Apparatus and method to securely control a remote operation

Abstract

Disclosed is a device to securely authorize a software operation. The device may comprise: a processor to transmit a software operation including an operation parameter; and a security verification device. The security verification device may be coupled to the processor and may be configured to: receive a secret key selection and a first password; select a secret key; receive the software operation including the operation parameter; and implement a key derivation function to generate a second password based upon the selected secret key and the software operation including the operation parameter. Further, the security verification device may be configured to determine if the second password matches the first password, and if so, authorize the performance of the software operation.

What is claimed is: 
     
         1 . A device comprising:
 a processor to transmit a software operation including an operation parameter;   a security verification device, coupled to the processor, the security verification device configured to:
 receive a secret key selection and a first password; 
 select a secret key; 
 receive the software operation including the operation parameter; 
 implement a key derivation function to generate a second password based upon the selected secret key and the software operation including the operation parameter; and 
 determine if the second password matches the first password, and if so, authorize the performance of the software operation. 
   
     
     
         2 . The device of  claim 1 , wherein, if the security verification device determines that the second password does not match the first password, the performance of the software operation is revoked. 
     
     
         3 . The device of  claim 1 , wherein, the security verification device is further configured to receive routing information for the software operation. 
     
     
         4 . The device of  claim 1 , wherein, the security verification device is further configured to determine if the second password matches the first password such that the software operation is authorized to be performed, within a single atomic operation. 
     
     
         5 . The device of  claim 1 , wherein, a master identifier identifying a commanding processor that has commanded the software operation is transmitted to the security verification device by a bus. 
     
     
         6 . The device of  claim 5 , wherein, the security verification device is further configured to:
 implement the key derivation function to generate the second password based upon the selected secret key, the master identifier, and the software operation including the operation parameter; and   determine if the second password matches the first password of the commanding processor, and if so, authorizing the performance of the software operation.   
     
     
         7 . The device of  claim 1 , wherein the software operation includes at least one of: a key activation operation, a key revocation operation, a feature activation operation, or a feature deactivation operation. 
     
     
         8 . A method to securely activate commands comprising:
 receiving a software operation including an operation parameter;   receiving a first password;   selecting a secret key;   implementing a key derivation function to generate a second password based upon the selected secret key and the software operation including the operation parameter; and   determining if the second password matches the first password, and if so, authorize the performance of the software operation by a processor.   
     
     
         9 . The method of  claim 8 , wherein, if the second password does not match the first password, further comprising revoking the performance of the software operation by the processor. 
     
     
         10 . The method of  claim 8 , further comprising receive routing information for the software operation. 
     
     
         11 . The method of  claim 8 , further comprising determining if the second password matches the first password such that the software operation is authorized to be performed, within a single atomic operation. 
     
     
         12 . The method of  claim 8 , wherein, a master identifier identifying a commanding processor that has commanded the software operation is transmitted by a bus. 
     
     
         13 . The method of  claim 12 , further comprising:
 implementing the key derivation function to generate the second password based upon the selected secret key, the master identifier, and the software operation including the operation parameter; and   determining if the second password matches the first password of the commanding processor, and if so, authorizing the performance of the software operation.   
     
     
         14 . The method of  claim 12 , wherein the software operation includes at least one of:
 a key activation operation, a key revocation operation, a feature activation operation, or a feature deactivation operation.   
     
     
         15 . A device comprising:
 means for receiving a software operation including an operation parameter;   means for receiving a first password;   means for selecting a secret key;   means for implementing a key derivation function to generate a second password based upon the selected secret key and the software operation including the operation parameter; and   means for determining if the second password matches the first password, and if so, means for authorizing the performance of the software operation.   
     
     
         16 . The device of  claim 15 , wherein, if the second password does not match the first password, further comprising means for revoking the performance of the software operation. 
     
     
         17 . The device of  claim 15 , further comprising means for receive routing information for the software operation. 
     
     
         18 . The device of  claim 15 , further comprising means for determining if the second password matches the first password such that the software operation is authorized to be performed, within a single atomic operation. 
     
     
         19 . The device of  claim 15 , wherein, a master identifier identifying a commanding processor that has commanded the software operation is transmitted by a bus. 
     
     
         20 . The device of  claim 19 , further comprising:
 means for implementing the key derivation function to generate the second password based upon the selected secret key, the master identifier, and the software operation including the operation parameter; and   means for determining if the second password matches the first password of the commanding processor, and if so, authorizing the performance of the software operation.   
     
     
         21 . The device of  claim 15 , wherein the software operation includes at least one of:
 a key activation operation, a key revocation operation, a feature activation operation, or a feature deactivation operation.   
     
     
         22 . A device comprising:
 a transceiver configured to:
 transmit a command for a secret key to a server; 
 transmit an identifier to the server; 
 receive a wrapped secret key from the server; 
   a storage device; and   a processor coupled to the transceiver and the storage device, the processor configured to:
 receive the wrapped secret key from the transceiver; 
 unwrap the wrapped secret key to obtain the secret key; and 
 store the secret key in the storage device. 
   
     
     
         23 . The device of  claim 22 , wherein unwrapping the wrapped secret key further comprises utilizing a key derivation function with the wrapped secret key and the identifier as inputs. 
     
     
         24 . The device of  claim 23 , wherein the identifier includes at least one of a serial number or a manufacturer identifier. 
     
     
         25 . The device of  claim 24 , wherein the identifier further comprises at least one of an identifier of a command processor or a global key. 
     
     
         26 . The device of  claim 23 , wherein a first software operation by the processor commands the secret key from the server. 
     
     
         27 . The device of  claim 26 , wherein a second software operation by the processor commands unwrapping the wrapped secret utilizing the key derivation function implemented by a key derivation device and storing the secret key in the storage device. 
     
     
         28 . The device of  claim 27 , wherein the server utilizes a key derivation function to generate the wrapped secret key that is linked to the key derivation function of the computing device. 
     
     
         29 . The device of  claim 22 , wherein the storage device is a one time programmable (OTP) memory or a ROM.