Back to results
US 11,695,749 B2Granted
Secure feature and key management in integrated circuits
AssigneeCryptography Research, Inc.
InventorsPaul Carl Kocher, Benjamin Chen-Min Jun, Andrew John Leiserson
Life of this patent
Estimating the term…
Abstract
A mechanism for providing secure feature and key management in integrated circuits is described. An example integrated circuit includes a secure memory to store a secret key, and a security manager core, coupled to the secure memory, to receive a digitally signed command, verify a signature associated with the command using the secret key, and configure operation of the integrated circuit using the command.
Claims20
A method comprising:
- receiving, by a security manager core of an integrated circuit, feature update information, the feature update information comprising a command that, when executed by the security manager core, enables the security manager core to update a functionality of a hardware feature of the integrated circuit to be at least one of locked, unlocked, or modified, wherein the command is associated with an encrypted payload;
- and
- executing, by the security manager core, the command to update the functionality of the hardware feature, wherein the executing the command comprises:
- deriving, by the security manager core, a mixed key using a base key accessible to the security manager core;
- deriving, by the security manager core, a transport key using the mixed key;
- decrypting, by the security manager core, the encrypted payload using the transport key to obtain a decrypted payload;
- and
- delivering, by the security manager core, the decrypted payload to the hardware feature.
5 more elements
An integrated circuit comprising:
- a secure memory to store a base key;
- a security manager (SM) core coupled to the secure memory, the SM core to:
- receive feature update information comprising a command that, when executed by the SM core enables the SM core to update a functionality of a hardware feature of the integrated circuit to be at least one of locked, unlocked, or modified, wherein the command is associated with an encrypted payload;
- and
- execute the command to update the functionality of the hardware feature, wherein the SM core, in connection with execution of the command, is to:
- derive a mixed key using the base key;
- derive a transport key using the mixed key;
- decrypt the encrypted payload using the transport key to obtain a decrypted payload;
- and
- deliver the decrypted payload to the hardware feature.
7 more elements
An integrated circuit comprising:
- a secure memory to store a secret key and a base key;
- a security manager (SM) core coupled to the secure memory, the SM core to:
- receive a digitally signed message comprising a signature and a command that, when executed by the SM core enables the SM core to update a functionality of a hardware feature of the integrated circuit to be at least one of locked, unlocked, or modified, wherein the command is associated with an encrypted payload;
- verify the signature of the digitally signed message using the secret key;
- and
- execute the command to update the functionality of the hardware feature when the signature is verified, wherein the SM core, in connection with execution of the command, is to:
- derive a mixed key using the base key;
- derive a transport key using the mixed key;
- and
- decrypt the encrypted payload using the transport key to obtain a decrypted payload;
- an extractor coupled to the SM core, the extractor to receive the decrypted payload from the SM core;
- and
- a plurality of sub-extractors coupled to the extractor, wherein each of the plurality of sub-extractors is coupled to one of a plurality of hardware features, wherein the extractor is to deliver the decrypted payload to one of the plurality of sub-extractors and the one of the plurality of sub-extractors is to deliver the decrypted payload to one of the plurality of hardware features.
10 more elements
Dependencies are inferred from the claim text.