Patent ID: 7437569

Claim:
A computer for secure management of data by encryption/decryption and/or signature/verification of signature, comprising: a secure management module for secure management of data by encryption/decryption and/or signature/verification of signature, said secure management module comprising a plurality of internal secure management circuits; and a microprocessor for controlling said secure management module; a working memory associated with said microprocessor being external to said secure management module; wherein the microprocessor is external to the secure management module; wherein the working memory is external to the secure management module; wherein the microprocessor is configured to store a block of commands in the associated working memory, aid block of commands being operable to configure at least one of the plurality of internal secure management circuits; wherein said secure management module further comprises an input/output connector adapted to be introduced into a corresponding connector of the computer to connect the secure management module to the microprocessor and to the working memory; and a common interfacing module for interfacing between the microprocessor and the plurality of internal secure management circuits of said secure management module, said common interfacing module being connected in parallel to said plurality of internal secure management circuits; wherein each said internal secure management circuit is configured for ensuring encryption/decryption or the calculation/verification of signature in respect of data received from or transmitted to said common interfacing module, wherein each said internal secure management circuit comprises a secure management input/output sub-module interconnected to said common interfacing module, a specific sub-module for encryption/decryption or for calculation/verification of signature, and a direct memory access module interconnected at an input and at an output to the common interfacing module, wherein the secure management input/output sub-module is configured to read, in the working memory, the block of commands at an address communicated by the microprocessor; initialize the direct memory access module from first parameters contained in the block of commands; read, in a memory, from other parameters of the block of commands the keys for secure management of data and/or the context of the secure management of data, to be applied to data by sub-module for encryption/decryption or for calculation/verification of signature in order to obtain secure data; read, in the working memory, in a direct access mode the data to be managed securely; transmit the data to be managed securely to the specific sub-module for encryption/decryption or respectively for calculation/verification of signature; and write, in the working memory, in the direct access mode, the secure data transmitted by the specific sub-module for encryption/decryption or respectively for calculation/verification of signature.