Compact Security Certificate
AssigneeAltair Semiconductor Ltd.
InventorsYehuda Ben Simon, Omer Botvinik, Avishay Sharaga
Life of this patent
Estimating the term…
Abstract
An Integrated Circuit (IC) includes an on-chip non-volatile memory (NVM) and an on-chip processor. The on-chip NVM is configured to store a representation of a device-specific part of a security certificate assigned to the IC. The on-chip processor is configured to obtain a common part of the security certificate, to reconstruct the security certificate from the obtained common part and from the representation of the device-specific part stored in the on-chip NVM, and to perform a security operation using the reconstructed security certificate.
Claims22
An Integrated Circuit (IC), comprising:
- an on-chip non-volatile memory (NVM), configured to store a representation of a device-specific part of a security certificate assigned to the IC;
- and
- an on-chip processor, configured to obtain a common part of the security certificate, to reconstruct the security certificate from the obtained common part and from the representation of the device-specific part stored in the on-chip NVM, and to perform a security operation on data using the reconstructed security certificate.
A certificate-signing server, comprising:
- an interface for communicating with an Integrated Circuit (IC);
- and
- a processor, configured to receive from the IC at least a public key, to create a security certificate for the IC, to partition the security certificate into a device-specific part that is specific to the IC and a common part that is not specific to the IC, and to send to the IC less than the entire security certificate, but at least a representation of the device-specific part.
A certificate-signing server, comprising:
- an interface for communicating with an Integrated Circuit (IC);
- and
- a processor, configured to generate a pair of public and private keys, to create a security certificate for the IC, to partition the security certificate into a device-specific part that is specific to the IC and a common part that is not specific to the IC, and to send to the IC less than the entire security certificate, but at least a representation of the device-specific part.
A method, comprising:
- storing, in an on-chip non-volatile memory (NVM) in an Integrated Circuit (IC), a representation of a device-specific part of a security certificate assigned to the IC;
- and
- using an on-chip processor in the IC, obtaining a common part of the security certificate, reconstructing the security certificate from the obtained common part and from the representation of the device-specific part stored in the on-chip NVM, and performing a security operation using the reconstructed security certificate.
A method, comprising:
- receiving from an Integrated Circuit (IC) at least a public key;
- creating a security certificate for the IC;
- partitioning the security certificate into a device-specific part that is specific to the IC and a common part that is not specific to the IC;
- and
- sending to the IC less than the entire security certificate, but at least a representation of the device-specific part.
A method, comprising:
- generating a pair of public and private keys;
- creating a security certificate for an integrated circuit (IC);
- partitioning the security certificate into a device-specific part that is specific to the IC and a common part that is not specific to the IC;
- and
- sending to the IC less than the entire security certificate, but at least a representation of the device-specific part.
Dependencies are inferred from the claim text.