Method for operating a computer unit, and such a computer unit
A method is supplied for operating a computer unit, wherein on the computer unit an application can be executed which can access the functions of a crypto API, wherein the functions of the crypto API can be supplied by at least one crypto implementation on the computer unit. The method therein includes the following steps of: executing the application on the computer unit; checking what crypto implementations are available on the computer unit; and selecting one of the available crypto implementations as that crypto implementation which supplies the functions of the crypto API.
1. A method for operating a computer unit, the method comprising the following steps of:
providing a computer unit configured such that an application is executable on the computer unit that accesses the functions of a crypto API, wherein the functions of the crypto API are supplied by at least one crypto implementation on the computer unit;
executing the application on the computer unit;
checking what crypto implementations are available on the computer unit, wherein at least one of the crypto implementations is implemented in a secure runtime environment of the computer unit; and
selecting one of the available crypto implementations as that crypto implementation which supplies the functions of the crypto API, said selecting including selecting the most secure one of the available crypto implementations;
wherein data incorporated into a cryptographic operation and a result of the cryptographic operation are present in a normal memory of the computer unit, and a cryptographic key and an intermediate result of the cryptographic operation are processed only in a secure memory of the computer unit,
wherein the normal memory of the computer unit in which the data incorporated into the cryptographic operation and the result of the cryptographic operation are present is managed by a normal runtime environment,
wherein the secure memory of the computer unit is managed by the secure runtime environment, and
wherein the secure memory of the computer unit cannot be accessed from the normal runtime environment.
2. The method according to claim 1 , wherein, prior to the step of executing the application on the computer unit, the method includes the further step of downloading the application from an online software platform.
3. The method according to claim 1 , wherein the application is based on an object-oriented programming language, the crypto API is a Java Cryptography Extension (JCE) and the at least one crypto implementation is at least one crypto provider.
4. The method according to claim 1 , wherein the application is based on a software framework, the crypto API is a Microsoft crypto API and the at least one crypto implementation is at least one crypto provider.
5. The method according to claim 1 , wherein a secure operating system runs on the secure runtime environment.
6. The method according to claim 1 , wherein the normal runtime environment contains a conventional operating system.
7. The method according to claim 1 , wherein the normal runtime environment is an unsecured runtime environment.
8. A computer unit configured such that:
an application can be executed on the computer unit that accesses functions of a crypto API, wherein the functions of the crypto API are supplied by at least one crypto implementation on the computer unit, wherein the computer unit is further configured to
check, upon executing the application on the computer unit, what crypto implementations are available on the computer unit, wherein at least one of the crypto implementations is implemented in a secure runtime environment of the computer unit; and
select one of the available crypto implementations as that crypto-implementation which supplies the functions of the crypto API,
wherein the computer unit is configured to select the most secure crypto implementation as that crypto implementation which supplies the functions of the crypto API,
wherein the computer unit is further configured such that data incorporated into a cryptographic operation and a result of the cryptographic operation are present in a normal memory of the computer unit, and a cryptographic key and an intermediate result of the cryptographic operation are processed only in a secure memory of the computer unit,
wherein the normal memory of the computer unit in which the data incorporated into the cryptographic operation and the result of the cryptographic operation are present is managed by a normal runtime environment,
wherein the secure memory of the computer unit is managed by the secure runtime environment, and
wherein the secure memory of the computer unit cannot be accessed from the normal runtime environment.
9. The computer unit according to claim 8 , wherein the computer unit is configured to download the application from an online software platform.
10. The computer unit according to claim 8 , wherein the application is based on an object-oriented programming language, the crypto API is a Java Cryptography Extension (JCE) and the at least one crypto implementation is at least one crypto provider.
11. The computer unit according to claim 8 , wherein the application is based on a software framework, the crypto API is a Microsoft crypto API and the at least one crypto implementation is at least one crypto provider.