Secure Processor Application Diversification via Remote Attestation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The challenge is to securely diversify identifiers and credentials for a generic, non-diversified Secure Processor (SP) application loaded on devices, enabling secure communication with each instance of the diversified SP application.
Innovation Solution
A method involving a manager application hosted in the Application Processor generates a server challenge, which is used to create a message attested by the Secure Processor's Root-Of-Trust service, verified by a distant server, and responded with an enablement payload containing a public key certificate, allowing the SP application to verify its identity and generate unique credentials.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If a generic non-diversified SP application is loaded on all devices, then deployment is simplified and manufacturing is easier, but secure communication with each device instance cannot be established
Solution Approach 1:
The patent applies preliminary action by pre-loading a generic non-diversified SP application on all devices during manufacturing, then performing diversification remotely after deployment. The application contains placeholder structures prepared in advance for receiving diversified credentials, allowing simplified initial deployment while enabling subsequent secure personalization through remote attestation and credential delivery.
2Reliability
If identifiers and credentials are diversified for each device, then secure communication is enabled, but complexity of the deployment process increases
Solution Approach 1:
The patent uses a remote server as an intermediary to manage the complexity of diversification. The server generates device-specific credentials, performs attestation verification, and delivers diversified identifiers to each device. This intermediary approach centralizes the complex diversification logic externally, keeping the device itself simple while enabling secure communication through server-mediated credential management.
Solution Approach 2:
The SP application performs self-service by generating its own attestation proof using the Root-Of-Trust service and automatically receiving its diversified credentials from the remote server. The application diversifies itself without requiring manual intervention or complex external tooling, reducing overall deployment complexity while achieving secure device-specific identification.
3Reliability
If credentials are stored on remote servers, then device security is improved, but server storage requirements and security risks increase
Solution Approach 1:
The patent extracts credentials from remote server storage and embeds them directly into the device's secure processor during remote diversification. Instead of keeping all device credentials centralized on servers, each device receives its unique diversified credentials locally and stores them in its secure element. This extraction approach improves device security by keeping credentials on-device while reducing server storage requirements.
Data Source
AI summary
Provided is a method for securely diversifying a generic application stored in a secure processor of a terminal, said method comprising: Generating at the request of a manager application hosted in an application processor of said terminal, at the level of a distant server, a server challenge; Sending said server challenge to said application; Generating a first message at said application, said first message being function of said server challenge, an application challenge and an unique identifier of said application; Sending said first message to a Root-Of-Trust service hosted in a secure processor of said terminal, said Root-of-Trust service generating an attestation of said first message, said attestation guaranteeing that said first message has not been modified and originates from said secure processor; and Transmitting said attestation of said first message to said distant server in an enablement request message.