Patent ID: 8935771
Filing Date: 2015-01-13
Classification: G06F

Abstract:
1. A method of providing a virtual cell on a security device coupled to a computer, the method comprising: encrypting storing by a processor of the computer security device first data used by a processor of the security device for an application running on the computer and residing, in a memory in the security device, storing the encrypted first data by a processor of the computer in a location remote from the security device, in response to an application context switch based on a need for the security device memory by a software application running on the computer; storing by the processor of the computer second data in the memory of the security device; thereafter, in response to a second application context switch, loading by the processor of the computer the remotely stored data back into the memory of the security device in the same memory location where it originally resided; at the security device, performing encryption operations on data transferred between the security device and the computer, using a session key K generated at the security device by a method comprising: receiving a value V generated by the software application, wherein V is generated by combining a random number r and a base point P; and combining V with a private key s of the device, wherein the combination results in the session key K; and at the computer, performing encryption operations on the data transferred between the security device and the computer, using the session key K generated at the computer by a method comprising: generating r and obtaining a public key Q of the device, wherein Q is generated by combining s with P; and combining r with Q, wherein the combination results in the session key K.