# US 11,113,424 B2 · Device, system and method for installing encrypted data > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,113,424 B2 - Document ID: US11113424B2 - Status: Granted - Kind: B2 - Application number: 16/405,454 - Filed: 2019-05-07 - Published: 2020-11-12 - Granted: 2021-09-07 - Earliest claimed: 2019-05-07 - Assignees: Motorola Solutions, Inc. - Applicants: Motorola Solutions, Inc. - Inventors: Brian W. Pruss; Ellis A. Pinder; Thomas S. Messerges - Web page: https://patentgrep.com/patent/US11113424B2 ## CPC - G06F 21/78: to assure secure storage of data (address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00) - H04L 9/0822: {using key encryption key} - H04L 9/083: {involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]} - H04L 9/0861: {Generation of secret information including derivation or calculation of cryptographic keys or passwords} - H04L 9/0894: {Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage} - H04L 63/0442: {wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30)} - H04L 63/062: {for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819)} - G06F 21/57: Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A device, system and method for installing encrypted data are provided. A device includes a processor comprising: immutable memory storing preconfigured trust anchor data; and a module storing preconfigured non-exportable data. The processor is configured to: receive an encrypted common protection key, encrypted using a manufacturing protection key, and an encrypted distribution private key, encrypted using a common protection key; obtain the manufacturing protection key using the preconfigured trust anchor data and the preconfigured non-exportable data; decrypt the encrypted common protection key using the manufacturing protection key to obtain the common protection key; decrypt the encrypted distribution private key using the common protection key to obtain a distribution private key; receive an encrypted data package including image-at-rest data encrypted with an image-at-rest key, the encrypted data package including encryption data for obtaining the image-at-rest key using the distribution private key; and install the encrypted data package at the memory. ## Claims ### Claim 1 A device comprising: a communication unit; a memory; a processor including: an immutable memory portion storing preconfigured trust anchor data; and a module storing preconfigured non-exportable data for obtaining a manufacturing protection key using the preconfigured trust anchor data; the processor configured to: receive, via the communication unit: an encrypted common protection key, encrypted using the manufacturing protection key; and an encrypted distribution private key, encrypted using a common protection key corresponding to the encrypted common protection key; obtain the manufacturing protection key using the preconfigured trust anchor data and the preconfigured non-exportable data; decrypt the encrypted common protection key using the manufacturing protection key to obtain the common protection key; decrypt the encrypted distribution private key using the common protection key to obtain a distribution private key; receive, via the communication unit, an encrypted data package including image-at-rest data encrypted with an image-at-rest key, the encrypted data package including encryption data for obtaining the image-at-rest key using the distribution private key; and install the encrypted data package at the memory. ### Claim 2 (depends on 1) The device of claim 1, wherein the encryption data is derived using at least a distribution public key complementary to the distribution private key. ### Claim 3 (depends on 1) The device of claim 1, wherein the processor is further configured to: obtain the image-at-rest key using the encryption data and the distribution private key; and store, at the memory, the image-at-rest key as a wrapped image-at-rest key. ### Claim 4 (depends on 3) The device of claim 3, wherein the processor is further configured to install the encrypted data package at the memory by: decrypting the image-at-rest data using the image-at-rest key obtained from the wrapped image-at-rest key; and installing the image-at-rest data at the memory. ### Claim 5 (depends on 3) The device of claim 3, wherein the processor is further configured to, at one or more of a boot-time and a run-time: decrypt the image-at-rest data using the image-at-rest key obtained from the wrapped image-at-rest key; and process the image-at-rest data. ### Claim 6 (depends on 1) The device of claim 1, wherein the encrypted data package comprises: a header comprising the encryption data and further encryption data for obtaining an image-distribution key using the distribution private key; and distribution image data encrypted using the image-distribution key, the distribution image data comprising image-at-rest data encrypted using the image-at-rest key. ### Claim 7 (depends on 6) The device of claim 6, wherein the processor is further configured to obtain the image-at-rest data by: obtaining the image-distribution key using the further encryption data and the distribution private key; decrypting the distribution image data using the image-distribution key to obtain the image-at-rest data as encrypted by the image-at-rest key; obtaining the image-at-rest key using the encryption data and the distribution private key; and decrypting the image-at-rest data using the image-at-rest key. ### Claim 8 (depends on 1) The device of claim 1, wherein the processor is further configured to: store the common protection key at the immutable memory portion as a wrapped common protection key; and decrypt the encrypted distribution private key using the common protection key obtained from the wrapped common protection key. ### Claim 9 (depends on 1) The device of claim 1, wherein the common protection key is stored as a wrapped common protection key at the immutable memory portion, and the preconfigured trust anchor data and the wrapped common protection key are stored in the immutable memory portion as fused bits. ### Claim 10 (depends on 1) The device of claim 1, wherein the encrypted common protection key is received, via the communication unit, in a flashloader application which, when processed by the processor, causes the processor to at least: obtain the manufacturing protection key and the common protection key; and store the common protection key as a wrapped common protection key in the immutable memory portion. ### Claim 11 A method comprising: receiving, at a processor of a device: an encrypted common protection key, encrypted using a manufacturing protection key; and an encrypted distribution private key, encrypted using a common protection key corresponding to the encrypted common protection key; obtaining, at the processor, the manufacturing protection key using preconfigured trust anchor data, stored at an immutable memory portion of the processor, and preconfigured non-exportable data, stored at a module of the processor; decrypting, at the processor, the encrypted common protection key using the manufacturing protection key to obtain the common protection key; decrypting, at the processor, the encrypted distribution private key using the common protection key to obtain a distribution private key; receiving, at the processor, an encrypted data package including image-at-rest data encrypted with an image-at-rest key, the encrypted data package including encryption data for obtaining the image-at-rest key using the distribution private key; and installing, using the processor, the encrypted data package at a memory of the device. ### Claim 12 (depends on 11) The method of claim 11, wherein the encryption data is derived using at least a distribution public key complementary to the distribution private key. ### Claim 13 (depends on 11) The method of claim 11, further comprising: obtaining the image-at-rest key using the encryption data and the distribution private key; and storing, at the memory, the image-at-rest key as a wrapped image-at-rest key. ### Claim 14 (depends on 13) The method of claim 13, wherein the installing the encrypted data package at the memory comprises: decrypting the image-at-rest data using the image-at-rest key obtained from the wrapped image-at-rest key; and installing the image-at-rest data at the memory. ### Claim 15 (depends on 13) The method of claim 13, further comprising, at one or more of a boot-time and a run-time: decrypting the image-at-rest data using the image-at-rest key obtained from the wrapped image-at-rest key; and processing the image-at-rest data. ### Claim 16 (depends on 11) The method of claim 11, wherein the encrypted data package comprises: a header comprising the encryption data and further encryption data for obtaining an image-distribution key using the distribution private key; and distribution image data encrypted using the image-distribution key, the distribution image data comprising image-at-rest data encrypted using the image-at-rest key. ### Claim 17 (depends on 16) The method of claim 16, further comprising obtaining the image-at-rest data by: obtaining the image-distribution key using the further encryption data and the distribution private key; decrypting the distribution image data using the image-distribution key to obtain the image-at-rest data as encrypted by the image-at-rest key; obtaining the image-at-rest key using the encryption data and the distribution private key; and decrypting the image-at-rest data using the image-at-rest key. ### Claim 18 (depends on 11) The method of claim 11, further comprising: store the common protection key at the immutable memory portion as a wrapped common protection key; and decrypt the encrypted distribution private key using the common protection key obtained from the wrapped common protection key. ### Claim 19 (depends on 11) The method of claim 11, wherein the common protection key is stored as a wrapped common protection key at the immutable memory portion, and the preconfigured trust anchor data and the wrapped common protection key are stored in the immutable memory portion as fused bits.