摘要 |
PURPOSE: A security module is provided to protect sensitive information against fraudulent use, store and operate sensitive information in a security module. CONSTITUTION: The sensitive information(ISj) is stored in encrypted form ISj using a temporary protection encryption key CPi whose content varies in time. The sensitive information is decrypted before it is used in a given process, by means of a temporary protection decryption key CPid. Before the contents of the encryption and decryption keys is changed, the sensitive information ISj is decrypted with the current decryption key, then it is reencrypted with the new encryption key to obtain a new encrypted form, different from the previous one.
|