Arris Enterprises LLC

Michael Ryan Pilquist

Alexander Medvinsky

Tat Keung Chan

Xin Qiu

Jason A Pasion

Jinsong Zheng

Douglas M Petty

Eric Eugene Berry

Tat Keung Chen

A system is provided for distribution of device key sets over a network in a protected software environment (PSE). In the system, a client device includes a connection interface for receiving a crypto hardware (CH) token belonging to a user, untrusted software, a quoting enclave, and a PSE for generating a provisioning request for a device key set. An attestation proxy server (APS) receives the provisioning message using a first network connection, and transmits the provisioning message to an online provisioning server (OPS) using a second network connection. The OPS constructs a provisioning response and an encrypted device key set, and delivers the provisioning response to the untrusted software using the first and second network connections. The PSE decrypts the encrypted device key set to obtain the device key set, re-encrypts the device key set with a local chip-specific key, and stores the re-encrypted device key set.

Secure distribution of device key sets over a network

Growing community of inventors

Souderton, PA, United States of America

Michael Ryan Pilquist