Working Key Generation for Secure Device Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Electronics devices are vulnerable to malicious attacks during manufacturing, allowing unauthorized software to be loaded and executed, which can access security information and manipulate data using the hardware secret key before the security mechanism is activated.
Innovation Solution
Generating a working key based on a hardware secret key and at least one security parameter, which is used for security functions such as encryption and decryption, rather than relying solely on the hardware secret key, thereby enhancing device security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a hardware secret key is used for security functions during manufacturing, then security operations can be performed, but the device is vulnerable to malicious attacks before security mechanisms are activated
Solution Approach 1:
A working key is introduced as an intermediary between the hardware secret key and security operations. The working key is derived from both the hardware secret key and security parameters, acting as a mediator that prevents direct exposure of the hardware secret key while enabling necessary security functions during manufacturing
Solution Approach 2:
The security key system is segmented into multiple components: the hardware secret key (stored securely in hardware), security parameters (stored in secure memory), and the working key (derived computationally). This segmentation ensures that no single component contains all security credentials, reducing vulnerability to attacks
2Ease of operation
If the hardware secret key is directly used for encryption and decryption, then security functions can be performed, but unauthorized software can access and manipulate data
Solution Approach 1:
The working key serves as an intermediary that enables security functions without exposing the hardware secret key. Software can perform encryption and decryption using the working key, while the hardware secret key remains protected in hardware and cannot be directly accessed or manipulated by software
Solution Approach 2:
Security parameters are pre-loaded into secure memory during manufacturing, and the working key is pre-derived from these parameters and the hardware secret key. This preliminary setup enables secure operations before the device is activated, ensuring that unauthorized software cannot later access or manipulate data
Data Source
Figure 1
Figure 2
Figure 3A
AI summary
Techniques for improving security of an electronics device are disclosed. In one aspect of the present disclosure, security of a device may be improved by generating a working key based on a hardware secret key and at least one security parameter of the device, e.g., with a key derivation function. The security parameter(s) may be related to software to be authenticated on the device and/or other aspects of security for the wireless device. The security parameter(s) may indicate whether the software is authorized and/or at least one operating function authorized for the software. At least one security function may be performed for the device based on the working key. For example, the working key may be used to encrypt, sign, decrypt, or verify data for the device. The working key may be used directly or indirectly by the software for the at least one security function.