Secure encryption key generation and management in open and secure processor environments
AssigneeRenesas Electronics Corporation
InventorGiancarlo PARODI
Life of this patent
Estimating the term…
Abstract
Example implementations include a method of generating a first authentication code based at least partially on an authentication key and an application key, transmitting to a secure subsystem of the local processing device the authentication key, the application key, and the first authentication code, generating, at the secure subsystem, a second authentication code based at least partially on the authentication key and the application key, and generating, at the secure subsystem, a secure application key, in accordance with a determination that the first authentication code and the second authentication code satisfy an authentication criterion.
Claims20
A method executable on a local processing device including a secure subsystem, the method comprising:
- generating a first authentication code based at least partially on an authentication key and an application key;
- transmitting to a secure subsystem of the local processing device the authentication key, the application key, and the first authentication code;
- generating, at the secure subsystem, a second authentication code based at least partially on the authentication key and the application key;
- and
- generating, at the secure subsystem, a secure application key, in accordance with a determination that the first authentication code and the second authentication code satisfy an authentication criterion.
A method executable on a local processing device including a secure subsystem, the method comprising:
- obtaining an secure application key at a secure subsystem of a local processing system;
- obtaining, at the secure subsystem, an application key based at least partially on the secure application key;
- obtaining, at the secure subsystem, a first authentication code based at least partially on the secure application key;
- obtaining, at the secure subsystem, a device identifier key;
- generating, at the secure subsystem, a second authentication code based on the application key and the device identifier key;
- and
- accepting the application key in accordance with a determination that the first authentication code and the second authentication code satisfy an authentication criterion.
A device comprising:
- a system processor configured to generate a first authentication code based at least partially on an authentication key and an application key, and to transmit the authentication key, the application key, and the first authentication code;
- and
- a secure processor operatively coupled to the system processor and configured to receive the authentication key, the application key, and the first authentication code, to generate a second authentication code based at least partially on the authentication key and the application key, and to generate, in accordance with a determination that the first authentication code and the second authentication code satisfy an authentication criterion, a secure application key.
Dependencies are inferred from the claim text.