Method and device for protecting memory content using first and second addressable storage regions and first and second encryption keys

摘要

A method of protecting digital data stored in a storage medium. The method comprises providing a first and a second addressable storage region in the storage medium, and selector means for selectively indicating one of the first and the second addressable storage regions as active; storing the digital data in the first addressable storage region of the storage medium, wherein the digital data stored in the first addressable storage region is stored encrypted with a first encryption key; and causing the selector means to indicate the first addressable storage region as being active; and, responsive to a trigger event, copying the digital data from the first to the second addressable storage region, wherein the digital data stored in the second addressable storage region is stored encrypted with a second encryption key; and causing the selector means to indicate the second addressable storage region as being active.

主权项

1. A method of protecting digital data stored in a storage medium, the method being performed in a processing device and comprising:
providing a first and a second addressable storage region in the storage medium, and selector means for selectively indicating one of the first and the second addressable storage regions as active; storing the digital data in the first addressable storage region of the storage medium, wherein the digital data stored in the first addressable storage region is stored encrypted with a first encryption key; and causing the selector means to indicate the first addressable storage region as being active; and responsive to a trigger event causing the selector means to indicate the first addressable storage region as being inactive and the second addressable storage region as being active; causing the digital data stored in the first addressable storage region to be decrypted with the first encryption key; and copying all the decrypted digital data from the first to the second addressable storage region, wherein the digital data stored in the second addressable storage region is stored encrypted with a second encryption key, wherein, at each point in time during normal operation of the processing device, either the first or the second addressable storage region is selected as active and the corresponding other addressable storage region as inactive.