Chip, private key generation method, and trusted certification method
AssigneeHuawei Technologies Co., Ltd.
InventorHeng Cai
Life of this patent
Estimating the term…
Abstract
A chip includes a security core module. The security core module includes a security core and a memory. The security core module prevents access of an external module that is inside the chip and that is other than the security core module, and the security core module prevents access of an external device outside the chip. The security core is configured to generate a layer 1 public key and a layer 1 private key based on a hash of a first root public key and a UDS of the chip stored in the memory; and the memory is configured to store the layer 1 private key.
Claims19
A trusted certification method performed by a security core in a security core module inside a chip, comprising:
- obtaining, by the security core, verification request information sent by a challenge device, the verification request information requesting verification of target data;
- determining, by the security core module, that the verification request is not from an external module inside the chip other than the security core module and the verification request is not from an external device outside the chip;
- signing, by the security core, the target data based on a private key stored in a memory in the security core module;
- and
- sending, by the security core, the signed target data to the challenge device.
A chip comprising:
- a security core module comprising:
- a memory configured to store a private key, and
- a security core in communication with the memory;
- the security core is configured to:
- obtain verification request information sent by a challenge device, the verification request information requesting verification of target data;
- determine that the verification request is not from an external module inside the chip other than the security core module and the verification request is not from an external device outside the chip;
- sign the target data based on the private key stored in a memory;
- and
- send the signed target data to the challenge device.
A server comprising:
- a chip comprising a security core module, the security core module comprising:
- a memory configured to store a private key;
- and
- a security core in communication with the memory, the security core being configured to:
- obtain verification request information sent by a challenge device, the verification request information requesting verification of target data;
- determine that the verification request is not from an external module inside the chip other than the security core module and the verification request is not from an external device outside the chip;
- sign the target data based on the private key stored in a memory;
- and
- send the signed target data to the challenge device.
Dependencies are inferred from the claim text.