HWAC Handling via TEE Authentication and Secure Code Computation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need for improved handling of Hardware Activation Codes (HWAC) related data, specifically in ensuring secure storage and access to HWAC calculation data while allowing access to the calculated HWAC, without exposing the calculation data.
Innovation Solution
A method and system involving mutual authentication between a network planner node and a baseband node using Trusted Execution Environments (TEEs) to securely obtain and verify HWAC calculation data, enabling secure distribution and computation of HWAC without exposing the calculation data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If HWAC calculation data is stored at the entity that performs HWAC computation, then the computation can be performed, but security is compromised due to unwanted access (read/write) to the calculation data
Solution Approach 1:
The system segments the HWAC computation process by separating the calculation data storage from the computation execution. The calculation data is stored in a secure element (separate storage component) while the computation is performed by a dedicated computation entity, preventing unwanted access to the calculation data while enabling secure computation.
Solution Approach 2:
A secure element acts as an intermediary between the computation entity and the storage system. It securely holds the HWAC calculation data and provides controlled access to the computation entity, ensuring that the computation can proceed without exposing the calculation data to unauthorized access.
2Ease of operation
If access (read) is allowed to the calculated HWAC, then the HWAC can be used for activation, but access to the HWAC calculation data must be prevented
Solution Approach 1:
The system extracts the HWAC calculation data from the computation entity and stores it separately in a secure element. This extraction ensures that the calculated HWAC can be freely accessed for activation purposes while the original calculation data remains protected in the secure element, inaccessible to unauthorized parties.
Solution Approach 2:
The system creates a dimensional separation between the HWAC calculation data and the computed HWAC. The calculation data exists in a protected dimension (secure element storage) while the resulting HWAC is available in an accessible dimension (for activation), allowing simultaneous data protection and operational access.
Data Source
AI summary
There is provided mechanisms for obtaining a HWAC for a baseband node. A method is performed by a network planner node. The method comprises performing mutual authentication between a TEE of the network planner node and a TEE of the baseband node. The method comprises providing, towards the TEE of the baseband node, a request for HWAC calculation data based on a network resource need. The method comprises obtaining, from the TEE of the baseband node, the requested HWAC calculation data. The method comprises obtaining the HWAC by inputting the obtained HWAC calculation data and a quantification of the network resource need to a HWAC calculation function on the TEE of the network planner node, where the HWAC is given as output from the HWAC calculation function. The method comprises providing, towards the TEE of the baseband node, the HWAC.