Dynamic configuration of a secure processing unit for operations in various environments
AssigneeNational Semiconductor Corporation
InventorsAn Van Le, William B. Sweet, Howard Crompton Herbert
Life of this patent
Estimating the term…
Abstract
A technique to dynamically configure a Secure Processing Unit (SPU) chip in a secure manner using a capability table, which defines the functions that an SPU can perform. The capability table employs a digital signature to ensure the authenticity of the source and contents of the table. It also contains information which identifies the SPU for which the table is intended and a time-stamp indicating the time by which the table must be loaded into an SPU.
Claims39
A data structure for a cryptographically secure processing unit (SPU) stored in a computer readable memory comprising:
- a capability table specifying functions that can be executed by said SPU;
- a first field related to a time period for which said table is valid;
- and
- a second field authenticating said capability table and said first field.
A data structure for a cryptographically secure processing unit (SPU) stored in a computer readable memory comprising:
- a capability table specifying functions that can be executed by said SPU;
- a first field identifying said SPU;
- a second field related to a time period for which said table is valid;
- and
- a third field authenticating the source and content of said capability table, said first field, and said second field.
A method of configuring a cryptographically secure processing unit (SPU) comprising the steps of:
- (a) encoding a security policy for said SPU in a capability table stored in a computer readable memory;
- (b) appending to said table a first field related to a time period for which said table is valid;
- (c) appending to said table a second field authenticating the source and content of said table;
- and
- (d) transmitting said table and said appended fields to said SPU.
A method of configuring a cryptographically secure processing unit (SPU) comprising the steps of:
- (a) encoding a security policy for said SPU in a capability table stored in a computer readable memory;
- (b) appending to said table a first field identifying said table;
- (c) appending to said table a second field related to a time period for which said table is valid;
- (d) appending to said table a third field authenticating the source and content of said table;
- and
- (e) transmitting said table and said appended fields to said SPU.
Dependencies are inferred from the claim text.