# US 12,010,217 B2 · Secure memory system programming for host device verification > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,010,217 B2 - Document ID: US12010217B2 - Status: Granted - Kind: B2 - Application number: 17/005,565 - Filed: 2020-08-28 - Published: 2022-02-03 - Granted: 2024-06-11 - Earliest claimed: 2020-07-31 - Assignees: Micron Technology, Inc. - Applicants: Micron Technology, Inc. - Inventors: Olivier Duval - Web page: https://patentgrep.com/patent/US12010217B2 ## CPC - G06F 21/57: Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities - H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates} - G06F 11/323: {Visualisation of programs or trace data} - G06F 21/64: Protecting data integrity, e.g. using checksums, certificates or signatures - G06F 21/79: in semiconductor storage media, e.g. directly-addressable memories - G06Q 50/10: Services - H04L 9/0866: {involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics} - H04L 9/3247: {involving digital signatures} - H04L 67/306: User profiles - H04L 67/51: Discovery or management thereof, e.g. service location protocol [SLP] or web services - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract Various examples are directed to a system for configuring a host device. The host device may comprise a memory system and may be programmed to receive subscriber software for interfacing the host device to a subscription service. The host device may also be programmed to receive from a first assembler secure appliance, first trace data based at least in part on the subscriber software and generate trace-derived data using the first trace data and the memory system identification key. The host device may also be programmed to send a subscription request to a subscription server associated with the subscription service. The subscription request may comprise the trace-derived data. The host device may also be programmed to receive, from the subscription server, subscription data for accessing the subscription service. ## Claims ### Claim 1 A system for configuring a host device, the system comprising: the host device, the host device comprising a memory system, wherein the host device is programmed to: receive subscriber software for interfacing the host device to a subscription service, the subscriber software being installed to the memory system; receive from a first assembler secure appliance, first trace data and a signed command from the first assembler secure appliance to store the first trace data at a secure portion of the memory system, the first trace data comprising a hash of the subscriber software; verify the signed command using a root key of the memory system; responsive to verifying the signed command, store the first trace data at the secure portion of the memory system; generate trace-derived data using the first trace data and a memory system identification key; send a subscription request to a subscription server associated with the subscription service, the subscription request comprising the trace-derived data, the subscription server being distinct from the first assembler secure appliance; receive, from the subscription server, subscription data for accessing the subscription service; and access the subscription service using the subscriber software and the subscription data. ### Claim 2 (depends on 1) The system of claim 1, wherein the host device is further programmed to receive second trace data based at least in part on test result data describing results of a test performed on the host device, wherein the generating of the trace-derived data also uses the second trace data. ### Claim 3 (depends on 1) The system of claim 1, further comprising the first assembler secure appliance, wherein the first assembler secure appliance is programmed to send the first trace data to the host device. ### Claim 4 (depends on 3) The system of claim 3, wherein the first assembler secure appliance is further programmed to: send trace verification data to a key management server, the trace verification data comprising a public key of the first assembler secure appliance; and send the hash of the subscriber software to the key management server. ### Claim 5 (depends on 4) The system of claim 4, wherein the first assembler secure appliance is also programmed to: generate the first trace data using a private key of the first assembler secure appliance, the private key of the first assembler secure appliance associated with the public key of the first assembler secure appliance to apply a cryptographic hash function. ### Claim 6 (depends on 3) The system of claim 3, wherein the first assembler secure appliance is further programmed to: receive a root key for the memory system from a key management server; and generate the signed command using the root key. ### Claim 7 (depends on 1) The system of claim 1, further comprising a key management server, wherein the key management server is programmed to: generate trace verification data using the first trace data and the memory system identification key; and send the trace verification data to the subscription server for verifying the subscription request. ### Claim 8 (depends on 1) The system of claim 1, wherein generating the trace-derived data comprises: reading the subscriber software from a secure portion of the memory system; and generating a second hash of the subscriber software using the subscriber software and the memory system identification key. ### Claim 9 A method for configuring a host device comprising a memory system, the method comprising: storing a memory system identification key at the memory system; receiving subscriber software, by the host device, the subscriber software for interfacing the host device to a subscription service the subscriber software being installed to the memory system; receiving, by the host device and from a first assembler secure appliance, first trace data and a signed command from the first assembler secure appliance to store the first trace data at a secure portion of the memory system, the first trace data comprising a hash of the subscriber software; verifying the signed command using a root key of the memory system; responsive to verifying the signed command, storing the first trace data at the secure portion of the memory system; generating, by the host device, trace-derived data using the first trace data and the memory system identification key; sending, by the host device, a subscription request to a subscription server associated with the subscription service, the subscription request comprising the trace-derived data, the subscription server being distinct from the first assembler secure appliance; receiving, from the subscription server, subscription data for accessing the subscription service; and accessing the subscription service using the subscriber software and the subscription data. ### Claim 10 (depends on 9) The method of claim 9, further comprising receiving, by the host device, second trace data based at least in part on test result data describing results of a test performed on the host device, wherein the generating of the trace-derived data also uses the second trace data. ### Claim 11 (depends on 9) The method of claim 9, wherein the first trace data comprises a cryptographic signature generated using a key of the first assembler secure appliance. ### Claim 12 (depends on 9) The method of claim 9, wherein generating the trace-derived data comprises: reading the subscriber software from a secure portion of the memory system; and generating a second hash of the subscriber software using the subscriber software and the memory system identification key. ### Claim 13 A non-transitory machine-readable medium comprising operations stored thereon that, when executed by at least one processor, causes the at least one processor to perform operations comprising: receiving subscriber software, by a host device comprising a memory system, the subscriber software for interfacing the host device to a subscription service the subscriber software being installed to the memory system; receiving, by the host device and from a first assembler secure appliance, first trace data and a signed command from the first assembler secure appliance to store the first trace data at a secure portion of the memory system, the first trace data comprising a hash of the subscriber software; verifying, by the host device, the signed command using a root key of the memory system; responsive to verifying the signed command, storing, by the host device, the first trace data at the secure portion of the memory system; generating, by the host device, trace-derived data using the first trace data and a memory system identification key associated with a memory system of the host device; sending, by the host device, a subscription request to a subscription server associated with the subscription service, the subscription request comprising the trace-derived data, the subscription server being distinct from the first assembler secure appliance; receiving, from the subscription server, subscription data for accessing the subscription service; and accessing the subscription service using the subscriber software and the subscription data. ### Claim 14 (depends on 13) The medium of claim 13, the operations further comprising receiving, by the host device, second trace data based at least in part on test result data describing results of a test performed on the host device, wherein the generating of the trace-derived data also uses the second trace data. ### Claim 15 (depends on 13) The medium of claim 13, wherein the first trace data comprises a cryptographic signature generated using a key of the first assembler secure appliance. ### Claim 16 (depends on 13) The medium of claim 13, the operations further comprising: sending, by the first assembler secure appliance, trace verification data to a key management server, the trace verification data comprising a public key of the first assembler secure appliance; and send, by the first assembler secure appliance, the hash of the subscriber software to the key management server. ### Claim 17 (depends on 16) The medium of claim 16, the operations further comprising generating, by the first assembler secure appliance the first trace data using a private key of the first assembler secure appliance, the private key of the first assembler secure appliance associated with the public key of the first assembler secure appliance.