Platform Firmware Security Processor Key Validation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Computer platforms face security risks due to potential eavesdropping on communications over the security processor bus, which can reveal sensitive information like cryptographic keys and authorization passwords, and existing methods for distributing session keys are either unavailable to platform firmware or not tied to specific platforms.
Innovation Solution
Platform firmware secures communications with a security processor using an asymmetric platform key, where the public platform key is validated through a two-part validation process involving a certificate chain of trust and platform binding information, and then used to generate and distribute a session key for encrypting communications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If communications are transmitted over the security processor bus, then the security processor can perform cryptographic operations, but the communications are vulnerable to eavesdropping that can reveal sensitive information
Solution Approach 1:
The patent introduces session keys as intermediary cryptographic elements that mediate between the platform firmware and security processor. These session keys are distributed through a secure key distribution mechanism that acts as an intermediary channel, preventing direct exposure of sensitive communication content on the bus while enabling secure cryptographic operations.
Solution Approach 2:
The patent changes the cryptographic parameters by transitioning from static, long-term keys to dynamic, ephemeral session keys. This parameter change ensures that even if communications are intercepted, the sensitive information cannot be decrypted without the transient session keys that are securely distributed through the key distribution mechanism.
2Reliability
If session keys are distributed to secure communications, then communication security is improved, but existing key distribution methods are either unavailable to platform firmware or not tied to specific platforms
Solution Approach 1:
The patent employs asymmetric cryptographic principles where the platform firmware and security processor have different cryptographic roles. The platform firmware holds platform-specific identification information and private keys, while the security processor holds corresponding public keys and verification capabilities. This asymmetric relationship enables platform-specific key distribution that is both secure and adaptable.
Solution Approach 2:
The patent performs preliminary actions by establishing platform-specific cryptographic credentials during system initialization or manufacturing. The platform firmware and security processor are pre-configured with matching cryptographic pairs and identification information, enabling secure session key distribution before actual communications begin. This preliminary setup ensures that key distribution is both available to platform firmware and tied to specific platforms.
Data Source
AI summary
A computer platform includes a security processor; at least one hardware processor; and a memory. The security processor stores data representing a private platform key. The private platform key is part of an asymmetric pair of keys, and the asymmetric pair of keys includes a public platform key. The memory stores a firmware image. The firmware image includes data representing a root certificate of a public key infrastructure that signs a second certificate that is associated with the computer platform. The second certificate includes the public platform key and binding information binding the second certificate to the computer platform. The firmware image includes instructions that, when executed by the hardware processor(s), cause the hardware processor(s) to access data representing the second certificate and determine whether the second certificate is valid based on the root certificate and the binding information. The instructions, when executed by the hardware processor(s), further cause the hardware processor(s) to, responsive to determining that the second certificate is valid, use the public platform key to secure communication with the security processor.