Systems and methods for personality aware key management
AssigneeAxiado, Corp.
InventorRaghu Kondapalli
Life of this patent
Estimating the term…
Abstract
Described herein are systems and methods for providing device security. The systems and methods provided herein can comprise generating a personality using one or more parameters of the device. The systems and methods provided herein can further comprise deriving a personality root key based at least in part on the personality.
Claims34
A computer-implemented method of providing device security comprising:
- (a) generating a unique personality for the device using parameters comprising one or more of:
- device lifecycle stage, device debug state, device ownership, device operating environment, and user credentials;
- (b) maintaining a data access matrix associating the personality with a subset of data stored in the device;
- (c) deriving a unique personality root key by cryptographically combining the personality with a physically unclonable function root key;
- (d) encrypting the subset of the data associated with the personality using the personality root key;
- and
- (e) maintaining an auditable data access log for the personality.
A computer-implemented system comprising at least one processor, non-volatile memory, volatile memory, and instructions executable by the at least one processor to cause the at least one processor to perform operations comprising:
- (a) generating a unique personality for a device using parameters comprising one or more of:
- device lifecycle stage, device debug state, device ownership, device operating environment, and user credentials;
- (b) maintaining a data access matrix associating the personality with a subset of data stored in the device;
- (c) deriving a unique personality root key by cryptographically combining the personality with a physically unclonable function root key;
- (d) encrypting the subset of the data associated with the personality using the personality root key;
- and
- (e) maintaining an auditable data access log for the personality.
One or more non-transitory computer-readable storage media encoded with instructions executable by one or more processors to provide an application configured to perform operations comprising:
- (a) generating a unique personality for a device using parameters comprising one or more of:
- device lifecycle stage, device debug state, device ownership, device operating environment, and user credentials;
- (b) maintaining a data access matrix associating the personality with a subset of data stored in the device;
- (c) deriving a unique personality root key by cryptographically combining the personality with a physically unclonable function root key;
- (d) encrypting the subset of the data associated with the personality using the personality root key;
- and
- (e) maintaining an auditable data access log for the personality.
Dependencies are inferred from the claim text.