A hardware-fuse-based device identity security logout method

Abstract

The application discloses a hardware-fusing-based device identity security logout method. The method comprises the following steps: receiving an identity logout instruction; verifying the legality of the identity logout instruction; after the verification, fusing at least one key security fuse unit in a security chip through a hardware-fusing circuit, so that all identity authentication functions based on a root key are permanently disabled; the root key is only generated and used in the chip and does not flow out of the chip; all the above steps are completed by pure hardware circuits without the participation of software processors, and cannot be restored after fusing. The application realizes the security logout of the device identity through the hardware-fusing mode, the logout process is irreversible and difficult to be restored, and the security of the device identity logout is improved.

Description

Technical Field

[0001] This application relates to the field of device identity management technology, and in particular to a method for securely deregistering device identity based on hardware fuse. Background Technology

[0002] Currently, device identity deregistration is mainly achieved through software. Software deregistration has the following problems: First, software deregistration can be restored by restoring factory settings or reflashing the firmware, making true permanent deregistration difficult; second, the deregistration process is controlled by a software processor, making it vulnerable to malicious code attacks, leading to unauthorized deregistration or deregistration failure; third, the root key remains in the chip after deregistration, posing a risk of unauthorized use.

[0003] Some existing technologies employ hardware-assisted deregistration methods, but the core process remains software-controlled, posing security risks. Therefore, a more secure device identity deregistration solution is needed. Summary of the Invention

[0004] The purpose of this application is to overcome the shortcomings of the prior art and provide a secure device identity cancellation method based on hardware fuse.

[0005] To achieve the above objectives, this application adopts the following technical solution: A method for secure device identity deregistration based on hardware fuses includes the following steps: Receive identity cancellation command; Verify the legality of the identity cancellation command; After successful verification, at least one critical security fuse unit in the security chip is blown irreversibly in one go through the hardware fuse circuit, permanently disabling all identity authentication functions based on the root key. The root key is generated and used only inside the chip and does not leave the chip. All of the above steps are completed by pure hardware circuits without the participation of software processors, and cannot be recovered after the fuse is blown.

[0006] Furthermore, the identity cancellation instruction includes at least one of an authorized hardware trigger signal and an authorized encryption instruction signal.

[0007] Furthermore, the authorized hardware trigger signal includes a physical key switch signal; the authorized encrypted instruction signal includes an encrypted deregistration instruction issued by the hardware security module.

[0008] Furthermore, the critical security fuse unit includes at least one of the following: a fuse unit storing the root key, a fuse unit storing the binding verification value, and a fuse unit storing the output of a physically unclonable function.

[0009] Furthermore, after the circuit breaker operation is completed, the hardware automatically writes the deregistration timestamp and deregistration reason to a non-volatile storage medium, forming an unalterable deregistration record.

[0010] Furthermore, the fuse unit includes at least one of a metal fuse and a polycrystalline silicon fuse. After the fuse is broken, the resistance value of the fuse unit permanently increases and cannot be recovered.

[0011] Furthermore, the hardware fuse circuit only responds to legitimate identity cancellation commands; any illegal command will not trigger the fuse operation.

[0012] A device identity security deregistration system based on hardware fuses includes: Instruction receiving module, validity verification module, hardware fuse circuit; All of the above modules are pure hardware integrated circuits, with no software processor involved in the entire process.

[0013] Furthermore, the legitimacy verification module uses the root key to perform hardware signature verification on the cancellation command.

[0014] A device equipped with a hardware fuse circuit for implementing the above method. Beneficial effects

[0015] This application has the following beneficial effects: 1. Secure deregistration of device identity is achieved through hardware fuse breaking. The fuse breaking process is one-time, irreversible, and difficult to recover, thus achieving true permanent deregistration.

[0016] 2. All steps are completed by pure hardware circuits without the participation of software processors, avoiding security risks caused by software vulnerabilities and preventing unauthorized or failed logouts.

[0017] 3. By blowing the critical security fuse unit, all authentication functions based on the root key are permanently disabled, effectively preventing the root key from being illegally used after deregistration.

[0018] 4. Supports multiple identity cancellation command triggering methods, including authorized hardware trigger signals and authorized encrypted command signals, and has good applicability.

[0019] 5. After the circuit breaker operation is completed, the hardware automatically generates an unalterable deregistration record for easy traceability and management.

[0020] 6. The hardware fuse circuit only responds to legitimate identity deregistration commands, further enhancing the security of the deregistration process. Detailed Implementation

[0021] The present application will now be described in detail with reference to specific embodiments.

[0022] This embodiment provides a secure device identity deregistration method based on hardware fuse, the specific steps of which are as follows: 1. The instruction receiving module receives the identity deregistration instruction. The identity deregistration instruction can be an authorized physical key switch signal or an encrypted deregistration instruction issued by the hardware security module.

[0023] 2. The legitimacy verification module uses the root key inside the chip to perform hardware signature verification on the identity cancellation command. If the verification passes, the circuit breaker operation is triggered; if the verification fails, the circuit breaker operation is refused.

[0024] 3. Upon successful verification, the hardware fuse circuit irreversibly blows the fuse unit in the security chip that stores the bound verification value. After blowing, the resistance value of the fuse unit permanently increases and cannot be recovered.

[0025] 4. Once the binding verification value fuse unit blows, all authentication functions based on the root key will be permanently disabled, and the device will no longer be able to perform authentication.

[0026] 5. After the circuit breaker operation is completed, the hardware automatically writes the deregistration timestamp and deregistration reason into the ferroelectric random access memory, forming an unalterable deregistration record.

[0027] 6. All steps are completed by pure hardware circuits, without the participation of any software processor.

[0028] This embodiment also provides a device identity security deregistration system based on hardware fuses, including an instruction receiving module, a legitimacy verification module, and a hardware fuse circuit. All modules are implemented using pure hardware integrated circuits and connected via hardware wiring, with no software processor involved in the entire process.

Claims

1. A hardware-fuse-based device identity secure deprovisioning method, characterized in that, Includes the following steps: Receive identity cancellation command; Verify the legality of the identity cancellation command; After successful verification, at least one critical security fuse unit in the security chip is blown irreversibly in one go through the hardware fuse circuit, permanently disabling all identity authentication functions based on the root key. The root key is generated and used only inside the chip and does not leave the chip. All of the above steps are completed by pure hardware circuits without the participation of software processors, and cannot be recovered after the fuse is blown.

2. The method according to claim 1, characterized in that, The identity cancellation instruction includes at least one of an authorized hardware trigger signal and an authorized encrypted instruction signal.

3. The method according to claim 2, characterized in that, The authorized hardware trigger signal includes a physical key switch signal; the authorized encrypted instruction signal includes an encrypted deregistration instruction issued by the hardware security module.

4. The method according to claim 1, characterized in that, The critical security fuse unit includes at least one of the following: a fuse unit storing the root key, a fuse unit storing the binding check value, and a fuse unit storing the output of a physically unclonable function.

5. The method according to claim 1, characterized in that, After the circuit breaker operation is completed, the hardware automatically writes the deregistration timestamp and deregistration reason to a non-volatile storage medium, forming an immutable deregistration record.

6. The method according to claim 1, characterized in that, The fuse unit includes at least one of a metal fuse and a polycrystalline silicon fuse. After the fuse is broken, the resistance value of the fuse unit increases permanently and cannot be recovered.

7. The method according to claim 1, characterized in that, The hardware fuse circuit only responds to legitimate identity cancellation commands; any illegal command will not trigger the fuse operation.

8. A device identity security deregistration system based on hardware fuse, characterized in that, include: Instruction receiving module, validity verification module, hardware fuse circuit; All of the above modules are pure hardware integrated circuits, with no software processor involved in the entire process.

9. The system according to claim 8, characterized in that, The legitimacy verification module uses the root key to perform hardware signature verification on the cancellation command.

10. A device, characterized in that, The device is equipped with a hardware fuse circuit for implementing the method of any one of claims 1 to 9.