Back to results
US 2025/0097030 A1Published application
Embedded hardware security module (hsm)
AssigneeMicron Technology, Inc.
InventorZhan Liu
Life of this patent
Estimating the term…
Abstract
The disclosed embodiments relate to hardware security modules. In one embodiment, a method is disclosed comprising reading a random value from a physically unclonable function (PUF); generating a seed value from the random value; generating a cryptographic key using the seed value; and processing a cryptographic operation using the cryptographic key.
Claims20
A device comprising:
- a physically unclonable function (PUF);
- a volatile storage area storing a plurality of cryptographic keys generated using a seed value derived from the PUF;
- and
- a processor configured to:
- receive a key management request from an external device via an interface,
- select a cryptographic key from the plurality of cryptographic keys based on the key management request,
- perform a key management operation on the selected cryptographic key, and
- provide a response to the external device indicating a result of the key management operation.
5 more elements
A method comprising:
- loading a cryptographic key from a volatile storage area in response to an administrative command, wherein the cryptographic key is generated using a seed value derived from a physically unclonable function (PUF);
- performing an administrative operation using the loaded cryptographic key, wherein the administrative operation comprises at least one of:
- public key retrieval or cryptographic key erasure;
- and
- returning a result of the administrative operation to an external device.
2 more elements
A non-transitory computer-readable storage medium storing instructions that, when executed by a processor, cause the processor to:
- maintain a set of cryptographic keys in a volatile storage area, wherein the cryptographic keys are generated using a seed value derived from a physically unclonable function (PUF);
- receive an administrative request from an external device to perform a key operation;
- identify a target cryptographic key from the set of cryptographic keys based on the administrative request;
- execute the key operation on the target cryptographic key;
- and
- transmit a status message to the external device indicating completion of the key operation.
3 more elements
Dependencies are inferred from the claim text.