Data encryption of a storage area

Patent metadata

Field	Value
Publication number	US-10785031-B2
Application number	US-201514604187-A
Country	US
Kind code	B2
Filing date	Jan 23, 2015
Priority date	Jan 24, 2014
Publication date	Sep 22, 2020
Grant date	Sep 22, 2020

Abstract

A method for encrypting data stored in a memory area is proposed, wherein the data are encrypted on the basis of a key identification for the data and on the basis of a one-time key.

First claim

The invention claimed is:

1. A method for encrypting data stored in a memory area, comprising:
encrypting the data by a processor in a single iteration on the basis of a unique key identification per allocation of the data to the memory area which is a portion of a memory, and on the basis of a memory address and a one-time key, wherein the memory area is a memory area of a non-volatile memory which is erasable by means of an erase operation and comprises at least one page or at least one sector of the non-volatile memory, and after a preceding erase operation of the memory area, the unique key identification is stored in the memory area together with the encrypted allocated data.

2. The method as claimed in claim 1 , wherein the one-time key comprises a one-time pad.

3. The method as claimed in claim 1 , wherein the key identification comprises a dedicated key identification determined for the data stored in the memory area.

4. The method as claimed in claim 3 , wherein the dedicated key identification is generated on the basis of a random number or a pseudo-random number, wherein the set of possible random numbers or pseudo-random numbers is large enough that a probability of the same random number being determined twice for the memory area is lower than a predefined threshold value.

5. The method as claimed in claim 3 , wherein the data are encrypted on the basis of the dedicated key identification, the one-time key and a secret.

6. The method as claimed in claim 5 , wherein the secret comprises a secret key or a secret encryption operation.

7. The method as claimed in claim 3 , wherein the encrypted data are decrypted on the basis of the key identification and the one-time key.

8. The method as claimed in claim 1 , wherein the key identification comprises a unique key identification determined for the data stored in the memory area.

9. The method as claimed in claim 1 , wherein a plurality of key identifications for a plurality of memory areas are temporarily stored by means of a buffer memory.

10. The method as claimed in claim 1 , wherein the memory area is a sector or page of the memory.

11. A device for encrypting data stored in a memory area comprising a processor configured to encrypt the data in a single iteration on the basis of a unique key identification per allocation of the data to the memory area which is a portion of a memory, and on the basis of a memory address and a one-time key, wherein the memory area is a memory area of a non-volatile memory which is erasable by means of an erase operation and comprises at least one page or at least one sector of the non-volatile memory, and after a preceding erase operation of the memory area, the unique key identification is stored in the memory area together with the encrypted allocated data.

12. The device as claimed in claim 11 , wherein the memory area is a sector or page of the memory.

13. A non-transitory computer program product which can be loaded directly into a memory of a digital computer, comprising program code parts suitable for carrying out a method for encrypting data stored in a memory area which is a portion of the memory, wherein the data are encrypted in a single iteration on the basis of a unique key identification per allocation of the data to the memory area, and on the basis of a memory address and a one-time key, wherein the memory area is a memory area of a non-volatile memory which is erasable by means of an erase operation and comprises at least one page or at least one sector of the non-volatile memory, and after a preceding erase operation of the memory area, the unique key identification is stored in the memory area together with the encrypted allocated data.

14. The non-transitory computer program product as claimed in claim 13 , wherein the memory area is a sector or page of the memory.

Assignees

• Infineon Technologies Ag

Inventors

• Sonnekalb Steffen

Classifications

• G06F12/1408 Primary

  by using cryptography (for digital transmission H04L9/00) · CPC title

• H04L9/0861

  Generation of secret information including derivation or calculation of cryptographic keys or passwords · CPC title

• H04L9/0894

  Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage · CPC title

• G09C1/00

  Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system (cryptographic typewriters G09C3/00) · CPC title

• H04L9/3228 Primary

  One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key · CPC title