Binding an ASIC to a trust anchor

1. A system, the system comprising:

one or more processors; and

one or more computer-readable non-transitory storage media, the one or more computer-readable non-transitory storage media comprising instructions that, when executed by the one or more processors, cause one or more components of the system to perform operations comprising:

communicating a long-term key associated with a hardware component to a trust anchor, wherein the hardware component is an application-specific integrated circuit (ASIC);

receiving, by the ASIC, an encrypted value associated with a posture assessment, wherein the trust anchor determines whether the ASIC is authorized to run on a product during the posture assessment, wherein the encrypted value is encrypted by the trust anchor using the long-term key, the encrypted value being received from the trust anchor, wherein the product comprises both the trust anchor and the ASIC, wherein the trust anchor is in signal communication with the ASIC;

obtaining a random value (K) based on decrypting the encrypted value, wherein decrypting the encrypted value comprises using the long-term key associated with the ASIC; and

communicating an encrypted response to the trust anchor, the encrypted response encrypted using the random value (K), wherein the encrypted response enables the trust anchor to determine whether the ASIC is authorized to run on the product.

2. The system of claim 1 , wherein the encrypted response comprises a component identifier of the hardware component.

3. The system of claim 1 , wherein the encrypted response comprises a product identifier of a product on which the hardware component has been authorized to run.

4. The system of claim 1 , wherein the operations further comprise;

generating the long-term key using physical unclonable function (PUF) technology;

encrypting the long-term key; and

providing the long-term key to the trust anchor via a cloud-based hardware security module (HSM).

5. The system of claim 1 , wherein the operations further comprise:

obtaining the long-term key during manufacturing of the hardware component.

6. The system of claim 1 , wherein the encrypted response is encrypted using a public key of the trust anchor.

7. The system of claim 1 , wherein the operations further comprise protecting the long-term key by limiting the use of the long-term key to posture assessment-related purposes.

8. The system of claim 1 , wherein the posture assessment does not request the hardware component to generate any cryptographic identifiers.

9. A method, the method comprising:

communicating a long-term key associated with a hardware component to a trust anchor, wherein the hardware component is an application-specific integrated circuit (ASIC);

receiving, by the ASIC, an encrypted value associated with a posture assessment, wherein the trust anchor determines whether the ASIC is authorized to run on a product during the posture assessment, wherein the encrypted value is encrypted by the trust anchor using the long-term key, the encrypted value being received from the trust anchor, wherein the product comprises both the trust anchor and the ASIC, wherein the trust anchor is in signal communication with the ASIC;

obtaining a random value (K) based on decrypting the encrypted value, wherein decrypting the encrypted value comprises using the long-term key associated with the ASIC; and

communicating an encrypted response to the trust anchor, the encrypted response encrypted using the random value (K), wherein the encrypted response enables the trust anchor to determine whether the ASIC is authorized to run on the product.

10. The method of claim 9 , wherein the encrypted response comprises a component identifier of the hardware component.

11. The method of claim 9 , wherein the encrypted response comprises a product identifier of a product on which the hardware component has been authorized to run.

12. The method of claim 9 , further comprising:

generating the long-term key using physical unclonable function (PUF) technology;

encrypting the long-term key; and

providing the long-term key to the trust anchor via a cloud-based hardware security module (HSM).

13. The method of claim 9 , further comprising:

obtaining the long-term key during manufacturing of the hardware component.

14. The method of claim 9 , wherein the encrypted response is encrypted using a public key of the trust anchor.

15. The method of claim 9 , further comprising protecting the long-term key by limiting the use of the long-term key to posture assessment-related purposes.

16. One or more computer-readable non-transitory storage media embodying instructions that, when executed by a processor, cause the performance of operations including:

communicating a long-term key associated with a hardware component to a trust anchor, wherein the hardware component is an application-specific integrated circuit (ASIC);

receiving, by the ASIC, an encrypted value associated with a posture assessment, wherein the trust anchor determines whether the ASIC is authorized to run on a product during the posture assessment, wherein the encrypted value is encrypted by the trust anchor using the long-term key, the encrypted value being received from the trust anchor, wherein the product comprises both the trust anchor and the ASIC, wherein the trust anchor is in signal communication with the ASIC;

obtaining a random value (K) based on decrypting the encrypted value, wherein decrypting the encrypted value comprises using the long-term key associated with the ASIC; and

communicating an encrypted response to the trust anchor, the encrypted response encrypted using the random value (K), wherein the encrypted response enables the trust anchor to determine whether the ASIC is authorized to run on the product.

17. The one or more computer-readable non-transitory storage media of claim 16 , wherein the encrypted response comprises a component identifier of the hardware component.

18. The one or more computer-readable non-transitory storage media of claim 16 , wherein the encrypted response comprises a product identifier of a product on which the hardware component has been authorized to run.

19. The one or more computer-readable non-transitory storage media of claim 16 , wherein the operations further comprise obtaining the long-term key, wherein the long-term key is obtained during manufacturing of the hardware component or the long-term key is obtained by the hardware component generating the long-term key using physical unclonable function (PUF) technology.

20. The one or more computer-readable non-transitory storage media of claim 16 , wherein the operations further comprise protecting the long-term key by limiting the use of the long-term key to posture assessment-related purposes.