Security descriptor generation
AssigneeMicron Technology, Inc.
InventorOlivier Duval
Life of this patent
Estimating the term…
Abstract
Methods, systems, and devices for security descriptor generation are described. An end device may be authenticated based on a certificate and a device key based on a security descriptor. The security descriptor may be generated based on publicly-available information such as time of day information, geographical information, or a default set of information. The security descriptor may be used for generation of a certificate accessible by a server used for authenticating the device and also may be used by an end device to generate a device key for verification by the server authenticating the device.
Claims23
A method, comprising:
- receiving a request for a certificate associated with authentication of an end device;
- identifying publicly-available information based at least in part on receiving the request;
- generating a firmware security descriptor based at least in part on identifying the publicly-available information;
- generating the certificate based at least in part on the firmware security descriptor and a device-specific secret associated with the end device;
- and
- transmitting the certificate for authentication of the end device to a server associated with authenticating the end device.
A method, comprising:
- receiving, by an end device, a firmware security descriptor produced with publicly-available information;
- obtaining an identifier derived from a device-specific secret stored in a memory of the end device;
- generating a cryptographic key pair comprising a public key and a private key based at least in part on receiving the firmware security descriptor produced with publicly-available information and obtaining the identifier derived from the device-specific secret;
- and
- authenticating the end device based at least in part on the cryptographic key pair.
A device, comprising:
- a receiver configured to receive a request for a certificate associated with authentication of an end device;
- a firmware security descriptor generator configured to:
- identify publicly-available information based at least in part on receiving the request;
- generate a firmware security descriptor based at least in part on identifying the publicly-available information;
- generate the certificate based at least in part on the firmware security descriptor and a device-specific secret associated with the end device;
- and
- generate a cryptographic key pair comprising a public key and a private key based at least in part on the firmware security descriptor and the device-specific secret associated with the end device, wherein the certificate includes the public key of the cryptographic key pair;
- and
- a transmitter configured to transmit the certificate for authentication of the end device to a server associated with authenticating the end device.
Dependencies are inferred from the claim text.