Secure Credential Provisioning Without Secure Elements
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Devices without secure elements, such as IoT devices, and manufacturers without secured production sites face challenges in provisioning security credentials, as existing methods require a secure element and a secured production site for secure credential storage and installation.
Innovation Solution
A method involving a device receiving encrypted security credentials, determining its current configuration, generating attestation information, and using this information to derive a decryption key to decrypt the credentials, allowing secure storage even without a secure element or production site.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security credentials are stored in a secure element at a secured production site, then security and reliability are improved, but device complexity and manufacturing constraints increase
Solution Approach 1:
The patent extracts the secure element requirement from the credential provisioning process. Instead of requiring a physical secure element chip, the solution uses software-based attestation information generated by the device's existing components to securely provision credentials. This removes the hardware secure element while maintaining security through cryptographic attestation of the device's configuration state.
Solution Approach 2:
The patent introduces attestation information as an intermediary mechanism. Rather than directly storing credentials in a secure element, the system uses attestation information (generated from device configuration) as a mediator to enable secure credential provisioning. This intermediary allows the credential server to verify device integrity and securely deliver credentials without requiring a physical secure element at the device.
2Reliability
If a secured production site is used for credential provisioning, then security is improved, but ease of manufacture and production flexibility deteriorate
Solution Approach 1:
The device performs self-attestation by generating attestation information from its own configuration state. This self-service capability eliminates the need for a secured production site, as each device can independently prove its integrity and receive credentials through the attestation mechanism. The device's existing components serve themselves to generate the necessary security proofs.
Solution Approach 2:
The patent changes the security model from physical/locational security (secured production sites) to cryptographic/informational security (attestation information). By transforming the security basis from physical constraints to information-theoretic proofs, the system enables credential provisioning anywhere in the world without compromising security, thus greatly easing manufacturing logistics.
3Adaptability or versatility
If devices without secure elements are provisioned with credentials, then adaptability and versatility are improved, but security and reliability worsen
Solution Approach 1:
The patent replaces the mechanical/hardware secure element system with a software-based attestation and cryptographic verification system. Instead of relying on physical security modules, the solution uses software-generated attestation information and public key cryptography to achieve the same security goals, thereby enabling devices without secure elements to be securely provisioned.
Solution Approach 2:
The patent fundamentally changes the security parameter from hardware-based (presence of secure element) to information-based (quality of attestation information). This parameter change allows devices without secure elements to achieve equivalent security by providing alternative cryptographic proofs of integrity, thus improving adaptability while maintaining security.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The device (200) includes a device private key (K1pr) of a pair of public and private asymmetric keys (K1pub, K1pr). The method comprising the steps, performed by the device (200) of - receiving, from a credential provider, the device credentials in encrypted form, - internally determining information about a current configuration of the device (200); - generating a device attestation information based on the determined information about the current configuration of the device; - generating a decryption key (K4i) based on the device private key (K1pr) and the generated device attestation information; and - decrypting the received device credentials in encrypted form with the decryption key to provision the device (200) with the device credentials.