Patent ID: 8014530

Claim:
A method comprising: issuing, by a chip, a key request including a chip identification (ID), the chip ID generated according to a secret random number programmed into the chip prior to integration of the chip within a platform to form an integrated chip platform, the chip ID previously sent from the integrated chip platform in response to a determining that no encrypted application key is present on the integrated chip platform and that sending the chip ID is a first application-specific operation since a power-up of the integrated chip platform; decrypting cipher text received in response to the issued key request to access an application key assigned to the integrated chip platform; storing an encrypted application key within persistent memory of the integrated chip platform, the assigned application key encrypted, by the chip, to form the encrypted application key according to a chip secret key derived from the secret random number programmed into the chip; and outputting the encrypted application key to enable recovery of the encrypted application key in response to a key reprovisioning request, from the chip, that is authenticated according to the chip ID.