Method for implementing encryption in storage card, and decryption method and device

• US 9,348,768 B2
• Filed: 07/22/2013
• Issued: 05/24/2016
• Est. Priority Date: 09/05/2012
• Status: Active Grant

• Current Assignee: ZTE Corporation
• Original Assignee: ZTE Corporation
• Inventors: Li, Xipeng
• Primary Examiner(s): PEARSON, DAVID J
• Application Number:
  US14/426,081
• Publication Number:
  US 20150248356A1
• Time in Patent Office: 1,037 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 2212/1052 Security improvement

Abstract

A method for implemented encryption in a memory card, and a decryption method and device, and the method includes: receiving an input encryption key; requesting a subscriber identity card for authenticating the encryption key; after the authentication is successful, using the encryption key to encrypt plaintext data selected in the memory card the to generate encrypted data; generating encryption status information, wherein the encryption status information describes non-confidential information of the encrypted data. By using the encryption key in the subscriber identity card to encrypt data in the memory card, a user can freely select the data to be encrypted in the memory card, thereby enhancing data security in the memory card, facilitating the user operation, and enhancing the user experience.

Claims

1. A method for encrypting data in a memory card, comprising:

receiving an encryption key input by a user;

requesting a subscriber identity card for authenticating the encryption key;

after the authentication is successful, using the authenticated encryption key to encrypt data selected by the user in the memory card to generate encrypted data;

generating encryption status information, wherein the encryption status information describes non-confidential information of the encrypted data;

wherein, the encryption key authenticated in the subscriber identity card comprises administrative codes (ADM), a Personal Identification Number1 (PIN1) code, and a Personal Identification Number2 (PIN2) code.

2. The method of claim 1, wherein, before the step of receiving an encryption key input by a user, the method further comprises:

prompting the user to input the encryption key in a terminal, and prompting the user on whether to store the encryption key in the subscriber identity card.

3. The method of claim 1, wherein, the step of requesting a subscriber identity card for authenticating the encryption key comprises:

requesting the subscriber identity card for authenticating the encryption key;

sending the encryption key to the subscriber identity card;

receiving the authenticated encryption key from the subscriber identity card.

4. A method for decrypting data in a memory card, comprising:

detecting an access request;

determining whether data to be accessed is encrypted data according to the access request and pre-stored encryption status information;

receiving decryption key input by a user;

requesting a subscriber identity card for authenticating the decryption key;

after the authentication is successful, using the authenticated decryption key to decrypt the encrypted data in the memory card to generate data;

wherein, the decryption key authenticated in the subscriber identity card comprises administrative codes (ADM), a Personal Identification Number1 (PIN1) code, and a Personal Identification Number2 (PIN2) code.

5. The method of claim 4, wherein, the method further comprises:

verifying an initial key, and after the verification is successful, modifying an encryption key and the decryption key.

6. A device for encrypting data in a memory card, comprising a processor and a storage device, wherein the storage device stores processor-executable programs, and the programs comprise:

a management unit, configured to receive an encryption key input by a user;

a key authentication unit, configured to receive the encryption key from the management unit, request a subscriber identity card for authenticating the encryption key;

an encryption unit, configured to, after the authentication is successful, use the authenticated encryption key to encrypt data selected by the user in a memory card to generate encrypted data, and generate encryption status information, wherein the encryption status information describes non-confidential information of the encrypted data;

an encryption information storage unit, configured to store the encryption status information generated by the encryption unit;

wherein, the encryption key authenticated in the subscriber identity card comprises administrative codes (ADM), a Personal Identification Number1 (PIN1) code, and a Personal Identification Number2 (PIN2) code.

7. The device of claim 6, further comprising:

the subscriber identity card, configured to store the encryption key and a decryption key;

and, also configured to store an initial key, verify the initial key, and modify the encryption key and the decryption key after the verification is successful.

8. The device of claim 6, wherein, the key authentication unit comprises:

a first module, configured to request the subscriber identity card for authenticating the encryption key;

a second module, configured to send the encryption key to the subscriber identity card;

a third module, configured to receive the authenticated encryption key from the subscriber identity card.

9. A device for decrypting data in a memory card, comprising a processor and a storage device, wherein the storage device stores processor-executable programs, and the programs comprise:

an inquiry unit, configured to detect an access request, and determine whether data to be accessed are encrypted data according to the access request and pre-stored encryption status information; and

receive decryption key input by a user;

an access authentication unit, configured to request a subscriber identity card for authenticating the decryption key;

a decryption unit, configured to, after the authentication is successful, use the authenticated decryption key to decrypt the encrypted data in a memory card to generate data;

wherein, the decryption key authenticated in the subscriber identity card comprises administrative codes (ADM), a Personal Identification Number1 (PIN1) code, and a Personal Identification Number2 (PIN2) code.