Back to results
US 10,708,073 B2Granted
Configuration based cryptographic key generation
AssigneeHoneywell International Inc.
InventorsJohn D. Profumo, Thomas Cordella, James L. Tucker
Life of this patent
Estimating the term…
Abstract
In some examples, a programmable device may load configuration data into a configuration storage to configure programmable logic of the programmable device. The programmable device may include a key generation logic that may read at least a portion of the configuration data from the configuration storage. The key generation logic may generate a cryptographic key based at least in part on the at least a portion of the configuration data read from the configuration storage.
Claims17
A system comprising:
- configuration storage configured to store configuration data for a programmable logic device, wherein the configuration data comprises a collection of computer instructions that specifies the functionality to be performed by programmable logic;
- the programmable logic in the programmable logic device operably coupled to the configuration storage, wherein the programmable logic is configured by the configuration data in the configuration storage;
- a key generation logic configured to read at least a portion of the configuration data from the configuration storage and to generate a cryptographic key based on combining at least a portion of the configuration data read from the configuration storage with one or more inputs to the key generation logic;
- an internal configuration port configured to enable access to the configuration storage, wherein the key generation logic is configured to read the at least a portion of the configuration data from the configuration storage via the internal configuration port;
- and
- a cryptographic engine configured to utilize at least the cryptographic key to perform a cryptographic operation,
- wherein the configuration storage is further configured to receive updated configuration data based at least in part on reconfiguration data;
- and
- wherein in response to a reconfiguration, the key generation logic is configured to read the updated configuration data and to generate the cryptographic key by combining at least a portion of the updated configuration data from the configuration storage with the one or more inputs to the key generation logic.
6 more elements
A method comprising:
- loading, by a programmable device, configuration data for configuring programmable logic of the programmable device into a configuration storage, wherein the configuration data comprises a collection of computer instructions that specifies the functionality to be performed by the programmable logic;
- reading, by a key generation logic, at least a portion of the configuration data from the configuration storage, via an internal configuration port of the programmable device;
- generating, by the key generation logic, a cryptographic key, wherein the cryptographic key is generated based on combining at least a portion of the configuration data read from the configuration storage with one or more inputs to the key generation logic;
- and
- in response to receiving updated configuration data based at least in part on reconfiguration data:
- reading, by the key generation logic, the updated configuration data;
- and
- generating, by the key generation logic, an updated cryptographic key by combining at least a portion of the updated configuration data from the configuration storage with the one or more inputs to the key generation logic.
5 more elements
A non-transitory computer-readable storage medium comprising instructions that upon execution cause a processor to:
- load configuration data into configuration storage of a programmable device to configure programmable logic of the programmable device, wherein the configuration data comprises a collection of computer instructions that specifies the functionality to be performed by the programmable logic;
- read, by a key generation logic, at least a portion of the configuration data from the configuration storage;
- and
- generate a cryptographic key, wherein the cryptographic key is generated based on combining the at least a portion of the configuration data read from the configuration storage with one or more inputs to the key generation logic;
- and
- in response to receiving updated configuration data based at least in part on reconfiguration data cause the processor to:
- read the updated configuration data;
- and
- generate an updated cryptographic key by combining at least a portion of the updated configuration data from the configuration storage with the one or more inputs to the key generation logic.
6 more elements
Dependencies are inferred from the claim text.