Back to results
US 6,058,478 AGranted
Apparatus and method for a vetted field upgrade
AssigneeIntel Corporation
InventorDerek L. Davis
Life of this patent
Estimating the term…
Abstract
A cryptographic device being remotely modified only by proper authorization. The cryptographic device comprising a processor, non-volatile memory and a bus interface. The non-volatile memory stores at least a public key of an upgrade entity and possibly a public key of a regulatory entity, a unique, device-specific encryption/decryption key pair and/or internal memory for storing cryptographic programs. The processor processes the cryptographic programs to modifying contents of the non-volatile memory based on an upgrade directive within an upgrade message transmitted by the upgrade entity to the cryptographic device.
Claims32
In a communication system accessible by a regulatory entity and an upgrade entity, a computer system comprising:
- a Peripheral Component Interconnect (PCI) controller;
- and
- a modifiable cryptographic device coupled to the PCI controller, the modifiable cryptographic device including
- a package including an interface to receive an upgrade message including an upgrade directive, an upgrade signature and a regulatory signature,
- a non-volatile memory element implemented in the package, the non-volatile memory to contain at least a public key of the upgrade entity and a public key of the regulatory entity, and
- a processor coupled to the non-volatile memory element and implemented in the package, the processor to (i) decrypt the upgrade signature with the public key of the upgrade entity to verify that the upgrade message originated from the upgrade entity, (ii) decrypt the regulatory signature with the public key of the regulatory entity to verify that the upgrade message is authorized by the regulatory entity, and (iii) change information being stored in the non-volatile memory element in accordance with the upgrade directive if the upgrade message originated from the upgrade entity and has been authorized by the regulatory entity.
3 more elements
A method for ensuring authorized modification of a cryptographic device under direction of an upgrade entity, the method comprising:
- receiving an upgrade message by the cryptographic device including a processor and memory protected by a package, the upgrade message including (i) an upgrade directive being a first message requesting a change of information contained in the cryptographic device, (ii) an upgrade signature being a second message encrypted with a private key of the upgrade entity, and (iii) a regulatory signature being a third message encrypted with a private key of a regulatory entity;
- verifying that the upgrade message is valid within the cryptographic device;
- and
- changing the information contained in the cryptographic device in accordance with the upgrade message.
1 more element
A method for ensuring authorized modification of a cryptographic device, the method comprising:
- (1) receiving an upgrade message including an upgrade directive, an upgrade signature being a first message encrypted with a private key of an upgrade entity, and a regulatory signature being a second message encrypted with a private key of a regulatory entity;
- (2) verifying that the upgrade message is valid by:
- (i) decrypting the upgrade signature with a public key of the upgrade entity stored internally within the cryptographic device, (ii) determining that the contents of the decrypted upgrade signature are identical to the first message, (iii) decrypting the regulatory signature with a public key of the regulatory entity stored internally within the cryptographic device, and (iv) determining that the contents of the decrypted regulatory signature are identical to the second message;
- and
- (3) changing stored contents of the cryptographic device if the upgrade message is valid.
2 more elements
A method for ensuring authorized modification of a cryptographic device, the method comprising:
- receiving an upgrade message including an upgrade directive, an upgrade signature being a first message encrypted with a private key of an upgrade entity, and a regulatory signature being a second message encrypted with a private key of a regulatory entity;
- verifying that the upgrade message is valid within the cryptographic device by (i) decrypting the upgrade signature with a public key of the upgrade entity stored internally within the cryptographic device, (ii) determining whether contents of the decrypted upgrade signature are identical to the first message, and if so (iii) decrypting the regulatory signature with a public key of the regulatory entity stored internally within the cryptographic device, (iv) determining whether contents of the decrypted regulatory signature are identical to the second message, and (v) modifying contents of the cryptographic device.
A modifiable cryptographic device capable of receiving an upgrade message including at least an upgrade directive, a regulatory signature and a upgrade signature, from a remote entity, the modifiable cryptographic device comprising:
- a package;
- a memory element placed in the package, the memory element to contain at least a public key of the remote entity and software;
- and
- a processor coupled to the memory element and placed in the package, the processor to decrypt the upgrade signature with the public key of the remote entity in order to verify that the upgrade message originated from the remote entity, and to enable software within the modifiable cryptographic device to be changed in accordance with the upgrade directive if the upgrade message originated from the remote entity.
1 more element
A modifiable cryptographic device comprising:
- an integrated circuit package;
- a non-volatile memory element placed in the integrated circuit package the non-volatile memory element to contain software including a first cryptographic program and a second cryptographic program;
- and
- a processor placed in the integrated circuit package, the processor to change the software from the first cryptographic program to a second cryptographic program in accordance with an upgrade directive of an upgrade message if the upgrade message (i) originated from an upgrade entity and (ii) has been authorized by a regulatory entity.
1 more element
A computer system comprising:
- a peripheral device;
- and
- a modifiable cryptographic device for communication with the peripheral device to receive an upgrade message including an upgrade directive, an upgrade signature and a regulatory signature, the modifiable cryptographic device including
- a non-volatile memory element to contain at least a first public key being a public key of an upgrade entity and a second public key being a public key of a regulatory entity,
- a processor coupled to the non-volatile memory element, the processor to decrypt the upgrade signature with the first public key and the regulatory signature with the second public key, and to change information being stored in the non-volatile memory element in accordance with the upgrade directive if the upgrade message (i) originated from the upgrade entity and (ii) has been authorized by the regulatory entity, and
- a package including the non-volatile memory and the processor.
3 more elements
A method for ensuring an authorized modification of a device, the method comprising:
- receiving an upgrade message including an upgrade directive, an upgrade signature being a first message encrypted with a private key of an upgrade entity, and a regulatory signature being a second message encrypted with a private key of a regulatory entity;
- verifying within the device that the upgrade message is valid and that modification of the device has been authorized;
- and
- changing stored contents of the device if the upgrade message is valid and that modification of the device has been authorized.
1 more element
Dependencies are inferred from the claim text.