Back to results
US 2010/0169650 A1Published application
Storage minimization technique for direct anonymous attestation keys
OwnerErnest F. Brickell, Jiangtao Liinventors
Life of this patent
Estimating the term…
Abstract
A storage minimization technique for direct anonymous attestation (DAA) keys is presented. In one embodiment, the method includes deriving a random portion of a (DAA) private key from a device's fuse key, computing a point on an elliptical curve from the derived random portion and a master private key, and storing only one coordinate of the point in fuses within the device. Other embodiments are described and claimed.
Claims20
A method comprising:
- deriving a random portion of a direct anonymous attestation (DAA) private key from a device's fuse key;
- computing a point on an elliptical curve from the derived random portion and a master private key;
- and
- storing only one coordinate of the point in fuses within the device.
1 more element
A method comprising:
- deriving a random portion of a direct anonymous attestation (DAA) private key from a device's fuse key;
- reconstructing a point on an elliptical curve from a single coordinate stored in fuses in the device;
- verifying that a private key composed of the random portion and the point on an elliptical curve is a valid DAA private key;
- and
- storing the DAA private key in a memory.
2 more elements
An apparatus comprising:
- a memory;
- a fuse key;
- a minimized direct anonymous attestation (DAA) private key stored in fuses, wherein the fuse-stored minimized DAA private key only includes one coordinate of a point on an elliptical curve;
- and
- authentication logic to:
- derive a random portion of a direct anonymous attestation (DAA) private key from the fuse key;
- reconstruct a point on an elliptical curve from the fuse-stored minimized DAA private key;
- verify that a private key composed of the random portion and the point on an elliptical curve is a valid DAA private key;
- and
- store the DAA private key in the memory.
7 more elements
Dependencies are inferred from the claim text.