Abstract: Methods, apparatuses, devices and computer readable media are provided in relation to device enrolment. In one example, an electronic device is provided. The electronic device comprises a security module having a physical unclonable function (PUF). The security module is configured to establish an enrolment key pair (EPK, ESK) based on a first challenge and response to the PUF, the enrolment key pair comprising an enrolment public key (EPK) and an enrolment secret key (ESK). The electronic device is configured to establish a device key pair (DPK, DSK) based on a second challenge and response to the PUF, the device key pair comprising a device public key (DPK) and a device secret key (DSK). The electronic device further comprises one or more memories having installed thereon a primary trusted root certificate.

Abstract: A method is disclosed for determining an identifier value of a device, the device comprising an array of individually addressable cells, each cell comprising an electronic component having a quantum tunnelling barrier. The method comprises, for each cell of a selection of the individually addressable cells of the array, applying a potential difference across the electronic component of the cell, the potential difference sufficient to enable tunnelling of charge carriers through the quantum tunnelling barrier. The method further comprises, for each cell of a selection of the individually addressable cells of the array, comparing an electrical signal representative of a quantum tunnelling current through the quantum tunnelling barrier with a reference electrical signal. The method further comprises, for each cell of a selection of the individually addressable cells of the array determining, from the comparison, an identifier value for the cell.

Abstract: Methods, apparatuses, devices and computer readable media are provided in relation to enrolment. In one example, an electronic device is provided. The electronic device comprises a security module having a physical unclonable function (PUF). The security module is configured to establish an enrolment key pair (EPK,ESK) based on a first challenge and response to the PUF, the enrolment key pair comprising an enrolment public key (EPK) and an enrolment secret key (ESK). The electronic device further comprises one or more memories. The electronic device further comprises one or more processors configured to, over a secure connection, transmit a certificate signing request (CSR) comprising a device identifier and the EPK to a server for a certificate certifying that the EPK is associated with the device identifier, wherein the CSR is signed using the ESK, and wherein the device identifier is based on a function of the EPK.

Abstract: Methods, apparatuses, devices and computer readable media are provided in relation to firmware encryption. In one example, a method is provided, the method for providing firmware to an electronic device. The electronic device comprises a security module having a physical unclonable function (PUF), the security module configured to establish a firmware key pair (FPK, FSK) based on a challenge and response to the PUF, the firmware key pair comprising a firmware public key (FPK) and a firmware secret key (FSK). The method comprises causing a hash of the firmware to be signed using a secret key of a key pair to obtain a signature over the hash, the key pair comprising a public key and the secret key, wherein the public key is embedded securely in the electronic device. The method further comprises encrypting the firmware and the signature over the hash using a server encryption key.

Abstract: A method is provided for determining a unique identifier of a device, the device including a quantum tunnelling barrier unique to the device. The method comprises applying a potential difference across the quantrum tunnelling barrier, the potential difference sufficient to enable tunnelling barrier. The method further comprises measuring an electrical signal, the electrical signal representative of a tunnelling current through the quantrum tunnelling barrier. The method further comprises determining, from the measured electrical signal, a unique identifier for the device. Related apparatuses, systems, computer-readable media and methods are also provided herein.

Abstract: A method is provided for determining a unique identifier of a device, the device including a quantum tunnelling barrier unique to the device. The method comprises applying a potential difference across the quantum tunnelling barrier, the potential difference sufficient to enable tunnelling of charge carriers through the quantum tunnelling barrier. The method further comprises measuring an electrical signal, the electrical signal representative of a tunnelling current through the quantum tunnelling barrier, the tunnelling current characteristic of the quantum tunnelling barrier. The method further comprises determining, from the measured electrical signal, a unique identifier for the device. Related apparatuses, systems, computer-readable media and methods are also provided herein.

Abstract: A method is disclosed for determining an identifier value of a device, the device comprising an array of individually addressable cells, each cell comprising an electronic component having a quantum tunnelling barrier. The method comprises, for each cell of a selection of the individually addressable cells of the array, applying a potential difference across the electronic component of the cell, the potential difference sufficient to enable tunnelling of charge carriers through the quantum tunnelling barrier. The method further comprises, for each cell of a selection of the individually addressable cells of the array, comparing an electrical signal representative of a quantum tunnelling current through the quantum tunnelling barrier with a reference electrical signal. The method further comprises, for each cell of a selection of the individually addressable cells of the array determining, from the comparison, an identifier value for the cell.

Abstract: A method is provided for determining a unique identifier of a device, the device including a quantum tunnelling barrier unique to the device. The method comprises applying a potential difference across the quantum tunnelling barrier, the potential difference sufficient to enable tunnelling of charge carriers through the quantum tunnelling barrier. The method further comprises measuring an electrical signal, the electrical signal representative of a tunnelling current through the quantum tunnelling barrier, the tunnelling current characteristic of the quantum tunnelling barrier. The method further comprises determining, from the measured electrical signal, a unique identifier for the device. Related apparatuses, systems, computer-readable media and methods are also provided herein.