Device for and method of handling sensitive data

摘要

A device for handling sensitive data comprises a first integrated circuitry forming a first trust zone and a second integrated circuitry forming a second trust zone. The first circuitry comprises a secure processing unit adapted for processing sensitive data, the second circuitry comprises a persistent memory area within its trust zone for storing sensitive data. The second integrated circuitry is separated from the first integrated circuitry, the processing unit of the first circuitry transfers sensitive data from the first trust zone to the second trust, the second circuitry transfers sensitive data stored in its persistent memory area to the processing unit of the first trust zone. The first and the second integrated circuitry comprise crypto means for securely transferring sensitive data based on a symmetrical crypto method using a secure key. The second integrated circuitry comprises means for initiating a new key generation to replace the active secure key.

主权项

1. An integrated circuitry to securely exchange data with another integrated circuitry, comprising:
a persistent memory area to store sensitive data; a data transferer to receive the sensitive data from a trust zone of the other integrated circuitry, wherein said persistent memory area is adapted to store the sensitive data received through said data transferer, and wherein said data transferer is adapted to send the sensitive data stored in the persistent memory area to the trust zone of the other integrated circuitry; a cryptographic engine to decrypt the sensitive data received from the other integrated circuitry and encrypt the sensitive data to be sent and stored in the persistent memory area based on a symmetrical crypto method using an active secure key; wherein the integrated circuitry is separated from the other integrated circuitry, and wherein a trust zone separate from the trust zone of the other integrated circuitry is formed by the integrated circuitry, the said trust zone of the integrated circuitry comprising a key generator to generate a new secure key after power up in order to replace the active secure key.