Back to results
US 2020/0396229 A1Published application
Hardware security module systems and methods
AssigneeAO Kaspersky Lab
InventorsDmitry A. Kulagin, Pavel V. Dyakin
Life of this patent
Estimating the term…
Abstract
Systems and methods for ensuring data security. A MAC is computed sequentially for each selected message from a data log that contains at least two messages. To build a data block, a preset encryption key is used for a first message and an encryption key for the previous message is used for subsequent messages. A determination that the data log is compromised can be made based on MAC data block data and an independent calculation of a MAC.
Claims19
1-20. (canceled)
A system for detecting compromised data, the system comprising:
- at least one processor and a memory operably coupled to the at least one processor;
- and
- instructions that, when executed on the at least one processor, cause the at least one processor to implement:
- an encryption key building tool configured to—
- provide a Hardware Security Module (HSM) to physically protect the encryption key building tool from tampering,
- build an initial pre-shared key during creation of the HSM, the initial pre-shared key based on at least one characteristic of the HSM,
- build an encryption key based on a previously-built key, wherein a first instance of the encryption key is based on the initial pre-shared key, and
- provide the encryption key to a message authentication code (MAC) computing tool.
5 more elements
A method for detecting compromised data, the method comprising:
- providing a Hardware Security Module (HSM) to physically protect an encryption key building tool from tampering;
- building an initial pre-shared key during creation of the HSM, the initial pre-shared key based on at least one characteristic of the HSM;
- and
- building an encryption key based on a previously-built key, wherein a first instance of the encryption key is based on the initial pre-shared key.
1 more element
Dependencies are inferred from the claim text.