Secure protocol for chip authentication

An apparatus comprising at least one computer-readable memory device storing instructions configured to cause one or more processing devices to perform operations comprising:

• enrolling an integrated circuit in response to an enrollment message received from the integrated circuit by determining an identifier in the enrollment message corresponds a valid identifier for the integrated circuit and by separately associating the integrated circuit to a private value in the enrollment message and to the identifier corresponding to the valid identifier, wherein the enrollment message includes the identifier assigned to the integrated circuit and further includes an encoded version of the private value that is separate from the identifier, wherein the encoded version of the private value is generated by security circuitry in the integrated circuit based, at least in part, on physical characteristics of the security circuitry set during manufacturing;
• generating a request to verify authentication of the integrated circuit for transmission to the integrated circuit;
• and
• determining whether a confirmation message received from the integrated circuit in response to the request to verify authentication of the integrated circuit confirms that the integrated circuit includes the private value.

A system comprising:

• means for generating an encoded version of a private value based, at least in part, on physical characteristics of the security circuitry set during manufacturing;
• means for generating an enrollment message that includes the encoded version of the private value, wherein the enrollment message further includes an identifier assigned to the integrated circuit that is separate from the encoded version of the private value in the enrollment message;
• an interface device configured to transmit the enrollment message towards a security server, wherein the security server is configured to enroll the integrated circuit in response to the enrollment message by determining the identifier in the enrollment message corresponds a valid identifier for the integrated circuit and by separately associating the integrated circuit to the private value in the enrollment message and to the identifier corresponding to the valid identifier, and wherein the interface device is configured to receive a request to verify authentication of the integrated circuit;
• and
• means for generating a confirmation message in response to the request to verify authentication of the integrated circuit, wherein the confirmation message is configured to confirm that the integrated circuit includes the private value, and wherein the interface device is configured to output the confirmation message for transmission to the security server.