System and method for generating and managing a key package
AssigneeTala Secure, Inc.
InventorsRajesh Kanungo, Rampura Venkatachar Raman, Benjamin R. Loomis
Life of this patent
Estimating the term…
Abstract
In view of the foregoing, an embodiment herein provides a method of generating and managing a key package using a key manufacturing server. The key manufacturing server performs the steps of: (i) obtaining a key package from a development signing server; (ii) generating at least one production key that is specific to a device in the key package; (iii) communicating the key package with the at least one production key to a key manager associated with the device using a communication link; and (iv) obtaining the key package with at least one device key that is generated by the key manager.
Claims20
A method of generating and managing a key package using a key manufacturing server, comprising:
- obtaining a key package from a development signing server, wherein said key package comprise (a) at least one key and (b) meta information associated with at least one each key;
- generating at least one production key that is specific to a device in said key package, wherein at least one said generated production key is encrypted to obtain at least one cryptographic key, wherein said at least one cryptographic key is stored in a database of said key manufacturing server;
- communicating said key package with said at least one production key to a key manager associated with said device using a communication link;
- and
- obtaining said key package with at least one device key that is generated by said key manager, wherein said at least one device key associated with said key package is stored in said database.
A system for generating and managing a key package, wherein said system comprises:
- a development signing server comprising:
- a processor that is configured to
- obtaining a basic key package with enumeration and description for a plurality of keys as required by a system from a source key manager;
- and
- generating a plurality of development keys to support a plurality of devices and updates said plurality of development keys to said basic key package to obtain a key package, wherein each of said plurality of keys are generated with unique slot number;
- a key manufacturing server comprising:
- a processor that is configured to
- obtain said key package from a development signing server, wherein said key package comprise (a) at least one key and (b) meta information associated with at least one each key;
- generate at least one production key that is specific to a device in said key package, wherein at least one said generated production key is encrypted to obtain at least one cryptographic key, wherein said at least one cryptographic key is stored in a database of said key manufacturing server;
- and
- communicate said key package with said at least one production key to said device using a communication link;
- and
- a key manager associated with said device, wherein said key manager is configured to
- extract said one or more cryptographic keys destined for said device based on said meta information associated with said key package;
- generate said at least one device key that is required for said device as described in said meta information associated with said key package;
- store said at least one device key as described in said meta information after encrypting said at least one device key;
- and
- update said key package with said at least one device key.
Dependencies are inferred from the claim text.