Cp8 Technologies

Benoît Bole

Patrice Hameau

Nicolas Fougeroux

A method for secure loading of a key dedicated to securing a predetermined operation into memory of a microchip of an embedded system includes, as a first step, authenticating a security device by generating a first random number using the microchip, transmitting the first random number to the security device, generating a second random number in the security device, generating a first cryptogram from the first and second random numbers by applying an asymmetric signature algorithm using an asymmetric secret key, transmitting at least the first cryptogram to the microchip, and authenticating the security device by verifying the first cryptogram using the public key. A second step includes authenticating the microchip by generating, in the microchip, a secret session key from the first random number by applying a symmetric encryption algorithm using the secret key, generating a second cryptogram by applying a symmetric encryption algorithm using the secret session key, transmitting the second cryptogram to the security device, and authenticating the microchip by verifying the second cryptogram using the session key. A third step includes transferring a dedicated key, encrypted by the session key, into the storage means of the microchip.

Method for making secure the pre-initialising phase of a silicon chip integrated system, in particular a smart card and integrated system therefor

The invention concerns a method for secure storage of a piece of so-called sensitive data, for example an encryption key, in a memory (M) of an embedded microchip system, particularly a smart card (CP). The memory (M) comprises two physically distinct storage devices (), for example a permanent memory of the 'ROM' type (), and a second, re-programmable memory of the 'EEPROM' type (). The piece of sensitive data is divided into at least two parts (d, d'), in a given logical configuration, each of these parts being stored in one of the distinct storage devices (). An additional piece of verification data, a checksum or hash data, can also be stored in the first storage device (), at the same time as the first sensitive data part (d). The invention also concerns an embedded microchip system, particularly a smart card (CP).

Method for secure storage of sensitive data in a memory of an embedded microchip system, particularly a smart card, and embedded system implementing the method

Growing community of inventors

Versailles, France

Benoît Bole