SECURE KEY STORE DERIVATION AND MANAGEMENT FROM A SINGLE SECURE ROOT KEY

摘要

A root key of a computing device that is typically “burned” into the device hardware at time of manufacture is used to establish a master key and if desired a Transport Layer Security pre-shaped key, a WiFi configuration key, and application verification keys. The keys established from the root key are stored in a region of flash memory, and this region of flash memory is then encrypted using a random encryption code.

主权项

1. Device comprising:
at least one computer memory that is not a transitory signal and that comprises instructions executable by at least one processor to: access a root key of a computing device; use the root key of the computing device to establish at least one derived key selected from: a master key component SM, a Transport Layer Security pre-shared key component ST, a Wifi configuration key component SW, an application verification key component SA; store the at least one derived key in a first region of a flash memory, the first region being less than 100% of a total storage area of the flash memory; and encrypt the first region using a random encryption code.