Secure Thingz Limited

Peter Dunne

Tim Woodruff

Andrew Bott

Dominic Roberts

A provisioning control apparatus is arranged to be coupled to a provisioning equipment server electrically connectable with at least one electronic device for provisioning the electronic device with security sensitive provisioning data. The electronic device includes a processor, a volatile memory and a non-volatile memory. The provisioning control apparatus has a communication interface configured to securely provide a provisioning application code to the provisioning equipment server for storing the provisioning application code in the volatile memory of the electronic device. The provisioning control apparatus includes a processor configured to trigger the processor of the electronic device to execute the provisioning application code. The provisioning application code is arranged, when being executed by the processor of the electronic device, to store the security sensitive provisioning data in the non-volatile memory of the electronic device.

Provisioning control apparatus and method for provisioning electronic devices

A provisioning control apparatus coupled to a provisioning equipment server electrically connectable with electronic components each including a security enclave and a non-volatile memory. The provisioning control apparatus includes a processor configured to encrypt the security sensitive provisioning data using a secure vault encryption key for obtaining encrypted security sensitive provisioning data. The provisioning control apparatus has a communication interface configured to securely provide the secure vault encryption key to the provisioning equipment server for storing the secure vault encryption key in the security enclave of the electronic component. The communication interface is further configured to provide the encrypted security sensitive provisioning data to the provisioning equipment server for storing the encrypted security sensitive provisioning data in the non-volatile memory of the electronic component and thereby creating a secure vault in the non-volatile memory of the electronic component for securely storing the encrypted security sensitive provisioning data.

Provisioning control apparatus and method for provisioning electronic components for electronic devices

An apparatus is provided for generating a plurality of provisioning data sets for provisioning a plurality of electronic devices, such as chips or microprocessors for electronic equipment. The apparatus includes a processing circuitry configured to obtain a first provisioning data set for provisioning an electronic device and to generate at least one further provisioning data set for provisioning at least one further electronic device by generating at least one copy of the first provisioning data set. Furthermore, the apparatus has a communication interface configured to output the at least one further provisioning data set for provisioning the at least one further electronic device. Moreover, a corresponding method to the apparatus is provided for generating a plurality of provisioning data sets for provisioning a plurality of electronic devices.

Apparatus and method for provisioning electronic devices

A method for provisioning a plurality of electronic devices with a respective provisioning data set includes, in a test provisioning stage: generating at least one test application key in plaintext and encrypting the at least one test application key using a first wrapping key for generating at least one encrypted test application key; encrypting the first wrapping key using the secret device master key for generating an encrypted first wrapping key; provisioning one or more of the plurality of electronic devices with a respective first provisioning data set, wherein the respective first provisioning data set comprises the at least one test application key in plaintext, the at least one encrypted test application key and the encrypted first wrapping key; and testing a security function of the electronic device on the basis of at least a portion of the first provisioning data set.

Growing community of inventors

Huntingdon, United Kingdom

Peter Dunne