Management of cryptographic keys

摘要

Cryptographic keys are managed in a computing device by transmitting feature data comprising an identifier or an attribute of the device to a key generation module, receiving a digital signature of the feature data from the module, installing the signature as a cryptographic private key for communication, and performing a cryptographic operation using the private key. The key management may be performed during a boot process of the device. The device may comprise a FPGA with an embedded key, decryption unit and secure storage. A public key corresponding to the private key may be created during installation. There may be plural feature data used corresponding to respective plural individual features, from which is produced multiple signatures and an aggregative signature. The device may maintain association data indicating a link between plural keys and corresponding features. The device may verify whether an external device has an individual feature by using a key of the public-private key pair, and performs a predetermined interaction with the external device upon verification.