Patent ID: 7920706
Filing Date: 2011-04-05
Classification: H04L

Abstract:
1. A method comprising: retrieving in a secure processing point separated from and arranged in communication with a personal device, a unique chip identifier from a read-only storage of an integrated circuit chip included in the personal device; the secure processing point assembling a data package and loading the data package in the personal device for storage therein, the data package including at least one cryptographic key specific to the personal device; receiving at the secure processing point, in response to storing the data package, a backup data package from the personal device, which backup data package is the data package encrypted with a unique secret chip key stored in a tamper-resistant secret storage of the integrated circuit chip included in the personal device; associating the unique chip identifier with the received backup data package; and storing the backup data package and the associated unique chip identifier in a permanent public database separated from the personal device; wherein the secure processing point further performs: associating a unique device identity with the unique chip identifier; signing the associated unique device identity and unique chip identifier using a manufacturer private signature key corresponding to a manufacturer public signature key stored in a read-only memory of the personal device, thereby generating a certificate for the unique device identity; storing the certificate in the personal device; and storing in the permanent public database, the unique device identity and the certificate in association with the backup data package and the associated unique chip identifier.