US 2026/0081760 A1 · SECURE KEY UTILIZATION IN A DISTRIBUTED HARDWARE SECURITY MODULE

Abstract

Systems, methods, and computer readable storage media described herein for secure key utilization in a distributed hardware security module. In an aspect, a hardware security module is communicatively coupled to and physically separate from a host processor. The hardware security module comprises a security coprocessor. The security coprocessor receives, over a network and from a central security module, a first cryptographic key. The first cryptographic key is stored in a secure data store. A request to perform a cryptographic operation is received from the first host processor. The security coprocessor utilizes the first cryptographic key to perform the cryptographic operation, resulting in a cryptographic result. In one aspect, the cryptographic result to the first host processor. In another aspect, the cryptographic result is written to host memory. In another aspect, the hardware security module notifies the host processor that the cryptographic operation was completed.

Claims20

Dependent claims

A system comprising:

a first hardware security module communicatively coupled to and physically separate from a first host processor, the first hardware security module comprising:
a security coprocessor;
and
a memory comprising programming instructions structured to cause the security coprocessor to:
receive, over a network and from a central security module, a first cryptographic key,
store the first cryptographic key in a secure data store,
receive an attribute from the first host processor,
generate a migration key based on the attribute,
encrypt the first cryptographic key with the migration key,
resulting in a wrapped key, and
cause a second hardware security module to receive the wrapped key, generate the migration key, and utilize the migration key to unwrap the wrapped key.

8 more elements

A first hardware security module physically separate from and communicatively coupled to a host processor of a first computing device, comprising:

a security coprocessor;
and
a memory comprising programming instructions structured to cause the security coprocessor to:
store a first cryptographic key in a secure data store,
receive an attribute from the host processor,
generate a migration key based on the attribute,
encrypt the first cryptographic key with the migration key, resulting in a wrapped key, and
cause a second computing device to receive the wrapped key, generate the migration key, and utilize the migration key to unwrap the wrapped key.

5 more elements

Dependencies are inferred from the claim text.

Secure key utilization in a distributed hardware security module

Life of this patent

Secure key utilization in a distributed hardware security module

Life of this patent

Abstract

Claims20