Secure key generation and management in open and secure processor environments

A method executable on a local processing system including a secure subsystem, the method comprising:

• generating, by the local processing system via a system processor, a first authentication code based at least partially on a message authentication code key and an application key;
• transmitting, by the local processing system via the system processor, to a secure subsystem of the local processing system the message authentication code key, the application key, and the first authentication code;
• generating, by the secure subsystem via a secure processor, a second authentication code based at least partially on the message authentication code key and the application key;
• determining, by the secure subsystem via the secure processor, that the second authentication code matches the first authentication code;
• obtaining, by the secure subsystem via a secure memory, a device identifier;
• generating, by the secure subsystem via an encryptor and the secure processor, a device authentication key based at least partially on the device identifier and the application key, the encryptor to encrypt the device identifier and the application key;
• and
• generating, by the secure subsystem via the encryptor and the secure processor, a secure application key including a random seed, the application key and the device authentication key, in accordance with the determination that the first authentication code and the second authentication code match, the encryptor to encrypt the device authentication key.