IBM Patents System to Secure Cryptographic Keys and Codes for Data Protection

ARMONK, N.Y., July 24, 2017

Protecting cryptographic keys and codes that are used to encrypt and decrypt data is fundamental to effective information security. When cryptographic keys and codes are stored on modules within an electronic device, preventing physical tampering or access to those modules is important to help prevent the keys and codes from being compromised.

IBM was granted U.S. Patent 8,938,627: Multilayer securing structure and method thereof for the protection of cryptographic keys and code for this invention.  

Traditional approaches to prevent tampering have typically involved encasing or "potting" modules in a plastic or epoxy-like resin. While these approaches have been generally effective in preventing tampering, other problems such as the deformation and warping of circuit boards on which encased modules reside during resin curing continue to be challenges during manufacturing.

"At IBM, there are teams engaged in inventing and innovation on data protection and security which are fundamental cornerstones of our global digital future. We had this in mind when creating this innovation," said Stefano Oggioni, Engineering Manager, IBM Systems and co-inventor on the patent.

IBM's patented approach uses circuitry on layers of a PCB or other laminated structure to encode the cryptographic keys and codes.  Additional layers of the PCB or laminate structure, which are added above and below the layers containing the keys and codes, act as physical access barriers.  The circuitry protecting the keys and codes can be placed in random patterns or locations within the PCB or laminate structure to prevent access or discovery.  The circuitry in the approach is also comprised of materials which are undetectable via X-ray inspection or acoustic microscopy thereby further enhancing the security of the keys and codes.