Back to results
US 11,144,649 B2Granted
Sensitive information provision process
AssigneesKigen (UK) Limited, Altair Semiconductor Ltd.
InventorsAsaf Shen, Patrick Biget, Avishay Sharaga, Omer Botvinik
Life of this patent
Estimating the term…
Abstract
A method for exporting sensitive information an integrated circuit, the method comprising: fabricating an integrated circuit, the integrated circuit having a register-transfer level “RTL” key fabricated in the integrated circuit, wherein the RTL key is a pre-determined cryptographic key; signing the sensitive information using the RTL key using a signature; and exporting the signed sensitive information and the signature for validation.
Claims14
A method for exporting sensitive information from an integrated circuit, the method comprising:
- fabricating an integrated circuit, the integrated circuit having a register-transfer level “RTL” key fabricated in the integrated circuit, wherein the RTL key is a pre-determined cryptographic key;
- generating a signature by signing the sensitive information using the RTL key;
- and
- exporting the signed sensitive information and the signature for validation;
- wherein the sensitive information comprises at least two public keys each of a respective key pair of the integrated circuit to be exported for validation, wherein the integrated circuit comprises a hardware key generation value fabricated in the integrated circuit, and wherein the method further comprises:
- generating at least two cryptographic key pairs, each pair comprising a public key and a private key, using the hardware key generation value, wherein the sensitive information comprises the public keys from the at least two cryptographic key pairs.
3 more elements
An integrated circuit comprising, in hardware:
- a register-transfer level “RTL” key, wherein the RTL key is a pre-determined cryptographic key fabricated in the integrated circuit;
- and
- wherein the integrated circuit is configured to:
- generate a signature by signing sensitive information using the RTL key;
- and
- export the signed sensitive information and the signature for validation;
- wherein the sensitive information comprises at least two public keys each of a respective key pair of the integrated circuit to be exported for validation, and the integrated circuit further comprises a hardware key generation value fabricated in the integrated circuit and is configured to use the hardware key generation value to generate at least two cryptographic key pairs each comprising a public key and a private key, wherein the sensitive information comprises the public keys from the at least two cryptographic key pairs.
4 more elements
A method for validating at least two public keys exported of an integrated circuit, the method comprising:
- receiving at least two signed public keys of a respective key pair exported from the integrated circuit, each of the public keys signed using a register-transfer level “RTL” key which is a pre-determined cryptographic key fabricated in the integrated circuit, and wherein each of the public keys are a public key of a respective key pair from among at least two cryptographic key pairs generated from a hardware key generation value fabricated in the integrated circuit;
- validating the signed public keys using the RTL key;
- and
- storing the validated public keys to enable validation.
1 more element
A method for providing sensitive information from a transmitting entity to an electronic device, the method comprising:
- receiving from an electronic device a certificate of the transmitting entity signed by an authentication private key of the electronic device, and an authentication public key of the electronic device;
- verifying the received authentication public key of the electronic device by comparing the received authentication public key to a list of valid authentication public keys, and using the verified authentication public key to validate the certificate;
- in response to validating the certificate, signing sensitive information to be transmitted to the electronic device using an authentication private key of the transmitting entity to generate a signature;
- encrypting the signature and the sensitive information with a public encryption key of the electronic device;
- and
- transmitting the encrypted signature and the encrypted sensitive information to the electronic device for verification of the signature and storage of the sensitive information in the electronic device.
3 more elements
A method for obtaining sensitive information at an electronic device from a transmitting entity, the method comprising:
- transmitting from the electronic device an authentication public key of the electronic device and a certificate of the transmitting entity signed by an authentication private key of the electronic device;
- upon verifying the authentication public key by comparison with a list of valid authentication public keys and validating the certificate, receiving from the transmitting entity an encrypted signature and encrypted sensitive information, wherein the encrypted signature is a signature of the sensitive information signed using an authentication private key of the transmitting entity and is encrypted with a public encryption key of the electronic device;
- decrypting the encrypted signature and the encrypted sensitive information using a private encryption key of the electronic device;
- verifying the decrypted signature using a transmitting entity certificate stored in the electronic device;
- and
- in response to verification of the signature, storing the decrypted sensitive information in the electronic device.
3 more elements
Dependencies are inferred from the claim text.