Secure Device State Apparatus and Method and Lifecycle Management
AssigneeGoogle Inc.
InventorsMarius SCHILDER, Timothy CHEN, Scott JOHNSON, Harrison PHAM, Derek MARTIN
Life of this patent
Estimating the term…
Abstract
A semiconductor chip device include device state fuses that may be used to configure various device states and corresponding security levels for the semiconductor chip as it transitions from wafer manufacturing to provisioned device. The device states and security levels prevent the semiconductor chip from being accessed and exploited, for example, during manufacturing testing. A secure boot flow process for a semiconductor chip over its lifecycle is also disclosed. The secure boot flow may start at the wafer manufacturing stage and continue on through the insertion of keys and firmware.
Claims20
A method of provisioning a semiconductor chip device, the method comprising:
- determining that the semiconductor chip device is ready for provisioning based on a bit pattern stored in device fuses within the semiconductor chip device;
- writing boot processing code to non-volatile memory of the semiconductor chip device;
- verifying an authenticity of the boot processing code;
- creating a device initialization key using a certificate;
- disabling the certificate;
- deriving a plurality of provisioning keys using the device initialization key and the boot processing code;
- proving identity by providing a device ID and one of the provisioning keys;
- decrypting provisioning data using another of the provisioning keys;
- and
- verifying that the provisioning data is valid.
A semiconductor chip device, comprising:
- device fuses;
- a non-volatile memory;
- a processor;
- a storage device storing instructions, when executed by the processor, cause the processor to:
- determine that the semiconductor chip device is ready for provisioning based on a bit pattern stored in the device fuses;
- write boot processing code to the non-volatile memory;
- verify an authenticity of the boot processing code;
- create a device initialization key using a certificate;
- disable the certificate;
- derive a plurality of provisioning keys using the device initialization key and the boot processing code;
- prove identity by providing a device ID and one of the provisioning keys;
- decrypt provisioning data using another of the provisioning keys;
- and
- verify that the provisioning data is valid.
Dependencies are inferred from the claim text.