Chipset Key Activation via Multi-Entity Temporary Key Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure chipsets lack the ability to ensure that all configuration requirements are met before activating the chipset, and they cannot dynamically add or change functions or keys after manufacturing, leading to potential security breaches if initial keys are compromised or incorrectly set.
Innovation Solution
A method and device that utilize a seed, segmentation key, global key, and global cryptographic algorithm selector from different entities to generate a temporary key for authenticating and verifying activation messages, allowing for secure activation and potential key changes, ensuring that only authentic and conditionally met requirements activate chipset functions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a unique key is introduced in the chipset at manufacturing and hard coded, then the key cannot be modified fraudulently, but the key cannot be changed during the lifetime of the chipset and security cannot be enhanced afterwards
Solution Approach 1:
The patent implements dynamic key management by introducing a key evolution mechanism where the initial hard-coded key can be systematically updated through controlled key derivation processes. The chipset transitions from a static key system to a dynamic one where keys can be changed during the device lifetime through secure key injection and derivation protocols, resolving the contradiction between initial security and future adaptability.
Solution Approach 2:
The patent segments the key management process into multiple independent components: an initial key stored in read-only memory, a key evolution module, and a secure key injection mechanism. This segmentation allows the system to maintain the immutability of the initial key while enabling controlled key changes through the evolution module, thus maintaining both reliability and adaptability.
2Ease of operation
If configuration tests are carried out by the manufacturer to check chipset configuration, then specific functions can be activated, but there is no solution for preventing incorrect activation if not all tests were passed
Solution Approach 1:
The patent introduces an intermediary authentication mechanism between the manufacturer's configuration tests and the key activation process. A secure authentication protocol acts as a mediator that verifies test completion and correctness before allowing key activation, preventing fraudulent or erroneous activation while maintaining ease of operation through automated verification.
Solution Approach 2:
The patent implements preliminary authentication and verification steps before key activation. The system performs preliminary checks of configuration test results and authenticates the activation request before actually activating the key, ensuring that activation only occurs when all requirements are genuinely met, thus preventing incorrect activation.
3Device complexity
If all keys depend on the initial chipset key, then key management is simplified, but if the initial key is compromised, all other keys are also compromised
Solution Approach 1:
The patent segments the key hierarchy into multiple independent levels: the initial key in read-only memory, derived keys, and independently injectable operational keys. This segmentation breaks the single-point-failure vulnerability while maintaining manageable key structure through hierarchical organization, allowing compromise of one level without affecting others.
Solution Approach 2:
The patent creates a composite key management system combining multiple key types with different security properties: the immutable initial key for authentication, derived keys for specific functions, and independently manageable operational keys. This composite structure provides both simplified management through unified protocol and enhanced security through diversification.
Data Source
Figure 1
AI summary
The present invention concerns a method for activating a function of a chipset comprising at least a memory and a calculation module in charge of cryptographic operations, the memory containing at least a seed and the calculation module containing at least one cryptographic algorithm, this method comprising the steps of: - receiving at least one of a segmentation key, a global key and a global cryptographic algorithm selector; - transmitting at least two of : the seed, the received segmentation key, the global key and the global cryptographic algorithm selector to the calculation module, said seed, said received segmentation key, said global key and said global cryptographic algorithm selector being provided by at least two different entities; - generating in the calculation module, a temporary key by using one of said at least one cryptographic algorithm of the calculation module and at least two elements among the seed, the segmentation key, the global key and the global cryptographic algorithm selector; - receiving an activation message by the calculation module; - receiving an authentication code of said message by the calculation module, said message authentication code being computed using the temporary key; - verifying the authenticity of said received message by using the message authentication code and the temporary key; - if the received message is authentic, activating a corresponding function of the chipset; - if the received message is not authentic, denying the activation of said corresponding function of the chipset.