Patent ID: 9129536
Filing Date: 2015-09-08
Classification: G06F,G09C,H04L

Abstract:
1. A first electronic circuit comprising: first circuitry configured to store a message signing private key that is inaccessible external to the first electronic circuit; second circuitry configured to store one or more immutable domain parameters; third circuitry configured to store an immutable trust anchor that is derived from a code signing public key; private key derivation logic configured to generate the message signing private key using a combination of the trust anchor and the one or more immutable domain parameters; public key generation logic configured to generate a message signing public key to match the message signing private key; secure boot logic configured to cause the private key derivation logic to generate the message signing private key, store the message signing private key in the first circuitry, derive a value from the code signing public key, compare the value derived from the code signing public key with the trust anchor stored in the third circuitry, and verify a signature of signed provisioning code using the code signing public key, wherein the signed provisioning code includes provisioning code and the signature; transfer logic that receives a challenge message from a remote computer system, wherein the remote computer system has a message signing public key that was generated by a second electronic circuit, wherein the message signing public key was generated by the second electronic circuit using a message signing private key that was generated using the trust anchor and the one or more immutable domain parameters, which also are stored in the second electronic circuit, and wherein the message signing private key used by the second electronic circuit is the same as the message signing private key generated by the first electronic circuit; and message signing logic that prepares, based on the challenge message, a signed response message using the message signing private key, and wherein the transfer logic is further configured to send the signed response message to the remote computer system, and to receive sensitive provisioning information from the remote computer system when the remote computer system is able to verify the signed response message using the message signing public key.