System and method for configuring and registering a cryptographic device

A method for registering a cryptographic device comprising:

• establishing a communication channel between a database and an electronic system implemented with the cryptographic device, the cryptographic device including non-volatile memory storing a key and a device serial number;
• transmitting a message to the database, the message including the device serial number contained in the cryptographic device;
• and
• receiving a public key and a private key encrypted with the key associated with the cryptographic device, the public key and the private key having been originally generated internally within the cryptographic device but now stored within the database in lieu of the cryptographic device itself.

A system comprising:

• a chipset;
• a non-volatile memory element coupled to the chipset;
• a cryptographic device coupled to the chipset, the cryptographic device including processing logic having a small amount of device non-volatile memory, the non-volatile memory containing a device serial number and a key;
• and
• a transceiver to download a public key of the system and a corresponding private key encrypted with the key into the non-volatile memory during registration, the public and private keys having been originally generated internally within the cryptographic device during a prior configuration stage for exclusive storage outside the cryptoraphic device prior to registration.

A cryptographic device comprising:

• a random number generator to generate at least one random number to produce a symmetric key, a public key and a private key associated with the cryptographic device;
• a non-volatile memory including the symmetric key;
• and
• a processing unit coupled to the random number generator and the non-volatile memory, the processing unit to control (i) loading of the key into the non-volatile memory, (ii) encrypting of the private key with the symmetric key, and (iii) outputting of the public key and the encrypted private key without storage of the public key and the private key within the cryptographic device during configuration of the cryptographic device.