Method of access control and corresponding device

摘要

A computing device which includes an access control mechanism which is used to control access to keys which are used in cryptographic processes. Any application wishing to gain access to a key must first obtain authorization from the access control mechanism. Authorized applications may access keys directly, without having to pass data through the access control mechanism.

主权项

1. A device comprising:
a cryptographic unit; at least one key stored in a memory of said cryptographic unit; and an access control mechanism operating on a user side of the device, wherein control of access to said at least one key is delegated to the access control mechanism, the device being configured to allow direct access to said at least one key if access has been authorised by said access control mechanism, wherein the access control mechanism is operating in user mode, and wherein data used in a cryptographic process can be loaded into an application memory space by an application and modified in said application memory space without needing to be copied to another memory space in order for a cryptographic operation to be carried out.