Certicom Corporation

Blackberry Corporation

Thomas Rudolf Stiemerling

Keelan Smith

Matthew John Campagna

Marinus Struik

William Lundy Lattin

Yuri Poeluev

Daniel O'Loughlin

Jay Scott Fuller

Richard Gwynn Jones

Chinh Khac Nguyen

Ravi Singh

Daniel Richard L Brown

Roger Paul Bowman

Catalin Visinescu

Ming Chee Tsang

Wei Cheng Joseph Ku

Weicheng Joseph Ku

Joseph Ku

Daniel O'loughlin

William Lattin

An asset management system is provided which comprises one or more controllers, which operate as main servers and can be located at the headquarters of an electronic device manufacturer to remotely control their operations at any global location. The controller can communicate remotely over the Internet or other network to control one or more secondary or remote servers, herein referred to as appliances. The appliances can be situated at different manufacturing, testing or distribution sites. The controller and appliances comprise hardware security modules (HSMs) to perform sensitive and high trust computations, store sensitive information such as private keys, perform other cryptographic operations, and establish secure connections between components. The HSMs are used to create secure end-points between the controller and the appliance and between the appliance and the secure point of trust in an asset control core embedded in a device.

System and method for managing electronic assets

Systems, methods, and software can be used to provide security assurance information. In some aspects, a certificate request for a client process on a mobile device is received. A security assurance character for the client process is determined. Whether to grant the certificate request is determined based on the determined security assurance character. In response to determining to grant the certificate request, a certificate is generated.

Providing security assurance information

An asset management system is provided, which includes a hardware module operating as an asset control core. The asset control core generally includes a small hardware core embedded in a target system on chip that establishes a hardware-based point of trust on the silicon die. The asset control core can be used as a root of trust on a consumer device by having features that make it difficult to tamper with. The asset control core is able to generate a unique identifier for one device and participate in the tracking and provisioning of the device through a secure communication channel with an appliance. The appliance generally includes a secure module that caches and distributes provisioning data to one of many agents that connect to the asset control core, e.g. on a manufacturing line or in an after-market programming session.

System and method for hardware based security

Growing community of inventors

Toronto, Canada

Thomas Rudolf Stiemerling