Virtual secure digital card

• US 8,745,749 B2
• Filed: 04/01/2011
• Issued: 06/03/2014
• Est. Priority Date: 11/15/2010
• Status: Active Grant

• Current Assignee: Truesight Communications LLC (Alpha Alpha Intellectual Partners LLC)
• Original Assignee: Media IP LLC.
• Inventors: Calixto, John, Zipperer, Joseph P.
• Primary Examiner(s): Shiferaw, Eleni
• Assistant Examiner(s): CALLAHAN, PAUL E
• Application Number:
  US13/078,323
• Publication Number:
  US 20120124390A1
• Time in Patent Office: 1,159 Days
• Field of Search: 713/165, 713/172, 713/176, 713/189, 726/26, 711/115, 705/51, 705/67
• US Class Current: 726/26
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G11C 16/22 Safety or protection circuits preventing unauthorised or accidental access to memory cells

Abstract

A system (and a method) are disclosed for generating a virtual secure digital (SD) card. One embodiment detects an SD card and reads a media key block and media identification for the SD card. The system stores the media key block and the media identification. The system creates a file system for secure data on a storage device for storage of secure data corresponding to a secure data area of the SD card and creates a file system for user data on the storage device for storage of user data corresponding to a user data area of the SD card. In addition, the system uses the virtual secure digital (SD) card. The system determines if the virtual SD card is provisioned and provisions it if not. The system accesses the data stored in the secure area of the provisioned virtual SD card. The system extracts the data from the secured area of the provisioned virtual SD card.

Claims

1. A method for generating a virtual secure digital (SD) card, the method comprising:

reading a media key block and media identification for an SD card;

storing the media key block and the media identification;

creating a file system for secure data on a storage device for storage of secure data corresponding to a secure data area of the SD card; and

creating a file system for user data on the storage device for storage of user data corresponding to a user data area of the SD card, wherein a size of the file system for secure data is determinant on a size of the file system for user data, the determination based on a lookup table providing a relationship between the sizes.

2. The method of claim 1, wherein the file system for secure data is encrypted.

3. The method of claim 2, wherein the file system is encrypted with an encryption key, the encryption key derived from computer system information and the encryption key not stored by the computer system.

4. The method of claim 2, wherein the file system is encrypted with an encryption key, the encryption key derived from a computer system and stored by the computer system.

5. The method of claim 2, wherein the file system is encrypted with an encryption key, the encryption key derived from a computer system and stored by the computer system within a trusted host.

6. The method of claim 2, wherein the file system for secure data and the file system for user data are located on different physical partitions of the storage device.

7. The method of claim 2, wherein the file system for secure data and the file system for user data are located on different logical partitions of the storage devices.

8. The method of claim 2, wherein the file system for secure data and the file system for user data are within an existing file system.

9. The method of claim 2, wherein the media key block and the media identification are assigned to the device and not from the SD card.

10. The method of claim 1, wherein the file system is encrypted with an encryption key, the encryption key derived from computer system information and the encryption key not stored by the computer system.

11. The method of claim 1, wherein the file system is encrypted with an encryption key, the encryption key derived from a computer system and stored by the computer system.

12. The method of claim 1, wherein the file system is encrypted with an encryption key, the encryption key derived from a computer system and stored by the computer system within a trusted host.

13. The method of any one of claims 1 through 5, wherein the media identification comprises random data not allocated from the SD card.

14. A method using a virtual secure digital (SD) card, the method comprising:

determining if the virtual SD card is provisioned;

provisioning the virtual SD card in response to the virtual SD card not being provisioned, the provisioning including;

creating a file system for secure data on a storage device for storage of secure data corresponding to a secure data area of the SD card; and

creating a file system for user data on the storage device for storage of user data corresponding to a user data area of the SD card, wherein a size of the file system for secure data is determinant on a size of the file system for user data, the determination based on a lookup table providing a relationship between the sizes;

accessing the data stored in the secure area of the provisioned virtual SD card; and

extracting the data from the secured area of the provisioned virtual SD card.

15. The method of claim 14, further comprising performing an authentication using Authenticated Key Encryption (AKE) before accessing the data in the secure area of the provisioned virtual SD card.

16. The method of claim 14 or 15, wherein data received from an application program through Authenticated Key Encryption (AKE) is first decrypted.

17. The method of claim 14, wherein data received from an application program through Authenticated Key Encryption (AKE) is encrypted with another key before storing the data in the secure area of the provisioned virtual SD card.

18. A non-transitory computer readable medium configured to store instructions that, when executed, cause at least one processor to:

read a media key block and media identification for an SD card;

store the media key block and the media identification;

create a file system for secure data on a storage device for storage of secure data corresponding to a secure data area of the SD card; and

create a file system for user data on the storage device for storage of user data corresponding to a user data area of the SD card, wherein a size of the file system for secure data is determinant on a size of the file system for user data, the determination based on a lookup table providing a relationship between the sizes.

19. The computer readable medium of claim 18, wherein the file system for secure data is encrypted.

20. The computer readable medium of claim 19, wherein an encryption key is derived from a computer system information, the encryption key not stored by the computer system.

21. The computer readable medium of any one of claims 18, 19, or 20, wherein the encryption key is derived from a computer system and stored by the computer system.

22. A non-transitory computer readable medium configured to store instructions that, when executed, cause at least one processor to:

determine if a virtual SD card is provisioned;

provision the virtual SD card in response to the virtual SD card not being provisioned, wherein to provision the virtual SD card includes to;

create a file system for secure data on a storage device for storage of secure data corresponding to a secure data area of the SD card; and

create a file system for user data on the storage device for storage of user data corresponding to a user data area of the SD card, wherein a size of the file system for secure data is determinant on a size of the file system for user data, the determination based on a lookup table providing a relationship between the sizes;

access the data stored in the secure area of the provisioned virtual SD card; and

extract the data from the secured area of the provisioned virtual SD card.

23. The computer readable medium of claim 22, further comprising:

performing an authentication using Authenticated Key Encryption (AKE) before accessing the data in the secure area of the provisioned virtual SD card.

24. The computer readable medium of claim 23, wherein data received from an application program through Authenticated Key Encryption (AKE) is first decrypted.

25. The computer readable medium of claim 23, wherein data received from an application program through Authenticated Key Encryption (AKE) is encrypted with another key before storing the data in the secure area of the provisioned virtual SD card.