公开(公告)号：KR20180052695A

公开(公告)日：2018-05-18

申请号：KR20187010029

申请日：2016-08-30

Applicant: QUALCOMM INC

Inventor： HARTLEY DAVID ,  AVANZI ROBERTO ,  CAMMAROTA ROSARIO

IPC: G06F21/12 ,  G06F21/60 ,  G06F21/62

CPC classification number: G06F12/1408 ,  G06F21/121 ,  G06F21/125 ,  G06F21/14 ,  G06F21/62 ,  G06F21/74 ,  G06F2212/1052 ,  G06F2221/0755

Abstract: 컴퓨팅디바이스에서소프트웨어를보호하기위한기술들이제공된다. 이기술들에따른방법은, 비-보안소프트웨어모듈로부터암호화된프로그램코드를포함하는보안소프트웨어모듈의명령을실행하라는요청을수신하는단계, 명령이보안소프트웨어모듈외부에서액세스가능한보안소프트웨어모듈로의제어된엔트리지점(controlled point of entry)과연관된명령을포함하는지를결정하는단계, 명령이보안소프트웨어모듈로의제어된엔트리지점과연관된명령을포함한다는것에응답하여보안소프트웨어모듈의하나또는그 초과의명령들을실행하는단계, 및비-보안소프트웨어모듈로실행을리턴하기위해보안소프트웨어모듈로부터의탈출(exit)을제어하는단계를포함한다.

公开(公告)号：WO2016057086A3

公开(公告)日：2016-06-02

申请号：PCT/US2015034531

申请日：2015-06-06

Applicant: QUALCOMM INC

Inventor： AVANZI ROBERTO

IPC: H04L9/08 ,  H04L9/30 ,  H04L9/32

CPC classification number: H04W12/04 ,  H04L9/0861 ,  H04L9/302 ,  H04L9/3249 ,  H04L63/062

Abstract: Various features pertain to embedded key generation and provisioning systems, such as systems installed within smartphones for generating public-key/private-key pairs for use in encryption/decryption and digital signature generation. In some examples, an embedded system is provided that generates two public-key/private-key pairs -- one for encryption/decryption and the other for signing/verification -- where the two public-key/private-key pairs share a common modulus but are otherwise distinct or uncorrelated. This allows the two key pairs to be generated more efficiently than if two entirely separate key pairs were generated and yet, at least in the context of embedded systems, satisfactory integrity and confidentiality is achieved. Techniques for decrypting and signing messages using common modulus keys are described for use by an embedded component of a mobile device, along with techniques for encrypting and verifying messages for use by a remote system such as a key provisioning server of a partner software vendor.

Abstract translation: 各种功能与嵌入式密钥生成和供应系统有关，例如安装在智能手机内用于生成用于加密/解密和数字签名生成的公钥/私钥对的系统。 在一些示例中，提供了一种嵌入式系统，其生成两个公钥/私钥对 - 一个用于加密/解密，另一个用于签名/验证 - 其中两个公钥/私钥对共享公共密钥/私钥对 模量，但在其他方面是不同的或不相关的。 与两个完全分离的密钥对一起生成并且至少在嵌入式系统的情况下，这使得可以更有效地生成两个密钥对，从而实现令人满意的完整性和机密性。 描述了用于使用通用模数密钥对消息进行解密和签名的技术，以供移动设备的嵌入式组件使用，以及用于加密和验证供远程系统（例如合作伙伴软件供应商的密钥供应服务器）使用的消息的技术。