Method to prevent cloning of electronic components using public key infrastructure secure hardware device

Patent metadata

Field	Value
Publication number	US-9794247-B2
Application number	US-50767906-A
Country	US
Kind code	B2
Filing date	Aug 22, 2006
Priority date	Aug 22, 2006
Publication date	Oct 17, 2017
Grant date	Oct 17, 2017

Abstract

An electronic component includes a processor and a memory. The electronic component has a secure platform capable of storing at least one dual key pair and a corresponding digital signature. There is also a system including a host machine and an electronic component capable of being operated by the host machine. The electronic component has a processor, a memory, and a secure platform capable of storing at least one dual key pair and a corresponding digital signature. Another aspect describes a method, which includes reading a public key from an electronic component by a host machine, verifying the public key against a stored key in the host machine, digitally signing data using a private key from the electronic component, verifying the signed data against the stored key, and using the electronic component by the host machine only if the signed data and the public key are verified.

First claim

What is claimed is:

1. An electronic component, comprising:
a processor and a memory, wherein the memory is configured to store a plurality of lifetime usage limits related to the electronic component; and
a secure platform having a plurality of un-resettable monotonic counters each configured to indicate usage of the electronic component at a different phase of the electronic component's life-cycle, the secure platform configured to store an ownership value, to generate at least one dual key pair and a corresponding digital signature, and to securely store at least a private key from the at least one dual key pair by locking the private key into the secure platform based on the ownership value so that the private key cannot be removed without permission from an owner of the electronic component able to supply the ownership value, wherein the secure platform is configured to identify and authenticate the electronic component to a host prior to operation with the host, to verify that the plurality of lifetime usage limits of the electronic component have not been exceeded, and to enable operation of the electronic component with the host only if the plurality of lifetime usage limits have not been exceeded,
wherein, upon the exceeding any of the plurality of lifetime usage limits, the secure platform is configured to invalidate the electronic component and to make the electronic component inoperable for future usage by deleting both the at least one dual key pair and the ownership value from the electronic component.

2. The electronic component of claim 1 , wherein the secure platform is stored in a nonvolatile storage in the memory and is configured to be managed by the processor.

3. The electronic component of claim 1 , wherein the plurality of un-resettable monotonic counters are used to indicate usage of a factory configuration life-cycle phase, a field usage life-cycle phase, and an end of life life-cycle phase.

4. The electronic component of claim 1 , wherein the dual key pair includes the private key securely stored in the secure platform, the private key corresponding to a public key installed in at least one host machine.

5. The electronic component of claim 1 , wherein the dual key pair includes a public key stored in the secure platform, and wherein the digital signature is generated from the public key.

6. The electronic component of claim 1 , wherein the secure platform comprises a Trusted Platform Module.

7. The electronic component of claim 1 , wherein the electronic component is a disposable component usable by a host machine.

8. The electronic component of claim 1 , wherein the dual key pair is used to verify a manufacturer of the electronic component.

9. The electronic component of claim 1 , wherein the electronic component can be disabled by a host machine.

10. The electronic component of claim 1 , wherein the at least one dual key pair includes an endorsement key pair, a storage root key pair, and a signing key pair.

11. The electronic component of claim 1 , wherein the secure platform is configured to create a secure transport layer with a host machine.

12. The electronic component of claim 1 , wherein the electronic component is configured to be used in a printer.

13. A system, comprising:
a host machine; and
an electronic component configured to be operated by the host machine, the electronic component having a processor, a memory, and a secure platform, the secure platform having a plurality of un-resettable monotonic counters each configured to indicate usage of the electronic component at a different phase of the electronic component's life-cycle, the secure platform configured to store an ownership value, to generate at least one dual key pair and a corresponding digital signature, and to securely store at least a private key from the at least one dual key pair by locking the private key into the secure platform based on the ownership value so that the private key cannot be removed without permission from an owner of the electronic component able to supply the ownership value, wherein the secure platform is configured to be used to identify and authenticate the electronic component to the host machine prior to operation by the host machine, to verify that a plurality of lifetime usage parameters of the electronic component stored in the memory of the electronic component do not violate one or more rules programmed in the processor, and to enable operation of the electronic component by the host machine only if the plurality of lifetime usage parameters of the electronic component have not been crossed,
wherein, upon a determination that any of the plurality of lifetime usage parameters violates the one or more rules programmed into the processor, the secure platform is configured to invalidate the electronic component and to make the electronic component inoperable for future usage by deleting both the at least one dual key pair and the ownership value from the electronic component.

14. The system of claim 13 , wherein the individual ones of plurality of un-resettable monotonic counters are configured to be used as individual ones of the plurality of lifetime usage parameters stored in the memory of the electronic device, to indicate usage of the electronic component by the host machine at different life-cycle phases of the electronic component.

15. The system of claim 13 , wherein the dual key pair includes the private key secured in the secure platform, the private key corresponding to a public key installed in the host machine.

16. The system of claim 13 , wherein the host machine includes a public key, and the host machine is configured to operate the electronic component only if the dual key pair corresponds to the public key.

17. The system of claim 13 , wherein the electronic component is a disposable component for use by the host machine.

18. The system of claim 13 , wherein the electronic component can be disabled by the host machine.

19. The system of claim 13 , wherein the electronic component is configured to be disabled by the host machine if at least one usage counter of the electronic component exceeds a specified threshold.

20. A method, comprising:
authenticating a secure platform within an electronic component by
reading a public key from the electronic component by a host machine,
verifying the public key against a stored key in the host machine,
receiving data digitally signed by the electronic component using a private key securely stored within the electronic component and locked into the electronic component based on an ownership value so that the private key cannot be removed from the electronic component without permission from an owner of the electronic component able to supply the ownership value, and
verifying the digitally signed data using the stored key;

using the electronic component by the host machine only if the signed data and the public key are verified;
recording each usage of the electronic device at one or more different life-cycle phases of the electronic component to generate one or more total usages of the electronic device, wherein the recording includes advancing one of a plurality of un-resettable monotonic counters each configured to indicate one of the one or more total usages of the electronic component at a different phase of the electronic component's life-cycle; and
allowing continued usage of the electronic device only while each of the one or more total usages of the electronic device has not crossed a predetermined threshold and, upon a

Assignees

• Newton Sean
• Tran John
• Tamagno David
• St Microelectronics Inc

Inventors

• Newton Sean
• Tran John
• Tamagno David

Classifications

• G06F2221/2129

  Authenticate client device independently of the user · CPC title

• H04L63/0823 Primary

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• G03G2221/1823

  Cartridges having electronically readable memory · CPC title

• G03G2215/0697

  being an electronically readable memory · CPC title

• G03G15/0863

  provided with identifying means or means for storing process- or use parameters, e.g. an electronic memory · CPC title