Patent ID: 8234686
Filing Date: 2012-07-31
Classification: G06F,H04L

Abstract:
1. A system for creating a security application, which comprises: a programmable cryptography module comprising module code for operating the programmable cryptography module, a file system that stores modes and algorithms concerning operation of the programmable cryptography module and receives a binary security policy file that is formatted to load a security policy as code approved by a governmental authority, and a security policy software module as a subset of the module code that enables modes and algorithms per a security policy to be read from the file system, wherein the security policy software module further comprises mirror security policy data structures that serve as a comparison limit for various cryptographic security policy functions of the security policy, said module further comprising a signature check module; and a processor external from the programmable cryptography module for determining a security policy for an implementation specific application as a set of rules governing cryptographic security policy functions, said processor being operative for generating a binary security policy file representative of the security policy and comparing the binary security policy file with the mirror security policy data structures to determine a violation of the security policy or successful comparison and further comprising an object distribution interface through which a user inputs data for generating the binary security policy file, wherein the processor is operable with the signature check module at the programmable cryptography module for performing a signature check only one time on the code corresponding to the binary security policy file as approved by the governmental authority such that the code can be ported to security policy specific applications without reapproval of the code.