US5883956A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Dynamic configuration of a secure processing unit for operations in various environments
Assignee: National Semiconductor Corp
•
Filing: 1996-03-28
•
Granted: 1999-03-16
•
Expires: 2016-03-28
Abstract
Abstract A technique to dynamically configure a Secure Processing Unit (SPU) chip in a secure manner using a capability table, which defines the functions that an SPU can perform. The capability table employs a digital signature to ensure the authenticity of the source and contents of the table. It also contains information which identifies the SPU for which the table is intended and a time-stamp indicating the time by which the table must be loaded into an SPU.
Inventors
- 👤 An Van Le
- 👤 William B. Sweet
- 👤 Howard Crompton Herbert
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-30 12:51
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/70; G06F21/71; G06F21/50; G06F21/57; G06F21/572; G06F21/76; H; H04; H04L; H04L9/00; H04L9/32; H04L9/3247; H04L9/3297; G06F12/00; G06F12/14; G06F12/1408; G06F2207/00; G06F2207/72; G06F2207/7219
Claims Analysis
Total Claims: 43
Claim 1
Independent Claim
55 words
A data structure for a cryptographically secure processing unit (SPU) stored in a computer readable memory comprising: a capability table specifying functions that can be executed by said SPU; a first field related to a time period for which said table is valid; and a second field authenticating said capability table and said first field.
Claim 2
Dependent Claim
55 words
A data structure for a cryptographically secure processing unit (SPU) stored in a computer readable memory comprising: a capability table specifying functions that can be executed by said SPU; a first field related to a time period for which said table is valid; and a second field authenticating said capability table and said first field.
Claim 3
Dependent Claim
13 words
The data structure of claim 1 wherein said first field comprises a time-stamp.
Claim 4
Dependent Claim
23 words
The data structure of claim 1 wherein said first field comprises a version number corresponding to a current version of said capability table.
Claim 5
Dependent Claim
19 words
The data structure of claim 1 wherein said second field comprises a digital signature produced by a trusted authority.
Claim 6
Dependent Claim
19 words
The data structure of claim 1 wherein said second field comprises a data string chosen by a trusted authority.
Claim 7
Dependent Claim
23 words
The data structure of claim 1 wherein said second field comprises an authentication code generated from said capability table and said first field.
Claim 8
Dependent Claim
14 words
The SPU of claim 1 wherein said SPU comprises a single integrated circuit device.
Claim 9
Dependent Claim
21 words
The data structure of claim 1 wherein said SPU is an element of a system comprising a plurality of electronic devices.
Claim 10
Dependent Claim
69 words
A data structure for a cryptographically secure processing unit (SPU) stored in a computer readable memory comprising: a capability table specifying functions that can be executed by said SPU; a first field identifying said SPU; a second field related to a time period for which said table is valid; and a third field authenticating the source and content of said capability table, said first field, and said second field.
Claim 11
Dependent Claim
69 words
A data structure for a cryptographically secure processing unit (SPU) stored in a computer readable memory comprising: a capability table specifying functions that can be executed by said SPU; a first field identifying said SPU; a second field related to a time period for which said table is valid; and a third field authenticating the source and content of said capability table, said first field, and said second field.
Claim 12
Dependent Claim
13 words
The data structure of claim 9 wherein said second field comprises a time-stamp.
Claim 13
Dependent Claim
23 words
The data structure of claim 9 wherein said second field comprises a version number corresponding to a current version of said capability table.
Claim 14
Dependent Claim
19 words
The data structure of claim 9 wherein said third field comprises a digital signature produced by a trusted authority.
Claim 15
Dependent Claim
19 words
The data structure of claim 9 wherein said third field comprises a data string chosen by a trusted authority.
Claim 16
Dependent Claim
26 words
The data structure of claim 9 wherein said third field comprises an authentication code generated from said capability table, said first field and said second field.
Claim 17
Dependent Claim
17 words
The data structure of claim 9 wherein said first field contains information which uniquely identifies said SPU.
Claim 18
Dependent Claim
16 words
The data structure of claim 15 wherein said information is the serial number of said SPU.
Claim 19
Dependent Claim
13 words
The SPU of claim 9 wherein said SPU comprises a single integrated circuit.
Claim 20
Dependent Claim
21 words
The data structure of claim 9 wherein said SPU is an element of a system comprising a plurality of electronic devices.
Claim 21
Independent Claim
79 words
A method of configuring a cryptographically secure processing unit (SPU) comprising the steps of: (a) encoding a security policy for said SPU in a capability table stored in a computer readable memory; (b) appending to said table a first field related to a time period for which said table is valid; (c) appending to said table a second field authenticating the source and content of said table; and (d) transmitting said table and said appended fields to said SPU.
Claim 22
Independent Claim
79 words
A method of configuring a cryptographically secure processing unit (SPU) comprising the steps of: (a) encoding a security policy for said SPU in a capability table stored in a computer readable memory; (b) appending to said table a first field related to a time period for which said table is valid; (c) appending to said table a second field authenticating the source and content of said table; and (d) transmitting said table and said appended fields to said SPU.
Claim 23
Dependent Claim
12 words
The method of claim 19 wherein said first field comprises a time-stamp.
Claim 24
Dependent Claim
22 words
The method of claim 19 wherein said first field comprises a version number corresponding to a current version of said capability table.
Claim 25
Dependent Claim
18 words
The method of claim 19 wherein said authentication field comprises a digital signature produced by a trusted authority.
Claim 26
Dependent Claim
18 words
The method of claim 19 wherein said second field comprises a data string chosen by a trusted authority.
Claim 27
Dependent Claim
18 words
The method of claim 19 wherein said second field comprises an authentication code generated from said capability table.
Claim 28
Dependent Claim
33 words
The method of claim 19, comprising the further step of: checking a function to be executed against said capability table to verify that said function is enabled before said function can be executed.
Claim 29
Dependent Claim
20 words
The method of claim 19 wherein said SPU is an element of a system comprising a plurality of electronic devices.
Claim 30
Independent Claim
90 words
A method of configuring a cryptographically secure processing unit (SPU) comprising the steps of: (a) encoding a security policy for said SPU in a capability table stored in a computer readable memory; (b) appending to said table a first field identifying said table; (c) appending to said table a second field related to a time period for which said table is valid; (d) appending to said table a third field authenticating the source and content of said table; and (e) transmitting said table and said appended fields to said SPU.
Claim 31
Independent Claim
90 words
A method of configuring a cryptographically secure processing unit (SPU) comprising the steps of: (a) encoding a security policy for said SPU in a capability table stored in a computer readable memory; (b) appending to said table a first field identifying said table; (c) appending to said table a second field related to a time period for which said table is valid; (d) appending to said table a third field authenticating the source and content of said table; and (e) transmitting said table and said appended fields to said SPU.
Claim 32
Dependent Claim
16 words
The method of claim 27 wherein said first field contains information which uniquely identifies said SPU.
Claim 33
Dependent Claim
15 words
The method of claim 28 wherein said information is the serial number of said SPU.
Claim 34
Dependent Claim
12 words
The method of claim 27 wherein said second field comprises a time-stamp.
Claim 35
Dependent Claim
22 words
The method of claim 27 wherein said second field comprises a version number corresponding to a current version of said capability table.
Claim 36
Dependent Claim
18 words
The method of claim 27 wherein said third field comprises a digital signature produced by a trusted authority.
Claim 37
Dependent Claim
18 words
The method of claim 27 wherein said third field comprises a data string chosen by a trusted authority.
Claim 38
Dependent Claim
18 words
The method of claim 27 wherein said third field comprises an authentication code generated from said capability table.
Claim 39
Dependent Claim
53 words
The method of claim 27, comprising the further steps of: (a) receiving said table and said appended fields in said SPU; (b) verifying said first field and third field; (c) comparing said second field with the clock value of said SPU; and (d) loading said table in a secure memory of said SPU.
Claim 40
Dependent Claim
34 words
The method of claim 35, comprising the further step of: checking a function to be executed against said capability table to verify that said function is enabled before said the function can be executed.
Claim 41
Dependent Claim
53 words
The method of claim 27, comprising the further steps of: (a) receiving said table and said appended fields in said SPU; (b) verifying said first field and third field; (c) comparing said second field with a value stored in said SPU; and (d) loading said table in a secure memory of said SPU.
Claim 42
Dependent Claim
34 words
The method of claim 37, comprising the further step of: checking a function to be executed against said capability table to verify that said function is enabled before said the function can be executed.
Claim 43
Dependent Claim
20 words
The method of claim 27 wherein said SPU is an element of a system comprising a plurality of electronic devices.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-03-15 | 2002-09-14 | 2003-03-16 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-03-15 | 2006-09-14 | 2007-03-16 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-03-15 | 2010-09-14 | 2011-03-16 | $7700.00 | Window Closed / Lapsed |