METHOD FOR SECURELY PROVIDING ENCRYPTION KEYS

摘要

Method for securing encryption keys for encrypting software while providing for secure updates of the key for other or updated versions of the software. A First Encryption Key, used to encrypt an initial software version, includes a FIRST SPLIT portion and a TOKEN portion. The FIRST SPLIT can be stored in an anti-tamper storage memory and the TOKEN can be stored separately in an external storage medium. The user employs the hardware to combine the FIRST SPLIT and TOKEN to generate the First Encryption Key within the hardware. To facilitate updates the provider combines the First Encryption Key with a Second Encryption Key to generate an UPDATE SPLIT for updated software. The UPDATE SPLIT and encrypted updated software are provided to the user who employs the hardware to calculate the Second Encryption Key from the FIRST SPLIT, UPDATE SPLIT and the TOKEN. The Second Encryption Key can be sequential or non-sequential with the First Encryption Key.