Back to results
US 9,806,883 B2Granted
Secure provision of a key
AssigneeSiemens Aktiengesellschaft
InventorRainer Falk
Life of this patent
Estimating the term…
Abstract
The embodiments relate to a method and a digital circuit area for securely providing a key using a request unit and a provision unit. In this case, a key is derived from parameters, at least one of which is used for the key derivation in a non-predefinable manner by the request unit. In this case, the key derivation is carried out in a digital circuit area in which the request unit and the provision unit are implemented.
Claims20
A method for securely providing a derived key using a request unit and a provision unit, the method comprising:
- requesting, by the request unit, the derived key from the provision unit, wherein the request unit and the provision unit are integrated in a system on a chip;
- transmitting a first parameter from the request unit to the provision unit, wherein the first parameter is predefined by the request unit;
- determining a secret key by the provision unit, wherein the request unit does not have access to the secret key;
- deriving a second parameter, by the provision unit, from a chip identification tag, a serial number, an identifier produced by a challenge-response inquiry of a physically unclonable function, memory contents, a random number, or a combination thereof;
- generating the derived key, by the provision unit, from the secret key, the first parameter, and the second parameter, wherein the derived key is generated by a key derivation function in a key derivation module within the provision unit, and wherein the second parameter is used for the key derivation function in a non-predefinable manner by the request unit;
- and
- providing the request unit with the derived key.
4 more elements
A system on a chip comprising:
- a request unit;
- and
- a provision unit having a key derivation module,
- wherein the request unit is configured to:
- request a derived key from a provision unit;
- and
- transmit a first parameter to the provision unit, the first parameter predefined by the request unit;
- wherein the provision unit is configured to:
- determine a secret key, wherein access to the secret key by the request unit is able to be prevented;
- derive a second parameter from a chip identification tag, a serial number, an identifier produced by a challenge-response inquiry of a physically unclonable function, memory contents, a random number, or a combination thereof;
- generate the derived key from the secret key, the first parameter, and the second parameter, wherein the derived key is generated by a key derivation function in the key derivation module, wherein the second parameter is able to be used for the key derivation function in a non-predefinable manner by the request unit;
- and
- provide the request unit with the derived key.
10 more elements
Dependencies are inferred from the claim text.