Method and system to generate a session key for a trusted channel within a computer system

• US 20060075259A1
• Filed: 10/29/2004
• Published: 04/06/2006
• Est. Priority Date: 10/05/2004
• Status: Abandoned Application

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: McKeen, Francis X., Silvester, Kelan, Bajikar, Sundeep M.
• Application Number:
  US10/977,158
• Publication Number:
  US 20060075259A1
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08

Abstract

A method and system to exchange a private encryption key via a rusted path between a device and an application executed in a trusted platform of a computer system to generate a session key. In one embodiment, the session key is used to encrypt data to be exchanged via an non-trusted channel within the computer system.

Claims

1. ) A method comprising:

transmitting a private data between a device and an application executed in a trusted platform of a computer system, to generate a session key to encrypt data to be transmitted between the device and the application.

2. ) The method of claim 1, further including transmitting encrypted data between the device and the application via a non-trusted path within the computer system.

3. ) The method of claim 1, wherein the private data is pre-initialized in the device.

4. ) The method of claim 3, wherein the private data is accessible to an end-user.

5. ) The method of claim 3, wherein the private data is provided by a vendor of the device.

6. ) The method of claim 3, wherein the private data is entered into the application by an end-user prior to the transmitting of the private data.

7. ) The method of claim 1, wherein the private data is provided via a wireless operator.

8. ) The method of claim 4, wherein the private data is a Long Term Shared Secret (LTSS).

9. ) The method of claim 1, wherein the private data is a random stream of characters.

10. ) The method of claim 1, further including after transmitting the private data and generating the session key, using the session key to generate derivatives to encrypt data to be transmitted between the device and the application.

11. ) A system comprising:

a means for transmitting a private data between a device and an application executed in a trusted platform of a computer system, to generate a session key to encrypt data to be transmitted between the device and the application.

12. ) The system of claim 11, wherein the private data is pre-initialized in the device.

13. ) The system of claim 11, wherein the private data is accessible to an end-user.

14. ) The system of claim 11, further including means for entering the private data into the application by an end-user prior to the transmitting of the private data.

15. ) A machine readable medium having stored thereon a set of instructions, which when executed, perform a method comprising:

transmitting a private data between a device and an application executed in a trusted platform of a computer system, to generate a session key to encrypt data to be transmitted between the device and the application.

16. ) The machine readable medium of claim 15, wherein the private data is pre-initialized in the device.

17. ) The machine readable medium of claim 15, wherein the private data is accessible to an end-user.

18. ) The machine readable medium of claim 15, wherein the private data is entered into the application by an end-user prior to the transmitting of the private encryption key.

19. ) A system comprising:

A processor;

a unit to transmit a private data between a device and an application executed in a trusted platform of the system, to generate a session key to encrypt data to be transmitteded between the device and the application; and

a network interface.

20. ) The system of claim 19, wherein the private data is pre-initialized in the device.

21. ) The system of claim 19, wherein the private data is accessible to an end-user.

22. ) The system of claim 19, further including a unit to enter the private data into the application by an end-user prior to the transmitting of the private data.

23. ) The system of claim 19, wherein the device is a SIM device.

24. ) The system of claim 19, wherein the unit includes a machine readable medium having stored thereon a set of instructions, which when executed is to exchange the private data between the device and the application.

25. ) The system of claim 19, wherein the trusted platform of the system includes a private memory to prevent unauthorized access.