Systems and methods for securing the manufacturing supply chain
AssigneeSilver Spring Networks, Inc.
InventorsMichael C. ST. Johns, Robert G. Boehm, JR., Aditi Hilbert
Life of this patent
Estimating the term…
Abstract
Securing the manufacturing supply chain with digital certificates. A token is coupled to a manufacturing station and enabled via a personal identification number. The token includes a counter limiting the maximum number of certificates to be signed, and compares a serial number of a digital certificate to a tracked serial number. In some embodiments, the token is linked to a particular manufacturing station once the token is enabled.
Claims16
A method of signing digital certificates, the method comprising:
- cryptographically coupling a token to a manufacturing station;
- enabling the token;
- comparing a counter of the number of digital certificates signed to a maximum value;
- obtaining a public key from an electronic device when the counter is less than the maximum value;
- binding the public key into a to-be-signed digital certificate;
- comparing a serial number of the digital certificate to a serial number in a serial number tracker in the token;
- signing the digital certificate when the serial number of the digital certificate matches the serial number in the serial number tracker;
- modifying the serial number in the serial number tracker to the next serial number expected;
- incrementing the counter following the signing of the digital certificate;
- and
- returning the signed digital certificate to the electronic device;
- wherein the digital certificate is not signed when the counter exceeds the maximum value or the serial number of the digital certificate does not match the serial number in the serial number tracker, and wherein the counter is not incremented and the serial number in the serial number tracker is not modified if the digital certificate is not signed.
A system for signing digital certificates of a plurality of electronic devices during manufacturing which limits the use of devices manufactured without proper authority, the system comprising:
- a token including
- a counter,
- a serial number tracker,
- a predetermined personal identification number, and
- a pre-determined maximum value for the counter,
- a manufacturing station including
- a trusted platform module,
- a token interface, and
- an electronic device link;
- wherein the token is coupled to the manufacturing station via the token interface, the manufacturing station receiving a digital certificate via the electronic device link and signing the digital certificate when each of the token is enabled, the counter is less than the predetermined maximum value, and a serial number of the digital certificate matches a serial number in the serial number tracker.
Dependencies are inferred from the claim text.