Electronic device verification

An enrolment server, comprising:

• communication circuitry to receive verification information indicative of a first device identifier accessible from a first region of electronic storage circuitry by a predetermined process executed by an electronic device and a second device identifier inaccessible from said electronic storage circuitry by said predetermined process, wherein the first device identifier is accessible by the predetermined process in both a normal processing domain of the electronic device and in a trusted execution environment of the electronic device,
• wherein the second device identifier is stored in a secure region of said electronic storage circuitry different from the first region, and wherein the secure region is inaccessible using said predetermined process and the secure region is prevented by a hardware protection mechanism from being accessed in the normal processing domain, and wherein the secure region is accessible in the trusted execution environment using another process;
• electronic storage circuitry to store a device database representing valid pairings, including a valid pairing of said first device identifier and said second device identifier for a group of known devices;
• and
• processing circuitry to lookup the device database to determine whether the first device identifier and the second device identifier for the electronic device correspond to the valid pairing.

A method for providing verification information for verifying whether an electronic device is one of a group of known devices, the method comprising:

• obtaining first data dependent on a first device identifier accessible from a first region of electronic storage circuitry by a predetermined process executed by the electronic device;
• obtaining second data dependent on a second device identifier inaccessible from said electronic storage circuitry by said predetermined process, wherein the first device identifier is accessible by the predetermined process in both a normal processing domain of the electronic device and in a trusted execution environment of the electronic device,
• wherein the second device identifier is stored in a secure region of said electronic storage circuitry different from the first region, and wherein the secure region is inaccessible using said predetermined process and the secure region is prevented by a hardware protection mechanism from being accessed in the normal processing domain, and wherein the secure region is accessible in the trusted execution environment using another process;
• and
• transmitting verification information indicative of the first data and the second data to an enrolment server for verifying whether the first device identifier and the second device identifier corresponds to a valid pairing for one of said group of known devices.

An apparatus for providing verification information for verifying whether an electronic device is one of a group of known devices, the apparatus comprising circuitry configured to:

• obtain first data dependent on a first device identifier accessible from a first region of electronic storage circuitry by a predetermined process executed by the electronic device;
• obtain second data dependent on a second device identifier inaccessible from said electronic storage circuitry by said predetermined process, wherein the first device identifier is accessible by the predetermined process in both a normal processing domain of the electronic device and in a trusted execution environment of the electronic device,
• wherein the second device identifier is stored in a secure region of said electronic storage circuitry different from the first region, and wherein the secure region is inaccessible using said predetermined process and the secure region is prevented by a hardware protection mechanism from being accessed in the normal processing domain, and wherein the secure region is accessible in the trusted execution environment using another process;
• and
• transmit verification information indicative of the first data and the second data to an enrolment server for verifying whether the first device identifier and the second device identifier corresponds to a valid pairing for one of said group of known devices.

An electronic device manufacturing process, comprising:

• obtaining first data dependent on a first device identifier accessible from a first region of electronic storage circuitry by a predetermined process executed by an electronic device;
• obtaining second data dependent on a second device identifier inaccessible from said electronic storage circuitry by said predetermined process, wherein the first device identifier is accessible by the predetermined process in both a normal processing domain of the electronic device and in a trusted execution environment of the electronic device,
• wherein the second device identifier is stored in a secure region of said electronic storage circuitry different from the first region, and wherein the secure region is inaccessible using said predetermined process and the secure region is prevented by a hardware protection mechanism from being accessed in the normal processing domain, and wherein the secure region is accessible in the trusted execution environment using another process;
• and
• providing authentication information dependent on the first data and the second data to one of the electronic device and an enrolment server for maintaining a database of valid pairings, including a valid pairing of the first device identifier and the second device identifier for a group of known devices.

Electronic device manufacturing equipment, comprising circuitry to:

• obtain first data dependent on a first device identifier accessible from a first region of electronic storage circuitry by a predetermined process executed by an electronic device;
• obtain second data dependent on a second device identifier inaccessible from said electronic storage circuitry by said predetermined process, wherein the first device identifier is accessible by the predetermined process in both a normal processing domain of the electronic device and in a trusted execution environment of the electronic device,
• wherein the second device identifier is stored in a secure region of said electronic storage circuitry different from the first region, and wherein the secure region is inaccessible using said predetermined process and the secure region is prevented by a hardware protection mechanism from being accessed in the normal processing domain, and wherein the secure region is accessible in the trusted execution environment using another process;
• and
• provide authentication information dependent on the first data and the second data to one of the electronic device and an enrolment server for maintaining a database of valid pairings, including a valid pairing of the first device identifier and the second device identifier for a group of known devices.