Secret delegatee device i.e. USB key, for data transmission, has secure storage unit, where cryptographic loading key is received from secure guardian, and key is stored in storage unit subject to positive result of mutual authentication

摘要

The device has a secure storage unit (SSD) that is ready to store a unique identifier (UID) that is specific to a delegatee device (DD). A processing unit (UCD) is arranged to perform mutual authentication of the delegatee device near a secure guardian (HSM) or hardware security module by utilizing a cryptographic communication key. A cryptographic loading key (LSK) is received from the secure guardian, and the loading key is stored in the secure storage unit subject to a positive result of mutual authentication. Independent claims are also included for the following: (1) a target (2) a method for performing delegation between a trusted guardian and a target.