Component authentication for computer systems

• US 20080024268A1
• Filed: 07/14/2006
• Published: 01/31/2008
• Est. Priority Date: 07/14/2006
• Status: Abandoned Application

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Fung, Jason M., Kwong, Wah Yiu, Wong, Hong W.
• Application Number:
  US11/486,617
• Publication Number:
  US 20080024268A1
• Time in Patent Office: Days
• US Class Current: 340/5.8
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 21/81 by operating on the power supply, e.g. enabling or disabling power-on, sleep or resume operations
• CPC Class Codes: Y02E 60/10 Energy storage using batteries

Abstract

A radio frequency (RF) tag may be attached to an electronic component in a computer system to enable authentication of the electronic component. A RF reader may receive information stored in the RF tag. An authentication logic coupled to the RF reader may process the received information and compared it with stored information. The received information may include identification of a manufacturer of the electronic component and identification of the RF tag.

Claims

1. A method, comprising:

attaching a radio frequency (RF) tag to an electronic component to be used in a computer system, the RF tag programmed with information which includes at least information about the electronic component and information about the RF tag;

receiving the information programmed on the RF tag via a RF reader; and

authenticating the electronic component by comparing the received information with stored information, wherein the stored information is to include information associated with manufacturers of electronic components.

2. The method of claim 1, wherein the information about the electronic component includes identification of the electronic component and identification the associated component manufacturer, wherein the information about the RF tag includes identification of the RF tag.

3. The method of claim 2, wherein the identification of the RF tag is to be within a range assigned to the component manufacturer.

4. The method of claim 3, wherein the identification of the RF tag and the identification of the electronic component or the identification of the component manufacturer are to be signed using a private key associated with the component manufacturer forming a digital signature, wherein the digital signature is to be programmed in the RF tag and received by the RF reader.

5. The method of claim 4, further comprising authenticating the stored information.

6. The method of claim 5, wherein comparing the received information with the stored information comprises:

verifying that the component manufacturer is valid; and

when the component manufacturer is verified as valid, verifying that the identification of the RF tag is within the range assigned to the component manufacturer.

7. The method of claim 6, further comprising:

verifying the digital signature using a public key associated with the component manufacturer, wherein the public key is included in the stored information.

8. The method of claim 7, further comprising:

verifying that the electronic component is a compatible electronic component according to compatibility information included in the stored information.

9. The method of claim 1, wherein the information programmed on the RF tag does not include any secret information to be used to authenticate the electronic component other than the information about the electronic component and the information about the RF tag, and wherein authentication of the electronic component is performed on a random basis.

10. An apparatus, comprising:

a radio frequency (RF) tag coupled to a first electronic component to be used in a computer system;

a RF reader coupled to the RF tag and configured to receive information stored in the

RF tag, wherein the information is to include information about the first electronic component and information about the RF tag;

a database configured to store information associated with component manufacturers; and

an authentication logic configured to compare the information received by the RF reader and the information stored in the database to authenticate the first electronic component.

11. The apparatus of claim 10, wherein the information about the first electronic component includes identification of the first electronic component and identification of the associated first component manufacturer, wherein the information about the RF tag includes identification of the RF tag.

12. The apparatus of claim 11, wherein the authentication logic is to determine if the first component manufacturer is included in the database.

13. The apparatus of claim 12, wherein the information stored in the RF tag includes a digital signature generated using a private key of the first component manufacturer.

14. The apparatus of claim 13, wherein the database is to store a public key for each of the component manufacturers, and wherein the authentication logic is to verify the digital signature using the public key of the first component manufacturer.

15. The apparatus of claim 14, wherein the authentication logic is to determine if the identification of the RF tag is within a range of RF tag identification numbers assigned to the first component manufacturer.

16. The apparatus of claim 15, wherein the RF tag is implemented using Radio Frequency Identification (RFID).

17. The apparatus of claim 15, wherein the authentication logic receives no secret code from the RF tag to authenticate the first electronic component other than the information about the first electronic component and the information about the RF tag, and wherein the authentication logic is to authenticate the first electronic component on a random basis.

18. A system, comprising:

a radio frequency (RF) reader to receive information transmitted from a RF tag attached to a first electronic component, the RF tag is to store information used to authenticate the first electronic component;

a storage device coupled to the RF reader and configured to store information associated with authorized component manufacturers; and

a controller coupled to the storage device and to the RF reader, wherein the controller is to perform operations to authenticate the first electronic component using the information stored in the RF tag and the information stored in the storage device.

19. The system of claim 18, wherein the information stored in the RF tag includes a digital signature generated using a private key of a manufacturer of the first electronic component, and wherein the controller is to verify the digital signature using a public key of the manufacturer of the first electronic component, the public key stored in the storage device.

20. The system of claim 19, wherein the information stored in the RF tag includes an identification of the RF tag, and wherein the controller is to verify that the identification of the RF tag is within a range assigned to the manufacturer of the first electronic component.

21. The system of claim 20 wherein the information stored in the storage device includes compatibility requirement for one or more components from the authorized component manufacturers, and wherein the controller is to verify if the first electronic component satisfies its compatibility requirement.

22. The system of claim 20, wherein the RF tag is implemented using Near Field Communication (NFC).

23. The system of claim 20, wherein the information stored in the RF tag includes encrypted information and wherein decryption of the encrypted information is performed using logic associated with a trusted platform module (TPM).

24. The system of claim 20, wherein authentication of the first electronic component is implemented using active management technology (AMT).

25. The system of claim 20, wherein authentication of the first electronic component is performed randomly.