Secure provisioning of secrets into MPSoC devices using untrusted third-party systems
AssigneeGeneral Electric Company
InventorsKrzysztof Michal Kepa, Willard Monten Wiseman, David Safford, Wesley Michael Skeffington, William David Smith, II
Life of this patent
Estimating the term…
Abstract
The example embodiments are directed to a system and method for secure provisioning of secrets into MPSoC devices using untrusted third-party systems. In one example, the method includes generating a random number sequence from a true random number generator to produce secret information, storing the secret information in an on-chip secure storage, encrypting, in a device and using public key encryption, the secret information to generate an encrypted message, and transmitting the encrypted message to a third-party system.
Claims20
A computer-implemented method comprising:
- generating, by a multiprocessor system-on-a-chip, a random number sequence from a true random number generator to produce secret information;
- storing the secret information in an on-chip secure storage of the multiprocessor system-on-a-chip;
- encrypting, in a device of the multiprocessor system-on-a-chip and using public key encryption, the secret information to generate an encrypted message;
- and
- transmitting the encrypted message, from the multiprocessor system-on-a-chip, to a third-party system, wherein the secret information is inaccessible to the third-party system prior to the encrypting.
A computing system comprising:
- a memory storing instructions;
- and
- a processor configured to execute the instructions, wherein the executed instructions cause the processor to:
- generate a random number sequence from a true random number generator to produce secret information;
- store the secret information in an on-chip secure storage;
- seal the secret information by encrypting, in a device and using public key encryption, the secret information;
- and
- transmit the sealed secret information to a third-party system, wherein the secret information is inaccessible to the third-party system prior to the encrypting.
A non-transitory computer-readable medium having stored therein instructions that when executed cause a computer to perform a method comprising:
- generating a random number sequence from a true random number generator to produce secret information;
- storing the secret information in an on-chip secure storage;
- encrypting, in a device and using public key encryption, the secret information to generate an encrypted message;
- and
- transmitting the encrypted message to a third-party system, wherein the secret information is inaccessible to the third-party system prior to the encrypting.
Dependencies are inferred from the claim text.