|
|
|
|
||
New CyrptoManager PatentThis looks like a great invention - it's very good for inventory management and it expires in 2034: <<United States Patent 9,571,472 February 14, 2017 Establishing an initial root of trust for individual components of a distributed security infrastructure The embodiments described herein describe technologies for a device definition process to establish a unique identity and a root of trust of a cryptographic manager (CM) device, the CM device to be deployed in a CM system. The device definition process can take place in a device definition phase of a manufacturing lifecycle of the CM device. One implementation includes a non-transitory storage medium to store an initialization application that, when executed by a CM device, causes the CM device to perform a device definition process to generate a device definition request to establish the unique identity and the root of trust. In response to the device definition request, the initialization application obtains device identity and device credentials of the CM device and stores the device definition request in storage space of a removable storage device. The initialization application imports a device definition response containing provisioning information generated by a provisioning device of a cryptographic manager system in response to the device definition request.>> << BACKGROUND Presently, system-on-a-chip (SoC) vendors may sell many different varieties of the same "integrated circuit" (also referred to as "chip" or "IC"), where each variety is configured for a particular application. IC configuration often occurs by blowing one or more fuses or otherwise programming a one-time programmable memory on the IC. This type of IC configuration is generally a one-way process and cannot be undone. One method of circumventing the permanence of the configuration process is to add redundant or spare bits within the one-time programmable memory that can be combined to modify a previous setting (e.g., by exclusive-ORing multiple bits together to produce the final configuration setting). This type of redundancy has limited flexibility, however, and requires additional fuses which take up additional real estate on the IC. In addition, having multiple fuses behind a setting does not remove the need to perform multiple programming steps to configure ICs adds cost. Likewise, configurations today continue to be performed by IC vendors (or their contractors), who then maintain inventories of ICs with multiple fuse configurations. The stockpiling of the different varieties of the same IC is often inefficient. For example, stockpiled ICs configured for a particular application are potentially wasted if they were overproduced or if customers' IC configuration needs change. Additionally, in some cases order fulfillment can be delayed if inventory of the configured ICs is insufficient to meet the demand. Moreover, the present model of configuration by the IC vendor can limit the range of business relationships and revenue streams practical between IC vendors and downstream customers. For example, the present model may limit the ability to generate future revenue from reconfiguration of ICs after their initial sale. If a downstream customer wishes to obtain features beyond the configured feature set, current ICs typically lack means for unlocking this functionality and there is therefore no opportunity to use downstream feature enablement as a revenue stream. Moreover, the need for secure systems and applications is growing. Presently, allegedly secure ICs are often programmed with security keys on the factory floor. Secure keys may be used in a variety of ways, such as, for example, to protect stored data, control access to digital content, or encrypt/authenticate data used in transactions. Today, these keys can be stored in a one-time programmable memory, which may hold keys directly or hold a base key that is used with cryptographic functions that derivative keys for various functions. Typically, security is provided by performing the key loading process in a secured facility.>> |
return to message board, top of board |