Samsung Electronics Co., Ltd.

Sangwoo Ryu

Peng Ning

Geng Chen

S J Oh

Sami Orava

Kwanghwan Moon

KyungBae Park

An apparatus and a method for encrypting and decrypting data in a device are provided. The apparatus includes a processor and a memory. The processor is configured to transmit a data command from an application to an encryption driver that executes in a kernel space, determine if the application is authenticated to perform the data command based on an access policy, transmit, when the application is authenticated, a first key to a cryptographic library that executes in an application space, and perform the data command based on the first key after receiving a response via the cryptographic library. The first key is stored in an encryption driver in the kernel space and is not available to applications in the application space.

Growing community of inventors

Mountain View, CA, United States of America

Sangwoo Ryu