Key transformation unit for a tamper resistant module
View Patent ↗Methods, apparati, and computer-readable media for securely transporting a software application onto a tamper resistant module (TRM) ( 103 ) by using an individualized TRM key set. A method embodiment of the present invention comprises: storing a key pair unique to the TRM ( 103 ) in a memory located on the TRM ( 103 ), where the key pair comprises a TRM public key ( 150 ) and a TRM private key ( 190 ); retrieving the TRM public key from the TRM; encrypting a portion of the software application using the TRM public key ( 150 ); transmitting the encrypted software application to the TRM ( 103 ); and recovering and decrypting the encrypted software application using the TRM private key ( 190 ).
1. A method performed by a tamper resistant module (TRM) for processing an incoming transmission of a software application to said TRM by using an individualized key set for the TRM, the method comprising the steps of:
receiving said incoming transmission, said incoming transmission comprising at least a portion of the software application encrypted with a TRM public key stored on said TRM, said TRM public key being part of said individualized key set;
retrieving a unique TRM private key for said TRM, said TRM private key being part of said individualized key set; and
decrypting said portion of said software application with said TRM private key to recover said portion of said software application.
2. The method of claim 1 , further comprising the step of storing said portion of said software application on said TRM.
3. The method of claim 1 , wherein said individualized key set is generated by asymmetric encryption.
4. The method of claim 1 , wherein a certification authority (CA) having a CA public key digitally signs the TRM public key stored on said TRM to produce a public key certificate unique to said TRM and stored thereon, and wherein said public key certificate is verified prior to said receiving step.
5. The method of claim 4 , wherein said public key certificate is retrieved prior to said receiving step.
6. The method of claim 4 , wherein said public key certificate is verified using said CA public key.
7. Apparatus located on a tamper resistant module (TRM) for processing an incoming transmission by using an individualized key set for said TRM, the apparatus comprising:
means for receiving said incoming transmission, said incoming transmission comprising at least a portion of a secure software application encrypted with a TRM public key, said TRM public key being also stored on said TRM, and said TRM public key forming part of said individualized key set;
means for retrieving a unique TRM private key for said TRM, said TRM private key being part of said individualized key set; and
means for decrypting said portion of said software application with said TRM private key to recover said portion of the software application.
8. The apparatus of claim 7 , further comprising means for storing said portion of said software application on said TRM.
9. The apparatus of claim 7 , further comprising means for retrieving a public key certificate, said public key certificate being generated by a certificate authority (CA), said CA having a CA public key, and said CA digitally signing the TRM public key stored on said TRM.
10. The apparatus of claim 9 , further comprising means for transmitting said public key certificate.
11. The apparatus of claim 9 , wherein said public key certificate is verified using said CA public key.
12. A method, performed by a personal computer (PC) having at least one multiple application tamper resistant module (TRM), each combination of PC and TRM being referred to as a PC/TRM, for processing an incoming transmission of a software application to a PC/TRM by using an individualized key set for the PC/TRM, the method comprising the steps of:
receiving said incoming transmission, said incoming transmission comprising at least a portion of the software application encrypted with a PC/TRM public key stored on said PC/TRM, said PC/TRM public key being part of said individualized key set;
retrieving a unique PC/TRM private key for said PC/TRM, said PC/TRM private key being part of said individualized key set; and
decrypting said portion of said software application with said PC/TRM private key to recover said portion of said software application.
13. Apparatus located on a personal computer (PC) having at least one multiple application tamper resistant module (TRM), each combination of PC and TRM being referred to as a PC/TRM, for processing an incoming transmission by using an individualized key set for a PC/TRM, the apparatus comprising:
means for receiving said incoming transmission, said incoming transmission comprising at least a portion of a secure software application encrypted with a PC/TRM public key, said PC/TRM public key being also stored on said PC/TRM, and said PC/TRM public key forming part of said individualized key set;
means for retrieving a unique PC/TRM private key for said PC/TRM, said PC/TRM private key being part of said individualized key set; and
means for decrypting said portion of said software application with said PC/TRM private key to recover said portion of said software application.