Microprocessor Unpredictable Encryption Key Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for generating unique encryption keys in microprocessors are inadequate due to predictable serial numbers and insecure key storage, allowing potential unauthorized access and lacking robust security.
Innovation Solution
A microprocessor design that includes a manufacturing ID and a secret encryption key, stored internally and unreadable externally, uses an AES encryption engine to generate an unpredictable key unique to each processor, enhancing security by encrypting the manufacturing ID with the secret key.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a unique serial number is manufactured into each microprocessor part, then each part has a unique identifier, but the serial number becomes predictable and structured
Solution Approach 1:
The patent introduces an intermediary encryption mechanism where the predictable manufacturing ID is encrypted using a secret key stored in a secure location (NVRAM or hardware security module). This intermediary encryption layer transforms the predictable ID into an unpredictable encrypted form while maintaining the unique identification function.
Solution Approach 2:
The patent changes the parameter representation by encrypting the manufacturing ID using cryptographic algorithms (such as AES). This parameter transformation converts the structured and predictable ID format into an encrypted format that appears random and unpredictable, while still maintaining uniqueness through the encryption key.
2Ease of operation
If encryption keys are stored in MSRs and system CMOS for software access, then software can read the serial number, but security protection is compromised
Solution Approach 1:
The patent introduces an intermediary hardware-based security mechanism (NVRAM with CRC protection or hardware security module) that mediates between the software and the encryption keys. This intermediary provides controlled access to authorized software while preventing unauthorized access, resolving the contradiction between ease of operation and security protection.
Solution Approach 2:
The patent implements self-service security where the microprocessor itself manages the encryption keys and provides authentication services through hardware mechanisms. The processor uses its own unique manufacturing ID and stored keys to authenticate software, eliminating the need for external key storage that would compromise security.
3Ease of manufacture
If 32-bit encryption keys are used, then the key generation is simple, but the security is insufficient for modern applications
Solution Approach 1:
The patent changes the key parameter size from 32-bit to 128-bit or higher through the use of AES-128 or AES-256 encryption algorithms. This parameter increase provides sufficient security for modern applications while maintaining reasonable key generation complexity through standardized cryptographic algorithms.
Solution Approach 2:
The patent applies different quality levels to different parts of the security system: the manufacturing ID remains simple and structured for ease of generation, while the encryption key and encryption algorithm provide high security quality. This local differentiation allows simple ID generation while maintaining strong security through the encryption layer.
Data Source
AI summary
A microprocessor includes a manufacturing ID that is stored in the microprocessor during manufacture thereof in a non-volatile manner. The manufacturing ID is unique to the microprocessor. The microprocessor also includes a secret encryption key that is stored internally within the microprocessor and unreadable externally from the microprocessor. The microprocessor also includes an AES encryption engine, coupled to receive the manufacturing ID and the secret encryption key, configured to encrypt the manufacturing ID using the secret encryption key to generate an unpredictable key that is unique to the microprocessor.