Method for sharing encrypted data region among processes in tamper resistant processor
AssigneeKabushiki Kaisha Toshiba
InventorsKeiichi Teramoto, Mikio Hashimoto, Kenji Shirakawa, Satoshi Ozaki, Kensaku Fujimoto
Life of this patent
Estimating the term…
Abstract
In the method for sharing encrypted data region among two or more processes on a tamper resistant processor, one process creates the encrypted data region to be shared according to the common key generated as a result of the safe key exchange, and the other process maps that region to its own address space or process space. The address information of the shared encrypted data region and the common key of each process are set in relation in the encrypted attribute register inside the tamper resistant processor, so that it is possible to share the encrypted data region safely.
Claims18
A method for sharing encrypted data region among two or more processes on a tamper resistant processor having a program and data encryption/decryption function, the method comprising:
- giving a common key to each one of the two or more processes in advance;
- shifting an execution mode of the tamper resistant processor to an encrypted instruction execution mode;
- operating an owner process among the two or more processes to generate a shared encrypted data region valid only with respect to the common key in a process space of the owner process;
- operating each client process other than the owner process among the two or more processes to map the shared encrypted data region generated by the owner process to a process space of the each client process;
- and
- setting address information of the shared encrypted data region for each process among the two or more processes in relation to the common key in an encrypted attribute register inside the tamper resistant processor.
A method for sharing encrypted data region among two processes on a tamper resistant processor having a program and data encryption/decryption function, the method comprising:
- (a) shifting an execution mode of the tamper resistant processor to an encrypted instruction execution mode;
- (b) operating each process among the two processes to generate a hidden data region of the each process in a process space of the each process;
- (c) operating the two processes to generate mutually different key pairs to be used in a key exchange and carry out the key exchange between the two processes;
- (d) operating the each process to generate a common key according to the key exchange;
- (e) generating a shared encrypted data region to be shared by the two processes which is valid only with respect to the common key;
- and
- (f) storing the common key and data used in a course of the key exchange in the hidden data region of the each process.
A method for sharing encrypted data region among three or more processes on a tamper resistant processor having a program and data encryption/decryption function, the method comprising:
- (a) shifting an execution mode of the tamper resistant processor to an encrypted instruction execution mode;
- (b) operating an owner process among the three or more processes to generate a shared encrypted data region to be shared among the three or more processes;
- (c) operating the owner process to specify a common key for the shared encrypted data region;
- (d) operating the three or more processes to generate an encrypted key notification region for each client process other than the owner process among the three or more processes, the encrypted key notification region being shared only between the owner process and the each client process;
- (e) operating the owner process to notify the common key to the each client process through the encrypted key notification region for the each client process;
- (f) operating the each client process to map the shared encrypted data region generated by the owner process to a process space of the each client process;
- and
- (g) setting address information of the shared encrypted data region for each process among the three or more processes in relation to the common key in an encrypted attribute register inside the tamper resistant processor.
A tamper resistant processor having a program and data encryption/decryption function and a memory that stores computer readable program codes for sharing encrypted data region among two or more processes, the computer readable program codes include:
- a first computer readable program code for causing said computer to give a common key to each one of the two or more processes in advance;
- a second computer readable program code for causing said computer to shift an execution mode of the tamper resistant processor to an encrypted instruction execution mode;
- a third computer readable program code for causing said computer to operate an owner process among the two or more processes to generate a shared encrypted data region valid only with respect to the common key in a process space of the owner process;
- a fourth computer readable program code for causing said computer to operate each client process other than the owner process among the two or more processes to map the shared encrypted data region generated by the owner process to a process space of the each client process;
- and
- a fifth computer readable program code for causing said computer to set address information of the shared encrypted data region for each process among the two or more processes in relation to the common key in an encrypted attribute register inside the tamper resistant processor.
A tamper resistant processor having a program and data encryption/decryption function and a memory that stores computer readable program codes for sharing encrypted data region among two processes, the computer readable program codes include:
- a first computer readable program code for causing said computer to shift an execution mode of the tamper resistant processor to an encrypted instruction execution mode;
- a second computer readable program code for causing said computer to operate each process among the two processes to generate a hidden data region of the each process in a process space of the each process;
- a third computer readable program code for causing said computer to operate the two processes to generate mutually different key pairs to be used in a key exchange and carry out the key exchange between the two processes;
- a fourth computer readable program code for causing said computer to operate the each process to generate a common key according to the key exchange;
- a fifth computer readable program code for causing said computer to generate a shared encrypted data region to be shared by the two processes which is valid only with respect to the common key;
- and
- a sixth computer readable program code for causing said computer to store the common key and data used in a course of the key exchange in the hidden data region of the each process.
A tamper resistant processor a having program and data encryption/decryption function and a memory that stores computer readable program codes for sharing encrypted data region among three or more processes, the computer readable program codes include:
- a first computer readable program code for causing said computer to shift an execution mode of the tamper resistant processor to an encrypted instruction execution mode;
- a second computer readable program code for causing said computer to operate an owner process among the three or more processes to generate a shared encrypted data region to be shared among the three or more processes;
- a third computer readable program code for causing said computer to operate the owner process to specify a common key for the shared encrypted data region;
- a fourth computer readable program code for causing said computer to operate the three or more processes to generate an encrypted key notification region for each client process other than the owner process among the three or more processes, the encrypted key notification region being shared only between the owner process and the each client process;
- a fifth computer readable program code for causing said computer to operate the owner process to notify the common key to the each client process through the encrypted key notification region for the each client process;
- a sixth computer readable program code for causing said computer to operate the each client process to map the shared encrypted data region generated by the owner process to a process space of the each client process;
- and
- a seventh computer readable program code for causing said computer to set address information of the shared encrypted data region for each process among the three or more processes in relation to the common key in an encrypted attribute register inside the tamper resistant processor.
Dependencies are inferred from the claim text.