US 2011/0162083 A1 · SYSTEM AND METHOD FOR SECURING DATA

Abstract

The invention relates to a system and method for making data secure. The inventive system is characterized in that it comprises:—a monotonic counter;—a computational entity;—a physical data medium comprising one or a plurality of data blocks, a first master block comprising the last value recovered from the monotonic counter, an identifier of the last data block written on said medium, a first authentication code guaranteeing the authenticity of the written data block or blocks, a second authentication code calculated from the last written data block, said data being fixed at a neutral value, and a third authentication code guaranteeing the authenticity of the first master block, and a second master block forming a replica of the first master block; and—an authentication key. The invention is used, in particular, to make data secure against playback and sudden interruptions in service in embedded systems.

Claims25

Dependent claims

A system for making data secure, comprising:

a monotonic counter;
a computational entity;
a physical data medium comprising:
at least one data block written on the physical data medium,
a first master block comprising a recovered last value of the monotonic counter, an identifier of a last data block of the at least one data block written on said physical data medium, a first authentication code guaranteeing an authenticity of the at least one data block written on the physical data medium, a second authentication code calculated from the last data block written on the physical data medium, said last data block written on the physical data medium being fixed at a neutral value, and a third authentication code guaranteeing the authenticity of a first master block of the at least one data block, and
a second master block forming a replica of the first master block;
and
an authentication key.

5 more elements

A method for making data secure implemented in a system for making data secure, comprising the following steps of:

providing a monotonic counter, a computational entity, a physical data medium and an authentication key;
and
writing, on said physical data medium, at least one data block, a first master block comprising a last value recovered from the monotonic counter, an identifier of a last data block of the plurality of data blocks written on said physical data medium, a first authentication code guaranteeing an authenticity of the at least one data block written on the physical data medium, a second authentication code calculated from the last data block written on the physical data medium, said last data block written on the physical data medium being fixed at a neutral value, and a third authentication code guaranteeing the authenticity of a first master block and of a second master block forming a replica of the first master block.

Dependencies are inferred from the claim text.

System and method for securing data

Life of this patent

System and method for securing data

Life of this patent

Abstract

Claims25