Secure storage system
Assigneesecunet SECURITY NETWORKS Aktiengesellschaft
InventorsJens Kulikowski, Soenke Schroeder
Life of this patent
Estimating the term…
Abstract
A secure storage system having authentication and cryptographic data protection is made by providing a mass-data memory and a security element communicatively coupled with the mass-data memory. This mass-data memory and the securing element are controlled by respective different control commands such that different drivers can be installed to operate the mass-data memory and the security element. A secured hardware data interface is provided between the mass-data memory and the security element, and the security element provides security-critical information concerning the data of the mass-data memory.
Claims12
A method of making a secure storage system having authentication and cryptographic data protection, the method comprising the steps of:
- providing a mass-data memory;
- providing a security element;
- inseparably coupling the security element with the mass-data memory;
- controlling the mass-data memory and the securing element by
- respective different control commands installed to operate the mass-data memory and the security element, the control commands operating the security element being updated by a component external to the storage system;
- interposing a secured hardware data interface between the mass-data memory and the security element;
- the security element providing security-critical information
- concerning the data of the mass-data memory, the security-critical information being an access authorization, an identity of the mass-data memory, a cryptographic key, a data signature, a time stamp, and/or a validity period of data;
- and
- restricting access to the mass-data memory only as a function of release by the security element.
A secure storage system with authentication and cryptographic data protection, the storage system comprising:
- a mass-data memory;
- a security element communicatively inseparably coupled with the mass-data memory,
- respective different control commands for the mass-data memory and the security element and installed to operate the mass-data memory and the security element, the control commands operating the security element being updated by a component external to the storage system;
- and
- a secure hardware data interface interposed between the mass-data memory and the security element, the security element being configured to provide security-critical information concerning the data of the mass-data memory, the security-critical information being an access authorization, an identity of the mass-data memory, a cryptographic key, a data signature, a time stamp, and/or a validity period of data;
- and
- access to the mass-data memory being restricted only as a function of release by the security element.
Dependencies are inferred from the claim text.