Security Module Key Generation for Verifiable Device Origin
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for digital key pairs in device certificates are vulnerable to unauthorized cloning and counterfeit, especially when contract producers generate certificates for multiple devices using a single private key, leading to authenticity issues.
Innovation Solution
A method and system for generating a digital key pair within a security module, where the private key is protected and a proof of origin is provided, ensuring the key pair's authenticity is verified through a secret key, and the public key is issued with this proof, enabling secure authentication certificate requests.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a single private key is used to generate certificates for multiple devices, then certificate generation efficiency is improved, but device authenticity and security are worsened due to unauthorized cloning
Solution Approach 1:
The patent segments the certificate generation process by creating a unique digital key pair for each device within the security module. The private key is divided into device-specific components that cannot be extracted or replicated, while each device receives its own certificate. This segmentation ensures that even though multiple certificates are generated efficiently, each device maintains unique authenticity through its dedicated key pair.
Solution Approach 2:
The patent introduces a certification authority (CA) as an intermediary that verifies the origin of each digital key pair through proof of origin mechanisms. The CA mediates between the security module that generates keys and the final certificate issuance, ensuring that each certificate is properly bound to its specific device. This intermediary layer maintains security and authenticity while allowing efficient batch certificate generation.
2Reliability
If the private key is stored in the security module protected against access, then security is improved, but the ability to verify key origin is worsened without additional proof mechanisms
Solution Approach 1:
The patent implements preliminary action by generating the digital key pair within the security module before the device leaves the manufacturing environment. The proof of origin is created and verified in advance, binding the private key to its specific device context. This preliminary key generation and verification ensures that the private key remains protected in the security module while its origin is already established and verifiable through digital signatures and certificate authorities.
Solution Approach 2:
The patent uses digital copying mechanisms where the public key and certificate information are securely replicated and distributed to the device, while the private key remains unique and non-copyable within the security module. The proof of origin creates a verifiable digital copy that attests to the key's legitimate origin without compromising the security of the actual private key storage.
3Ease of operation
If device certificates are applied during production with long validity periods, then operational convenience is improved, but the risk of unauthorized use and cloning is worsened
Solution Approach 1:
The patent applies asymmetry by creating unique, device-specific digital key pairs where the private key remains in the security module and the public key is certified. Each device has an asymmetric relationship with the certification authority, ensuring that even with long-validity certificates, no two devices share the same authentication credentials. This asymmetric key structure prevents cloning because each device's private key is uniquely bound to its hardware identity.
Solution Approach 2:
The patent changes the parameter of key uniqueness by ensuring that while certificate validity periods can be long, each certificate contains device-specific parameters (unique public keys, device identifiers, and origin proofs) that make them不可克隆. The system maintains operational convenience through long validity while preventing unauthorized use by binding cryptographic parameters to specific device hardware characteristics.
Data Source
AI summary
Various embodiments include a method for providing a proof of origin for a digital key pair comprising: generating the digital key pair at an origin specified by a device, wherein the origin comprises a security module of the device, wherein the digital key pair includes a private key stored in the security module protected against access; and providing the proof of origin confirming generation of the digital key pair at the origin, wherein the proof of origin is protected by a secret key provided by the device, wherein the secret key is stored in the security module; and issuing the public key of the digital key pair together with the proof of origin.