Patent ID: 8364975
Filing Date: 2013-01-29
Classification: G06F

Abstract:
1. A method for protecting data, the method comprising: retrieving an encrypted version of a cryptographic key from storage of a processing system into a processing unit of the processing system, the cryptographic key being encrypted using a private processor manufacture key; using a processing unit key to decrypt the encrypted version of the cryptographic key, the processing unit key being (i) a public key corresponding to the private processor manufacture key and (ii) permanently burned into the processing unit; storing the decrypted key in protected storage in the processing unit, wherein the protected storage cannot be accessed by snooping a processing system bus communicatively coupled to the processing unit; using the decrypted key to create a session key with the processing unit, wherein the session key is different from the decrypted key; creating a corresponding session key with a trusted platform module of the processing system using an unencrypted version of the cryptographic key installed into the trusted platform module; and using the session key and the corresponding session key to establish a protected communication channel between the processing unit and the trusted platform module of the processing system.