Device Activation Using Segmented Cryptographic Seed Verification

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current device activation and registration processes are vulnerable to theft, piracy, and unauthorized use due to the use of static codes and limited private keys, which can be compromised by hackers, leading to security concerns and integrity issues in the legitimate distribution and use of electronic devices and their services.

Innovation Solution

The system involves storing trusted data from a secure location on a user device, comparing it with current data during activation, and using cryptographic primitives to combine seed components with unique device identifiers for secure verification and activation, allowing for secure device activation and service registration.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If static codes and limited private keys are used for device activation, then the activation process is simple and efficient, but the system becomes vulnerable to theft, piracy, and unauthorized use

Engineering Contradiction:
Improveactivation process simplicityVSAvoiddevice identification security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent divides the seed component into multiple seed segments and combines each segment with a unique device identifier using different cryptographic primitives. This segmentation approach enhances security by distributing the cryptographic key material across multiple components, making it more difficult for hackers to compromise the entire system through a single breach point.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system pre-stores trusted data on the user device at a secure location before activation occurs. This preliminary action allows the device to have verification credentials ready in advance, enabling secure activation without requiring complex real-time key generation or exchange during the activation process itself.

Inventive Principle:
Principle #10Preliminary action

2Measurement precision

If current data is compared with previously stored trusted data for verification, then device identification accuracy is improved, but the activation process complexity increases

Engineering Contradiction:
Improvedevice identification accuracyVSAvoidactivation process complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent creates a copy of the seed component and stores it securely at a previous location before activation. During activation, the system retrieves this stored copy and compares it with the current data on the device. This copying mechanism enables accurate verification without requiring complex real-time cryptographic operations, as the comparison is done against a pre-established trusted reference.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS10042989B2Device activation
Publication Date: 2018.08.07 APPLE INC
  • US10042989B2 patent drawing
  • US10042989B2 patent drawing
  • US10042989B2 patent drawing

AI summary

The embodiments set forth systems and techniques to activate and provide other device services for user devices. An activation manager is configured to activate a user device by receiving an activation request for the device, accepting previously stored and encrypted trusted data for the device, getting current data for the device, determining whether the current data compares with the trusted data, and sending an authorization to activate the device when the current data compares favorably with the trusted data. Data can include a seed component divided into seed segments that are each combined with a unique device identifier using varying cryptographic primitives. Each encrypted seed segment and unique device identifier combination can be dedicated to a different device use or service, and can be used separately for device identification for that use or service.