Security unit and protection system comprising such security unit as well as method for protecting data
In order to provide a protection system ( 100; 100 ′) for protecting data (D 1+ D 2 ), for instance at least one data processing program and/or at least one software application, the protection system ( 100; 100 ′) comprising at least one data storage unit ( 10 ) for storing the data (D 1+ D 2 ), at least one main processing unit ( 20 ) which is designed for processing at least part (D 1 ) of the data (D 1+ D 2 ), in particular for processing the first data (D 1 ) and optionally the encrypted second data (D 2 ), the main processing unit ( 20 ) being connected with the data storage unit ( 10 ), at least one security unit ( 30 ), and at least one presentation processing unit ( 42 ) being connected with the main processing unit ( 20 ), wherein it is possible to prevent the use of illegal copies of the data (D 1+ D 2 ) and wherein neither an authorization nor a registration is required for running the data (D 1+ D 2 ), it is proposed that the security unit ( 30 ) and the presentation processing unit ( 42 ) exchange at least one key, in particular at least one up-front agreed session key, for decrypting the encrypted second data (D 2 ) and/or for re-encrypting the originally encrypted and then decrypted second data (D 2 ).
1. A computer security system having additional security for data, the computer security system comprising:
a data storage device that transmits both encrypted software and unencrypted software;
a main processor that receives both the encrypted software and the unencrypted software but processes only the unencrypted software;
a rendering device that receives the unencrypted software from the main processor and conditionally produces output based upon the encrypted software; and
a hardware security device that determines whether the rendering device can produce output based upon the encrypted software.
2. The computer security system of claim 1 , wherein the hardware security device decrypts the encrypted software and re-encrypts the decrypted software to produce re-encrypted software.
3. The computer security system of claim 2 , wherein the rendering device decrypts the re-encrypted software to produce re-decrypted software and combines the re-decrypted software with the unencrypted software.
4. The computer security system of claim 1 , wherein the main processor is connected to the hardware security device.
5. The computer security system of claim 1 , wherein the main processor is connected to the rendering device.
6. The computer security system of claim 1 , wherein the unencrypted software cannot be employed in a useful way without decrypting the encrypted software.
7. The computer security system of claim 1 , wherein the hardware security device and the rendering device share a session key.
8. The computer security system of claim 7 , wherein the hardware security device uses the shared session key to re-encrypt a decrypted version of the encrypted software.
9. The computer security system of claim 1 , wherein the main processor transfers the encrypted software to the hardware security device.
10. The computer security system of claim 9 , wherein the hardware security device sends a re-encrypted version of the encrypted software to the main processor.
11. The computer security system of claim 1 , wherein the unencrypted software is a game program and combining a decrypted version of the encrypted software with the unencrypted software enables full display of the game program in an output device.
12. The computer security system of claim 11 , wherein the output device displays a degraded version of the game program when the encrypted software is not decrypted.
13. A method of providing additional security for data in a computer security system, the method comprising:
receiving both encrypted and unencrypted software in a main processor;
processing the unencrypted software in the main processor;
decrypting the encrypted software in a hardware security device;
re-encrypting the decrypted software in the hardware security device;
decrypting the re-encrypted software in a rendering device to produce re-decrypted software;
combining the re-decrypted software with the unencrypted software in the rendering device.
14. The method of claim 13 , wherein the unencrypted software cannot be employed in a useful way without decrypting the encrypted software.
15. The method of claim 13 , further comprising:
sharing a session key between the hardware security device and the rendering device.
16. The method of claim 15 , further comprising:
using the shared session key to re-encrypt a decrypted version of the encrypted software.
17. The method of claim 13 , further comprising:
transferring the encrypted software from the main processor to the hardware security device.
18. The method of claim 13 , further comprising:
sending a re-encrypted version of the encrypted software from the hardware security device to the main processor.
19. The method of claim 13 , wherein the unencrypted software is a game program, the method further comprising:
combining a decrypted version of the encrypted software with the unencrypted software to enable full display of the game program in an output device.
20. The method of claim 19 , further comprising:
displaying a degraded version of the game program when the encrypted software is not decrypted.