Back to results
US 10,121,392 B2Granted
Masking and unmasking methods and devices
AssigneeIdemia France
InventorsOlivier Chamley, Christophe Giraud
Life of this patent
Estimating the term…
Abstract
Devices and methods for masking and unmasking sensitive data, based on a standard cryptographic algorithm defining a ciphering algorithm, and a deciphering algorithm using more resources than the ciphering algorithm are described. The masking of sensitive data is done by applying the deciphering algorithm to the sensitive data to obtain masked sensitive data. The unmasking of the masked sensitive data is done by applying the ciphering algorithm to the masked sensitive data to obtain sensitive data in plain form.
Claims18
A method for personalizing an electronic device, comprising:
- obtaining sensitive data by way of a third-party device composed of a CPU, a memory having coded instructions stored therein for operating the CPU, and a communications bus in communication with the CPU;
- at the third-party device, obtaining a masking method selection input and masking the obtained sensitive data using a masking method based on a standard cryptographic algorithm defining a ciphering algorithm, and a deciphering algorithm that uses more resources than the ciphering algorithm,
- wherein the masking method to mask the obtained sensitive data is determined, based on the masking method selection input, from a first masking method masking the obtained sensitive data by applying the ciphering algorithm to said sensitive data to obtain masked sensitive data and a second masking method masking the sensitive data by applying the deciphering algorithm to said sensitive data to obtain masked sensitive data;
- and
- storing the masked sensitive data in the electronic device so as to personalize the electronic device,
- wherein the masking method selection input depends on a frequency of use of the sensitive data.
3 more elements
A system, comprising:
- an electronic device to be personalized;
- and
- a third-party device, incorporating a CPU, a memory and a communications bus in communication with the CPU, the memory having stored therein at least encoded instructions that, upon execution by the CPU, causes the third-party device to function as:
- a module at the third-party device that obtains sensitive data,
- a module at the third-party device that obtains a masking method selection input, and masks the obtained sensitive data by operatively implementing a masking method based on a standard cryptographic algorithm defining a ciphering algorithm, and a deciphering algorithm that uses more resources than the ciphering algorithm, by applying the deciphering algorithm to said sensitive data to obtain masked sensitive data,
- the masking method to mask the obtained sensitive data being determined, based on the masking method selection input, from a first masking method masking the obtained sensitive data by applying the ciphering algorithm to said sensitive data to obtain masked sensitive data and a second masking method masking the sensitive data by applying the deciphering algorithm to said sensitive data to obtain masked sensitive data,
- where the masking method selection input depends on a frequency of use of the sensitive data, and
- a module that stores the obtained masked sensitive data in the electronic device, so as to personalize the electronic device.
5 more elements
Dependencies are inferred from the claim text.