Method for generating a public/private key pair and public key certificate for an internet of things device
A method is provided for generating a public/private key pair and certificate. The method includes providing an integrated circuit (IC) with an IC specific initial public and private key pair and a public key certificate signed by a manufacturer of the IC. A smartcard having stored thereon customer unique configuration data related to the IC is provided to a customer of the IC manufacturer. The smartcard enables the customer to generate a customization value and a customized public key using the customer unique configuration data. In response to the customer receiving the public key certificate signed by the IC manufacturer from the IC, the customer is enabled to provide the customization value, the customized public key, and a public key certificate signed by the customer to the IC. The IC is thus enabled to generate a customized private key, thus providing an IoT device with a public/private key pair and a certificate signed by the device manufacturer without the use of a trusted party.
1. A method comprising:
providing an integrated circuit (IC) with an IC specific initial public and private key pair and a public key certificate signed by a manufacturer of the IC, to a customer of the IC manufacturer; and
providing a smartcard to the customer, the smartcard having stored thereon customer unique configuration data related to the IC;
wherein the smartcard enables the customer to generate a customization value and a customized public key for an Internet of Things (IoT) device using the customer unique configuration data, and wherein in response to the customer receiving the public key certificate signed by the IC manufacturer from the IC, the customer is enabled to provide the customization value, the customized public key, and a public key certificate signed by the customer to the IC, and wherein the IC is enabled to generate a customized private key for the IoT device.
2. The method of claim 1 , wherein the customization value is encrypted by the smartcard.
3. The method of claim 2 , further comprising providing encryption parameters including an elliptic curve E(Zp) of order n (prime).
4. The method of claim 1 , further comprising generating the public key certificate on the smartcard.
5. The method of claim 1 , wherein providing an IC with an IC specific initial public and private key pair and a public key certificate signed by a manufacturer of the IC further comprises providing the IC with a unique ID.
6. The method of claim 1 , wherein providing an IC with an IC specific initial public and private key pair and a public key certificate signed by a manufacturer of the IC further comprises providing the IC during a wafer testing phase of the IC.
7. The method of claim 1 , wherein providing the IC is performed by the IC manufacturer.
8. The method of claim 1 , wherein the customer is characterized as being an internet of things (IoT) device manufacturer.
9. The method of claim 1 , further comprising providing, by the IC manufacturer, an IC-specific symmetric key in the IC device during wafer testing of a semiconductor wafer including the IC device.
10. The method of claim 1 , further comprising establishing a secured communication channel between the IC and the smartcard for the exchange of confidential information.
11. A method comprising:
inserting into an integrated circuit (IC) a specific initial public and private key and a public key certificate signed by a manufacturer of the IC;
storing device manufacturer unique configuration data in smartcard;
providing the IC and the smartcard to an Internet of Things (IoT) device manufacturer, wherein the IC is to be used by the IoT device manufacturer in an IoT device, and wherein the smartcard enables the device manufacturer to generate a customization value and a customized public key using the device manufacturer unique configuration data, and wherein in response to the device manufacturer receiving from the IC the public key certificate signed by the IC manufacturer, the device manufacturer is enabled to provide the customization value, the customized public key, and a public key certificate signed by the device manufacturer to the IC, and wherein the IC is enabled to generate a customized private key.
12. The method of claim 11 , wherein the customization value is encrypted by the smartcard.
13. The method of claim 12 , further comprising providing encryption parameters including an elliptic curve E(7Z,) of order n (prime).
14. The method of claim 11 , further comprising generating the public key certificate on the smartcard.
15. The method of claim 11 , wherein providing an IC with an IC specific initial public and private key pair and a public key certificate signed by a manufacturer of the IC further comprises providing the IC with a unique ID.
16. The method of claim 11 , wherein providing an IC with an IC specific initial public and private key pair and a public key certificate signed by a manufacturer of the IC further comprises providing the IC during a wafer testing phase of the IC.
17. The method of claim 11 , wherein providing the IC further comprises providing the IC to a contract manufacturer of the IoT device manufacturer.
18. The method of claim 11 , wherein the (IoT) device is manufactured by a contract manufacturer of the device manufacturer.
19. The method of claim 11 , further comprising providing, by the IC manufacturer, an IC-specific symmetric key in the IC device during wafer testing of a semiconductor wafer including the IC device.
20. The method of claim 11 , further comprising establishing a secured communication channel between the IC and the smartcard for the exchange of confidential information.