Multi-Core Processor Based Key Protection Method And System
AssigneesData Assurance and Communication Security Research Center, Chinese Academy of Sciences, Institute of Information Engineering, Chinese Academy of Sciences
InventorsJingqiang LIN, Le GUAN, Jing WANG, Qiongxiao WANG, Jiwu JING, Bao LI
Life of this patent
Estimating the term…
Abstract
A multi-core processor based key protection method and system is described. An Operating System (OS) supporting Symmetric Multi-Processing (SMP) is set up on a multi-core processor. One core of the multi-core processor is configured as a cryptographic operation core, which is prohibited from running other processes of the OS and dedicated to perform a public-key cryptographic operation. The private key and an intermediate variable in a process of the public-key cryptographic operation are stored in a cache exclusively occupied by the cryptographic operation core.
Claims12
A multi-core processor based key protection method, comprising:
- setting up an Operating System (OS) supporting Symmetric Multi-Processing (SMP) on a multi-core processor;
- configuring one core of the multi-core processor as a cryptographic operation core, which is prohibited from running other processes of the OS and dedicated to perform a public-key cryptographic operation;
- performing the public-key cryptographic operation with the cryptographic operation core;
- and
- storing a private key and an intermediate variable of a process of the public-key cryptographic operation in a cache exclusively occupied by the cryptographic operation core.
A multi-core processor based key protection system, comprising:
- a first module, to set up an Operating System (OS) supporting Symmetric Multi-Processing (SMP) on a multi-core processor, configure one core of the multi-core processor as a cryptographic operation core, which is prohibited from running other processes of the OS and dedicated to perform a public-key cryptographic operation;
- and
- a second module, to perform the public-key cryptographic operation with the cryptographic operation core and store a private key and an intermediate variable of a process of the public-key cryptographic operation in a cache exclusively occupied by the cryptographic operation core.
Dependencies are inferred from the claim text.