Communication node with secure cryptographic keys and methods for securing therein

A method for securing protocol keys in a communication node having a secure host platform and communication platform, the method comprising:

• transferring a protocol access key stored in a secure enclave of the secure host platform comprising a host processor to a secure key store in the communication platform via a secure bus arranged between the secure enclave and secure key store, wherein the protocol access key is secure from access by the host processor and wherein the secure key store is coupled to a cryptographic hardware accelerator (CHA) in the communication platform;
• encrypting a protocol key stored in the secure enclave to an encrypted protocol key;
• transferring the encrypted protocol key from the secure enclave to a memory of the communication platform over an unsecure bus arranged between the secure host platform and the communication platform;
• providing, by a communication controller of the communication platform, the encrypted protocol key stored in the memory to the CHA in response to the communication controller initiating decipher of the encrypted protocol key;
• receiving, by the CHA of the communication platform, the protocol access key from the secure key store;
• and
• deciphering, by the CHA, the encrypted protocol key based on the protocol access key to recover the protocol key.

A communication node comprising:

• a secure host platform comprising a host processor and a secure enclave;
• a communication platform comprising a controller, a secure key store, and a cryptographic hardware accelerator (CHA);
• wherein the secure key store is coupled to the CHA in the communication platform;
• the secure host platform configured to transfer a protocol access key stored in the secure enclave to the secure key store in the communication platform via a secure bus arranged between the secure enclave and the secure key store and encrypt a protocol key stored in the secure enclave to an encrypted protocol key;
• the host processor configured to transfer the encrypted protocol key from the secure enclave to a memory of the communication platform over an unsecure bus arranged between the secure host platform and the communication platform;
• the controller configured to provide the encrypted protocol key stored in the memory to the CHA in response to the controller initiating decipher of the encrypted protocol key;
• and
• the CHA configured to receive the protocol access key from the secure key store;
• and decipher the encrypted protocol key based on the protocol access key to recover the protocol key.

A communication platform comprising:

• a secure bus interface;
• an unsecure bus interface;
• a controller, a secure key store, a memory, and a cryptographic hardware accelerator (CHA) wherein the secure key store is coupled to the CHA in the communication platform;
• the secure key store configured to receive from a secure enclave of a secure host platform a protocol access key over the secure bus interface;
• the memory configured to receive an encrypted protocol key from the secure enclave over the unsecure bus interface;
• the controller configured to provide the encrypted protocol key stored in the memory to the CHA in response to the controller initiating decipher of the encrypted protocol key;
• and
• the CHA configured to receive the protocol access key from the secure key store;
• and decipher the encrypted protocol key based on the protocol access key to recover the protocol key.