Granted Patent B2

US 12,284,292 · App. 17/710,591 · Granted Apr 22, 2025

Inventors: Antonino Mondello (Messina, IT); Alberto Troia (Munich, DE)

Assignee: Micron Technology, Inc.

H04L9/3268H04L9/0825H04L9/0869H04L9/3236H04L9/3278H04L63/0442

Abstract

Claims (55)

1. A system comprising:

a communication interface configured to:

send a message to a computing device, wherein the computing device is configured to store a first device secret used to generate a first public identifier; and

receive, from the computing device, the first public identifier, a certificate, and a key, wherein the certificate is generated by the computing device using the message;

a first decryptor configured to provide a first result based on the certificate and the key;

a second decryptor configured to provide a second result based on the first result and the first public identifier, wherein the second result is used to verify an identity of the computing device; and

at least one processor configured to:

send a replace command to the computing device, the replace command to cause the computing device to replace the first device secret with a second device secret; and

receive, from the computing device, a second public identifier generated using the second device secret.

2. The system of claim 1 , wherein the computing device is further configured to use the second device secret as an input to a message authentication code that provides a derived secret, and to generate the second public identifier using the derived secret.

3. The system of claim 1 , wherein the replace command includes a field having a value based on the first device secret.

4. The system of claim 1 , wherein verifying the identity of the computing device comprises comparing the second result to the key.

5. The system of claim 1 , further comprising:

a first asymmetric generator configured to generate the first public identifier; and

a second asymmetric generator configured to generate the key.

6. The system of claim 1 , wherein verifying the identity of the computing device comprises:

concatenating the message and the certificate to provide first data; and

decrypting the first data using the key to provide the first result.

7. The system of claim 1 , wherein the key is a public key, and the computing device is further configured to:

concatenate the message with the public key to provide first data;

encrypt the first data using a private identifier to provide second data; and

encrypt the second data using a private key to provide the certificate.

8. The system of claim 7 , wherein the first public identifier is associated with the private identifier, and the public key is associated with the private key.

9. The system of claim 1 , further comprising a merging component configured to concatenate the message and the certificate to provide first data, wherein the first data is used as an input to the first decryptor to provide the first result.

10. The system of claim 1 , further comprising a freshness mechanism configured to generate a freshness, wherein the message sent to the computing device includes the freshness.

11. The system of claim 1 , wherein the identity of the computing device includes an alphanumeric string.

12. A system comprising:

memory to store a device secret;

a first asymmetric generator configured to generate a public identifier and a private identifier, wherein the public identifier is generated using the device secret;

a second asymmetric generator configured to generate a public key and a private key;

an encryptor configured to generate a certificate; and

at least one processor configured to:

receive a message from a host device; and

send, to the host device, the public identifier, the certificate, and the public key, wherein the certificate is generated using the received message, and the host device is configured to verify an identity using the public identifier, the certificate, and the public key;

wherein the device secret is a first device secret, and the processor is further configured to receive, from the host device, a replace command;

in response to receiving the replace command, replace the first device secret with a second device secret.

13. The system of claim 12 , wherein

in response to receiving the replace command

send, to the host device, a second public identifier generated using the second device secret.

14. The system of claim 12 , wherein the processor is further configured to:

generate a random number;

wherein the random number is used as an input to the second asymmetric key generator to generate the public key and the private key.

15. The system of claim 14 , wherein the random number is generated using a physical unclonable function.

16. The system of claim 12 , wherein the processor is further configured to:

generate a derived secret using a message authentication code having the device secret as an input;

wherein the derived secret is used as an input to the first asymmetric generator to generate the public identifier.

17. The system of claim 12 , wherein verifying the identity comprises concatenating the message and the certificate to provide first data.

18. The system of claim 17 , wherein verifying the identity further comprises decrypting the first data using the public key to provide second data.

19. The system of claim 18 , wherein verifying the identity further comprises decrypting the second data using the public identifier to provide a result, and comparing the result to the public key.

20. A method comprising:

sending a message to a computing device, wherein the computing device is configured to store a first device secret used to generate a first public identifier;

receiving, from the computing device, the first public identifier, a certificate, and a key, wherein the certificate is generated by the computing device using the message;

verifying an identity of the computing device using the first public identifier, the certificate, and the key;

sending a replace command to the computing device, the replace command to cause the computing device to replace the first device secret with a second device secret; and

receiving, from the computing device, a second public identifier generated using the second device secret.

Assignments (1)

Continuity (2)

References Cited (281)

Cited By (1)

US 12,676,761