Apparatus and method for certificate registration

Abstract

An apparatus includes a processor coupled to a memory, wherein the processor and the memory are used to provide a secure execution environment. The memory contains a shared secret value. The processor is configured to receive a certificate, wherein the certificate includes a device identifier and a digital signature. the processor verifies the certificate based on the digital signature and the device identifier, recovers a cryptographic key based on the shared secret value and the device identifier, and performs based on the recovered cryptographic key Cryptographic operations.

Description

Technical field [0001] Aspects of the present invention generally relate to a public key cryptographic system, and more specifically, involving public key infrastructure and digital certificates. Background technique [0002] In modern computing systems, password is typically used to perform digital encryption and / or signature through public networks, such as Internet, data transmission through public or other unsafe networks. These cryptographic systems are usually divided into two categories. The secret key cryptographic system encrypts and decrypts data based on a secret or symmetrical key and uses the same password key. The public key cryptode system uses a pair of key or key pairs, one of which is used to encrypt the data and the second key is used to decrypt the data. It is important that the key for encrypting the data cannot be used to decrypt the data. [0003] Manage password keys and issues certificates to each manufacturer to each device may be a difficult task. In ...

AI Technical Summary

Problems solved by technology

This process involves multiple steps and, for example, exposes multiple security threats when there are flaws in the implementation

Images