Patent ID: 8826039

Claim:
An apparatus constructed on an integrated circuit comprising: a hardware security module that is configured to provide a secure boundary for retention of a device unique key for an integrated circuit and to prevent unauthorized accesses from external sources outside of the secure boundary to obtain the device unique key, the hardware security module including an interface for data transfers between the secure boundary of the hardware security module and external sources external to the secure boundary, the hardware security module including a security processor to utilize the device unique key to unwrap a content key within the secure boundary and to decrypt, within the secure boundary, encrypted data received from one of the external sources via the interface by using the unwrapped content key, the security processor to provide decrypted data to the interface for transfer of the decrypted data out of the secure boundary, wherein the data transfers between the secure boundary and the external sources are transferred only through the interface, the hardware security module further including a key cache that is secure from being copied by the external sources to cache the unwrapped content key, in which the unwrapped content key in the key cache is available for use by a routine operating external to the secure boundary to perform encryption or decryption, but without an ability for the routine to copy the unwrapped content key in the key cache; and a bus coupled to the interface of the hardware security module and residing external to the secure boundary to transfer data between the interface and the external sources.