Secure key storage using physically unclonable functions
AssigneeIntel Corporation
InventorsJiangtao Li, Anand Rajan, Roel Maes, Sanu K Mathew, Ram Krishnamurthy, Ernie Brickell
Life of this patent
Estimating the term…
Abstract
Some implementations disclosed herein provide techniques and arrangements for provisioning keys to integrated circuits/processors. A processor may include physically unclonable functions component, which may generate a unique hardware key based at least on at least one physical characteristic of the processor. The hardware key may be employed in encrypting a key such as a secret key. The encrypted key may be stored in a memory of the processor. The encrypted key may be validated. The integrity of the key may be protected by communicatively isolating at least one component of the processor.
Claims16
A processor comprising:
- at least one interconnect;
- a first circuit, coupled to the at least one interconnect, to generate a hardware key based on at least one unique physical characteristic of the processor;
- nonvolatile memory, coupled to the first circuit by the at least one interconnect, to store an encrypted key, the encrypted key stored in the nonvolatile memory being a first key received from a tester circuit external to the processor and encrypted using the hardware key;
- a second circuit connected to the nonvolatile memory and the first circuit by the at least one interconnect, the second circuit to decrypt the encrypted key stored in the nonvolatile memory with at least the hardware key to provide a decrypted key and generate a validation indicator based on the decrypted key;
- and
- fixed logic circuitry coupled to the first circuit and the second circuit by the at least one interconnect, the fixed logic circuitry to compare the validation indicator to the first key to generate a validator indicating whether the decrypted key is valid and provide the validator to the tester circuit external to the processor, the tester circuit to validate the encrypted key using the validator.
A system comprising:
- at least one processor comprising:
- at least one interconnect;
- a first circuit, coupled to the at least one interconnect, to generate a hardware key based on at least one unique physical characteristic of the processor;
- nonvolatile memory, coupled to the first circuit by the at least one interconnect, to store an encrypted key, the encrypted key stored in the nonvolatile memory being a first key received from a tester circuit external to the at least one processor and encrypted using the hardware key;
- a second circuit connected to the nonvolatile memory and the first circuit by the at least one interconnect, the second circuit to decrypt the encrypted key stored in the nonvolatile memory with at least the hardware key to provide a decrypted key and generate a validation indicator based on the decrypted key;
- and
- fixed logic circuitry coupled to the first circuit and the second circuit by the at least one interconnect, the fixed logic circuitry to compare the validation indicator to the first key to generate a validator indicating whether the decrypted key is valid and provide the validator to the tester circuit external to the at least one processor, the tester circuit to validate the encrypted key using the validator.
Dependencies are inferred from the claim text.