Binding a hardware security module (hsm) to protected software
AssigneeInternational Business Machines Corporation
InventorReinhard T. Buendgen
Life of this patent
Estimating the term…
Abstract
Aspects of the present disclosure relate to binding a hardware security module to a software component. A secret can be cryptographically linked to the software component. The secret linked to the software component can be protected such that the secret is only accessible by a trusted firmware. The software component can then be installed in a secure software context. The protected secret can be transferred to the trusted firmware. A control block can be maintained by the trusted firmware in the secure software context, wherein the control block comprises the secret. The hardware security module can then be configured by the trusted firmware such that the hardware security module only responds to requests from a component having access to the secret.
Claims20
A computer-implemented method for binding a hardware security module to a software component, the method comprising:
- cryptographically linking a secret to the software component;
- protecting the secret linked to the software component such that the secret is only accessible by a trusted firmware;
- installing the software component in a secure software context;
- transferring the protected secret to the trusted firmware;
- maintaining a control block by the trusted firmware for executing the software component in the secure software context, wherein the control block comprises the secret;
- and
- configuring the hardware security module by the trusted firmware such that the hardware security module only responds to requests from a component having access to the secret.
A system for binding a hardware security module to a software component, the system comprising:
- a memory storing program instructions;
- and
- a processor, wherein the processor is configured to execute the program instructions to perform a method comprising:
- cryptographically linking a secret to the software component;
- protecting the secret linked to the software component such that the secret is only accessible by a trusted firmware;
- installing the software component in a secure software context;
- transferring the protected secret to the trusted firmware;
- maintaining a control block by the trusted firmware for executing the software component in the secure software context, wherein the control block comprises the secret;
- and
- configuring the hardware security module by the trusted firmware such that the hardware security module only responds to requests from a component having access to the secret.
A computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processor to cause the processor to perform a method for binding a hardware security module to a software component, the method comprising:
- cryptographically linking a secret to the software component;
- protecting the secret linked to the software component such that the secret is only accessible by a trusted firmware;
- installing the software component in a secure software context;
- transferring the protected secret to the trusted firmware;
- maintaining a control block by the trusted firmware for executing the software component in the secure software context, wherein the control block comprises the secret;
- and
- configuring the hardware security module by the trusted firmware such that the hardware security module only responds to requests from a component having access to the secret.
Dependencies are inferred from the claim text.