Random number generating system based on memory start-up noise
    1.
    发明授权
    Random number generating system based on memory start-up noise 有权
    基于内存启动噪声的随机数生成系统

    公开(公告)号:US09383969B2

    公开(公告)日:2016-07-05

    申请号:US14110009

    申请日:2012-04-05

    IPC分类号: G06F7/58 H04L9/08

    CPC分类号: G06F7/588 H04L9/0866

    摘要: A random number generating system for generating a sequence of random numbers comprising a memory, the memory being writable, volatile and configured such that the memory contains an at least partially random memory content upon each powering-up of the memory, an instantiating unit configured for seeding the random number generating system with a seed dependent upon the at least partially random memory content, the sequence of random numbers being generated in dependence upon the seed, and an over-writing unit configured for over-writing at least part of the memory with random numbers generated by the random number generating system in dependence upon the seed.

    摘要翻译: 一种用于产生随机数序列的随机数生成系统,包括存储器,所述存储器是可写入的,易失性的并且被配置为使得所述存储器在每次上电存储器时包含至少部分随机的存储器内容,所述实例单元被配置为 根据所述至少部分随机存储器内容种子具有种子的随机数生成系统,所述随机数序列依赖于所述种子生成;以及重写单元,被配置为用于将所述至少部分所述存储器重写, 由随机数生成系统根据种子生成的随机数。

    Physical unclonable function with improved start-up behavior
    2.
    发明授权
    Physical unclonable function with improved start-up behavior 有权
    具有改善启动行为的物理不可克隆功能

    公开(公告)号:US08848477B2

    公开(公告)日:2014-09-30

    申请号:US13877656

    申请日:2011-09-28

    IPC分类号: G11C5/14

    摘要: An electric physical unclonable function (PUF) (100) is provided comprising a semiconductor memory element (110) connectable to a PUF control means for reading content from the memory element and for deriving at least in part from said content a digital identifier, such as a secret key. Upon powering the memory element it settles into one of at least two different stable states. The particular stable state into which the memory element settles is dependent at least in part upon random physical characteristics of the memory element introduced during manufacture of the memory element. Settling of the memory element is further dependent upon a control input (112) of the memory element. The electric physical unclonable function comprises shielding means (142, 144) for shielding, during a time period including the power-up of the memory element and lasting at least until the settling of the memory element, the control input from receiving control signals upon which the particular stable state into which the memory element settles is dependent. In this way, the dependency of the memory element on its physical characteristics is improved, and dependency on possibly irreproducible control signals is reduced.

    摘要翻译: 提供电物理不可克隆功能(PUF)(100),其包括可连接到PUF控制装置的半导体存储元件(110),用于从存储元件读取内容,并且至少部分地从所述内容导出数字标识符,诸如 秘密钥匙 在为存储器元件供电时,它稳定在至少两个不同的稳定状态之一中。 存储元件稳定的特定稳定状态至少部分地取决于在存储元件的制造期间引入的存储元件的随机物理特性。 存储器元件的稳定还取决于存储元件的控制输入(112)。 电物理不可克隆功能包括屏蔽装置(142,144),用于在包括存储元件的上电的持续时间期间屏蔽屏蔽装置,并持续至少直到存储元件的稳定,控制输入从其上接收控制信号 存储元件稳定的特定稳定状态是依赖的。 以这种方式,存储元件对其物理特性的依赖性得到改善,并且减少了可能不可再生的控制信号的依赖性。

    Physically unclonable function with tamper prevention and anti-aging system
    3.
    发明授权
    Physically unclonable function with tamper prevention and anti-aging system 有权
    具有防篡改和抗老化系统的物理不可克隆功能

    公开(公告)号:US08694856B2

    公开(公告)日:2014-04-08

    申请号:US13390255

    申请日:2010-08-06

    IPC分类号: G11C29/00

    摘要: Systems for generating an identifying response pattern comprising a memory (120) used as a physically unclonable function configured for generating a response pattern dependent on physical, at least partially random characteristics of said memory may be vulnerable to freezing attacks and to aging. A memory-overwriting device (110) configured for overwriting at least a first portion of the plurality of memory locations to obscure the response pattern in the memory avoids freezing attacks. An anti-degradation device (160) configured to write to each respective location of a second portion of the plurality of memory locations an inverse of a response previously read from the memory reduces the effects of aging.

    摘要翻译: 用于生成识别响应模式的系统包括用作被配置用于生成依赖于所述存储器的物理,至少部分随机特性的响应模式的物理不可克隆功能的存储器(120),其易于受到冻结攻击和老化。 被配置为重写多个存储器位置的至少第一部分以遮蔽存储器中的响应模式的存储器重写设备(110)避免了冻结攻击。 一种抗劣化装置(160),被配置为写入多个存储器位置的第二部分的每个相应位置,先前从存储器读取的响应的反相减少了老化的影响。

    PHYSICALLY UNCLONABLE FUNCTION WITH TAMPER PREVENTION AND ANTI-AGING SYSTEM
    4.
    发明申请
    PHYSICALLY UNCLONABLE FUNCTION WITH TAMPER PREVENTION AND ANTI-AGING SYSTEM 有权
    具有防篡改和抗衰老系统的物理不可靠功能

    公开(公告)号:US20120179952A1

    公开(公告)日:2012-07-12

    申请号:US13390255

    申请日:2010-08-06

    IPC分类号: G06F11/10 G06F12/06

    摘要: Systems for generating an identifying response pattern comprising a memory (120) used as a physically unclonable function configured for generating a response pattern dependent on physical, at least partially random characteristics of said memory may be vulnerable to freezing attacks and to aging. A memory-overwriting device (110) configured for overwriting at least a first portion of the plurality of memory locations to obscure the response pattern in the memory avoids freezing attacks. An anti-degradation device (160) configured to write to each respective location of a second portion of the plurality of memory locations an inverse of a response previously read from the memory reduces the effects of aging.

    摘要翻译: 用于生成识别响应模式的系统包括用作被配置用于生成依赖于所述存储器的物理,至少部分随机特性的响应模式的物理不可克隆功能的存储器(120),其易于受到冻结攻击和老化。 被配置为重写多个存储器位置的至少第一部分以遮蔽存储器中的响应模式的存储器重写设备(110)避免了冻结攻击。 一种抗劣化装置(160),被配置为写入多个存储器位置的第二部分的每个相应位置,先前从存储器读取的响应的反相减少了老化的影响。

    Security Device
    5.
    发明申请
    Security Device 审中-公开
    安全设备

    公开(公告)号:US20080222426A1

    公开(公告)日:2008-09-11

    申请号:US11815660

    申请日:2006-01-26

    IPC分类号: H04L9/32

    CPC分类号: G07C9/00087

    摘要: A security device comprising means for authenticating an entity using biometric data, characterized by means for alternatively authenticating the entity using a security code such as a personal identification number. Also a system configured to grant an authorization upon a successful authorization by the security device, in which the authorization granted after the authentication using the security code is restricted in scope compared to the authorization granted after the authentication using the biometric data.

    摘要翻译: 一种安全装置,其包括用于使用生物特征数据认证实体的装置,其特征在于用于使用诸如个人识别号码的安全码替代地认证所述实体的装置。 还有一种被配置为在安全设备的成功授权之后授予授权的系统,其中使用安全码的认证之后授权的授权在与使用生物特征数据的认证之后授予的授权相比较的范围上被限制。

    Private and Controlled Ownership Sharing
    6.
    发明申请
    Private and Controlled Ownership Sharing 有权
    私有和受控所有制共享

    公开(公告)号:US20080152146A1

    公开(公告)日:2008-06-26

    申请号:US11814575

    申请日:2006-01-19

    摘要: The present invention relates to a method, a device and a system for preventing unauthorized introduction of content items in a network containing compliant devices and enabling users in the network to be anonymous. A basic idea of the present invention is to provide a CA (206) with a fingerprint of a content item to be introduced in a network at which the CA is arranged. Further, the CA is provided with an identifier of a content introducer (201), which introduces the particular content item in the network. The CA compares the fingerprint to a predetermined set of fingerprints, and content item intro duction is allowed if the content itemfingerprint cannot be found among the fingerprints comprised in the set. On introduction of the content item, the CA generates a pseudonym for the content introducer and creates a signed content ID certificate comprising at least said fingerprint and a unique content identifier for the content item and the pseudonym of the content introducer.

    摘要翻译: 本发明涉及一种用于防止在含有兼容设备的网络中未经授权的引入内容的方法,设备和系统,并使网络中的用户能够匿名。 本发明的基本思想是向CA(206)提供要在CA布置的网络中引入的内容项目的指纹。 此外,CA被提供有内容引入器(201)的标识符,其将特定内容项目引入网络。 CA将指纹与指定的一组指纹进行比较,内容项目介绍。 在引入内容项目时,CA为内容引导器生成假名,并创建包括至少所述指纹的签名内容ID证书和用于内容项目和内容引导器的假名的唯一内容标识符。

    Hybrid device and person based authorized domain architecture
    7.
    发明授权
    Hybrid device and person based authorized domain architecture 有权
    混合设备和基于人员的授权域架构

    公开(公告)号:US09009308B2

    公开(公告)日:2015-04-14

    申请号:US10565663

    申请日:2004-07-14

    摘要: This invention relates to a system and a method of generating an Authorized Domain (AD) by selecting a domain identifier, and binding at least one person (P1, P, PN1), at least one device (D1, D2, . . . , DM), and at least one content item (C1, C2, . . . , CNZ) to the Authorized Domain (AD) given by the domain identifier (Domain ID). Hereby, a number of verified devices (D1, D2, . . . , DM) and a number of verified persons (P1, P2, . . . , PN1) that is authorized to access a content item of the Authorized Domain (100) is obtained. In this way, access to a content item of an authorized domain by a person operating a device is obtained either by verifying that the content item and the person are linked to the same domain or by verifying that the device and the content item are linked to the same domain. Thereby, enhanced flexibility for one or more persons when accessing content in an authorized domain is obtained while security of the content is still maintaining. This is further done in a simple, secure and reliable way.

    摘要翻译: 本发明涉及通过选择域标识符并绑定至少一个人(P1,P,PN1)至少一个设备(D1,D2,...,...)来产生授权域(AD)的系统和方法, DM)以及由域标识符(Domain ID)给出的至少一个内容项(C1,C2,...,CNZ)到授权域(AD)。 因此,被授权访问授权域(100)的内容项目的多个经验证的设备(D1,D2,...,DM)和许多经验证的人(P1,P2,...,PN1) 获得。 以这种方式,通过验证内容项目和人被链接到相同的域,或者通过验证设备和内容项目被链接到,获得由操作设备的人访问授权域的内容项目 同一个域 因此,在内容的安全性仍然保持的同时获得访问授权域中的内容时一个或多个人的增强的灵活性。 这进一步以简单,安全和可靠的方式完成。

    RANDOM NUMBER GENERATING SYSTEM BASED ON MEMORY START-UP NOISE
    9.
    发明申请
    RANDOM NUMBER GENERATING SYSTEM BASED ON MEMORY START-UP NOISE 有权
    基于记忆启动噪声的随机数生成系统

    公开(公告)号:US20140040338A1

    公开(公告)日:2014-02-06

    申请号:US14110009

    申请日:2012-04-05

    IPC分类号: G06F7/58

    CPC分类号: G06F7/588 H04L9/0866

    摘要: A random number generating system for generating a sequence of random numbers comprising a memory, the memory being writable, volatile and configured such that the memory contains an at least partially random memory content upon each powering-up of the memory, an instantiating unit configured for seeding the random number generating system with a seed dependent upon the at least partially random memory content, the sequence of random numbers being generated in dependence upon the seed, and an over-writing unit configured for over-writing at least part of the memory with random numbers generated by the random number generating system in dependence upon the seed.

    摘要翻译: 一种用于产生随机数序列的随机数生成系统,包括存储器,所述存储器是可写入的,易失性的并且被配置为使得所述存储器在每次上电存储器时包含至少部分随机的存储器内容,所述实例单元被配置为 根据所述至少部分随机存储器内容种子具有种子的随机数生成系统,所述随机数序列依赖于所述种子生成;以及重写单元,被配置为用于将所述至少部分所述存储器重写, 由随机数生成系统根据种子生成的随机数。

    Method of authentication based on polyomials
    10.
    发明授权
    Method of authentication based on polyomials 失效
    基于多项式的认证方法

    公开(公告)号:US08645694B2

    公开(公告)日:2014-02-04

    申请号:US11575786

    申请日:2005-09-27

    IPC分类号: H04L29/06

    摘要: There is provided an authentication method for a system (10) comprising several devices (30). The method involves: a) providing each device (30) with an identity value (pi: i=1, . . . , n) and a polynomial (P) for generating a polynomial key; (b) including a verifier device (p1) and a prover device (P2)amongst said devices (30); (c) arranging for the prover device (p2) to notify its existence to the verifier device (P1); (d) arranging for the verifier device (pi) to challenge the prover device (p2) to encrypt a nonce using the prover (P2)device's polynomial (P) key and communicate the encrypted nonce as a response to the verifier device (p1); (e) arranging for the verifier device (p1) to receive the encrypted nonce as a further challenge from the prover device (pZ) and: (i ) encrypt the challenge using the polynomial keys generated from a set of stored device identities; or (ii) decrypt the challenge received using the set of polynomial keys; until said verifier device (p1) identifies an authentication match.

    摘要翻译: 提供了一种用于包括若干设备(30)的系统(10)的认证方法。 该方法包括:a)向每个设备(30)提供用于生成多项式密钥的身份值(pi:i = 1,...,n)和多项式(P) (b)在所述装置(30)中包括验证装置(p1)和证明装置(P2); (c)安排验证器装置(p2)将其存在通知验证装置(P1); (d)使用验证器(P2)设备的多项式(P)密钥安排验证器设备(pi)挑战证明器设备(p2)加密随机数,并将加密的随机数作为对验证器设备(p1)的响应进行通信, ; (e)安排验证器装置(p1)从证明器装置(pZ)接收加密的随机数作为另外的挑战,并且:(i)使用从一组存储的装置标识产生的多项式密钥来加密挑战; 或(ii)使用该组多项式密钥解密接收到的挑战; 直到所述验证者设备(p1)识别认证匹配。