SYSTEM AND METHOD TO SECURE ON-BOARD BUS TRANSACTIONS

摘要

A technique for securing on-board bus transactions in a computing device is discussed. A shared key is generated and then programmed into the read-only non-volatile write-once storage of two on-board components. The shared key may be generated during the manufacturing process. Once complete, all transactions between the two on-board components are encrypted by the components using the shared key without exposing the key on any external bus.

主权项

1. A computing device-implemented method for securing on-board bus transactions:
retrieving a shared key from a write-once non-volatile storage of a first on-board component of a computing device; encrypting data at the first on-board component using the retrieved key; transmitting the encrypted data across a bus in the computing device to a second on-board component of the computing device; retrieving a shared key from a write-once non-volatile storage of the second on-board component; and decrypting the encrypted data using the shared key retrieved from the write-once non-volatile storage of the second on-board component,wherein the first on-board component and second on-board component each include a crypto-engine capable of performing encryption and decryption operations.