Method and apparatus for cryptographically aligning and binding a secure element with a host device

A method of cryptographically aligning a secure element (SE) with a host device (HD), the method comprising:

• generating a secure element-diversified key KSE as a function of a master key KM and a secure element unique identifier UIDSE;
• encrypting host key information HKSE using the secure element-diversified key KSE to generate encrypted host key information CHKSE, wherein the host key information HKSE uniquely corresponds to the secure element;
• storing the host key information HKSE in a SE-HKSE slot of the secure element;
• storing the encrypted host key information CHKSE in secure memory of the secure element;
• and
• obfuscating the master key KM using a host device unique identifier UIDHD to generate a host device-obfuscated key KHD within system operational code stored in protected memory of the host device.

A method of cryptographically binding a secure element (SE) to a host device (HD), the method comprising:

• storing a secure element private key nSE in secure memory of the secure element;
• creating a secure element public key PSE using the secure element private key nSE;
• storing a host device private key nHD within system operational code stored in protected memory of the host device;
• operationally coupling the secure element and the host device;
• and
• cryptographically binding the secure element to the host device by executing the system operational code by the host device, wherein executing the system operational code comprises
• reading the secure element public key PSE from the secure element,
• creating host key information HKSE using the host device private key nHD and the secure element public key PSE, and
• storing the host key information HKSE in a HD-HKSE slot of the host device.