ENHANCED SECURITY FOR MEDIA ENCRYPTION

摘要

Systems and methods for enhanced security of media are provided. Media security may be enhanced by improving the setup of encryption and/or decryption, by improving the performance of encryption and/or decryption, or by improving both. The calls related to enhanced security of media from an application in an emulated environment to a security module in the operating system hosting the emulated environment may be combined to reduce the overhead of accessing a security module. An application handling secure shell (SSH) communications may execute multiple calls to a cryptographic module in the host operating system. Because many calls to the cryptographic module during SSH communications follow patterns, two or more related calls may be combined into a single combined call to the cryptographic module. For example, a call to generate a server-to-client key and a call to generate a client-to-server key may be combined into a single call.

主权项

1. A method for secure media encryption in one call, comprising:
providing an interface for an application executing in an emulated environment of a host operating system, in which the application accesses a security module in the host operating system through calls to the interface; identifying two or more related calls, from the application to the module, for secure media encryption, in which the two or more related calls comprise at least one of:
a call to randomly generate an initialization vector;a call to compute an encryption of data;a call to format a binary large object (BLOB); arida call to write the BLOB to the media.; combining the two or more related calls into a single call; and executing the single combined call to the module of the host operating system to perform the two or more related calls.