Electronic device and method for generating attestation certificate based on fused key

An electronic device, comprising:

• an integrated circuit including at least one key comprising a private key and a public key corresponding to the private key, wherein the private key is stored in a fused state in the integrated circuit;
• at least one processor including the integrated circuit;
• and
• a memory operatively connected to the at least one processor, wherein the memory stores instructions that, when executed, cause the at least one processor to:
• obtain at least one piece of hardware information related to the electronic device;
• generate a certificate signing request including the public key and the at least one piece of hardware information;
• generate a signed certificate signing request by signing the certificate signing request using the private key;
• transmit the signed certificate signing request to an external electronic device;
• receive an attestation certificate generated based on the signed certificate signing request, from the external electronic device;
• store the received attestation certificate in the memory;
• receive an attestation record request including a challenge from a server via an application running in the at least one processor;
• in response to the attestation record request:
• generate a signed application certificate using the application by signing an application certificate including the challenge with the private key stored in the fused state;
• generate an attestation record including the stored attestation certificate, a root certificate, the signed application certificate and new hardware information related to the electronic device;
• and
• transmit the attestation record to the server for verification of the electronic device.