System and method for certification of a secure platform
A certifying entity ensures that a secure platform is secure after it leaves the manufacturer through the use of one or more keys associated with the secure platform. To maintain the security of the secure platform, the keys may be maintained strictly within the secured portion of the secure platform or the cryptograph engine in the chip may encrypt the private key before the key is stored in the off-chip data memory. To provide a relatively efficient manner of manufacturing the secure platform, the RSA private key is not stored in the secure platform until after the secure platform leaves the manufacturing location.
1 . A method of certifying a secure platform comprising:
manufacturing a platform;
generating a public/private key pair within the platform after the platform is manufactured; and
authenticating the platform and the public key.
2 . The method of claim 1 wherein the platform is a TPM.
3 . The method of claim 1 wherein the key pair is an RSA key pair.
4 . The method of claim 1 wherein the key pair is generated within a secure boundary.
5 . The method of claim 1 wherein the private key is always maintained with a secure boundary.
6 . The method of claim 5 wherein the private key is output from the platform only in encrypted form.
7 . The method of claim 1 wherein the key pair is generated during system test.
8 . The method of claim 1 wherein the key pair is generated by an end user.
9 . The method of claim 8 wherein the key pair is generated when the platform is installed.
10 . The method of claim 1 wherein the platform is manufactured at a secure facility.
11 . The method of claim 1 wherein the public key is associated with an identifier of the platform.
12 . The method of claim 11 wherein the public key is associated with a serial number of the platform.
13 . A method of certifying a secure platform comprising:
manufacturing a platform;
shipping the platform to a user;
generating a public/private key pair within the platform when the platform is installed by the user; and
authenticating the platform and the public key.
14 . The method of claim 13 wherein the platform is a TPM.
15 . The method of claim 13 wherein the key pair is an RSA key pair.
16 . The method of claim 13 wherein the key pair is generated within a secure boundary.
17 . The method of claim 13 wherein the private key is always maintained with a secure boundary.
18 . The method of claim 17 wherein the private key is output from the platform only in encrypted form.
19 . The method of claim 13 wherein the key pair is generated when the platform is installed.
20 . The method of claim 13 wherein the platform is manufactured at a secure facility.
21 . The method of claim 13 wherein the public key is associated with an identifier of the platform.
22 . The method of claim 21 wherein the public key is associated with a serial number of the platform.