Storage device, operating method of controller, and system

An operating method of a controller, the operating method comprising:

• receiving temporary authentication information embedded in a computing device, the temporary authentication information including
• a public key of an authentication server and a temporary public key for the controller,
• a temporary token comprising a device identifier that specifies the controller, a maximum count, and a token identifier, and
• a temporary digital signature generated based on a private key paired with the public key of the authentication server, the temporary public key, and the temporary token;
• verifying the temporary authentication information based on a digital signature algorithm and token history information comprising a history of a number of times of use of at least one token;
• and
• performing debugging of a Secure Joint Test Action Group (JTAG) by performing a challenge-response protocol through the challenge-response protocol based on results of the verifying.

A system, comprising:

• a computing device;
• and
• a semiconductor device,
• the computing device configured to execute an authentication program including temporary authentication information, the temporary authentication information including
• a temporary token comprising a token identifier and a maximum count indicating a maximum number of times the temporary token is permitted to be used,
• a public key of an authentication server,
• a temporary public key and a temporary private key corresponding to the semiconductor device, and
• a temporary digital signature generated for the temporary public key and the temporary token, the temporary digital signature generated based on a private key of the authentication server paired with the public key, and
• the semiconductor device is configured to store a hash value and token history information comprising a history of a number of times of use of at least one token and perform a Secure Joint Test Action Group (JTAG) authentication based on the token history information, the hash value, and the temporary digital signature.