输出字的级联,以扩散由输出字中的输出字表示的信息 话。 加密方法的密钥(806)包括表示扩散算子的信息。 扩散算子满足扩散算子的输入中的一位的变化对应于扩散算子的输出中多于一位的变化的性质。

    TAMPER RESISTANCE OF A DIGITAL DATA PROCESSING UNIT
    5.
    发明申请
    TAMPER RESISTANCE OF A DIGITAL DATA PROCESSING UNIT 有权
    数字数据处理单元的防篡改

    公开(公告)号:US20090254759A1

    公开(公告)日:2009-10-08

    申请号:US12307931

    申请日:2007-06-27

    IPC分类号: H04L9/06 G06F21/24

    摘要: A system for increasing a tamper resistance of a digital data processing unit, comprises a first unit (901) comprising processing means (906) for processing the received digital data in dependence on values looked up in at least one look-up table (916) based on values in the received digital data. The system further comprises a second unit (902) comprising means (912) for computing at least one value for inclusion in the digital data causing the first unit (901) to look up at least one predetermined value in the look-up table (916) when processing the digital data. It comprises an inserter (910) for including the at least one value in the digital data, and an output (908) for transmitting the digital data to the first unit.

    摘要翻译: 一种用于增加数字数据处理单元的防篡改性的系统,包括第一单元(901),其包括处理装置(906),用于根据在至少一个查找表(916)中查找的值来处理接收到的数字数据, 基于接收的数字数据中的值。 该系统还包括第二单元(902),其包括用于计算包含在数字数据中的至少一个值的装置(912),使第一单元(901)在查找表(916)中查找至少一个预定值 )处理数字数据时。 它包括用于将数字数据中的至少一个值包括的插入器(910)和用于将数字数据发送到第一单元的输出(908)。

    Method and system for obfuscating a cryptographic function
    7.
    发明授权
    Method and system for obfuscating a cryptographic function 有权
    用于模糊加密功能的方法和系统

    公开(公告)号:US08479016B2

    公开(公告)日:2013-07-02

    申请号:US12282175

    申请日:2007-02-28

    IPC分类号: G06F21/00

    摘要: A method of protecting an integrity of a data processing system. The method comprises determining (902) a data string to be protected, an integrity of the data string being an indication of the integrity of the data processing system. Computing (904) a set of parameters representing a predetermined data processing function, using a redundancy in the set of parameters to incorporate the data string into a bit representation of the set of parameters. Enabling (906) the system to process data according to the set of parameters. The set of parameters represents at least part of a cryptographic algorithm including a cryptographic key. The set of parameters represents a network of look-up tables. The network of look-up tables comprises a plurality of look-up tables of a white-box implementation of a data processing algorithm. The data processing algorithm comprises a cryptographic algorithm.

    摘要翻译: 一种保护数据处理系统完整性的方法。 该方法包括确定(902)要保护的数据串,数据串的完整性是数据处理系统的完整性的指示。 计算(904)表示预定数据处理功能的一组参数,使用所述参数集合中的冗余将所述数据串并入所述一组参数的位表示。 启用(906)系统根据参数集处理数据。 这组参数表示包括加密密钥的加密算法的至少一部分。 该组参数表示查找表的网络。 查找表的网络包括数据处理算法的白盒实现的多个查找表。 数据处理算法包括加密算法。

    WHITE-BOX CRYPTOGRAPHIC SYSTEM WITH CONFIGURABLE KEY USING INTERMEDIATE DATA MODIFICATION
    8.
    发明申请
    WHITE-BOX CRYPTOGRAPHIC SYSTEM WITH CONFIGURABLE KEY USING INTERMEDIATE DATA MODIFICATION 有权
    使用中间数据修改的具有可配置键的白盒CRYPTOGRAPHIC系统

    公开(公告)号:US20120093313A1

    公开(公告)日:2012-04-19

    申请号:US13378891

    申请日:2010-06-17

    IPC分类号: H04L9/00

    摘要: A white-box cryptographic system (600) is presented for performing a key-dependent cryptographic operation, such as AES. The system comprises a network of a plurality of look-up tables (640) arranged for collectively performing the cryptographic operation, the network being adapted for a particular cryptographic key. By sending a key substitute (664) which represents to the network a further cryptographic key a key translation unit can arrange the effect of the network on the cryptographic operation such that is adapted for a further cryptographic key. In this way the system can be updated to use the further key instead of the particular key.

    摘要翻译: 呈现白箱加密系统(600)以执行诸如AES的密钥相关密码操作。 该系统包括被布置为共同执行密码操作的多个查找表(640)的网络,该网络适于特定的密码密钥。 通过发送代表网络的密钥替换(664),密钥转换单元可以安排网络对加密操作的影响,从而适用于另外的密码密钥。 以这种方式,可以更新系统以使用其他键而不是特定的键。

    METHOD AND SYSTEM FOR OBFUSCATING A CRYPTOGRAPHIC FUNCTION
    9.
    发明申请
    METHOD AND SYSTEM FOR OBFUSCATING A CRYPTOGRAPHIC FUNCTION 有权
    用于形成克隆功能的方法和系统

    公开(公告)号:US20090158051A1

    公开(公告)日:2009-06-18

    申请号:US12282175

    申请日:2007-02-28

    IPC分类号: H04L9/06

    摘要: A method of protecting an integrity of a data processing system. The method comprises determining (902) a data string to be protected, an integrity of the data string being an indication of the integrity of the data processing system. Computing (904) a set of parameters representing a predetermined data processing function, using a redundancy in the set of parameters to incorporate the data string into a bit representation of the set of parameters. Enabling (906) the system to process data according to the set of parameters. The set of parameters represents at least part of a cryptographic algorithm including a cryptographic key. The set of parameters represents a network of look-up tables. The network of look-up tables comprises a plurality of look-up tables of a white-box implementation of a data processing algorithm. The data processing algorithm comprises a cryptographic algorithm.

    摘要翻译: 一种保护数据处理系统完整性的方法。 该方法包括确定(902)要保护的数据串,数据串的完整性是数据处理系统的完整性的指示。 计算(904)表示预定数据处理功能的一组参数,使用所述参数集合中的冗余将所述数据串并入所述一组参数的位表示。 启用(906)系统根据参数集处理数据。 这组参数表示包括加密密钥的加密算法的至少一部分。 该组参数表示查找表的网络。 查找表的网络包括数据处理算法的白盒实现的多个查找表。 数据处理算法包括加密算法。

    WHITE-BOX CRYPTOGRAPHIC SYSTEM WITH INPUT DEPENDENT ENCODINGS
    10.
    发明申请
    WHITE-BOX CRYPTOGRAPHIC SYSTEM WITH INPUT DEPENDENT ENCODINGS 有权
    具有输入相关编码的白盒CRYPTOGRAPHIC系统

    公开(公告)号:US20120002807A1

    公开(公告)日:2012-01-05

    申请号:US13255382

    申请日:2010-03-05

    IPC分类号: H04L9/28

    摘要: A white-box cryptographic system is presented wherein at least one of its internal values is represented using an input dependent encoding. The system comprises a network of a plurality of basic blocks arranged for collectively performing a cryptographic operation. An encoder is arranged for encoding output data of a first one of the plurality of basic blocks into an encoder-output according to a selected one of a plurality of encoding schemes, said selection depending on an input-message to the system. A compensator is arranged for recoding intermediate data to compensate for the effect of the encoding according to a selected one of a plurality of recoding schemes. Using variable encodings instead of fixed encodings complicates reverse engineering the white-box cryptographic system.

    摘要翻译: 提出了一种白箱加密系统,其中使用输入相关编码来表示其内部值中的至少一个。 该系统包括被布置为共同执行密码操作的多个基本块的网络。 编码器被配置为根据多个编码方案中的所选择的编码方案将多个基本块中的第一个基本块的第一个的输出数据编码为编码器输出,所述选择取决于对系统的输入消息。 布置补偿器,用于对中间数据进行重新编码以补偿根据多个记录方案中所选择的编码方案的编码的影响。 使用可变编码而不是固定编码会使白盒加密系统的逆向工程复杂化。