Systems and methods for cryptographically enhanced automatic blacklist management and enforcement
AssigneeInfineon Technologies AG
InventorsCheow Guan Lim, Stephan Schaecher
Life of this patent
Estimating the term…
Abstract
Embodiments relate to systems and methods for the management and enforcement of blacklists of counterfeited, cloned or otherwise unauthenticated devices. In an embodiment, a system comprises an accessory comprising an authentication chip including data signed by a private verification key, the data including a unique identifier related to the accessory, and a device comprising a public verification key forming a verification key pair with the private verification key and an identifier list, the device configured to read the data from the authentication chip, compare the unique identifier with the identifier list, and reject the accessory if the unique identifier is found in the identifier list.
Claims34
A system comprising:
- an accessory comprising an authentication chip including data signed by a private verification key, the data including a unique identifier related to the accessory;
- and
- a device comprising a public verification key forming a verification key pair with the private verification key and a global identifier list maintained at least partially external to the device, the device configured to read the data from the authentication chip, compare the unique identifier with the global identifier list, and reject the accessory if the unique identifier is found in the global identifier list.
A semiconductor chip adapted to be embedded in a first device, comprising:
- a memory comprising data signed by a private verification key, wherein the data includes a unique identifier related to the semiconductor chip and a global blacklist of unique identifiers maintained at least partially external to the semiconductor chip, and wherein the private authentication key is stored in a secure portion of the memory;
- and
- a communication interface configured to communicate with a second device comprising a public verification key using an asymmetric cryptographic technique, wherein the communication interface is configured to communicate the signed data to the second device.
A microcontroller comprising:
- circuitry configured to store as private authentication key, a public authentication key and data signed by a private verification key, the data including a unique identifier and as global blacklist maintained at least partially external to the microcontroller;
- and
- communication circuitry configured to communicate public authentication key and the data, to receive a challenge encrypted with the public authentication key, and to communicate a response related to the encrypted challenge unencrypted with the private authentication key.
A method comprising:
- reading signed data from a first device by a second device;
- extracting a unique identifier from the data;
- comparing the unique identifier with a global unique identifier blacklist stored in the second device and maintained at least partially external to the second device;
- rejecting the first device for use with the second device if the unique identifier is found in the global unique identifier blacklist;
- and
- accepting the first device for use with the second device and adding the unique identifier to the global unique identifier blacklist stored in the second device if the unique identifier is not found in the global unique identifier blacklist.
Dependencies are inferred from the claim text.