US 10,666,432 B2 · System and method of securing devices using encryption keys

Abstract

The subject matter discloses a method and a system for securely distributing a credential and encryption keys for physical devices. The system comprises a security server and a physical device. the physical device comprises a memory module configured to store a share of the credential, a communication module configured to exchange signals, and a processing module configured to execute calculations upon request received on a wireless manner via the communication module from the security server, the calculations are transmitted to the security server to execute a multi-party computation process. The multi-party computation process outputs two shares of the credential, a first share is stored in the physical device. The physical device does not have access to the credential.

Claims18

Dependent claims

A system for securely distributing a credential for physical devices, comprising:

a security server;
and
a physical device, comprising:
a memory module configured to store a share of the credential,
a communication module configured to exchange signals, and
a Multi-Party Computation (MPC) module configured to perform an MPC process with the security server,
wherein the MPC process outputs two shares of the credential,
wherein a first share of the credential is stored in the physical device, and a second share of the credential is stored in the security server,
wherein the physical device does not have access to the entire credential,
wherein the physical device receives a request to authenticate to a third party, and
wherein the security server exchanges information over the internet with the physical device to output a result that enables the authentication process of the third party to authenticate the physical device to the third party without any one of the third party, the physical device and the security server having access to the entire credential.

8 more elements

A method for securely distributing a credential uniquely associated with a physical device, comprising:

in a manufacturing phase,
exchanging information between a processing module of the physical device and a security server to cooperatively execute a multi-party computation (MPC) process, wherein the output of the MPC process is two shares of the credential, and
storing one share of the credential in the physical device and another share of the credential in the security server, wherein the other share of the credential is stored in the security server in association with an identifier of the physical device, and wherein the physical device does not have access to the entire credential;
and
in a usage phase,
the physical device receiving a request to authenticate to a third party, and
the security server exchanging information over the internet with the physical device to output a result that enables the authentication process of the third party to authenticate the physical device to the third party without any one of the third party, the physical device and the security server having access to the entire credential.

4 more elements

Dependencies are inferred from the claim text.

System and method of securing devices using encryption keys

Life of this patent

System and method of securing devices using encryption keys

Life of this patent

Abstract

Claims18