Public key infrastructure for system-on-chip
AssigneeIntel Corporation
InventorsDaniel Nemiroff, William Stevens, Jr.
Life of this patent
Estimating the term…
Abstract
The present disclosure is generally related to embedding public key infrastructure information to a system-on-chip (SOC). The method includes generating a key pair including a public key and a private key. The method includes creating a digital certificate corresponding to the public key. The method includes signing the digital certificate with a unique signature. The method includes extracting the public key and the unique signature into a key file, wherein the key file is to be stored in a plurality of silicon fuses on the SOC.
Claims27
A method for embedding public key infrastructure information to a system-on-chip (SOC), comprising:
- generating a key pair comprising a public key and a private key;
- creating a digital certificate corresponding to the public key;
- signing the digital certificate with a unique signature;
- and
- extracting the unique signature from the digital certificate, and saving the unique signature and the public key in a key file, the key file to be stored in a plurality of silicon fuses on the SOC;
- and
- generating a template comprising deterministic portions of the digital certificate, the template to be used to regenerate the digital certificate from the public key;
- wherein the digital certificate is to be regenerated from the key file stored in the plurality of silicon fuses using the template.
A system-on-chip (SOC) for storing public key infrastructure information, comprising a plurality of silicon fuses to store a key file, the key file comprising a public key and a unique signature extracted from a digital certificate, the public key and the unique signature to be used to regenerate the digital certificate using a template that contains deterministic portions of the digital certificate.
A method for extracting public key infrastructure information from a system-on-chip (SOC), comprising:
- reading a key file stored in a plurality of silicon fuses, the key file comprising a public key and a unique signature extracted from a digital certificate;
- regenerating the digital certificate from the public key using a template that contains deterministic portions of the digital certificate;
- validating the unique signature as part of the digital certificate;
- validating the unique signature using a root certificate;
- and
- storing the digital certificate in non-volatile memory.
A non-transitory computer-readable medium comprising instructions that direct a processor to embed public key infrastructure information to a system-on-chip (SOC), wherein the instructions, when executed, direct the processor to:
- generate a key pair comprising a public key and a private key;
- create a digital certificate corresponding to the public key;
- sign the digital certificate with a unique signature;
- and
- extract the unique signature from the digital certificate, and save the unique signature and the public key in a key file, the key file to be stored in a plurality of silicon fuses on the SOC;
- and
- generate a template comprising deterministic portions of the digital certificate, the template to be used to regenerate the digital certificate from the public key;
- wherein the digital certificate is to be regenerated from the key file stored in the plurality of silicon fuses using the template.
A non-transitory computer-readable medium comprising instructions that direct a processor to extract public key infrastructure information from a system-on-chip (SOC), wherein the instructions, when executed, direct the processor to:
- read a key file stored in a plurality of silicon fuses, the key file comprising a public key and a unique signature extracted from a digital certificate;
- regenerate the digital certificate from the public key using a template that contains deterministic portions of the digital certificate;
- validate the unique signature as part of the digital certificate;
- validate the unique signature using a root certificate;
- and
- store the digital certificate in non-volatile memory.
Dependencies are inferred from the claim text.