IP Library Granted Patent US 8,472,620
Granted Patent B2
US 8,472,620 · App. 11/763,564 · Granted Jun 25, 2013

Generation of device dependent RSA key

Inventor: Nenad Pavlovic (Malmo, SE)
Assignees: Sony Corporation; Sony Mobile Communications AB
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,472,620
App. No.
11/763,564
Granted
Jun 25, 2013
Kind
B2
Abstract

A portable electronic device for exchanging encrypted data with other electronic devices includes a processor, a memory operatively coupled to the processor, and a prime number generation circuit operatively coupled to the processor and memory. The prime number generation circuit includes logic that generates at least two prime numbers based on unique data stored in the electronic device, wherein said at least two prime numbers are always the same at least two prime numbers. The generated prime numbers then can be used to generate RSA public and private keys within the electronic device.

Claims (44)

1. A portable electronic device for exchanging encrypted data with other electronic devices, comprising:

a processor and memory; and

a prime number generation circuit operatively coupled to said processor and memory, said prime number generation circuit including

logic that generates, independent of user input, at least two prime numbers based on unique data characteristic of the electronic device and stored in the electronic device, wherein said at least two prime numbers are always the same at least two prime numbers.

2. The device according to claim 1 , wherein the at least two prime numbers are different from one another.

3. The device according to claim 1 , wherein the prime number generation circuit further includes logic that derives prime numbers that have a length of at least a predetermined number of bytes.

4. The device according to claim 1 , wherein the prime number generation circuit further includes logic that uses a hardware dependent key of the electronic device as the characteristic data, said hardware dependent key being unique for each electronic device.

5. The device according to claim 4 , wherein the prime number generation circuit further includes logic that uses an HMAC operation in conjunction with the hardware dependent key to generate a repeatable hash value having a predetermined length.

6. The device according to claim 1 , wherein the prime number generation circuit further includes:

logic that converts the at least two probably prime numbers to odd numbers if the at least two probably prime numbers are even numbers; and

logic that determines if the at least two probably prime numbers are prime numbers.

7. The device according to claim 6 , wherein the logic that determines if the at least two probably prime numbers are prime numbers includes:

logic that tests the at least two probably prime numbers for primality;

logic that increments a probably prime number of the at least two probably prime numbers by two when the respective probably prime number fails the primality test; and

logic that repeats the determination step using the incremented probably prime number.

8. The device according to claim 6 , wherein the logic that determines if the at least two probably prime numbers are prime numbers includes:

logic that tests the at least two probably prime numbers for primality;

logic that regenerates a predetermined number of least significant bytes of a probably prime number of the at least two probably prime numbers that fails the primality test; and

logic that repeats the primality test and the regeneration of the least significant bytes until the probably prime number is a prime number.

9. The device according to claim 1 , further comprising logic that caches parameters utilized in generating the at least two prime numbers, and logic that reuses the cached parameters during subsequent RSA key generation.

10. The device according to claim 9 , wherein the logic caches at least one of an RSA public key exponent or a modulus of both the public key and a private key.

11. The device according to claim 1 , further comprising an RSA generation circuit operative to generate public and private RSA keys within the electronic device based on the at least two prime numbers.

12. The device according to claim 1 , wherein the portable electronic device is a mobile telephone.

13. A method for generating at an RSA key pair within a portable electronic device, comprising:

generating, independent of user input, at least two prime numbers based on unique data characteristic of the electronic device and stored within the electronic device, wherein said at least two prime numbers are always the same at least two prime numbers; and

using the at least two prime numbers to generate a private and public RSA key.

14. The method according to claim 13 , further comprising clearing the private RSA key from memory after use of the private RSA key.

15. The method according to claim 13 , wherein generating includes deriving prime numbers that have a length of at least a predetermined number of bytes.

16. The method according to claim 13 , wherein generating includes using a hardware dependent key of the electronic device as the unique data.

17. The method according to claim 16 , wherein generating includes using an HMAC operation in conjunction with the hardware dependent key to generate a repeatable hash value having a predetermined length.

18. The method according to claim 13 , wherein generating includes:

generating at least two probably prime numbers;

converting respective ones of the at least two probably prime numbers to odd numbers if the respective ones of the at least two probably prime numbers are even numbers; and

determining if the at least two probably prime numbers are prime numbers.

19. The method according to claim 18 , wherein determining if the at least two probably prime numbers are prime numbers includes:

testing the at least two probably prime numbers for primality;

incrementing respective ones of the at least two probably prime numbers by two when the respective probably prime numbers fail the primality test; and

repeating the determination step using the respective incremented probably prime number.

20. The method according to claim 18 , wherein determining if the at least two odd numbers are prime includes:

testing the at least two odd numbers for primality;

regenerating a predetermined number of last bytes of the at least two probably prime numbers when the respective odd numbers are not prime; and

repeating the testing and regenerating steps until the at least two odd numbers are prime.

21. The method according to claim 13 , further comprising caching parameters utilized in generating the at least two prime numbers, and reusing the cached parameters during subsequent RSA key generation.

22. The method according to claim 21 , wherein caching includes caching at least one of an RSA public key exponent or a modulus of both the public key and a private key.

Assignments (3)
CHANGE OF NAME Recorded May 28, 2013
From: SONY ERICSSON MOBILE COMMUNICATIONS AB
To: SONY MOBILE COMMUNICATIONS AB
Reel/Frame 030491/0707 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 28, 2013
From: SONY MOBILE COMMUNICATIONS AB
To: SONY CORPORATION; SONY MOBILE COMMUNICATIONS AB
Reel/Frame 030491/0711 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 15, 2007
From: PAVLOVIC, NENAD
To: SONY ERICSSON MOBILE COMMUNICATIONS AB
Reel/Frame 019439/0269 →
Continuity (1)
Related Publication 20080310634A1 · Dec 18, 2008