Granted Patent B2

US 9,288,192 · App. 13/620,179 · Granted Mar 15, 2016

Abstract

Claims (65)

1. A method for secure handling of input data comprising:

generating a private key within a first hardware security module that is integrated into an input device;

generating a public key corresponding to the private key;

exporting the public key to an external device;

exchanging a temporary cryptographic key with a second hardware security module of the external device to establish a secure communication channel on a communication link between the first hardware security module and the external device;

receiving an encrypted symmetric key via the secure communication channel;

decrypting the encrypted symmetric key using the private key;

receiving, at the first hardware security module, the input data from the input device;

encrypting, using the exchanged temporary cryptographic key, the input data within the first hardware security module before the input data leaves a hardware boundary of the input device; and

transmitting the encrypted input data to the external device over the secure communication channel.

2. The method of claim 1 , further comprising:

exporting a certificate to the external device with the public key, wherein the certificate is configured to verify that the public key is authentic.

3. The method of claim 1 , further comprising:

binding the input device and the external device based on the public key.

4. A first hardware security module for a secure data processing system, the first hardware security module comprising:

a key generator configured to:

generate a private key, and

generate a public key corresponding to the private key;

a memory configured to store the private key; and

a controller configured to:

export the public key to an external device,

exchange a temporary cryptographic key with a second hardware security module of the external device to establish a secure communication link with the external device,

receive an encrypted symmetric key via the secure communication link,

decrypt the encrypted symmetric key using the private key, and

encrypt, using the exchanged temporary cryptographic key, received input data within the first hardware security module.

5. The first hardware security module of claim 4 , wherein the controller is further configured to control:

a boot operation of the first hardware security module;

data flow within the first hardware security module; and

key traffic flow within the first hardware security module.

6. The first hardware security module of claim 4 , wherein the key generator is configured to generate the private key and the public key based on a root key for the first hardware security module that was injected into the first hardware security module.

7. The first hardware security module of claim 4 , further comprising:

a register block configured to be controlled by the controller.

8. The first hardware security module of claim 7 , wherein the register block includes:

a command register; and

a timer or configuration register.

9. The first hardware security module of claim 7 , further comprising:

an external interface coupled to the register block, wherein the controller is further configured to load the public key into the external interface to export the public key to the external device.

10. The first hardware security module of claim 4 , wherein the memory includes a one-time programmable memory.

11. The first hardware security module of claim 4 , wherein the memory is configured to store application code for a cryptographic algorithm or an authentication algorithm.

12. The first hardware security module of claim 4 , further comprising:

a bi-directional interface configured to receive the input data from an input device coupled to the first hardware security module.

13. The first hardware security module of claim 12 , wherein the controller is further configured to:

send the encrypted input data to the external device.

14. The first hardware security module of claim 4 , further comprising:

security assurance logic configured to protect the first hardware security module from a security attack.

15. The first hardware security module of claim 4 , wherein the controller is further configured to:

export a certificate to the external device with the public key, wherein the certificate is used to verify that the public key is authentic.

16. A security device, the security device comprising:

an input device configured to receive data; and

a first hardware security module integrated onto the input device, the first hardware security module comprising:

a key generator configured to:

generate a private key, and

generate a public key corresponding to the private key;

a memory configured to store the private key; and

a controller configured to:

export the public key to an external device,

exchange a temporary cryptographic key with a second hardware security module of the external device to establish a secure communication link with the external device,

receive an encrypted symmetric key via the secure communication link,

decrypt the encrypted symmetric key using the private key,

encrypt, using the exchanged temporary cryptographic key, the data, and

send the data to the external device via the secure communication link.

17. The security device of claim 16 , wherein the first hardware security module is integrated onto a chip of the input device.

18. The security device of claim 16 , wherein the input device is a telephone.

19. The security device of claim 16 , wherein the input device is further configured to store the data within a security boundary of the input device.

20. The method of claim 1 , wherein the communication link is a short range wireless communication link.

Assignments (6)