SYSTEM AND METHOD FOR PERFORMING A SECURE CRYPTOGRAPHIC OPERATION ON A MOBILE DEVICE

摘要

In a mobile communication device, multiple sets of sensor measurement data are obtained, each from a corresponding hardware sensor resident on the device. Insufficiently random data is filtered from each of the data sets to produce random data sets which are combined to produce entropy data which is stored in an entropy data cache. An entropy pool is monitored to determine a level of entropy data available and, based on the level determined, entropy data is provided from the entropy data cache to the entropy pool. Entropy data from the entropy pool is then applied to perform a cryptographic operation such as the generation of an encryption key for encrypting communications sent or received by the mobile communication device.

主权项

1. A method of performing a secure cryptographic operation, the method performed by a mobile communication device and comprising the steps of:
obtaining multiple sets of sensor measurement data, each being obtained from a corresponding one of multiple hardware sensors resident on the mobile communication device; filtering insufficiently random data from each of the multiple sets of sensor measurement data to provide a corresponding one of multiple sets of random source data; combining the multiple sets of random source data to produce entropy data; storing the entropy data in an entropy data cache; monitoring an entropy pool to determine a level of entropy data available; providing, based on the level determined, entropy data from the entropy data cache to the entropy pool; and applying the entropy data from the entropy pool to perform a cryptographic operation.