GENERATION AND MANAGEMENT OF MULTIPLE BASE KEYS BASED ON A DEVICE GENERATED KEY

• US 20150312036A1
• Filed: 04/06/2015
• Published: 10/29/2015
• Est. Priority Date: 04/23/2014
• Status: Active Grant

• Current Assignee: Cryptography Research, Inc. (Rambus Inc.)
• Original Assignee: Cryptography Research, Inc. (Rambus Inc.)
• Inventors: Kumar, Ambuj
• Granted Patent: US 9,768,957 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics

Abstract

A request to generate a first key may be received. A device generated key that is stored in a memory may be received in response to the request. Furthermore, a first entity identification (ID) that is stored in the memory may be received. The first key may be generated based on the first entity ID and the device generated key that are stored in the memory.

Claims

1. A method comprising:

receiving a request to generate a first key;

receiving device generated key being stored in a memory;

receiving a first entity identification (ID) being stored in the memory; and

generating the first key based on the first entity ID and the device generated key being stored in the memory.

2. The method of claim 1, further comprising:

receiving a second request to generate a second key;

receiving a second entity ID based on the second request; and

generating the second key based on the second entity ID and the same device generated key being stored in the memory.

3. The method of claim 1, wherein the device generated key is randomly generated by an integrated circuit associated with the memory.

4. The method of claim 1, wherein the memory is a one-time programmable (OTP) memory, and wherein the first entity ID corresponds to a value of a counter being stored in the OTP memory, wherein the value of the counter corresponds to a plurality of bits of the OTP memory.

5. The method of claim 4, further comprising:

receiving a request associated with a new entity; and

incrementing the value of the counter being stored in the OTP memory in response to the request associated with the new entity, wherein the incrementing of the value of the counter is performed by programming one of the plurality of the bits of the OTP memory that corresponds to the value of the counter, wherein the second entity ID is based on the incremented value of the counter being stored in the OTP memory.

6. The method of claim 1, further comprising:

receiving an additional key; and

generating an encrypted key based on a combination of the additional key and the first key.

7. The method of claim 1, further comprising:

receiving an initialization request;

generating, in response to the initialization request, the device generated key based on a random selection of bits associated with physical characteristics of an integrated circuit that comprises the memory; and

storing the device generated key in the memory.

8. A system comprising:

a memory to store a device generated key and a first entity identification (ID); and

a key deriver coupled with the memory and to;

receive a request to generate a first derived key;

receive the device generated key and the first entity ID from the memory in response to the request to generate the first derived key; and

generate the first derived key based on the first entity ID and the device generated key from the memory.

9. The system of claim 8, wherein the key deriver is further to:

receive a second request to generate a second derived key;

receive a second entity ID in response to the second request; and

generate the second derived key based on the second entity ID and the same device generated key from the memory that is used to generate the first derived base key.

10. The system of claim 8, wherein the device generated key is randomly generated by an integrated circuit associated with the memory.

11. The system of claim 8, wherein the memory is a one-time programmable (OTP) memory, and wherein the first entity ID corresponds to a value of a counter being stored in the OTP memory, wherein the value of the counter corresponds to a plurality of bits of the OTP memory.

12. The system of claim 11, wherein the key deriver is further to:

receive a request associated with a new entity; and

increment the value of the counter being stored in the OTP memory in response to the request associated with the new entity, wherein the incrementing of the value of the counter is performed by programming one of the plurality of the bits of the OTP memory that corresponds to the value of the counter, wherein the second entity ID is based on the incremented value of the counter being stored in the OTP memory.

13. The system of claim 8, wherein the key deriver is further to:

receive an additional key; and

generate an encrypted key based on a combination of the additional key and the first derived key.

14. The system of claim 8, wherein the key deriver is further to:

receive an initialization request;

generate, in response to the initialization request, the device generated key based on a random selection of bits associated with physical characteristics of an integrated circuit that comprises the memory; and

store the device generated key in the memory.

15. An apparatus comprising:

a one-time programmable (OTP) memory to store a device generated key and a first entity identification (ID); and

a one-way function component coupled to the OTP memory and to;

receive a request to generate a first derived base key;

receive the device generated key being stored in the OTP memory;

receive the first entity ID being stored in the memory; and

generate the first derived base key based on the first entity ID and the device generated key being stored in the OTP memory.

16. The apparatus of claim 15, wherein the one-way function component is further to:

receive a second request to generate a second derived base key;

receive a second entity ID being stored in the OTP memory in response to the second request; and

generate the second derived base key based on the second entity ID and the same device generated key being stored in the OTP memory.

17. The apparatus of claim 16, wherein the first entity ID corresponds to a value of a counter being stored in the OTP memory, and wherein the value of the counter corresponds to a plurality of bits of the OTP memory.

18. The apparatus of claim 17, the apparatus further comprising:

an OTP memory modifier component to;

receive a request associated with a new entity; and

increment the value of the counter being stored in the OTP memory in response to the request associated with the new entity, wherein the incrementing of the value of the counter is performed by programming one of the plurality of the bits of the OTP memory that corresponds to the value of the counter, wherein the second entity ID is based on the incremented value of the counter being stored in the OTP memory.

19. The apparatus of claim 15, further comprising:

an encryption component to receive an additional key and to generate an encrypted key based on a combination of the additional key and the first derived base key.

20. The apparatus of claim 15, the apparatus further comprising:

an OTP memory modifier component to;

receive an a request to randomly generate the device generated key;

generate, in response to the request, the device generated key, wherein the device generated key comprises randomly sampled bit values based on physical characteristics of an integrated circuit; and

store the device generated key in the OTP memory.