Secure provisioning of a programmable device

A non-transitory computer-readable medium, the non-transitory computer-readable medium storing instructions that, when executed by a processor, cause the processor to:

• receive an encrypted data package from a third party device;
• decrypt the encrypted data package to obtain:
• a software image for programming onto a programmable device,
• a first location identifying a location of unprotected sensitive data in the software image,
• a second location of non-volatile memory of the programmable device for storage of protected sensitive data, and
• a third location of volatile memory of the programmable device for storage of the unprotected sensitive data;
• extract the unprotected sensitive data from the software image using the first location;
• transform the unprotected sensitive data into protected sensitive data;
• generate a modified software image by inserting the protected sensitive data into the software image and associating the protected sensitive data with the second location;
• transmit the modified software image to the programming module for programming onto the programmable device, the modified software image comprising a program configured, when executed, to transform the protected sensitive data into unprotected sensitive data;
• and store the unprotected sensitive data at the third location in volatile memory of the programmable device whilst retaining the protected sensitive data at the second location in non-volatile memory of the programmable device.

A programmable device comprising:

• a processor;
• a non-volatile memory;
• and
• a volatile memory;
• wherein the processor is configured to perform steps of:
• retrieve protected sensitive data that is stored in non-volatile memory;
• determine if the protected sensitive data is valid;
• if the protected sensitive data is valid;
• the processor is configured to:
• transform the protected sensitive data into unprotected sensitive data;
• store the unprotected sensitive data in the volatile memory whilst retaining the protected sensitive data in non-volatile memory.

A non-transitory computer-readable medium, the non-transitory computer-readable medium storing instructions that, when executed by a processor of a programmable device, cause the processor to:

• retrieve protected sensitive data that is stored in non-volatile memory of the programmable device;
• determine if the protected sensitive data is valid;
• if the protected sensitive data is valid;
• to:
• transform the protected sensitive data into unprotected sensitive data;
• and
• store the unprotected sensitive data in volatile memory of the programmable device whilst retaining the protected sensitive data in the non-volatile memory.

A method comprising:

• receiving an encrypted data package from a third party device;
• decrypting the encrypted data package to obtain:
• a software image for programming onto a programmable device,
• a first location identifying a location of unprotected sensitive data in the software image,
• a second location of non-volatile memory of the programmable device for storage of protected sensitive data, and
• a third location of volatile memory of the programmable device for storage of the unprotected sensitive data;
• extracting the unprotected sensitive data from the software image using the first location;
• transforming the unprotected sensitive data into protected sensitive data;
• generating a modified software image by inserting the protected sensitive data into the software image and associating the protected sensitive data with the second location;
• and
• transmitting the modified software image to a programming module for programming onto the programmable device, the modified software image comprising a program configured, when executed, to transform the protected sensitive data into unprotected sensitive data;
• and store the unprotected sensitive data at the third location in volatile memory of the programmable device whilst retaining the protected sensitive data at the second location in non-volatile memory of the programmable device.

A method comprising:

• retrieving protected sensitive data that is stored in non-volatile memory;
• determining if the protected sensitive data is valid;
• and
• if the protected sensitive data is valid:
• transforming the protected sensitive data into unprotected sensitive data;
• and
• storing the unprotected sensitive data in the volatile memory whilst retaining the protected sensitive data in non-volatile memory.