Back to results
US 11,308,241 B2Granted
Security data generation based upon software unreadable registers
AssigneeInnogrit Technologies Co., Ltd.
InventorMoyang Chen
Life of this patent
Estimating the term…
Abstract
The present disclosure describes a security device including: a hardware-based data reading circuitry that acquires, through hardware-level interaction, security data source based on a software unreadable register; and a first security data generator that generates first security data based on the security data source. Furthermore, the present disclosure also describes a security device including: a second security data generator that generates second security data; and a hardware-based data writing circuitry that writes, through hardware-level interaction, the second security data into a software unreadable register.
Claims18
A security device comprising:
- a hardware-based data reading circuitry connected with a software unreadable register, wherein the hardware-based data reading circuitry is to acquire, through hardware-level interaction, security data source based on the software unreadable register, wherein a size of the register is configured based on a security level associated with the security data source, and wherein the software unreadable register can only be read or written through the hardware-level interaction;
- a first security data generator coupled with the hardware-based data reading circuitry to generate first security data based on the security data source including a digital signature and a plaintext Data Encryption Key (DEK), wherein the first security data generator includes a digital signature generator to generate the digital signature, a key wrapper to encrypt the plaintext DEK, and a key unwrapper coupled with a hardware-based data writing circuitry to decrypt an encrypted DEK;
- and
- a second security data generator configured to generate second security data, wherein the hardware-based data writing circuitry is configured to write, through the hardware-level interaction, the second security data into the software unreadable register.
1 more element
A security chip comprising:
- a security device comprising:
- a hardware-based data reading circuitry connected with a software unreadable register, wherein the hardware-based data reading circuitry is to acquire, through hardware-level interaction, security data source based on the software unreadable register, wherein a size of the register is based on a security level associated with the security data source, and wherein the software unreadable register can only be read or written through the hardware-level interaction;
- a first security data generator coupled with the hardware-based data reading circuitry to generate first security data based on the security data source including a digital signature and a plaintext Data Encryption Key (DEK), wherein the first security data generator includes a digital signature generator to generate the digital signature, a key wrapper to encrypt the plaintext DEK, and a key unwrapper coupled with a hardware-based data writing circuitry to decrypt an encrypted DEK;
- and
- a second security data generator configured to generate second security data, wherein the hardware-based data writing circuitry is configured to write, through the hardware-level interaction, the second security data into the software unreadable register.
2 more elements
A method comprising:
- acquiring, by a hardware-based data reading circuitry through hardware-level interaction, security data source based on a software unreadable register, wherein a size of the register is based on a security level associated with the security data source, and wherein the software unreadable register can only be read and written through the hardware-level interaction;
- and
- generating, by a first security data generator, first security data based on the security data source including a digital signature and a plaintext Data Encryption Key (DEK), wherein the first security data generator includes a digital signature generator to generate the digital signature, a key wrapper to encrypt the plaintext DEK, and a key unwrapper coupled with a hardware-based data writing circuitry to decrypt an encrypted DEK, wherein the hardware-based data writing circuitry is configured to write, through the hardware-level interaction, a second security data into the software unreadable register, wherein a second security data generator is configured to generate the second security data.
Dependencies are inferred from the claim text.