System and method for secure authentication of a "smart" battery by a host

• US 20060204004A1
• Filed: 03/08/2005
• Published: 09/14/2006
• Est. Priority Date: 03/08/2005
• Status: Active Grant

• Current Assignee: Texas Instruments, Inc.
• Original Assignee: Texas Instruments, Inc.
• Inventors: Shankar, Narendar, Paksoy, Erdal, Vanyo, Todd
• Granted Patent: US 7,613,924 B2
• Time in Patent Office: Days
• US Class Current: 380/44
• CPC Class Codes: G06F 21/70 Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/81 by operating on the power supply, e.g. enabling or disabling power-on, sleep or resume operations
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

Systems and methods for providing a battery module 110 with secure identity information and authentication of the identity of the battery 110 by a host 120. In one embodiment, the system for providing a battery module with secure identity information includes: (1) a tamper resistant processing environment 200 located within the battery module 110 and (2) a key generator configured to generate a key based on an identity of the battery module 110 and cause the key to be stored within the tamper resistant processing environment 200.

Claims

1. A system for providing a battery module with secure identity information, comprising:

a tamper resistant processing environment located within said battery module; and

a key generator configured to generate an identity key associated with said battery module and cause said identity key to be stored within said tamper resistant processing environment.

2. The system as recited in claim 1 wherein said key generator executes in a non-volatile memory programmer to generate said identity key and transmits said identity key toward said tamper resistant processing environment.

3. The system as recited in claim 1 wherein said battery module contains an encrypted key configured to be decrypted by a root key contained in a host.

4. The system as recited in claim 1 wherein said battery module contains an index configured to point to one of a plurality of root keys contained in a host.

5. The system as recited in claim 1 wherein said battery module contains a key management block that contains an encrypted plurality of root keys, said key management block configured to broadcast said encrypted plurality to a host.

6. A method of providing a battery module with secure identity information, comprising:

locating a tamper resistant processing environment within said battery module;

generating an identity key based on an identity of said battery module; and

causing said key to be stored within said tamper resistant processing environment.

7. The method as recited in claim 6 wherein said generating and said causing are carried out in a non-volatile memory programmer.

8. The method as recited in claim 6 wherein said battery module contains an encrypted key configured to be decrypted by a root key contained in a host.

9. The method as recited in claim 6 wherein said battery module contains an index configured to point to one of a plurality of root keys contained in a host.

10. The method as recited in claim 6 wherein said battery module contains a key management block that contains an encrypted plurality of root keys, said key management block configured to broadcast said encrypted plurality to a host.

11. A system for secure authentication of an identity of a battery module by a host, comprising:

a challenge receiver operable within said battery module and configured to receive a challenge from said host; and

a response generator operable within said battery module and configured to generate a response based on a key stored within a tamper resistant processing environment of said battery module.

12. The system as recited in claim 11 wherein said challenge is at least pseudorandom.

13. The system as recited in claim 11 wherein said battery module transmits an encrypted key configured to be decrypted by a root key contained in a host.

14. The system as recited in claim 11 wherein said battery module transmits an index configured to point to one of a plurality of root keys contained in a host.

15. The system as recited in claim 11 wherein said battery module contains a key management block that contains an encrypted plurality of root keys and said key management block broadcasts said encrypted plurality to a host.

16. The system as recited in claim 13 wherein said encrypted key is signed with a private key, said host contains a public key, and said host uses said public key to authenticate said signed encrypted key.

17. The system as recited in claim 11 wherein said response is formed by combining said challenge with said key using a message check algorithm.

18. The system as recited in claim 17 wherein said message integrity check algorithm employs a cyclic redundancy check.

19. The system as recited in claim 17 wherein said message integrity check algorithm employs a secure hash algorithm.

20. A method of secure authentication of the identity of a battery module to a host, comprising:

receiving a challenge from said host; and

generating a response based on a key stored within a tamper resistant processing environment of said battery module.

21. The method as recited in claim 20 wherein said challenge is at least pseudorandom.

22. The method as recited in claim 20 further comprising transmitting an encrypted key from said battery module, said encrypted key configured to be decrypted by a root key contained in a host.

23. The method as recited in claim 20 further comprising transmitting an index from said batter module, said index configured to point to one of a plurality of root keys contained in a host.

24. The method as recited in claim 20 wherein said battery module contains a key management block that contains an encrypted plurality of root keys, said method further comprising broadcasting said encrypted plurality to a host.

25. The method as recited in claim 22 wherein said encrypted key is signed with a private key, said host contains a public key, and said host uses said public key to authenticate said signed encrypted key.

26. The method as recited in claim 20 wherein said response is formed by combining said challenge with an identity of said battery module using a message check algorithm.

27. The system as recited in claim 26 wherein said message integrity check algorithm employs a cyclic redundancy check.

28. The system as recited in claim 26 wherein said message integrity check algorithm employs a secure hash algorithm.