Cryptographic unit for public key infrastructure (PKI) operations

Abstract

A module, such as an M2M device or a mobile phone, may include a removable data storage unit. This unit may contain non-volatile memory, noise amplification memory, and a cryptographic unit. The non-volatile memory may include (i) shared memory, accessible by both the module and the cryptographic unit, and (ii) protected memory, accessible only by the cryptographic unit. The cryptographic unit may use a noise memory interface and noise amplification operations to increment and distribute bit errors recorded in that memory. The cryptographic unit may (i) generate a random number using the noise amplification memory and (ii) input that random number into a set of cryptographic algorithms to internally derive a PKI key pair. The private key may be stored in protected memory, and the public key may be signed by a certificate authority.

Images