Method of managing key for secure storage of data and apparatus therefor

摘要

A method and apparatus for managing a key for secure storage of data. The apparatus includes a main controller configured to process a command, a cipher unit configured to encrypt a first key to form an encrypted key or encrypt data to form encrypted data based on a result of the main controller processing the command, and decrypt the encrypted key or the encrypted data based on the result of the main controller processing the command, a hash unit configured to hash the first key according to control of the main controller, a decrypted key memory configured to store the first key, and an encrypted key memory configured to store the encrypted key.

主权项

1. A key manager comprising:
a main controller configured to process a command; a decrypted key memory configured to store a first key; an encrypted key memory configured to store an encrypted key; and a cipher unit and a hash unit configured to,
encrypt the first key according to control of the main controller to form the encrypted key or encrypt data to form encrypted data based on a result of the main controller processing the command, the encrypting the first key including,
hashing a portion of the first key and a portion of a random number chosen based on a hash value to form a hashed key,encrypting the hashed key and the hash value to form the encrypted key, andstoring the encrypted key in the encrypted key memory, anddecrypt the encrypted key or the encrypted data based on the result of the main controller processing the command.