Securing a device and data within the device

摘要

Systems and methods are provided for securing a self-securing device and information that is stored in memory within the device. The self-securing device comprising a processor unit and memory external to the processor unit. The processor unit contains a processor and processor unit memory. Upon initialization of the self-securing device, the processor unit determines whether a secure key is stored in the processor unit memory. If no secure key is stored, then the processor unit generates a secure key and stores it in the processor unit memory. The processor unit uses the secure key to decrypt information read from the memory external to the processor unit and to encrypt information to be stored in memory external to the processor unit.

主权项

1. A method for self-securing a device, the device comprising a processor unit and memory, wherein the processor unit comprises a processor and processor unit memory connected via an internal bus, comprising:
upon power up, determining whether a secure key is stored in the processor unit memory; when the determination is that the secure key is not stored in the processor unit memory, then:
generating the secure key using only data available within the device prior to power up, wherein the secure key is generated by the processor unit and is unique to the self-securing device, andstoring the secure key in the processor unit memory; accessing the memory by the processor, wherein information read from the memory is decrypted by the processor using the secure key and information stored in the memory is encrypted by the processor using the secure key; and preventing a device external to the processor unit from using an interface of the processor unit to access the internal bus or the processor unit memory.