Method for symbolic execution on constrained devices
AssigneeNXP B.V.
InventorsFlorian BOEHL, Clemens ORTHACKER, Klaus Martin POTZMADER, Andreas Daniel SINNHOFER, Christian STEGER
Life of this patent
Estimating the term…
Abstract
A method of trust provisioning a device, including: receiving, by a hardware security module (HSM), a list of instructions configured to produce trust provisioning information; performing, by the HSM, a constraint check on the list of instructions including performing a symbolic execution of the list of instructions; receiving confidential inputs; executing, by the HSM, the list of instructions on the confidential inputs when the list of instructions passes the constraint check; outputting, by the HSM, trust provisioning information.
Claims21
A method of trust provisioning a device, comprising:
- receiving, by a hardware security module (HSM), a list of instructions configured to produce trust provisioning information;
- performing, by the HSM, a constraint check on the list of instructions including performing a symbolic execution of the list of instructions;
- receiving confidential inputs;
- executing, by the HSM, the list of instructions on the confidential inputs when the list of instructions passes the constraint check;
- outputting, by the HSM, trust provisioning information.
A method of trust provisioning a device, comprising:
- receiving, by a first hardware security module (HSM), a list of instructions configured to produce trust provisioning information;
- receiving confidential inputs;
- performing, by the first HSM, a constraint check on the list of instructions including performing a symbolic execution of the list of instructions;
- encrypting and signing, by the first HSM, the list of instructions when the list of instructions passes the constraint check;
- sending, by the first HSM, the encrypted and signed list of instructions to a second HSM;
- decrypting and authenticating, by the second HSM, the encrypted and signed list of instructions;
- executing, by the second HSM, the decrypted list of instructions on the confidential inputs when the list of instructions passes a constraint check;
- outputting, by the second HSM, trust provisioning information.
A non-transitory machine-readable storage medium encoded with instructions for execution by a hardware security module (HSM), the non-transitory machine-readable storage medium comprising:
- instructions for performing, by the HSM, a constraint check on the list of instructions including performing a symbolic execution of the list of instructions;
- instructions for receiving confidential inputs;
- instructions for executing, by the HSM, the list of instructions on the confidential inputs when the list of instructions passes the constraint check;
- instructions for outputting, by the HSM, trust provisioning information.
Dependencies are inferred from the claim text.