IP Library Granted Patent US 9,165,163
Granted Patent B2
US 9,165,163 · App. 13/730,766 · Granted Oct 20, 2015

Secure delivery of processing code

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,165,163
App. No.
13/730,766
Granted
Oct 20, 2015
Kind
B2
Abstract

An apparatus may comprise a secure portion of a chip and an external memory device. The secure portion of the chip may be configured to receive an encryption key, and the memory device may be configured to receive an encrypted processing code. The secure portion of the chip may be configured to verify the encrypted processing code by decrypting the encrypted processing code using the encryption key. A non-secure portion of the chip may be configured to write the encrypted processing code on the memory device while the memory device is coupled to the chip. The encryption key may be associated with an identifier of the chip.

Claims (53)

1. An apparatus comprising a chip, the chip comprising:

a secure processing system and a non-secure processing system, wherein the secure processing system is configured to store a first encryption key in the secure processing system;

an interface to connect an external memory device, and access, in the external memory device, an encrypted data for the apparatus that is stored in the external memory device; and

the secure processing system is configured to:

store a second encryption key in the secure processing system in response to successful completion of a test of the secure processing system, wherein the test is based on the first encryption key;

decrypt the encrypted data accessed on the external memory device using the second encryption key to obtain decrypted data;

generate a third encryption key unique to the chip; and

re-encrypt the decrypted data using the third encryption key to obtain re-encrypted data, wherein the re-encrypted data is used as an operating system of the apparatus.

2. The apparatus of claim 1 , wherein, the secure processing system is configured to write the re-encrypted data to the external memory device.

3. The apparatus of claim 1 , wherein the secure processing system is configured to write the re-encrypted data to the apparatus.

4. The apparatus of claim 1 , wherein the external memory device is a flash memory.

5. The apparatus of claim 1 , wherein the interface is a first interface, and the apparatus further comprising:

a second interface configured to connect with a relay, wherein the apparatus is communicably connected to a security device via the relay when the relay is in a secure position.

6. The apparatus of claim 5 , wherein

the secure processing system of the chip is enabled for testing by the security device when the relay is in the secure position.

7. The apparatus of claim 6 , wherein

the apparatus is communicably connected to a tester device via the relay when the relay is in an unsecure position; and

the non-secure processing system of the chip is enabled for testing by the tester device when the relay is in the unsecure position.

8. A method, comprising:

receiving and storing, by a test device, a first encryption key in a secure portion of the test device;

receiving and storing, by the test device, in response to successful completion of testing of the secure portion of the test device using the first encryption key, a second encryption key in the secure portion of the test device;

receiving and storing, by the test device, in the secure portion of the test device, an encrypted processing code customized for the test device;

decrypting, by the test device, the encrypted processing code using the second encryption key to obtain decrypted processing code:

generating, by the test device, a third encryption key;

re-encrypting the decrypted processing code, by the test device, using the third encryption key to obtain a re-encrypted processing code; and

storing the re-encrypted processing code in the test device.

9. The method of claim 8 , wherein the encrypted processing code is received from a memory device that is external to the test device.

10. The method of claim 8 , wherein the second encryption key is unique to the test device.

11. The method of claim 8 , further comprising:

storing the re-encrypted processing code to a memory device that is included in the test device.

12. A non-transitory computer readable storage medium comprising instructions executable by a processor, the non-transitory computer readable storage medium comprising:

instructions to test an unsecure portion of a chip;

instructions to test a secure portion of the chip, in response to successful test of the unsecure portion;

instructions to store a first encryption key in the secure portion, in response to successful test of the secure portion;

instructions to decrypt encrypted data stored on a memory device by the secure portion using the first encryption key to obtain decrypted data;

instructions to generate a second encryption key by the secure portion;

instructions to re-encrypt the decrypted data using the second encryption key to obtain a re-encrypted data; and

instructions to store the re-encrypted data in the chip.

13. The non-transitory computer readable storage medium of claim 12 , wherein the second encryption key is associated with an identifier of the chip.

14. The non-transitory computer readable storage medium of claim 13 , wherein the identifier is associated with a serial number of the chip.

15. The non-transitory computer readable storage medium of claim 13 , wherein the identifier is associated with a group of serial numbers of chips.

16. The non-transitory computer readable storage medium of claim 12 , further comprising:

instructions to store the re-encrypted data to the memory device; and

instructions to couple the memory device to the chip, the re-encrypted data comprising an operating system for the chip.

17. The non-transitory computer readable storage medium of claim 12 , further comprising:

instructions to receive and store a test encryption key in the secure portion of the chip, wherein the secure portion is tested using the test encryption key.

18. The method of claim 8 , further comprising:

loading the test device to a test board for said testing, the test board comprising a relay configurable in either a secure communication position or an unsecure communication position;

establishing, by the test device, a communication path to the relay; and

receiving testing of an unsecure portion of the test device with the relay while the relay is in the unsecure communication position.

19. The method of claim 18 , further comprising:

in response to successfully testing the unsecure portion, testing of the secure portion of the test device using the first encryption key with the relay set to the secure communication position.

20. The method of claim 19 , wherein the secure portion of the test device is tested by a first device and the unsecure portion of the test device is tested by a second device, and the test device receives the second encryption key from the first device in response to successful testing of the secure portion.

Assignments (7)
CORRECTIVE ASSIGNMENT TO CORRECT THE PATENT NUMBER 9,385,856 TO 9,385,756 PREVIOUSLY RECORDED AT REEL: 47349 FRAME: 001. ASSIGNOR(S) HEREBY CONFIRMS THE MERGER. Recorded Mar 22, 2019
From: AVAGO TECHNOLOGIES GENERAL IP (SINGAPORE) PTE. LTD.
To: AVAGO TECHNOLOGIES INTERNATIONAL SALES PTE. LIMITED
Reel/Frame 051144/0648 →
CORRECTIVE ASSIGNMENT TO CORRECT THE EFFECTIVE DATE PREVIOUSLY RECORDED ON REEL 047229 FRAME 0408. ASSIGNOR(S) HEREBY CONFIRMS THE THE EFFECTIVE DATE IS 09/05/2018. Recorded Oct 29, 2018
From: AVAGO TECHNOLOGIES GENERAL IP (SINGAPORE) PTE. LTD.
To: AVAGO TECHNOLOGIES INTERNATIONAL SALES PTE. LIMITED
Reel/Frame 047349/0001 →
MERGER Recorded Oct 4, 2018
From: AVAGO TECHNOLOGIES GENERAL IP (SINGAPORE) PTE. LTD.
To: AVAGO TECHNOLOGIES INTERNATIONAL SALES PTE. LIMITED
Reel/Frame 047229/0408 →
TERMINATION AND RELEASE OF SECURITY INTEREST IN PATENTS Recorded Feb 3, 2017
From: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
To: BROADCOM CORPORATION
Reel/Frame 041712/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 1, 2017
From: BROADCOM CORPORATION
To: AVAGO TECHNOLOGIES GENERAL IP (SINGAPORE) PTE. LTD.
Reel/Frame 041706/0001 →
PATENT SECURITY AGREEMENT Recorded Feb 11, 2016
From: BROADCOM CORPORATION
To: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
Reel/Frame 037806/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 4, 2013
From: BUER, MARK; MENDEL, JACOB
To: BROADCOM CORPORATION
Reel/Frame 029748/0676 →