System and method for controlling features on a device
Trust between entities participating in an upgrade or enablement/disablement process is established and, to facilitate this remotely and securely, a highly tamper resistant point of trust in the system that is being produced is used. This point of trust enables a more efficient distribution system to be used. Through either a provisioning process or at later stages, i.e. subsequent to installation, manufacture, assembly, sale, etc.; the point of trust embodied as a feature controller on the device or system being modified is given a feature set (or updated feature set) that, when validated, is used to enable or disable entire features or to activate portions of the feature.
1. A method performed at a remote server, the method comprising:
participating in a public key based key agreement with a feature controller in a device, by performing cryptographic operations using a connection that enables transfer of data between the remote server and the feature controller, to establish a shared key between the remote server and the feature controller;
storing the shared key and an identifier associated with the device in a memory of the remote server, the identifier being derived from at least a portion of a public key of a static key pair stored in a secure memory in the feature controller;
encrypting, using a symmetric cipher and the shared key, a control instruction for the feature controller to control features in the device;
generating a signature using the control instruction and information provided by the feature controller in the device during the public key based key agreement, the information comprising the identifier associated with the device;
generating a message comprising the encrypted control instruction and the signature; and
sending the message to the feature controller of the device to thereby securely control features in the device.
2. The method of claim 1 , wherein the information provided by the feature controller in the device comprises an ephemeral public key received by the remote server during the key agreement, and the signature is generated using at least the control instruction, the ephemeral public key, and the identifier associated with the device.
3. The method of claim 1 , wherein the public key based key agreement comprises an elliptic curve based key agreement.
4. The method of claim 1 , wherein the public key based key agreement comprises an elliptic curve Menezes-Qu-Vanstone (ECMQV) key agreement.
5. The method of claim 1 , wherein the identifier associated with the device is generated using a static key pair.
6. The method of claim 1 , wherein the control instruction comprises feature control programming.
7. The method of claim 1 , wherein the control instruction comprises at least one command.
8. The method of claim 1 , wherein the identifier is unique to the device.
9. The method of claim 1 , wherein the identifier is unique to a group comprising a plurality of devices.
10. The method of claim 1 , wherein the message is generated by concatenating the encrypted control instruction with the signature.
11. The method of claim 1 , wherein the device is a digital television system-on-chip device.
12. The method of claim 1 , wherein the device is an integrated circuit device.
13. A control server comprising:
a processor; and
at least one memory, the memory comprising computer executable instructions that when executed by the processor operate the control server to perform the following method:
participating in a public key based key agreement with a feature controller in a device, by performing cryptographic operations using a connection that enables transfer of data between the control server and the feature controller to establish a shared key between the control server and the feature controller;
storing the shared key and an identifier associated with the device in a memory of the control server, the identifier being derived from at least a portion of a public key of a static key pair stored in a secure memory in the feature controller;
encrypting, using a symmetric cipher and the shared key, a control instruction for the feature controller to control features in the device;
generating a signature using the control instruction and information provided by the feature controller in the device during the public key based key agreement, the information comprising the identifier associated with the device; and
generating a message comprising the encrypted control instruction and the signature; and
sending the message to the feature controller of the device to thereby securely control features in the device.
14. A non-transitory computer readable storage medium comprising computer executable instructions for performing operations at a remote server for provisioning features in a device, the operations comprising:
participating in a public key based key agreement with a feature controller in a device, by performing cryptographic operations using a connection that enables transfer of data between the remote server and the feature controller, to establish a shared key between the remote server and the feature controller;
storing the shared key and an identifier associated with the device in a memory of the remote server, the identifier being derived from at least a portion of a public key of a static key pair stored in a secure memory in the feature controller;
encrypting, using a symmetric cipher and the shared key, a control instruction for the feature controller to provision features in the device;
generating a signature using the control instruction and information provided by the feature controller in the device during the public key based key agreement, the information comprising the identifier associated with the device;
generating a message comprising the encrypted control instruction and the signature; and
sending the message to the feature controller of the device to thereby securely provision features in the device.
15. The computer readable storage medium of claim 14 ,
wherein the information provided by the feature controller in the device comprises an ephemeral public key received by the remote server during the key agreement, and the signature is generated using at least the control instruction, the ephemeral public key, and the identifier associated with the device.
16. The computer readable storage medium of claim 14 ,
wherein the public key based key agreement comprises an elliptic curve based key agreement.
17. The computer readable storage medium of claim 14 ,
wherein the public key based key agreement comprises an elliptic curve Menezes-Qu-Vanstone (ECMQV) key agreement.
18. The computer readable storage medium of claim 14 , wherein the identifier associated with the device is generated using a static key pair.