US 11,695,749 B2
Secure feature and key management in integrated circuits
Paul Carl Kocher, San Francisco, CA (US); Benjamin Chen-Min Jun, Burlingame, CA (US); and Andrew John Leiserson, San Francisco, CA (US)
Assigned to Cryptography Research, Inc., San Jose, CA (US)
Filed by Cryptography Research Inc., San Jose, CA (US)
Filed on Sep. 4, 2020, as Appl. No. 17/12,886.
Application 17/012,886 is a continuation of application No. 13/831,545, filed on Mar. 14, 2013, granted, now 10,771,448.
Claims priority of provisional application 61/682,001, filed on Aug. 10, 2012.
Prior Publication US 2021/0058387 A1, Feb. 25, 2021
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 21/71 (2013.01); H04L 9/40 (2022.01); H04L 9/08 (2006.01); H04L 9/14 (2006.01); H04L 9/32 (2006.01); G06F 21/54 (2013.01); H04W 12/04 (2021.01); H04W 12/041 (2021.01); G06F 21/64 (2013.01); G06F 21/57 (2013.01)
CPC H04L 63/0823 (2013.01) [G06F 21/54 (2013.01); G06F 21/57 (2013.01); G06F 21/64 (2013.01); G06F 21/71 (2013.01); H04L 9/083 (2013.01); H04L 9/0897 (2013.01); H04L 9/14 (2013.01); H04L 9/3247 (2013.01); H04L 63/061 (2013.01); H04L 63/083 (2013.01); H04W 12/04 (2013.01); H04W 12/041 (2021.01); G06F 2221/2101 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method comprising:
receiving, by a security manager core of an integrated circuit, feature update information, the feature update information comprising a command that, when executed by the security manager core, enables the security manager core to update a functionality of a hardware feature of the integrated circuit to be at least one of locked, unlocked, or modified, wherein the command is associated with an encrypted payload; and
executing, by the security manager core, the command to update the functionality of the hardware feature, wherein the executing the command comprises:
deriving, by the security manager core, a mixed key using a base key accessible to the security manager core;
deriving, by the security manager core, a transport key using the mixed key;
decrypting, by the security manager core, the encrypted payload using the transport key to obtain a decrypted payload; and
delivering, by the security manager core, the decrypted payload to the hardware feature.