Qualcomm Incorporated

Irdeto Access B.v.

Google Inc.

Ivan Hugh McLean

Laurence Geoffrey Lundblade

Andrew Augustine Wajs

Gerald Charles Horel

Roberto Avanzi

Boris Dolgunov

Brian Kelley

Edwin Jose

Vincent Pierre Le Roy

Dean Lorenz

Stuart Moskovics

Robert G Walker

Bryan Campbell

Ashish Grover

Baranidharan Muthukumaran

Kang Yang

Gopi Krishna Tummala

Kyle John Rupnow

Ravindra R Jejurikar

Mark Dragicevich

This document describes apparatuses and techniques for enabling a user to authorize access to early boot debugging of hardware issues in a computing system. In general, responsive to a user consenting to early boot debugging, a debug reenable signal is set in nonvolatile storage. Upon reinitialization of the computing system and receipt of an early debugging request, if the debug reenable signal is detected and the early debugging request is authenticated, an early boot debugging system is enabled. The user consent to early boot debugging may circumvent the setting of a fuse that otherwise would prevent performance of early boot debugging.

Early boot debugging of hardware issues in a computing system

Various features relate to the providing Software-Resilient User Privacy within smartphones or other devices by storing and processing all pertinent values needed for user privacy&#x2014;such as security keys and access attempt counters&#x2014;in hardware, such as within a System-on-a-Chip (SoC) processor formed on an integrated circuit (IC). For example, an on-die ephemeral Volatile Memory (eVM) device may be employed for storing access attempt counters or other parameters used to control malicious attack countermeasures. In one example, the eVM employs static random-access memory (SRAM) formed on the die and exploits capacitive remanence to recover stored counter values even if power is disconnected, then reconnected. On-chip NVM may be used for permanent storage of other privacy values, such as a device-unique secret key that is generated locally on the device and not known to the chip vendor, the device Original Equipment Manufacturer (OEM)) or the owner/user of the device.

Hardware-based software-resilient user privacy exploiting ephemeral data retention of volatile memory

A method for configuring the features of an integrated circuit. In the method, the integrated circuit receives a feature vector message from a first party. The feature vector message is included in a response to a feature set request from the first party to a second party. The integrated circuit configures at least one feature of the integrated circuit based on a feature vector in the feature vector message. The integrated circuit generates an attestation result based on the at least one configured feature of the integrated circuit and using a key securely stored in the integrated circuit and known to the second party and not known to the first party. The integrated circuit forwards the attestation result to the first party.

Method and apparatus for configuring an integrated circuit with a requested feature set

Disclosed is a method for generating a privilege-based key using a computer. In the method, a privilege is received from an application, and verified as being associated with the application. The computer cryptographically generates a second key using a first key and the privilege. The second key is provided to the application.

Method and apparatus for generating a privilege-based key

A disabled debug capability may be securely re-enabled in an integrated circuit such as a system-on-a-chip (SoC) device. In a method, the integrated circuit receives a debug re-enable message. The debug re-enable message includes a debug re-enable token signed by a private key. The debug re-enable token is based on a serial number of the integrated circuit and a first copy of a symmetric key. The debug re-enable token is validated using a public key corresponding to the private key. A comparison token is generated using the serial number of the integrated circuit and using a second copy of the symmetric key stored in a one-time-programmable (OTP) memory of the integrated circuit. The integrated circuit compares the debug re-enable token and the comparison token. The disabled debug capability is re-enabled in the integrated circuit if the debug re-enable token matches the comparison token.

Remote station and method for re-enabling a disabled debug capability in a system-on-a-chip device

Apparatus and methods for providing an incentive-based system for the superdistribution of content, which include one or more communications devices transmitting one or more referral messages relating to the content. Further, the apparatus and methods include the communications devices ordering content from across the network based on the referral messages, where a reward is generated for one or more referring devices based on the one or more referral messages. Additionally, the application of privacy and authentication mechanisms protects the privacy and verifies the identities of the parties involved in the transaction.

Apparatus and methods for incentivized superdistribution of content

Methods, apparatus, and computer program products for generating a derivative key for an execution environment (EE) are described. An example of a method includes obtaining a device key by a key derivation circuit, obtaining a context string by the key derivation circuit from a one-time writable bit register (OWBR), generating the derivative key for a current EE by the key derivation circuit based on the device key and on the context string from the OWBR.

Derived keys for execution environments in a boot chain

Disclosed is a method for providing a public key for authenticating an integrated circuit. In the method, the integrated circuit obtains a hardware key and an integrated circuit identifier. The integrated circuit generates a derived key based on the hardware key using a key derivation function (KDF) shared with a manufacturing machine. The integrated circuit generates a private key and a corresponding public key using the derived key as an input to a deterministic function. The integrated circuit then provides the public key and the integrated circuit identifier to a partner service for authentication of the integrated circuit using an anonymized credential database to be provided to the partner service by a manufacturer.

Apparatus and method for providing a public key for authenticating an integrated circuit

A method operational within a memory controller is provided for securing content stored in memory. The memory controller may allocate logical memory regions within a memory device to different domains. A different domain-specific key is obtained for each of the different domains, where each domain-specific key is a function of at least a master key and domain-specific information. During write operations, content/data is encrypted, at the memory controller, as it is written into each logical memory region using a domain-specific key corresponding to a domain providing the content and to which the logical memory region is allocated. Similarly, during read operations, content/data is decrypted, at the memory controller, as it is read from each memory region using a domain-specific key corresponding to a domain requesting the content and to which the logical memory region, where the content is stored, is allocated.

Method for securing content in dynamically allocated memory using different domain-specific keys

A system and method for providing secure communications between remote computing devices and servers. A network device sends characteristics of a client computing device over the network. A network device receives characteristics of a client computing device over the network. A plurality of credentials are generated where at least one of the plurality of credentials based on both the received characteristics of the client computing device and a unique client key, and at least one of the plurality of credentials based on both the received characteristics of the client computing device and a generic key. A network device sends the plurality of credentials over the network. A network device receives the plurality of credentials via the network.

System and method for providing a multi-credential authentication protocol

Disclosed is a method for deterring a timing-based glitch attack during a secure boot process of a device having a device-specific number. In the method, the device generates a pseudorandom number specific to a particular execution of a secure boot process. The device combines the device-specific number and the pseudorandom number to generate a diversity value. The device may change a timing of at least one process step of the secure boot process based on the diversity value. Also, the device may change an order of process steps of the secure boot process based on the diversity value.

Method and apparatus for deterring a timing-based glitch attack during a secure boot process

A system and method for inputting a password. The system and method operates to associate unique non-descriptive graphical features with unique text-based characters. The system and method operates to receive in sequence, a plurality of text-based characters. The system and method operates to display in sequence, in accordance with a sequence scheme, the non-descriptive graphical features associated with the plurality of text-based characters. The system and method also operates to process the plurality of text-based characters as the password. In addition, the system and method operates wherein the password, including text-based characters, may be deciphered from both the display of the non-descriptive graphical features associated with the plurality of text-based characters and the sequence scheme.

System and method for using a visual password scheme

Methods and computing devices enable code and/or data software on computer devices to be verified using methods and signatures which can be updated by a signing server after distribution. Updated verification methods and signatures may be provided in a second signature file. When a computing device unpacks an application for execution it may check whether a second signature file is associated with the application file. If not it may connect to a signing server to request a second signature file for the software. The signing server then may request information related to the software sufficient to determine if the software is trustworthy. If determined to be trustworthy, the signing server can send a second signature file to the computer device for use in verifying the software henceforth. The second signature file may include new or modified verification methods and a new signature.

Method and apparatus for improving code and data signing

Method and systems for protecting data on a mobile handset when remotely activated by a user involve encrypting the data using an encryption key, storing the encrypted data, and deleting the non-encrypted data along with the encryption key. Data may also be uploaded to a server to via a cellular data call for use in backing up the mobile handset. A mobile handset application configures the handset to receive activation commands from a server to encrypt, upload or download data. The encryption key is either received from the server or generated by the mobile handset and communicated to the server. Mock data files may be generated and stored on the mobile handset to enable handset applications to function normally after the data files have been encrypted.

Growing community of inventors

Solana Beach, CA, United States of America

Ivan Hugh McLean