Hardware specific cryptographic key
AssigneeAnalog Devices, Inc.
InventorDeniz Karakoyunlu
Life of this patent
Estimating the term…
Abstract
System and techniques to generate a cryptographic key specific to a type of hardware are described herein. Software distribution and execution can use cryptographic keys tailored to specific hardware. A secret is generated from a hardware public key. The secret is used to create software public and private keys. The secret is used to protect the data and the public key is distributed with the software for use on a class of hardware to which the hardware private key is applicable. The hardware then uses the software public key and a local copy of the hardware private key to find the secret and decrypt the software to run the software locally.
Claims20
A device for a hardware derived cryptographic key, the device comprising:
- a secure component configured to restrict access to contents of the secure component;
- memory including instructions;
- and
- processing circuitry that, when in operation, is configured by the instructions to:
- obtaining an encrypted software package, the encrypted software package including encrypted data and a software public key;
- retrieving, based on a trigger, a hardware private key from the secure component;
- calculating a secret based on the hardware private key and the software public key;
- decrypting, with a technique based on the secret, the encrypted data to create data;
- and
- using the data as part of a program execution on an instance of computer hardware in which the device is included.
A machine readable medium including instructions for a hardware specific cryptographic key, the instructions, when executed by processing circuitry, cause the processing circuitry to perform operations comprise:
- requesting a hardware public key for a class of computer hardware;
- generating a secret based on the hardware public key;
- encrypting data based on the secret to create encrypted data;
- packaging a software public key with the encrypted data to create a software package, the software public key based on the secret;
- and
- releasing, upon a request, the software package for use on an instance of computer hardware that is part of the class of computer hardware, the software package being decrypted by the instance of computer hardware using the secret derived from the software public key.
Dependencies are inferred from the claim text.