Multi-node expandable cryptographic processing system
A system for securely managing a plurality of hardware security modules (HSMs). One example provides a host device, a first HSM, and a second HSM. The host device is configured to designate the first HSM as a primary HSM, and activate a security association mode in the primary HSM. The first HSM is configured to generate a multi-HSM exchange key (“MEK”), and encrypt the MEK using a temporary key generated with a key agreement protocol between the first HSM and the second HSM. The first HSM shares the encrypted MEK with the second HSM via the host device. The host device deactivates the security association mode, and the first HSM receives a traffic encryption key (“TEK”). The first HSM encrypts the TEK using the MEK, and shares the encrypted TEK with the second HSM via the host device. The second HSM decrypts the TEK using the MEK.
1. A system for securely managing a plurality of hardware security modules (HSMs) each including a memory and an electronic processor, the system comprising:
a first HSM;
a second HSM; and
a host device including a host memory and an electronic processor configured to
designate the first HSM as a primary HSM,
designate the second HSM as a subordinate HSM, and
activate a security association mode;
wherein the first HSM is configured to
in response to the security association mode being activated, generate a multi-HSM exchange key,
using a temporary key generated with a key agreement protocol between the first HSM and the second HSM, encrypt the multi-HSM exchange key using the temporary key, and
share an encrypted multi-HSM exchange key with the second HSM via the host device;
wherein the host device is further configured to
in response to the first HSM sharing the encrypted multi-HSM exchange key with the second HSM, deactivate the security association mode;
wherein the first HSM is further configured to
receive a traffic encryption key (TEK), and
in response to receiving the TEK, notify the host device of having received the TEK;
wherein the host device is further configured to
transmit a request to the first HSM to encrypt the TEK using the multi-HSM exchange key,
receive an encrypted TEK from the first HSM,
store the encrypted TEK in the host memory, and
provide the encrypted TEK to the second HSM;
wherein the second HSM is configured to
invalidate or erase the TEK upon completion of a processing session.
2. The system of claim 1 , wherein the second HSM is configured to
in response to receiving the encrypted multi-HSM exchange key, decrypt the multi-HSM exchange key with the temporary key,
store the multi-HSM exchange key in the memory of the second HSM, and
in response to receiving the encrypted TEK from the host device, decrypt the encrypted TEK using the multi-HSM exchange key stored in the memory of the second HSM.
3. The system of claim 1 , further comprising
a third HSM; wherein
the host device is configured to designate the third HSM as another subordinate HSM, and
the first HSM is configured to share the encrypted multi-HSM exchange key with the second HSM and the third HSM.
4. The system of claim 1 , wherein
the second HSM is further configured to authenticate the first HSM using at least one selected from the group consisting of a first digital signature from the first HSM and a first digital certificate from the first HSM, and
the first HSM is further configured to authenticate the second HSM using at least one selected from the group consisting of a second digital signature from the second HSM and a second digital certificate from the second HSM.
5. The system of claim 1 , wherein the host device includes a user interface and is configured to activate the security association mode by
receiving user credentials from a user via the user interface,
providing the user credentials to the first HSM, and
in response to receiving a verification from the first HSM indicating that the user has administrative privileges, activate the security association mode.
6. The system of claim 1 , wherein the first HSM is further configured to
in response to activating the security association mode, erase or invalidate all keys stored in the memory of the first HSM.
7. The system of claim 1 , wherein the first HSM is further configured to in response to deactivating the security association mode, inhibit generation of subsequent multi-HSM exchange keys by the first HSM.
8. The system of claim 1 , wherein
the first HSM is further configured to
receive an updated TEK,
encrypt the updated TEK with the multi-HSM exchange key, and
export an encrypted updated TEK to the host device;
the host device is further configured to
in response to receiving the encrypted updated TEK, store the encrypted updated TEK in host memory, and
erase or invalidate all keys that were stored in host memory prior to receiving the encrypted updated TEK.
9. The system of claim 1 , wherein the host device further includes a user interface and is configured to designate the first HSM as the primary HSM based on at least one selected from the group consisting of detecting that the first HSM is connected to a connection device connectable to an external key loader and detecting user selection of the first HSM via the user interface.
10. A primary hardware security module (HSM) used in a system for securely managing a plurality of HSMs, the primary HSM comprising:
a memory; and
an electronic processor configured to
in response to receiving a request from a host device to enter a security association mode, enter the security association mode,
in response to receiving a request from the host device to generate a multi-HSM exchange key while in the security association mode, generate the multi-HSM exchange key,
using a temporary key generated using a key agreement protocol, encrypt the multi-HSM exchange key, and share an encrypted multi-HSM exchange key with a subordinate HSM via the host device,
receive a traffic encryption key (TEK),
encrypt the TEK with the multi-HSM exchange key, and
export an encrypted TEK to the host device.
11. The primary HSM of claim 10 , wherein the electronic processor is further configured to
receive an updated TEK,
notify the host device, upon request, of having received the updated TEK,
encrypt the updated TEK with the multi-HSM exchange key, and
upon in response to receiving a request from the host device an encrypted updated TEK, export the encrypted updated TEK to the host device.
12. The primary HSM of claim 10 , wherein the electronic processor is further configured to share the encrypted multi-HSM exchange key with a plurality of subordinate HSMs via the host device.
13. A host device used in a system for securely managing a plurality of hardware security modules (HSMs), the host device comprising:
a memory; and
an electronic processor configured to
designate a first HSM as a primary HSM,
designate a second HSM as a subordinate HSM,
activate a security association mode in the first HSM,
receive an encrypted multi-HSM exchange key,
provide the encrypted multi-HSM exchange key to the subordinate HSM,
deactivate the security association mode in the first HSM,
receive an encrypted traffic encryption key (TEK) from the first HSM, the encrypted TEK being encrypted with the multi-HSM exchange key,
store the encrypted TEK in the memory, and
provide the encrypted TEK to the second HSM.
14. The host device of claim 13 , wherein the electronic processor is further configured to
designate a third HSM as another subordinate HSM, and
provide the encrypted multi-HSM exchange key to the third HSM.
15. The host device of claim 13 , further comprising
a user interface; wherein
the electronic processor is further configured to activate the security association mode by
receiving user credentials from a user via the user interface,
providing the user credentials to the first HSM, and
in response to receiving a verification from the first HSM indicating that the user has administrative privileges, activate the security association mode in the first HSM.
16. The host device of claim 13 , wherein the electronic processor is further configured to, in response to activating the security association mode, erase or invalidate all keys stored in the memory.
17. The host device of claim 13 , wherein the electronic processor is further configured to, in response to deactivating the security association mode, inhibit generation of subsequent multi-HSM exchange keys by the first HSM.
18. The host device of claim 13 , wherein the electronic processor is further configured to
receive an encrypted updated TEK from the first HSM,
in response to receiving the encrypted updated TEK, store the encrypted updated TEK in host memory, and
erase all keys stored in host memory prior to receiving the encrypted updated TEK.
19. The host device of claim 13 , further comprising
a user interface; wherein
the electronic processor is configured to designate the first HSM as the primary HSM based on at least one selected from the group consisting of detecting that the first HSM is connected to a connection device connectable to an external key loader, or detecting user selection of the first HSM via the user interface.
20. A method for securely managing a plurality of hardware security modules (HSMs) each including a memory and an electronic processor, the method comprising:
designating, with a host device, a first HSM as a primary HSM;
designating, with the host device, a second HSM as a subordinate HSM;
activating, with the host device, a security association mode;
in response to the security association mode being activated, generating, with the first HSM, a multi-HSM exchange key;
generating a temporary key using a key agreement protocol between the first HSM and the second HSM;
encrypting, with the first HSM, the multi-HSM exchange key using the temporary key;
sharing, with the first HSM, the encrypted multi-HSM exchange key with the second HSM via the host device;
in response to sharing, with the first HSM, the encrypted multi-HSM exchange key with the second HSM, deactivating the security association mode;
receiving, with the first HSM, a traffic encryption key (TEK);
in response to receiving the TEK, notifying, with the first HSM, the host device of having received the TEK;
transmitting, with the host device, a request to the first HSM to encrypt the TEK using the multi-HSM exchange key;
receiving, with the host device, an encrypted TEK from the first HSM;
storing, with the host device, the encrypted TEK in a host memory;
providing, with the host device, the encrypted TEK to the second HSM; and
invalidating or erasing, with the second HSM, the TEK upon completion of a processing session.