Secure generation of a device root key in the field
View Patent ↗Methods and systems for secure key generation are provided. In embodiments, during the manufacturing process, a device generates a primary seed for the device and stores the seed within the device. The device exports the device primary key to a secure manufacturer server. The secure manufacturer server generates a public/private root key for the device and requests a certificate for the public root key of the device from a certificate authority. The device, having the stored primary seed, is integrated into an end-user system. Upon occurrence of a condition, the device after integration into the end-user system generates the public/private root key in the field. The system also receives and installs the certificate for the public root key.
1. An apparatus for secure key generation, comprising:
a device having a secure module, wherein the secure module includes:
a random number generator configured to generate a primary seed,
a non-volatile memory configured to store the generated primary seed, and
a processor configured to generate a device root key including a public device root key and a private device root key from the primary seed upon occurrence of a condition within the apparatus; and
a memory coupled to the device,
wherein the device is configured to export the generated primary seed to a manufacturer server and to receive a certificate for the public device root key.
2. The apparatus of claim 1 , wherein the processor of the secure module is further configured to encrypt the device root key using a second device key.
3. The apparatus of claim 2 , wherein the memory is configured to store the encrypted device root key.
4. The apparatus of claim 1 , wherein the processor of the secure module is further configured to encrypt the private device root key using a second device key.
5. The apparatus of claim 4 , wherein the memory is configured to store the encrypted private device root key.
6. The apparatus of claim 1 , further comprising:
an interface for receiving the certificate for the public device root key, wherein the certificate includes the public device root key and a signature of a certificate authority that issued the certificate.
7. The apparatus of claim 6 , wherein the memory is further configured to store the certificate for the public device root key.
8. The apparatus of claim 1 , wherein the condition is a command requesting generation of a key.
9. The apparatus of claim 1 , wherein the condition is initial boot up of the apparatus.
10. The apparatus of claim 1 , wherein the condition is an initial access of the secure module.
11. The apparatus of claim 1 , wherein the device root key is an RSA device root key.
12. A method for secure key generation with an end-user apparatus including a device having a secure module and a memory, the method comprising:
generating a primary seed in the secure module of the device;
exporting the primary seed from the device;
receiving a certificate for a public device root key generated using the exported primary seed, wherein the certificate includes the public device root key and a digital signature of a certificate authority that issued the certificate;
verifying the certificate;
generating a private device root key using the generated primary seed stored in a memory within the secure module upon occurrence of a condition within the end-user apparatus; and
storing the certificate and the private device root key in the memory of the end-user apparatus.
13. The method of claim 12 , wherein the condition is a command requesting generation of a key.
14. The method of claim 12 , wherein the condition is initial boot up of the end-user apparatus.
15. The method of claim 12 , wherein the condition is an initial access of the secure module.
16. The method of claim 12 , further comprising:
providing the certificate to a second end-user apparatus to authenticate the device.
17. A method for secure key generation in a device manufacturer server, the method comprising:
receiving a primary seed for a device, wherein the primary seed is encrypted with a manufacturer key;
decrypting, at the device manufacturer server, the primary seed for the device;
generating, in a secure module of the device manufacturer server, a public device root key and a private RSA root key for the device using the received primary seed for the device;
requesting a certificate for the generated public device root key from a certificate authority;
receiving the certificate for the generated public device root key from the certificate authority;
providing the certificate to a system incorporating the device; and
deleting the private RSA root key from the device manufacturer server.
18. The method of claim 17 , further comprising associating the public device root key with a device root key name.
19. The method of claim 18 , wherein the device root key name is generated using a sequence number for the device and the primary seed for the device.
20. The method of claim 19 , wherein the sequence number is unique for he device within a lot of devices.
21. The method of claim 20 , further comprising:
storing the device root key name and the public device root key in a manufacturer database.