US5796840A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Apparatus and method for providing secured communications
Assignee: Intel Corp
•
Filing: 1995-10-04
•
Granted: 1998-08-18
•
Expires: 2015-10-04
Abstract
Abstract A method of producing a hardware agent being a single integrated circuit encapsulated within a semiconductor device package. The method comprises the steps of generating a device-specific key pair internally within the hardware agent, and verifying that the key pair is unique. After production, secure communications are established through transmission of at least one digital certificate, followed by a successful challenge and response communication exchange.
Inventors
- 👤 Derek L. Davis
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 23:18
CPC Classifications
G; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; G06; G06Q; G06Q20/00; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/38; G06Q20/40; G06Q20/409; G06Q20/4097; G06Q20/40975; H; H04; H04L; H04L9/00; H04L9/06; H04L9/065; H04L9/0656; H04L9/0662; H04L9/08; H04L9/0894; H04L9/32; H04L9/3263; H04L9/3271; H04L2209/00; H04L2209/12; H04L2209/60
Claims Analysis
Total Claims: 20
Claim 1
Independent Claim
113 words
A method for producing a semiconductor device utilized to ensure secured communications with a remote device, the method comprising the steps of: placing the semiconductor device onto a certification system so that the semiconductor device establishes an electrical connection with said certification system; supplying power to said semiconductor device to initiate a configuration sequence by which a random number generator within the semiconductor device generates a device-specific key pair; verifying if said device-specific key pair has been previously generated a predetermined number of times; and storing said device-specific key pair into a non-volatile storage element within the semiconductor device if said device-specific key pair has been previously generated a predetermined number of times.
Claim 2
Independent Claim
113 words
A method for producing a semiconductor device utilized to ensure secured communications with a remote device, the method comprising the steps of: placing the semiconductor device onto a certification system so that the semiconductor device establishes an electrical connection with said certification system; supplying power to said semiconductor device to initiate a configuration sequence by which a random number generator within the semiconductor device generates a device-specific key pair; verifying if said device-specific key pair has been previously generated a predetermined number of times; and storing said device-specific key pair into a non-volatile storage element within the semiconductor device if said device-specific key pair has been previously generated a predetermined number of times.
Claim 3
Dependent Claim
37 words
The method according to claim 1, further including the steps of: creating a device certificate; inputting said device certificate into the semiconductor device; and storing said device certificate into said non-volatile storage element of the semiconductor device.
Claim 4
Dependent Claim
40 words
The method according to claim 2 further including the steps of: creating a second level certificate; inputting said second level certificate into the semiconductor device and storing said second level certificate into said non-volatile storage element of the semiconductor device.
Claim 5
Dependent Claim
82 words
The method according to claim 1, further comprising the steps of generating a new device-specific key pair; verifying if said new device-specific key pair has been previously generated said predetermined number of times; storing said new device-specific key pair into said non-volatile storage element if said new device-specific key pair has not been previously generated said predetermined number of times; and alternatively generating another device-specific key pair if said new device-specific key pair has been previously generated said predetermined number of times.
Claim 6
Independent Claim
113 words
A method for ensuring secured communications between a system employing a hardware agent and a remote system, the method comprising the steps of: establishing a communication link between the hardware agent and the remote system; outputting a unique device certificate from the system to the remote system; decrypting said device certificate to obtain a public key of the hardware agent; transmitting a message from the remote system to the system; returning a response to said message, said response encrypted with a private key of the hardware agent; decrypting said response with said public key of the hardware agent; and maintaining communications if said response is identical to that expected by the remote system.
Claim 7
Independent Claim
113 words
A method for ensuring secured communications between a system employing a hardware agent and a remote system, the method comprising the steps of: establishing a communication link between the hardware agent and the remote system; outputting a unique device certificate from the system to the remote system; decrypting said device certificate to obtain a public key of the hardware agent; transmitting a message from the remote system to the system; returning a response to said message, said response encrypted with a private key of the hardware agent; decrypting said response with said public key of the hardware agent; and maintaining communications if said response is identical to that expected by the remote system.
Claim 8
Dependent Claim
23 words
The method according to claim 5, wherein said message transmitted to the system is encrypted with said public key of the hardware agent.
Claim 9
Dependent Claim
28 words
The method according to claim 5 further comprising the step of terminating communications if said response received from the system differs from that expected by the remote system.
Claim 10
Dependent Claim
109 words
The method according to claim 5, wherein prior to transmitting the message, the method further comprising the steps of: outputting a second level certificate from the system to the remote system; decrypting said second level certificate to obtain a second version of said public key of the hardware agent; and comparing if said second version of said public key differs from said public key, wherein terminating said communication link if said second version of said public key differs from said public key, and alternatively continuing to ensure secured communications by initially performing said transmitting step if said second version of said public key is identical to said public key.
Claim 11
Independent Claim
108 words
A method for ensuring secured communications between a system employing a semiconductor device and a remote system, the method comprising the steps of: establishing a communication link between the system and the remote system; outputting a first and second certificate from the system to the remote system; decrypting said first and second certificates to obtain a first and second version of a public key of the semiconductor device; and comparing said first version of said public key with said secured version of said public key, wherein if said first version differs from said second version of said public key of said semiconductor device, said communication link is terminated.
Claim 12
Independent Claim
108 words
A method for ensuring secured communications between a system employing a semiconductor device and a remote system, the method comprising the steps of: establishing a communication link between the system and the remote system; outputting a first and second certificate from the system to the remote system; decrypting said first and second certificates to obtain a first and second version of a public key of the semiconductor device; and comparing said first version of said public key with said secured version of said public key, wherein if said first version differs from said second version of said public key of said semiconductor device, said communication link is terminated.
Claim 13
Dependent Claim
82 words
The method according to claim 9, wherein if said first version of said public key is identical to said second version, said comparing step further includes the steps of transmitting a message from the remote system to the system; returning a response to said message, said response encrypted with a private key of the semiconductor device; decrypting said response with said public key of the semiconductor device; and maintaining communications if said response is identical to that expected by the remote system.
Claim 14
Dependent Claim
19 words
The method according to claim 9, wherein said message is encrypted with said public key of the semiconductor device.
Claim 15
Dependent Claim
24 words
The method according to claim 9, further comprising the step of terminating communications if said response differs from that expected by the remote system.
Claim 16
Independent Claim
112 words
A method for ensuring secured communications between a system employing a semiconductor device and a remote system, the method comprising the steps of: establishing a communication link between the semiconductor device and the remote system; outputting a device certificate from the system to the remote system; decrypting said device certificate to obtain a public key of the semiconductor device; transmitting a message from the remote system to the system; returning a response to said message, said response encrypted with a private key of the semiconductor device; decrypting said response with said public key of the semiconductor device; and maintaining communications if said response is identical to that expected by the remote system.
Claim 17
Independent Claim
112 words
A method for ensuring secured communications between a system employing a semiconductor device and a remote system, the method comprising the steps of: establishing a communication link between the semiconductor device and the remote system; outputting a device certificate from the system to the remote system; decrypting said device certificate to obtain a public key of the semiconductor device; transmitting a message from the remote system to the system; returning a response to said message, said response encrypted with a private key of the semiconductor device; decrypting said response with said public key of the semiconductor device; and maintaining communications if said response is identical to that expected by the remote system.
Claim 18
Independent Claim
103 words
A method to provide reliable electronic distribution of information between a first system and a second system remotely located from the first system coupled together by a communication link, the method comprising the steps of: implementing a semiconductor device into the first system, said semiconductor device containing a public key, a private key and a device certificate; outputting said device certificate from said semiconductor device of the first system to the second system via the communication link; authenticating said semiconductor device by the second system; and transmitting the information from the second system to the first system, provided said semiconductor device is authenticated.
Claim 19
Independent Claim
103 words
A method to provide reliable electronic distribution of information between a first system and a second system remotely located from the first system coupled together by a communication link, the method comprising the steps of: implementing a semiconductor device into the first system, said semiconductor device containing a public key, a private key and a device certificate; outputting said device certificate from said semiconductor device of the first system to the second system via the communication link; authenticating said semiconductor device by the second system; and transmitting the information from the second system to the first system, provided said semiconductor device is authenticated.
Claim 20
Dependent Claim
99 words
The method according to claim 14, wherein said authenticating method includes the steps of decrypting said device certificate by the second system to obtain said public key of the semiconductor device; transmitting a first message from the second system to the first system prompting the first system to transmit a second message in response, said second message being encrypted with said private key of said semiconductor device; and decrypting said second message with said public key of said semiconductor device to authenticate that current communications do exist between said first system employing said semiconductor device and said second system.
References Cited (Backward Citations)
US4807288A
Cited
US5214702A
Cited
WO1990002456A1
Cited
US5142579A
Cited
EP0624014A2
Cited
US5422953A
Cited
US5499295A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-08-17 | 2002-02-16 | 2002-08-18 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-08-17 | 2006-02-16 | 2006-08-18 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-08-17 | 2010-02-16 | 2010-08-18 | $7700.00 | Window Closed / Lapsed |