Device to limit access to storage to authenticated actors only
AssigneeQUALCOMM Incorporated
InventorsMauro Scagnol, Nicolas Graube
Life of this patent
Estimating the term…
Abstract
Aspects may relate to a device to provide access to storage to authenticated actors only. The device may comprise a processor and a storage. The processor may be coupled to the storage and may be configured to: obtain a nonce; obtain an actor signed hash for an actor; and apply a key derivation function utilizing the actor signed hash and the nonce as inputs to create an actor specific key encapsulating key (KEK). The processor may command the storage of an actor specific storage key, wrapped using the actor specific KEK. Further, the processor may use the actor specific KEK to unwrap actor specific keys used to access storage.
Claims29
A device comprising:
- a storage;
- and
- a processor coupled to the storage, the processor configured to:
- obtain a nonce;
- obtain an actor signed hash for an actor;
- apply a key derivation function utilizing the actor signed hash and the nonce as inputs to create an actor specific key encapsulating key (KEK).
A method to authenticate an actor comprising:
- obtaining a nonce;
- obtaining an actor signed hash for an actor;
- and
- applying a key derivation function utilizing the actor signed hash and the nonce as inputs to create an actor specific key encapsulating key (KEK).
A non-transitory computer-readable medium including code that, when executed by a processor operating in a secure mode of a device, causes the processor to:
- obtain a nonce;
- obtain an actor signed hash for an actor;
- and
- apply a key derivation function utilizing the actor signed hash and the nonce as inputs to create an actor specific key encapsulating key (KEK).
A device comprising:
- means for obtaining a nonce;
- means for obtaining an actor signed hash for an actor;
- and
- means for applying a key derivation function utilizing the actor signed hash and the nonce as inputs to create an actor specific key encapsulating key (KEK).
Dependencies are inferred from the claim text.