Method for managing memory space in a secure non-volatile memory of a secure element
AssigneeInside Secure
InventorsCharles Walton, Matthias Lerch
Life of this patent
Estimating the term…
Abstract
The invention relates to a method for managing non-volatile memory space in a secure processor comprising a secure non-volatile internal memory, the method comprising steps of: selecting data elements to remove from the internal memory, generating, by the secure processor, a data block comprising the selected data elements, and a signature computed from the selected data elements using a secret key generated by the secure processor, transmitting the data block by the secure processor, and storing the transmitted data block in an external memory.
Claims23
A method for managing non-volatile memory space in a secure processor comprising a secure non-volatile internal memory, the method comprising steps of:
- associating an export eligibility flag with each data element in the internal memory, each eligibility flag indicating whether the associated data element is erasable from the internal memory and exportable in a data block,
- each time new data are inserted into the secure non-volatile internal memory, if the new data are associated with an export eligibility flag indicating that the new data are erasable, exporting the new data in one or more data blocks to an external memory, and for each data block to be exported:
- generating, by the secure processor, the data block from the new data, and a signature computed from the data inserted into the data block using a secret key generated by the secure processor,
- transmitting the data block by the secure processor to store the data block in an external memory, and
- storing the transmitted data block in the external memory.
A portable device comprising a secure processor and an external non-volatile memory, the secure processor comprising an internal non-volatile secure memory, wherein the secure processor is configured to:
- generate a secret key,
- associate an export eligibility flag with each data element in the internal memory, each eligibility flag indicating whether the associated data element is erasable from the internal memory and exportable in a data block,
- each time new data are inserted into the non-volatile secure internal memory, if the new data are associated with an export eligibility flag indicating that the new data are erasable, export the new data in one or more data blocks to an external memory, and for each data block to be exported:
- generate the data block comprising the new data, and a signature computed from the data inserted into the data block using the secret key, and
- transmit the data block to store the data block in the external memory.
Dependencies are inferred from the claim text.