Security Chip Key Installation Using Public-Key Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing method of generating and delivering chip private keys for security chips involves risks of key leakage during transmission, compromising information security.
Innovation Solution
A key filling method where a verification public key generated by a server is filled into a security chip, enabling encryption without transmitting private keys, using asymmetric encryption algorithms to ensure secure key exchange and verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If chip private keys are transmitted from server to electronic device for filling into security chips, then key filling can be completed, but the risk of private key leakage increases during transmission
Solution Approach 1:
The patent extracts the private key from the transmission process entirely. Instead of transmitting the chip private key from server to electronic device, the system generates a verification key pair where only the verification public key is transmitted. The chip private key remains exclusively in the security chip, eliminating the transmission vulnerability while maintaining key filling functionality.
Solution Approach 2:
The patent introduces a verification public key as an intermediary element. This verification public key serves as a mediator that enables the server to verify the security chip without requiring direct transmission of the chip private key. The intermediary verification key pair mechanism allows secure key filling while preventing private key exposure during transmission.
2Reliability
If verification public key is used instead of private key for transmission, then information security is enhanced, but the complexity of key management increases
Solution Approach 1:
The patent applies asymmetry by using asymmetric encryption algorithms to generate verification key pairs with distinct verification public keys and verification private keys. This asymmetric key structure enables secure transmission of only the public verification key while the private verification key remains secured, enhancing information security through the inherent asymmetric properties of cryptographic key pairs.
Solution Approach 2:
The security chip performs self-verification by using its chip private key to decrypt the authentication code and generate authentication information. The chip's internal mechanisms handle the complex cryptographic operations autonomously, reducing the burden on external systems while maintaining security. The chip serves itself in verifying its identity and capabilities without requiring complex external key management infrastructure.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Provided is a key installation method, comprising: (301) transmitting first installation information to a server, the first installation information being used for indicating an installation permission of an electronic device with respect to a security chip; (302) acquiring second installation information, which comprises a verification public key generated by the server and is installation information transmitted to the electronic device by the server insofar as the electronic device is determined, on the basis of the first installation information, as having the installation permission with respect to the security chip; and (303) installing the verification public key into the security chip, the verification public key being used for encrypting information, and a verification private key corresponding to the verification public key being used for decrypting the encrypted information.