Abstract: A method of storing data on target data processing devices, the method comprising: for each target data processing device, using a security data processing device on which first data has been stored to: obtain a device cryptographic certificate from the target data processing device, the device cryptographic certificate having been generated by, and being verifiable as having been generated by, a trusted entity; verify the device cryptographic certificate as having been generated by the trusted entity; generate second data using the first data; and store the second data on the target data processing device.

Abstract: A data provisioning device is arranged for provisioning a data processing entity from a set of data processing entities sharing the same joint decryption key. The data provisioning device comprises: a network interface configured to receive the provisioning data for provisioning the data processing entity, a joint encryption key associated with the joint decryption key, and control information indicating a processing scheme to be deployed by the data provisioning device when provisioning the data processing entity; a processor configured to process the provisioning data according to the control information to obtain processed provisioning data, to cryptographically encrypt the processed provisioning data using the received joint encryption key to obtain encrypted processed provisioning data; and a device interface configured to transmit the encrypted processed provisioning data to the data processing entity.

Abstract: A security data processing device comprising a processor and memory, the processor configured to: receive a digital document comprising a primary programming requirement for programming a programmable device; determine if there is a record stored in the memory that corresponds to the digital document; receive a programming request from a programming module of a programming machine in communication with said processor, said programming request requesting the programming of the programmable device; determine if the programming request complies with the primary programming requirement in the digital document; and wherein if said programming request complies with the primary programming requirement in the digital document and if there is no record stored in the memory that corresponds to the digital document, the processor is configured to: output programming information to the programming module for programming the programmable device; and permanently store a further record, corresponding to said digital documen

Abstract: A security profile for programming target devices may be provided. A base security profile may be obtained that defines security parameter(s) having a configurable value. A first security profile, generated from the base security profile, may include security parameter(s) that are assigned with a value of a first set of values by: (i) retrieving the value of the first set of values from a first data storage location coupled to a computing device and setting the configurable value of the security parameter using the retrieved value, or (ii) associating the security parameter with an instruction to obtain the value of the first set of values and set the configurable value of the security parameter using the obtained value, the instruction selected from one or more instructions. A second security profile may be generated from the base security profile in response to receiving further input from for the security parameter(s).

Abstract: A data processing device with a processor, a memory and an access control mechanism, the device having secure and non-secure modes, the memory having secure and non-secure regions, the secure region containing cryptographic data, and the access control mechanism preventing the processor from reading the cryptographic data when the device is operating in the non-secure mode. Also, methods of manufacturing and authenticating such a device, manufacturing an item of electronic equipment that includes such a device, a computer program for storing data on such a device, secure data processing hardware including such a computer program and a method of updating data stored in an item of electronic equipment including such a data processing device.