US 11,115,201 B2 · Downloading of data to secure devices

Abstract

An encryption key may be generated based on personalized unit data associated with a software download recipient, for example, a secure processor. In some aspects, the secure processor may generate a decryption key based on its personalized unit data, and a software download may be performed between the software provider and the secure processor using the generated encryption keys. The secure processor may then decrypt and load the software for execution. The encryption and decryption key generation may also be based on a sequence number or other data indicating one or more previous software downloads at the secure processor. Using the sequence number or other data, sequences of multiple encryption and/or decryption keys may be generated to support multiple software downloads to a secure processor.

Claims22

Dependent claims

A method comprising:

retrieving, by a secure device, personalized unit data stored in a memory of the secure device;
retrieving, by the secure device, a sequence number stored in the memory of the secure device, wherein the sequence number indicates a quantity of times that software has been previously executed successfully;
generating, based on the personalized unit data and based on executing at least a portion of a key generation algorithm a quantity of times based on the sequence number, a first decryption key;
decrypting, using the first decryption key, a second decryption key;
decrypting, using the second decryption key, first software code;
executing the first software code;
determining that the execution of the first software code was successful;
and
based on determining that the execution of the first software code was successful, updating the sequence number stored in the memory of the secure device to an updated sequence number.

6 more elements

A method comprising:

receiving, by a computing device and from a first device, a request for first software code;
retrieving, by the computing device and from a secure memory, first personalized unit data associated with the first device;
retrieving a count of previously successful executions of software codes by the first device;
generating, based on the first personalized unit data and based on executing at least a portion of a key generation algorithm a quantity of times that is based on the count of previously successful executions of the software codes by the first device, a first encryption key;
encrypting, and using the first encryption key, a second encryption key, wherein the second encryption key is used to encrypt the first software code;
and
sending, to the first device, the encrypted first software code and the encrypted second encryption key.

4 more elements

Dependencies are inferred from the claim text.

Downloading of data to secure devices

Life of this patent

Downloading of data to secure devices

Life of this patent

Abstract

Claims22