Mechanism for managing authentication device lifecycles
View Patent ↗An authentication device is used to authenticate a component to a product using a secret key. The life cycle of the authentication device is controlled by selective deletion of the secret key. An attestation message is sent by the authentication device upon deletion of the secret key. Authentication devices from faulty components or over supply of the authentication devices ma}′ be rendered inoperable and audited.
1. A method of disabling an authentication device having a secret key used to authenticate a component to a product, the authentication device comprising a logic unit interfaced with a memory that stores the secret key, the authentication device fabricated suitable for being physically secured to the component that is used by the product, the authentication device for communicatively cooperating with the product to authenticate the component to the product, said method comprising:
receiving, with the logic unit communicating through a communication interface of said authentication device, a password requesting deletion of the secret key from the memory;
initiating deleting, with the logic unit and based on determining that the received password matches a value stored in a first memory of said authentication device, said secret key from said memory of said authentication device preventing said secret key from being used by the authentication device to authenticate a component to a product;
preparing, with the logic unit performing cryptographic operations using at least the secret key, an attestation message that indicates said secret key is deleted from said memory of said authentication device, said attestation message comprising information that is cryptographically verifiable that said attestation message was prepared by the logic unit of the authentication device; and
deleting, with the logic unit, said secret key from said memory of said authentication device, and outputting through a communication interface of said authentication device said attestation message.
2. The method of claim 1 wherein said attestation message is prepared prior to deletion of said secret key.
3. The method of claim 1 wherein said attestation message is outputted subsequent to deletion of said secret key, and wherein a copy of said attestation message is stored in said memory of said authentication device.
4. The method of claim 1 wherein said secret key is used with the logic unit to encrypt said attestation message.
5. The method of claim 1 wherein said secret key operates upon a message indicative of deletion of said secret key to prepare said attestation message.
6. The method of claim 5 wherein said secret key signs said message indicative of deletion using a cryptographic signature protocol.
7. The method of claim 6 wherein said cryptographic signature protocol is a public signature protocol.
8. The method of claim 7 wherein said attestation message includes a certificate of a public key corresponding to said secret key.
9. The method of claim 8 wherein deletion of said secret key is initiated by application of the received password and said attestation message indicative of deletion comprises said received password.
10. The method of claim 1 , further comprising:
cryptographically authenticating, with the logic unit, a sender of the received password requesting deletion of the secret key from the memory.
11. An authentication device for authenticating a component to a product using a secret key, the authentication device comprising a logic unit interfaced with a memory that stores the secret key, the authentication device fabricated suitable for being physically secured to the component that is used by the product, the authentication device for communicatively cooperating with the product to authenticate the component to the product, and at least one of
the memory storing computer executable instructions which, responsive to being executed by the logic unit cause the logic unit to perform operations; and
the logic unit comprising state machines deployed in the authentication device hardware which responsive to execution of the state machines causes the logic unit to perform operations,
the operations comprising:
receiving, with the logic unit communicating through a communication interface of said authentication device, a password requesting deletion of the secret key from the memory preventing said secret key from being used by the authentication device to authenticate the component to the product;
preparing, with the logic unit performing cryptographic operations using at least the secret key, an attestation message that indicates said secret key is deleted from said memory of said authentication device, said attestation message comprising information that is cryptographically verifiable that said attestation message was prepared by the logic unit of the authentication device;
deleting, with the logic unit, said secret key from said memory of said authentication device preventing said secret key from being used by the authentication device to authenticate a component to a product; and
outputting through a communication interface of said authentication device said attestation message.
12. A non-transitory computer readable medium for disabling an authentication device having a secret key used to authenticate a component to a product, the authentication device comprising a logic unit interfaced with a memory that stores the secret key, the authentication device for communicatively cooperating with the product to authenticate the component to the product, the computer readable medium comprising computer executable instructions which, responsive to being executed by the logic unit, cause the logic unit to perform operations comprising:
initiating, with the logic unit and based on the authentication device receiving at least a password requesting deletion of the secret key, deletion of said secret key from said memory of said authentication device preventing said secret key from being used to authenticate the component to the product;
preparing, with the logic unit performing cryptographic operations using at least the secret key, an attestation message that indicates said secret key is deleted from said memory of said authentication device, said attestation message comprising information that is cryptographically verifiable that said attestation message was prepared by the logic unit of the authentication device; and
deleting, with the logic unit, said secret key from said memory of said authentication device preventing said secret key from being used by the authentication device to authenticate a component to a product; and
outputting through a communication interface of said authentication device said attestation message.
13. A method of verifying deletion of a secret key from an authentication device to prevent said secret key from being used by the authentication device to authenticate a component to a product, the authentication device comprising a logic unit interfaced with a memory that stores the secret key, the authentication device suitable for being physically secured to a component that is used by the product, the authentication device for communicatively cooperating with the product to authenticate the component to the product, said method comprising:
receiving, with a verification device, an attestation message from the authentication device, said attestation message comprising
cryptographic information that is cryptographically verifiable that said attestation message was prepared by the logic unit performing cryptographic operations using at least the secret key; and
identifying information that identifies the authentication device; and
verifying, with the verification device performing cryptographic operations at least on the cryptographic information of the attestation message, that the attestation message was prepared by the logic unit of the authentication device and the received attestation message indicating that based on the authentication device having received at least a password requesting deletion of the secret key, the logic unit deleted said secret key from said memory of said authentication device, preventing said secret key from being used by the authentication device to authenticate a component to a product.
14. A method of determining a life cycle of an authentication device having a secret key used by the authentication device to authenticate a component to a product, the authentication device comprising a logic unit interfaced with a memory that stores the secret key, the authentication device suitable for being physically secured to a component that is used by the product, the authentication device for communicatively cooperating with the product to authenticate the component to the product, said method comprising:
receiving said authentication device having said secret key previously embedded in said memory;
receiving a device certificate associated with said authentication device, said device certificate having been previously produced and cryptographically signed, said device certificate comprising at least identifying information that identifies uniquely the authentication device:
receiving, with the logic unit communicating through a communication interface of said authentication device, a password requesting deletion of the secret key from the memory;
generating, with the logic unit performing cryptographic operations using at least the secret key, an attestation message that indicates said secret key is deleted from said memory of said authentication device, said attestation message comprising information that is cryptographically verifiable that said attestation message was prepared by the logic unit of the authentication device; and
deleting, with the logic unit, said secret key from said memory, preventing said secret key from being used by the authentication device to authenticate a component to a product; and
outputting through a communication interface of said authentication device said attestation message.
15. The method of claim 14
further comprising:
physically securing the authentication device to a component that is used by the product.
16. The method of claim 14 wherein the generating comprises:
generating, with the logic unit performing cryptographic operations using said secret key upon a message indicative of deletion of said secret key, the attestation message that indicates said secret key is deleted from said memory of said authentication device.
17. The method of claim 16 wherein the logic unit performing cryptographic operations uses said secret key to sign said message indicative of deletion using a cryptographic signature protocol.
18. The method of claim 17 wherein said cryptographic signature protocol is a public signature protocol.
19. The method of claim 18 wherein said attestation message includes a certificate of a public key corresponding to said secret key.
20. The method of claim 14 wherein said message indicative of deletion is said received password.
21. The method of claim 14 , wherein the received device certificate having been previously cryptographically signed by an entity responsible for the product, including the component being an authentic integral part of the product.