Back to results
US 12,113,786 B2Granted
Secure feature and key management in integrated circuits
AssigneeCryptography Research, Inc.
InventorsPaul Carl Kocher, Benjamin Chen-Min Jun, Andrew John Leiserson
Life of this patent
Estimating the term…
Abstract
A mechanism for providing secure feature and key management in integrated circuits is described. An example integrated circuit includes a secure memory to store a secret key, and a security manager core, coupled to the secure memory, to receive a digitally signed command, verify a signature associated with the command using the secret key, and configure operation of the integrated circuit using the command.
Claims20
An integrated circuit comprising:
- a secure memory to store a base key;
- a security manager (SM) core;
- a plurality of hardware features configurable by the SM core;
- and
- a hardware extractor coupled to the SM core and the plurality of hardware features, wherein:
- the SM core is to receive feature update information comprising a command that, when executed by the SM core enables the SM core to update a functionality of one or more of the plurality of hardware features of the integrated circuit to be at least one of locked, unlocked, or modified;
- the SM core is to derive a transport key based on the base key;
- the SM core is to decrypt an encrypted payload associated with the command using the transport key to obtain a decrypted payload;
- and
- the hardware extractor is to route information from the decrypted payload to the one or more of the plurality of hardware features.
7 more elements
An integrated circuit comprising:
- a security manager (SM) core;
- a plurality of hardware features configurable by the SM core;
- and
- a memory to store a feature space comprising one or more values, each value having an associated address and relating to one of a plurality of hardware features;
- a hardware extractor coupled to the SM core and the plurality of hardware features, wherein:
- the SM core is to receive feature update information comprising a command that, when executed by the SM core enables the SM core to update a functionality of one or more of the plurality of hardware features of the integrated circuit to be at least one of locked, unlocked, or modified;
- the SM core is to decrypt an encrypted payload of the command using a transport key to obtain a decrypted payload;
- and
- the hardware extractor is to route information from the decrypted payload to the one or more of the plurality of hardware features,
- wherein at least one value of the one or more values specifies geographical information about the integrated circuit, wherein the geographical information is used to control authorization of the integrated circuit in a specified geographical region.
7 more elements
An integrated circuit comprising:
- a secure memory to store a secret key;
- a security manager (SM) core;
- a plurality of hardware features configurable by the SM core;
- and
- a hardware extractor coupled to the SM core and the plurality of hardware features, wherein:
- the SM core is to receive a digitally signed message comprising a signature and a command that, when executed by the SM core enables the SM core to update a functionality of one or more of the plurality of hardware features of the integrated circuit to be at least one of locked, unlocked, or modified, wherein the command is associated with an encrypted payload;
- the SM core to verify the signature of the digitally signed message using the secret key;
- the SM core is to derive a transport key based on a base key stored in the secure memory;
- the SM core is to decrypt the encrypted payload associated with the command using the transport key to obtain a decrypted payload;
- and
- the hardware extractor is to route information from the decrypted payload to the one or more of the plurality of hardware features.
8 more elements
Dependencies are inferred from the claim text.