Cryptographic apparatus for an international cryptography framework

摘要

An international cryptography framework (ICF) comprises a set of service elements which allow applications to exercise cryptographic functions under the control of a policy. The four core elements of the ICF architecture, i.e. the host system (16), cryptographic unit (14), policy activation token (37), and network security server (18), comprise an infrastructure that provides cryptographic services to applications. Applications that request cryptographic services from various service elements within the ICF are identified through a certificate (36) to protect against misuse of a granted level of cryptography. The host system comprises a set of system programs and services which provide the application with an execution environment. The host system provides services to the application in the form of programming interfaces to access the functions offered by the cryptographic unit. The host system also provides support for the cryptographic unit in building trust relationships to the host system elements, such as the cryptographic programming interfaces, operating systems drivers, and memory management subsystems.