Secure modules using unique identification elements
AssigneeMaxim Integrated Products, Inc.
InventorsRobert Michael Muchsel, Sung Ung Kwak, Donald W. Loomis, III, Edward Tangkwai Ma
Life of this patent
Estimating the term…
Abstract
Various embodiments of the invention relate to secure systems and modules, and more particularly, to systems, devices and methods of generating and applying identification elements uniquely associated with modules or elements. These unique identification elements provide an improved, statistically random source from which keys may be derived. The application of these keys across various architectures result in an improvement in the security of data communicated within a system.
Claims21
A secure system comprising:
- a microcontroller comprising:
- a processing unit;
- a first unique identification element having a first unique identification value associated with a first physical characteristic of the microcontroller;
- a first secret generator coupled to receive the first unique identification value and to generate a first secret from the first unique identification value;
- a module coupled to communicate with the microcontroller, the module comprising:
- a second unique identification element having a second unique identification value associated with a second physical characteristic of the module;
- a second secret generator coupled to receive the second unique identification value and to generate a second secret from the second unique identification value;
- and
- wherein a first encryption key associated with the first secret is stored within the module and a second encryption key associated with the second secret is generated within the microcontroller, the first and second encryption keys support secure communication between the microcontroller and the module.
A method of initializing secure communication between a microcontroller and a module, the method comprising:
- generating a first secret from a first unique identification element, the first identification element relating to a first physical characteristic of the microcontroller;
- deriving a first encryption key from the first secret;
- generating the first encryption key within the module;
- generating a second secret from a second unique identification element, the second identification element relating to a second physical characteristic of the module;
- deriving a second encryption key from the second secret;
- storing the second encryption key within the microcontroller;
- and
- wherein the first and second encryption keys are used to encrypt and decrypt data between the microcontroller and the module.
A method for generating an encryption key associated with a module, the method comprising:
- generating a unique identification value associated with a physical characteristic of the module, the unique identification value being associated with a gradient measurement related to a semiconductor variation;
- storing a secret associated with the unique identification value;
- and
- deriving an encryption key from the secret.
Dependencies are inferred from the claim text.