US 11,770,246 B2 · Securely transferring key materials between processors in a multi-processor device

Abstract

A multi-processor device includes a first processor implemented with a secured key derivation and storage component and a second processor implemented without a secured key derivation and storage component. In operation, the second processor is configured to execute an initial boot process by loading a limited functionality boot image when the multi-processor device is powered on. During the execution of the initial boot process, the second processor provisions a secure storage container to hold a key material and sends a request to the first processor for a key material. In response, the second processor receives a key material derived at the first processor. The second processor then stores the key material in a volatile memory portion of the secure storage container. The second processor executes a main boot process only after erasing instances of the key material temporarily stored outside of the secure storage container.

Claims20

Dependent claims

A multi-processor device, comprising:

a first processor implemented with a secured key derivation and storage component;
a second processor implemented without a secured key derivation and storage component;
and
an inter-processor communications data link enabling the first and second processors to exchange data with each other,
wherein the second processor is configured to execute an initial boot process by loading a limited functionality boot image when the multi-processor device is powered on, and further wherein the second processor is configured to, during the execution of the initial boot process:
provision a secure storage container to hold a key material;
send, via the inter-processor communications data link, a request to the first processor for the key material;
receive, via the inter-processor communications data link, a key material derived using the secured key derivation and storage component implemented at the first processor in response to the request;
store the key material in a volatile memory portion of the secure storage container;
and
erase instances of the key material temporarily stored outside of the secure storage container.

8 more elements

A method of securely transferring key material between processors in a multi-processor device comprising a first processor implemented with a secured key derivation and storage component and a second processor implemented without a secured key derivation and storage component, the method comprising:

executing, at the second processor, an initial boot process by loading a limited functionality boot image when the multi-processor device is powered on, wherein executing the initial boot process at the second processor further comprises:
provisioning a secure storage container to hold a key material;
sending, via an inter-processor communications data link established between the first processor and the second processor, a request to the first processor for the key material;
receiving, via the inter-processor communications data link, the key material derived using the secured key derivation and storage component implemented at the first processor in response to the request;
storing the key material in a volatile memory portion of the secure storage container;
and
erasing instances of the key material temporarily stored outside of the secure storage container.

4 more elements

Dependencies are inferred from the claim text.

Securely transferring key materials between processors in a multi-processor device

Life of this patent

Securely transferring key materials between processors in a multi-processor device

Life of this patent

Abstract

Claims20