Systems and methods for using extended hardware security modules

• US 10,706,182 B2
• Filed: 10/19/2015
• Issued: 07/07/2020
• Est. Priority Date: 12/19/2014
• Status: Active Grant

• Current Assignee: Private Machines Inc.
• Original Assignee: Private Machines Inc.
• Inventors: Sion, Radu
• Primary Examiner(s): Khan, Sher A
• Application Number:
  US15/537,408
• Publication Number:
  US 20170351879A1
• Time in Patent Office: 1,723 Days
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 21/87 by means of encapsulation, e.g. for integrated circuits
• CPC Class Codes: H04L 2209/12 Details relating to cryptographic hardware or logic circuitry
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
• CPC Class Codes: H04L 9/0844 with user authentication or key authentication, e.g. ElGamal, MTI, MQV-Menezes-Qu-Vanstone protocol or Diffie-Hellman protocols using implicitly-certified keys
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3265 using certificate chains, trees or paths; Hierarchical trust model

Abstract

An extended hardware security module (“HSM”) possessing additional security properties relative to conventional HSMs and methods for initializing, deploying, and managing such extended HSMs in a networked environment. In the preferred embodiment, an extended HSM includes additional hardware and software components that configure it to run sensitive client tasks on demand inside a cloud-hosted, anti-tamper HSM housing so as to ensure sensitive data is encrypted when stored or processed outside the housing. Methods for initializing, deploying, and managing provide a framework through which extended HSMs may be secured from their initial assembly through their availing for use and actual use over a network by one or more clients. Such use often entails repeated discrete sequential secure sessions and concurrent discrete secure sessions.

Claims

1. A method of managing processing modules available to remote clients over a computer network in order to provide confidentiality, non-repudiation, and authentication to the clients, comprising the steps of:

providing at least one secure processing module having a first processor, a memory, and a cryptography module interconnected inside an anti-tamper enclosure, wherein said memory includes instructions that configure the first processor to selectively load and run a plurality of logical layers and allows the secure processing module to run at least one application software program;

initiating said at least one secure processing module by storing thereon a private cryptographic key corresponding to a public cryptographic key, as well as a signed public key certificate for the said public cryptographic key, wherein the signed public key certificate is signed by a signor entity related to at least one of a production and sale of said secure processing module;

connecting said at least one secure processing module to a computer network, wherein the step of connecting allows the at least one secure processing module to communicate electrical signals over the computer network;

receiving through the computer network an electronic request from a requesting party for allocation of said at least one secure processing module;

allocating said at least one secure processing module, wherein the step of allocating comprises the at least one secure processing module proving to said requesting party knowledge of the said private cryptographic key;

the requesting party verifying said signed public key certificate using a second certificate provided to the requesting party, wherein verification comprises identifying said signor entity as the signor of the signed public key certificate; and

at least reconfiguring said at least one secure processing module to be allocated and providing identifying information to the party from whom the electronic request was received; and

wherein said step of allocating said at least one secure processing module selectively causes said requesting party from whom the electronic request was received to transmit at least one of encrypted client data and encrypted client software to at least one of the allocated secure processing modules; and

wherein said step of allocating said at least one secure processing module selectively causes said requesting party from whom the electronic request was received to at least one of;

receive encrypted processed data and interface with client application software programs, wherein said encrypted processed data embody the encrypted client data after being decrypted, processed, and encrypted on the allocated secure processing module and said client application software programs embody the encrypted client software after being decrypted and run on the allocated secure processing module.

2. The method of claim 1, wherein the at least one secure processing module is reset prior to being allocated.

3. The method of claim 1, wherein:

said at least one secure processing module is connected to the computer network through a control infrastructure that includes at least one controller; and

the control infrastructure is configured to receive, decrypt, authenticate, and store meta-information uniquely identifying any secure processing module connected thereto.

4. The method of claim 3, wherein the control infrastructure performs the steps of receiving and allocating.

5. The method of claim 3, wherein the at least one secure processing module announces and verifies itself to the control infrastructure by transmitting at least one authenticated heartbeat.

6. The method of claim 5, wherein said authenticated heartbeat requires cryptographic signature verification.

7. The method of claim 5, wherein said authenticated heartbeat requires a cryptographic hash computation verification.

8. The method of claim 5, wherein the at least one secure processing module announces and verifies itself to the control infrastructure by transmitting a plurality of discrete authenticated heartbeats.

9. The method of claim 8, wherein at least two of said plurality of discrete authenticated heartbeats are transmitted by said secure processing module sequentially.

10. The method of claim 8, wherein at least two of said plurality of discrete authenticated heartbeats are transmitted by said secure processing module concurrently.

11. The method of claim 8, wherein at least two of said plurality of discrete authenticated heartbeats are verified by the said control infrastructure through distinct procedures.

12. The method of claim 11, wherein:

a first one of said plurality of discrete authenticated heartbeats defines a high-overhead heartbeat; and

a second one of said plurality of discrete authenticated heartbeats defines a low-overhead heartbeat.

13. The method of claim 3, wherein the at least one secure processing module is configured to both authenticate messages from the control infrastructure and authenticate itself to the control infrastructure.

14. The method of claim 3, additionally comprising the step of availing by said control infrastructure networked storage with at least one of record-level integrity and store-level integrity to said at least one secure processing module.

15. The method of claim 3, wherein a plurality of secure processing modules are connected to a computer network through the control infrastructure.

16. The method of claim 1, wherein the at least one secure processing module is adapted to virtualize at least the first processor, memory, and cryptography module to create a plurality of virtualized secure processing modules, each of which can be allocated separately.

17. The method of claim 1, wherein the signor entity is defined by a vendor.

18. An apparatus, for use over a computer network to allow the running of arbitrary client tasks on demand in a manner that secures sensitive data, code, and other information, comprising:

an anti-tamper enclosure;

a first discrete processor;

a non-transitory memory;

a cryptography module, wherein the first discrete processor, the non-transitory memory, and the cryptography module are interconnected inside the anti-tamper enclosure and together form a secure processing module which comprises an extended hardware security module;

wherein said non-transitory memory includes instructions that selectively cause the first discrete processor to selectively load and run a plurality of logical layers;

wherein said secure processing module is configured to;

(1) run at least one application software program;

(2) connect to said computer network and allow said secure processing module to communicate electrical signals over the computer network;

(3) initiate said secure processing module by storing on the secure processing module a private cryptographic key corresponding to a public cryptographic key and a signed public key certificate for said public cryptographic key, wherein the signed public key certificate is signed by a signor entity related to the at least one of a production and sale of said at least one secure processing module;

(4) receive through the computer network an electronic request from a requesting party for allocation of said secure processing module;

(5) prove to the requesting party from whom the electronic request was received knowledge of the private cryptographic key, reconfigure said secure processing module so that said secure processing module is allocated, and provide identifying information to the requesting party;

(6) receive at least one of encrypted client data and encrypted client software; and

(7) provide at least one of encrypted processed data and an interface to client application software programs, wherein said encrypted processed data embody the encrypted client data after being decrypted, processed, and encrypted and said client application software programs embody the encrypted client software after being decrypted and run on the apparatus.

19. The apparatus of claim 18, wherein said memory includes instructions that configure the first discrete processor to selectively load and run at least a bootloader, kernel, and system software so as to enable the secure processing module to run at least one application software program.

20. The apparatus of claim 19, wherein said memory includes instructions that configure the first discrete processor to selectively load and run an operating system image.

21. The apparatus of claim 19, additionally comprising a non-transitory read only memory, wherein at least a portion of the instructions require the first discrete processor to selectively load and run the bootloader are stored on the read only memory.

22. The apparatus of claim 18, wherein said memory includes instructions that configure the first discrete processor to provide a Heartbeat Daemon for sending meta-information.

23. The apparatus of claim 18, additionally comprising at least one of a communication port, data port, and control panel, wherein said at least one of communication port, data port, and control panel adapts the apparatus to connect to at least one physical ownership credential device.

24. The apparatus of claim 18, wherein the signor entity is defined by a vendor.