Mechanism for Managing Authentication Device Lifecycles
AssigneeCerticom Corp.
InventorRobert John Lambert
Life of this patent
Estimating the term…
Abstract
An authentication device is used to authenticate a component to a product using a secret key. The life cycle of the authentication device is controlled by selective deletion of the secret key. An attestation message is sent by the authentication device upon deletion of the secret key. Authentication devices from faulty components or over supply of the authentication devices ma}′ be rendered inoperable and audited.
Claims21
A method of disabling an authentication device having a secret key used to authenticate a component to a product, said method comprising:
- initiating deletion of said secret key from said authentication device,
- preparing an attestation message to indicate that said secret key is deleted,
- deleting said secret key from said authentication device, and outputting said attestation message.
An authentication device for authenticating a component to a product using a secret key, the authentication device comprising:
- a logic unit configured to:
- receive an indicator to delete said secret key from said authentication device,
- prepare an attestation message to indicate that said secret key is deleted, and
- delete said secret key from said authentication device;
- and
- a communication module to output said attestation message.
A computer readable medium for disabling an authentication device having a secret key used to authenticate a component to a product, the computer readable medium comprising computer executable instructions for:
- initiating deletion of said secret key from said authentication device,
- preparing an attestation message to indicate that said secret key is deleted,
- deleting said secret key from said authentication device, and outputting said attestation message.
A method of verifying deletion of a secret key used to authenticate a component to a product, said method comprising:
- receiving from an authentication device an attestation message indicative of deletion of said secret key and verifying said message.
A method of determining a life cycle of an authentication device having a secret key used to authenticate a component to a product, said method comprising:
- embedding said secret key in said authentication device at a first entity forwarding to a second entity identifying information of said authentication device and information related to said secret key,
- generating a device certificate at said second entity,
- forwarding said authentication device and said device certificate to a third entity,
- said third entity selectively deleting of said secret key to render said authentication device inoperable by initiating deletion of said secret key,
- said authentication device generating an attestation message, deleting said secret key and outputting said attestation message.
Dependencies are inferred from the claim text.