公开(公告)号：US20180375667A1

公开(公告)日：2018-12-27

申请号：US16055732

申请日：2018-08-06

Applicant: Huawei Technologies Co., Ltd.

Inventor： Sampo SOVIO ,  Janne HIRVIMIES ,  Valentin MANEA

IPC: H04L9/32 ,  H04L9/08 ,  H04L9/00 ,  H04L29/06 ,  G06F21/53

Abstract: An apparatus includes a processor coupled to a memory wherein the processor and the memory are configured to provide a secure execution environment. The memory includes a shared secret value. The processor is configured to receive a certificate, wherein the certificate includes a device identifier and a digital signature. The processor validates the certificate based on the digital signature and the device identifier, recovers a cryptographic key based on the shared secret value and the device identifier, and performs a cryptographic operation based on the recovered cryptographic key.

公开(公告)号：US20190272378A1

公开(公告)日：2019-09-05

申请号：US16415939

申请日：2019-05-17

Applicant: Huawei Technologies Co., Ltd.

Inventor： Janne HIRVIMIES ,  Sampo SOVIO

IPC: G06F21/57 ,  G06F8/65 ,  G06F8/71 ,  H04L9/00 ,  H04L9/14

Abstract: The invention relates to an electronic device and a software provisioning server. The electronic device is configured to obey an Anti-Roll Back, ARB, enforcement policy, obtain an ARB exception associated with a software, wherein the ARB exception comprises a signature of the ARB exception and a revision number of the software, check the validity of the signature of the ARB exception, and execute the software having the revision number so as to overrun the ARB enforcement policy if the signature of the ARB exception is valid. The software provisioning server is configured to determine an ARB exception associated with a software for overrunning a ARB enforcement policy in an electronic device, wherein the ARB exception comprises a signature of the ARB exception and a revision number of the software, provide the ARB exception to the electronic device.