Cryptography module for controlling device

Patent metadata

Field	Value
Publication number	US-12430448-B2
Application number	US-201917053225-A
Country	US
Kind code	B2
Filing date	May 22, 2019
Priority date	Jun 20, 2018
Publication date	Sep 30, 2025
Grant date	Sep 30, 2025

Abstract

A cryptography module for at least temporarily controlling an operation of at least one computing device. The cryptography module is designed to check at least one memory area of a memory unit capable of being accessed by the computing device, and to control the operation of the at least one computing device as a function of the check.

First claim

What is claimed is:

1. A cryptography module configured to at least temporarily control an operation of at least one computing device, the cryptography module being configured to:
check at least one memory area of a memory unit accessible by the computing device; and
control the operation of the at least one computing device as a function of the check, wherein the cryptography module is configured to hold the computing device in a reset state, the cryptography module being configured to hold the computing device in the reset state until the check is completed, wherein the cryptography module is configured to provide the computing device with first data including cryptographic keys, and wherein, as a function of whether a type of a content in the at least one memory area that has been checked is a bootloader or regular software for execution only after execution of the bootloader, the cryptography module provides access to a first subset of the cryptographic keys and denies access to a second subset of the cryptographic keys.

2. The cryptography module as recited in claim 1 , wherein the cryptography module is configured to carry out the check of the at least one memory area using a key-based message authentication code, CMAC.

3. The cryptography module as recited in claim 1 , wherein the cryptography module includes a memory unit integrated into the cryptography module storing at least one reference value and/or one reference layout for the at least one memory area.

4. The cryptography module as recited in claim 3 , wherein the cryptography module is designed to carry out the check as a function of the reference value.

5. The cryptography module as recited in claim 1 , wherein the cryptography module is configured to establish, within the scope of the check, whether the content of the at least one memory area corresponds to a predefined memory content, and to end the reset state for the computing device if the check has indicated that the content of the at least one memory area corresponds to the predefined memory content, the cryptography module being configured to continue to hold the computing device in the reset state when the check has indicated that the content of the at least one memory area does not correspond to the predefined memory content.

6. The cryptography module as recited in claim 1 , wherein the at least one memory area includes the bootloader for the computing device provided for execution on the computing device.

7. The cryptography module as recited in claim 1 , wherein the cryptography module is designed as a hardware circuit.

8. A method for operating a cryptography module for at least temporarily controlling an operation of at least one computing device, the method comprising the following steps:
checking, by the cryptography module, at least one memory area of a memory unit accessible by the computing device; and
controlling the operation of the at least one computing device as a function of the check, wherein the cryptography module is configured to hold the computing device in a reset state, the cryptography module being configured to hold the computing device in the reset state until the check is completed, wherein the cryptography module is configured to provide the computing device with first data including cryptographic keys, and wherein, as a function of whether a type of a content in the at least one memory area that has been checked is a bootloader or regular software for execution only after execution of the bootloader, the cryptography module provides access to a first subset of the cryptographic keys and denies access to a second subset of the cryptographic keys.

9. The method as recited in claim 8 , wherein the cryptography module carries out the check of the at least one memory area using a key-based message authentication code, CMAC, the cryptography module including a memory unit integrated into cryptography module for storing at least one reference value, and carrying out the check as a function of the reference value.

10. The method as recited in claim 8 , wherein the cryptography module holds the computing device in a reset state, the cryptography module holding the computing device in the reset state until the check is completed.

11. The method as recited in claim 10 , wherein the cryptography module establishes, within the scope of the check, whether the content of the at least one memory area corresponds to a predefined memory content and ends the reset state for the computing device when the check has indicated that the content of the at least one memory area corresponds to the predefined memory content, the cryptography module holding the computing device in the reset state when the check has indicated that the content of the at least one memory area does not correspond to the predefined memory content.

12. A computing device including at least one cryptography module, the cryptography module configured to at least temporarily control an operation of at least one computing device, the cryptography module being configured to:
check at least one memory area of a memory unit accessible by the computing device; and
control the operation of the at least one computing device as a function of the check, wherein the cryptography module is configured to hold the computing device in a reset state, the cryptography module being configured to hold the computing device in the reset state until the check is completed, wherein the cryptography module is configured to provide the computing device with first data including cryptographic keys, and wherein, as a function of whether a type of a content in the at least one memory area that has been checked is a bootloader or regular software for execution only after execution of the bootloader, the cryptography module provides access to a first subset of the cryptographic keys and denies access to a second subset of the cryptographic keys.

Assignees

• Bosch Gmbh Robert

Inventors

• Schramm Juergen
• Meurer Alexander
• Jung Ramona
• Lenz Christoph
• Weber Andreas
• Ziegler Florian
• Stumpf Frederic
• Sagar Ilias

Classifications

• G06F21/57 Primary

  Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities · CPC title

• G06F21/567

  using dedicated hardware · CPC title

• G06F21/51

  at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability · CPC title

• G06F2212/1052

  Security improvement · CPC title

• G06F9/4401

  Bootstrapping (security arrangements therefor G06F21/57) · CPC title