Hardware secret usage limits

• US 9,985,975 B2
• Filed: 03/11/2016
• Issued: 05/29/2018
• Est. Priority Date: 01/07/2014
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Roth, Gregory Branchek, Rubin, Gregory Alan
• Primary Examiner(s): Hirl, Joseph P
• Assistant Examiner(s): MURPHY, JOSEPH B
• Application Number:
  US15/068,446
• Publication Number:
  US 20160197937A1
• Time in Patent Office: 809 Days
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 2212/1052 Security improvement
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time

Abstract

A hardware secret is securely maintained in a computing device. The device operates in accordance with a usage limit corresponding to a limited number of operations using the hardware secret that the device is able to perform. Once the device reaches a usage limit, the device becomes temporarily or permanently unable to perform additional operations using the hardware secret.

Claims

1. A computer-implemented method, comprising:

storing, in a computing device, a secret that;

has a usage limit that corresponds to a limit on a number or rate of cryptographic operations performable using the secret, the computing device being unable to unilaterally exceed the usage limit; and

is securely stored by the computing device so as to be at least programmatically unexportable from the computing device;

performing one or more cryptographic operations using the secret, where, as a result of the secret being associated with the usage limit, the one or more operations are performed in accordance with the usage limit; and

providing a result of performance of the one or more cryptographic operations.

2. The computer-implemented method of claim 1, wherein the usage limit controls a total number of calculations involving the secret performable by the computing device before the device is unable to perform cryptographic operations using the secret.

3. The computer-implemented method of claim 2, further comprising performing one or more operations that cause the usage limit to be increased as a result of authorization for an increase to the usage limit from another computing device.

4. The computer-implemented method of claim 1, wherein the usage limit controls a rate at which calculations involving the secret are performable by the computing device.

5. The computer-implemented method of claim 1, further comprising, as a result of reaching the usage limit, performing one or more operations that cause physical destruction to the computing device thereby disenabling the computing device from performing cryptographic operations involving the secret.

6. The computer-implemented method of claim 1, wherein:

a request originates from a second computing device communicatively attached to the computing device; and

providing the result of performance of the one or more cryptographic operations enables functionality of the second computing device.

7. A device, comprising:

one or more processors; and

memory;

wherein the memory and one or more processors are collectively configured such that;

the device stores secret information so as to be unexportable from the device;

the one or more processors perform cryptographic operations using the secret information subject to a usage limit associated with the secret information that serves as a limit on a number of cryptographic operations performable by the one or more processors, the usage limit different from a clock rate limit for the one or more processors and the device being unable to unilaterally reset the usage limit; and

the device provides results of performance of the cryptographic operations.

8. The device of claim 7, wherein the cryptographic operations include passcode verification.

9. The device of claim 7, wherein the cryptographic operations include decryption of data encrypted under the secret information.

10. The device of claim 7, further comprising an interface that receives requests locally from another device, each request of the received requests being fulfillable by performance of at least one cryptographic operation using the secret information.

11. The device of claim 7, wherein:

the limit on the number of cryptographic operations is a limit for a total number of cryptographic operations using the secret information performable by the device; and

the one or more processors further destroy the secret information as a result of reaching the total number of cryptographic operations.

12. The device of claim 7, wherein:

the device further comprises a plurality of fuses; and

the one or more processors further enforce the usage limit by burning the fuses.

13. The device of claim 7, wherein:

the device further comprises an interface that enables communication with another device; and

the one or more processors, as a result of receiving information indicating authorization by the other device to refresh the usage limit, enable the device to perform additional cryptographic operations beyond the usage limit.

14. The device of claim 7, wherein:

the cryptographic operations are cryptographic verifications each having a positive or negative outcome; and

the usage limit applies to both cryptographic verifications having positive outcomes and cryptographic verifications having negative outcomes.

15. A non-transitory computer-readable storage medium having stored thereon instructions that, as a result of execution by one or more processors of a device, cause the device to:

detect a requirement for performance of one or more cryptographic operations using a secret stored in the device so as to be unexportable from the device;

as a result of detecting the requirement, cause a component of the device having access to the secret to perform the one or more cryptographic operations in accordance with a usage limit applied to the secret, the device unable to unilaterally reset the usage limit, the usage limit corresponding to a limit on a number or rate of cryptographic operations performable using the secret; and

provide a result of performance of the one or more cryptographic operations.

16. The non-transitory computer-readable storage medium of claim 15, wherein the usage limit corresponds to a fixed number of cryptographic operations performable by the device.

17. The non-transitory computer-readable storage medium of claim 16, wherein the instructions further comprise instructions that, as a result of execution by the one or more processors of the device, cause the device to receive authorization to increase the fixed number.

18. The non-transitory computer-readable storage medium of claim 15, wherein the usage limit limits a rate at which cryptographic operations using the secret are performable by the device.

19. The non-transitory computer-readable storage medium of claim 15, wherein the instructions further comprise instructions that, as a result of execution by the one or more processors, cause the device to detect a trigger and, as a result of detecting the trigger, request an increase to the usage limit from another device.

20. The non-transitory computer-readable storage medium of claim 19, wherein the trigger is attainment of a first usage limit different from the usage limit.