초록 ▼

A method and apparatus for secure processing of cryptographic keys, wherein a cryptographic key stored on a token is processed in a secure processor mode using a secure memory. A main system processor is initialized into a secure processing mode, which cannot be interrupted by other interrupts, duri

A method and apparatus for secure processing of cryptographic keys, wherein a cryptographic key stored on a token is processed in a secure processor mode using a secure memory. A main system processor is initialized into a secure processing mode, which cannot be interrupted by other interrupts, during a power-on sequence. A user enters a Personal Identification Number (PIN) to unlock the cryptographic key stored on the token. The cryptographic key and associated cryptographic program are then loaded into the secure memory. The secure memory is locked to prevent access to the stored data from any other processes. The user is then prompted to remove the token and the processor exits the secure mode and the system continues normal boot-up operations. When an application requests security processing, the cryptographic program is executed by the processor in the secure mode such that no other programs or processes can observe the execution of the program. Two-factor authentication is thus obtained without the need for any additional hardware.

대표청구항 ▼

1. A method for secure processing of cryptographic keys, comprising: loading, by a system processor, a cryptographic program and any associated data into a secure memory, said secure memory only being accessible by the system processor in a secure mode; loading, by the system processor, a crypto

1. A method for secure processing of cryptographic keys, comprising: loading, by a system processor, a cryptographic program and any associated data into a secure memory, said secure memory only being accessible by the system processor in a secure mode; loading, by the system processor, a cryptographic key into the secure memory; detecting a request for security operation by an application program; the system processor, entering the secure mode; performing the security operation in the secure memory using the cryptographic program and cryptographic key; the system processor, exiting the secure mode; and passing any cryptographic information to the application program; the system processor, performing other operations in a system memory, including executing an operating system, when the processor is not in the secure mode. 2. The method of claim 1, wherein the cryptographic key, the cryptographic program and any cryptographic data are loaded into the secure memory during the boot time. 3. The method of claim 1, wherein the cryptographic key, the cryptographic program and any cryptographic data are loaded into the secure memory after boot time and during the secure mode. 4. The method of claim 1, wherein the cryptographic program and the cryptographic key are loaded at different times during the secure mode. 5. The method of claim 1, further comprising verifying a user's personal identification number. 6. The method of claim 1 wherein the secure mode is a system management mode. 7. The method of claim 6, wherein prior to performing the security operation in the secure memory using the cryptographic program and cryptographic key, the method comprises suspending operation of an operating system. 8. The method of claim 1, wherein said cryptographic key, cryptographic program and any cryptographic data are obtained from a source that is available during a power-on initialization, said source to be made unavailable upon initialization of an operating system.