System and method for using an out-of-band device to program security keys
AssigneeSTMicroelectronics S.r.l.
InventorOleg Logvinov
Life of this patent
Estimating the term…
Abstract
A provisioning device is provided that communicates over a trusted out-of-band communications channel to digital electronic devices in order to exchange security data such as passwords and private or public keys, thereby establishing a secure communications network between the devices.
Claims40
A system comprising a plurality of digital electronic devices, the system comprising:
- a conununications network connecting the digital electronic devices together, the network comprising a security protocol that protects at least one of data and access to the network, the protocol comprising at least one of a passwords and public/private keys;
- each digital electronic device comprising a trusted out-of-band communications port for transferring the at least one of the password and public/private keys to internal storage of the digital electronic device;
- and
- a portable provisioning device for using out-of-band communications to transmit the at least one of the password and public/private keys to the digital electronic devices in the network.
A system comprising a plurality of digital electronic devices, the system comprising:
- a communications network connecting the digital electronic devices together, the network comprising a security protocol that protects at least one of data and access to the network, the protocol comprising at least one of a passwords and public/private keys;
- each digital electronic device comprising a trusted out-of-band communications port for transferring the at least one of the password and public/private keys to internal storage of the digital electronic device;
- and
- a provisioning device for using out-of-band communications to transmit the at least one of the password and public/private keys to the digital electronic devices in the network to thereby program the digital electronic devices, wherein the provisioning device is not portable, but still is able to communicate with all the devices to be programmed.
A method for programming security parameters into a plurality of digital electronic devices in order to enable secure communication between the devices over a communications network, the method comprising:
- programming a provisioning device with at least one security parameter comprising at least one of a password and a security key;
- for each digital electronic device, transferring the at least one security parameter to internal storage of the device using a trusted out-of-band communications port of the device;
- and
- using the at least one security parameter for at least one of encryption of data transmitted over the network and securing access to the network devices.
Dependencies are inferred from the claim text.