Patent ID: 9158896
Filing Date: 2015-10-13
Classification: G06F,H04L

Abstract:
1. A method of generating a secure key for use on a device, said method comprising: accessing secure device data and a secret key from said device, wherein said secure device data and said secret key are stored in fuses accessible to said device; authenticating a first boot code for execution by said device using said secret key; performing a first encryption of said secure device data to generate an encrypted result, wherein said first encryption comprises encrypting said secure device data using said secret key as an encryption key; accessing a unique identifier of said device; performing a logical operation on said encrypted result and said unique identifier to generate a logical result; performing a second encryption of said logical result to generate said secure key, wherein said second encryption comprises encrypting said logical result using said secret key as an encryption key, wherein said secure key is unique to said device, and wherein said secure key is larger than said secure device data; and storing said secure key in a first memory of said device, wherein said first encryption and said second encryption are performed following execution of a second boot code; storing keying data associated with one or more of said secure key and said secret key in a second memory of said device; limiting access to the first memory; and purging keying data associated with one or more of said secure key and said secret key from the second memory of said device.