Data processing system, method of initializing a data processing system, and computer program product

Patent metadata

Field	Value
Publication number	US-2016119362-A1
Application number	US-201414275722-A
Country	US
Kind code	A1
Filing date	May 12, 2014
Priority date	Jun 24, 2013
Publication date	Apr 28, 2016
Grant date	—

Abstract

A data processing system is conceived, which comprises at least two security levels and key material stored at a specific one of said security levels, wherein the key material is tagged with a minimum security level at which the key material may be stored.

First claim

1 . A data processing system comprising:
at least two security levels, and key material stored at a specific one of said security levels,
wherein the key material is tagged with a minimum security level at which the key material may be stored.

2 . A data processing system as claimed in claim 1 ,
wherein the key material is tagged by means of an attribute attached to or comprised in said key material, and
wherein said attribute has a value that is indicative of the minimum security level at which the key material may be stored.

3 . A data processing system as claimed in claim 1 ,
wherein one of the security levels, in particular the highest security level, is implemented as a tamper-resistant secure element.

4 . A data processing system as claimed in claim 1 ,
wherein one of the security levels, in particular a medium security level, is implemented as a high-performance crypto accelerator.

5 . A data processing system as claimed in claim 1 ,
being arranged to move, at least temporarily, the key material to a security level that is lower than the security level at which the key material is stored, wherein the security level to which the key material is temporarily moved is equal to or higher than the minimum security level.

6 . A data processing system as claimed in claim 1 ,
wherein the key material is further tagged with an internal security level, and wherein said internal security level is indicative of the lowest security level at which the key material has resided.

7 . A data processing system as claimed in claim 1 ,
wherein the key material is further tagged with a list that is indicative of a history of security levels at which the key material has resided.

8 . A data processing system as claimed in claim 1 ,
being arranged to create temporary key material that may be exchanged and verified using key material.

9 . An intelligent transportation system comprising a data processing system as claimed in claim 1 .

10 . A method of initializing a data processing system having at least two security levels,
wherein key material is tagged with a minimum security level at which the key material may be stored, and wherein said key material is stored at a specific one of said security levels.

11 . A computer program product comprising instructions which, when being executed by a processing unit, carry out or control respective steps of a method as claimed in claim 10 .

Assignees

• Nxp Bv

Inventors

• Van Roermund Timotheus Arthur
• Moerman Cornelis Marinus
• Rombouts Peter Maria Franciscus

Classifications

• H04L63/105 Primary

  Multiple levels of security · CPC title

• H04L63/061

  for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838) · CPC title

• G06F21/6209

  to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• G06F2221/2113

  Multi-level security, e.g. mandatory access control · CPC title