Method and apparatus for providing a cryptographic security function for the operation of a device

• US 11,106,828 B2
• Filed: 03/07/2017
• Issued: 08/31/2021
• Est. Priority Date: 03/22/2016
• Status: Active Grant

• Current Assignee: Siemens Mobility GmbH (Siemens AG)
• Original Assignee: Siemens Mobility GmbH (Siemens AG)
• Inventors: Falk, Rainer, Merli, Dominik, Pyka, Stefan
• Primary Examiner(s): Desrosiers, Evans
• Application Number:
  US16/085,603
• Publication Number:
  US 20190095648A1
• Time in Patent Office: 1,638 Days
• Field of Search: 713189
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

Provided is a method and apparatus for providing a cryptographic security function for the operation of a device, and to an associated computer program (product). The method for providing a cryptographic security function for the operation of a device carries out the following steps: receiving a request to provide such a security function, providing an interface to a point providing such a security function, said point being called a trust anchor, wherein said interface determines context information in accordance with the application initialing the request, providing the requested security function for the application initiating the request, wherein the determined context information influences the provision of said security function.

Claims

1. A method for providing a cryptographic security function for the operation of a device, wherein the following method steps are executed:

receiving a request to provide the cryptographic security function,

providing an interface to a trust anchor, the trust anchor making available the cryptographic security function,

wherein said interface determines an item of context information depending on the application initiating the request, the item of context information comprising the identity of the application,

providing the requested cryptographic security function for the application initiating the request,

wherein the determined item of context information is integrated into the provision of the cryptographic security function, and

wherein the item of context information at least one of modifies and influences a value resulting from the cryptographic security function.

2. The method as claimed in claim 1, wherein the item of context information is integrated into the provision of the cryptographic security function as a parameter.

3. The method as claimed in claim 1, wherein the interface transfers the determined item of context information to the trust anchor.

4. The method as claimed in claim 1, wherein the item of context information is transferred in a secure format.

5. The method as claimed in claim 4, wherein the secure format is achieved by conversion by way of a one-way function or by way of a signature or by way of an authentication code or by way of generation or derivation of a key.

6. An apparatus for providing a cryptographic security function for the operation of a device, having:

means for receiving a request to provide the cryptographic security function,

at least one interface to a trust anchor, the trust anchor making available the cryptographic security function,

wherein said interface is configured to determine an item of context information depending on the application initiating the request, the item of context information comprising the identity of the application,

wherein the item of context information is integrated into the provision of the cryptographic security function as a one-way function value,

means for providing the cryptographic security function for the application initiating the request, wherein these means are configured to allow the determined item of context information to be integrated into the provision of the cryptographic security function, and

wherein the item of context information at least one of modifies and influences a value resulting from the cryptographic security function.

7. The apparatus as claimed in claim 6, wherein the item of context information is integrated into the provision of the cryptographic security function as a parameter.

8. The apparatus as claimed in claim 6, wherein the interface is configured to transfer the determined item of context information to the trust anchor.

9. The apparatus as claimed in claim 6, wherein the item of context information is able to be transferred in a secure format.

10. The apparatus as claimed in claim 9, wherein the secure format is able to be achieved by conversion by way of a one-way function or by way of a signature or by way of an authentication code or by way of generation or derivation of a key.

11. A computer program having means for performing a method for providing a cryptographic security function when the computer program is executed on an apparatus said computer program having a non-transitory computer readable storage medium having instructions, which when executed by a processor, perform actions, wherein the method comprises:

receiving a request to provide the cryptographic security function,

providing an interface to a trust anchor, the trust anchor making available the cryptographic security function,

wherein said interface determines an item of context information depending on the application initiating the request, the item of context information comprising the identity of the application initiating the request;

wherein the item of context information is integrated into the provision of the cryptographic security function as a one-way function value, and

providing the requested cryptographic security function for the application initiating the request,

wherein the determined item of context information is integrated into the provision of the cryptographic security function, and

wherein the item of context information at least one of modifies and influences a value resulting from the cryptographic security function.