Trusted network to prevent replacement and cloning attacks
AssigneeMicron Technology, Inc.
InventorZhan Liu
Life of this patent
Estimating the term…
Abstract
In some aspects, the techniques described herein relate to a system including: a remote key management server (RKMS); and a computer network communicatively coupled to the RKMS, the computer network including: a first computing device a second computing device, and a local key management server (LKMS) communicatively coupled to the RKMS, the first computing device, and the second computing device, wherein the LKMS is configured to: writes a LKMS public key to the first computing device using a command signed by the RKMS, write a public key of the second computing device to the first computing device using a second command signed using a private key corresponding to the LKMS public key.
Claims20
A system comprising:
- a computing device;
- and
- a key management server (KMS) configured to:
- write a public key to the computing device using a first command signed by a remote KMS, and
- write a public key of a second computing device to the computing device using a second command signed using an LKMS private key.
A method comprising:
- receiving, by a computing device, a first public key from a local key management server (LKMS);
- receiving, by the computing device, a signed command that includes a second public key associated with a second computing device;
- validating, by the computing device, the signed command using the first public key;
- and
- writing the second public key to a secure storage area of the computing device.
A method comprising:
- transmitting, by a first computing device, a nonce to a second computing device;
- receiving, by the first computing device, a response including a digital signature generated using the nonce;
- reading, by the first computing device, a public key associated with the second computing device;
- and
- validating, by the first computing device, the second computing device by validating the digital signature using the public key.
Dependencies are inferred from the claim text.