Symmetric Key Activation Database for Offline Semiconductor Upgrades
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current semiconductor devices face challenges in securing field upgrades due to reliance on cloud-based key distribution, which requires a public network connection, introduces security risks, and is inefficient in high-value manufacturing environments.
Innovation Solution
A system that allows end-users to activate capabilities using symmetric key cryptography without a public network connection, enabling bulk key activation and secure storage of unique identifiers and device secrets in a manufacturing environment, using a Key Management System (KMS) with hardware security modules and trusted partners.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If cloud-based key distribution techniques are used, then key distribution is enabled, but security risks increase and network connectivity is required
Solution Approach 1:
The patent introduces a cloud-based key management service as an intermediary that stores symmetric keys securely. Instead of direct device-to-device key exchange, the cloud service acts as a trusted mediator that distributes keys to authorized devices, reducing security risks associated with direct peer-to-peer key distribution while maintaining ease of operation
Solution Approach 2:
The system creates and distributes copies of symmetric keys to multiple devices through the cloud service. Each device receives an identical copy of the key material, enabling bulk activation without requiring individual key generation or secure physical distribution, thus improving ease of operation while the cloud service maintains security control
2Ease of operation
If cloud-based key distribution is used, then key activation is possible, but latency and cost increase in high-value manufacturing environments
Solution Approach 1:
The system performs preliminary actions by pre-generating symmetric keys and storing them in the cloud key management service before manufacturing needs arise. When devices need activation, the keys are already prepared and can be rapidly distributed in bulk, eliminating the latency of key generation and reducing time loss in manufacturing environments
Solution Approach 2:
The patent enables bulk copying of key material to multiple devices simultaneously through the cloud service. Instead of individual key distribution sequences that would accumulate latency, the system copies keys to many devices in parallel operations, significantly reducing total activation time for manufacturing batches
3Ease of operation
If unique identifier values are read and uploaded individually, then key requests can be processed, but bulk access to symmetric keys is not feasible
Solution Approach 1:
The patent merges individual key request operations into a single bulk operation. Instead of processing each device's key request separately through individual UID uploads, the system combines multiple key distribution tasks into one unified cloud-based operation that activates many devices simultaneously, dramatically improving productivity for bulk manufacturing scenarios
Solution Approach 2:
The cloud key management service provides universal functionality that handles both individual and bulk key distribution through a single interface. The system can process key requests for one device or thousands of devices using the same underlying mechanism, making bulk access as easy to operate as individual access while achieving much higher productivity
Data Source
AI summary
The disclosed embodiments are related to securely updating a semiconductor device and in particular to a key management system. In one embodiment, a method is disclosed comprising receiving a request for an activation code database from a remote computing device, the request including at least one parameter, retrieving at least one pair based on the at least one parameter, the pair including a unique ID (UID) and secret key; generating an activation code for the UID; and returning the activation code to the remote computing device.