Method to prevent cloning of electronic components using public key infrastructure secure hardware device

A system, comprising:

• a host machine;
• and
• an electronic component configured to be operated by the host machine, the electronic component having a processor, a memory, and a secure platform, the secure platform having a plurality of un-resettable monotonic counters each configured to indicate usage of the electronic component at a different phase of the electronic component's life-cycle, the secure platform configured to store an ownership value, to generate at least one dual key pair and a corresponding digital signature, and to securely store at least a private key from the at least one dual key pair by locking the private key into the secure platform based on the ownership value so that the private key cannot be removed without permission from an owner of the electronic component able to supply the ownership value, wherein the secure platform is configured to be used to identify and authenticate the electronic component to the host machine prior to operation by the host machine, to verify that a plurality of lifetime usage parameters of the electronic component stored in the memory of the electronic component do not violate one or more rules programmed in the processor, and to enable operation of the electronic component by the host machine only if the plurality of lifetime usage parameters of the electronic component have not been crossed,
• wherein, upon a determination that any of the plurality of lifetime usage parameters violates the one or more rules programmed into the processor, the secure platform is configured to invalidate the electronic component and to make the electronic component inoperable for future usage by deleting both the at least one dual key pair and the ownership value from the electronic component.

A method, comprising:

• authenticating a secure platform within an electronic component by
• reading a public key from the electronic component by a host machine,
• verifying the public key against a stored key in the host machine,
• receiving data digitally signed by the electronic component using a private key securely stored within the electronic component and locked into the electronic component based on an ownership value so that the private key cannot be removed from the electronic component without permission from an owner of the electronic component able to supply the ownership value, and
• verifying the digitally signed data using the stored key;
• using the electronic component by the host machine only if the signed data and the public key are verified;
• recording each usage of the electronic device at one or more different life-cycle phases of the electronic component to generate one or more total usages of the electronic device, wherein the recording includes advancing one of a plurality of un-resettable monotonic counters each configured to indicate one of the one or more total usages of the electronic component at a different phase of the electronic component's life-cycle;
• and
• allowing continued usage of the electronic device only while each of the one or more total usages of the electronic device has not crossed a predetermined threshold and, upon a determination any of the one or more total usages has crossed its respective predetermined threshold, invalidating the electronic component and making the electronic component inoperable for future usage by deleting both the public and private keys and the ownership value for the secure platform from the electronic component.