Certificate verification
AssigneeAcer Cloud Technology, Inc.
InventorsPramila Srinivasan, John Princen
Life of this patent
Estimating the term…
Abstract
An improved secure programming technique involves reducing the size of bits programmed in on-chip secret non-volatile memory, at the same time enabling the typical secure applications supported by secure devices. A technique for secure programming involves de-coupling chip manufacture from the later process of connecting to ticket servers to obtain tickets. A method according to the technique may involve sending a (manufacturing) server signed certificate from the device prior to any communication to receive tickets. A device according to the technique may include chip-internal non-volatile memory to store the certificate along with the private key, in the manufacturing process.
Claims20
A server comprising:
- a number generator;
- a certificate request module;
- a certificate verification module;
- an interface, coupled to the number generator, the certificate request module, and the certificate verification module,
- wherein, in operation:
- the number generator generates a first number;
- the certificate request module generates a request for a device certificate;
- the first number and the request for a device certificate are sent via the interface;
- a response that includes a second number, a second signature that is generated using the second number, and a device certificate computed as a function of a device identifier (ID), an issuer ID, the second signature, and a public key are received at the interface;
- and
- the certificate verification module validates the device certificate and the second signature, and verifies that the first number and the second number match.
A server comprising:
- a means for generating a first number;
- a means for generating a request for a device certificate;
- a means for sending the first number and the request for a device certificate;
- a means for receiving a response that includes a second number, a second signature that is generated using the second number, and a device certificate computed as a function of a device identifier (ID), an issuer ID, the second signature, and a public key;
- a means for validating the device certificate and the second signature;
- a means for verifying that the first number and the second number match.
A computer program product including memory storing instructions and a processor for executing the instructions in memory:
- a processor;
- memory storing modules having instructions, coupled to the processor, including:
- a number generation module;
- a certificate request module;
- a certificate verification module;
- wherein, in operation, the processor executes the instructions such that:
- the number generation module generates a first number;
- the certificate request module generates a request for a device certificate and sends the first number and the request for a device certificate;
- the certificate verification module:
- receives a response that includes a second number, a second signature that is generated using the second number, and a device certificate computed as a function of a device identifier (ID), an issuer ID, the second signature, and a public key;
- validates the device certificate and the second signature;
- and
- verifies that the first number and the second number match.
Dependencies are inferred from the claim text.