Proofs of Vicinity Using Cpufs
    1.
    发明申请
    Proofs of Vicinity Using Cpufs 审中-公开
    使用Cpufs的邻域证明

    公开(公告)号:US20080260152A1

    公开(公告)日:2008-10-23

    申请号:US12094999

    申请日:2006-11-27

    IPC分类号: H04L9/32

    CPC分类号: H04L9/3234 H04L9/3278

    摘要: The present invention relates to a method and a device (104) for authenticating a plurality of physical tokens (101, 102, 103). A basic idea of the invention is to supply a sequence of interconnected devices (108, 109, 110), each device comprising a physical token (101, 102, 103), with a challenge of the respective physical token created during enrollment of said respective physical token, wherein the sequence of interconnected devices is arranged such that a data set supplied to the sequence is cryptographically processed with a response of a token comprised in a device and passed on to a token comprised in a subsequent device which further cryptographically processes the processed data set with its response until a response of a final physical token has been used to further cryptographically process the data set. Then, the data set which has been cryptographically processed with the responses of the tokens in the sequence is received and used together with the data set itself and data associated with the response of the respective token to authenticate the sequence of physical tokens.

    摘要翻译: 本发明涉及一种用于认证多个物理令牌(101,102,103)的方法和装置(104)。 本发明的基本思想是提供一系列互连的设备(108,109,110),每个设备包括物理令牌(101,102,103),在所述相应的设备注册期间产生相应物理令牌的挑战 物理令牌,其中所述互连设备的序列被布置为使得提供给所述序列的数据集通过包含在设备中的令牌的响应进行密码处理,并传递到包含在后续设备中的令牌,所述令牌进一步加密处理 数据集具有其响应,直到最终物理令牌的响应已被用于进一步加密处理数据集。 然后,已经用序列中的令牌的响应进行了密码处理的数据集被接收并与数据集本身一起使用,并且与相应令牌的响应相关联的数据被使用以验证物理令牌的顺序。

    PHYSICAL SECRET SHARING AND PROOFS OF VICINITY USING PUFS
    2.
    发明申请
    PHYSICAL SECRET SHARING AND PROOFS OF VICINITY USING PUFS 审中-公开
    使用PUFS进行物理秘密共享和维护

    公开(公告)号:US20090217045A1

    公开(公告)日:2009-08-27

    申请号:US12095000

    申请日:2006-11-27

    IPC分类号: H04L9/32

    CPC分类号: H04L9/3234 H04L9/3278

    摘要: The present invention relates to a method of creating challenge-response pairs, a method of authenticating a plurality of physical tokens, a system for creating challenge-response pairs and a device for authenticating a plurality of physical tokens. A basic idea of the invention is to interconnect a plurality of physical tokens (101, 102, 103), such as a plurality of uncloneable functions (PUFs), in a sequence, provide the sequence with a challenge (Q and use a response of a PUF as a challenge to a subsequent PUF in the sequence. When a final PUF is reached in the sequence and produces a response (R), a challenge-response pair (CRP) has been created, which pair comprises the challenge provided to the sequence of PUFs and the response produced by the final PUF. At least the challenge of this CRP is then stored.

    摘要翻译: 本发明涉及创建挑战 - 响应对的方法,认证多个物理令牌的方法,用于创建挑战 - 响应对的系统和用于认证多个物理令牌的设备。 本发明的基本思想是在序列中互连多个物理令牌(101,102,103),诸如多个不可克隆的功能(PUF)),为序列提供挑战(Q并使用 PUF作为序列中随后的PUF的挑战当在序列中达到最终PUF并产生响应(R)时,创建了挑战 - 响应对(CRP),该对包括提供给 PUF序列和最终PUF产生的响应,至少存储了该CRP的挑战。

    Information Carrier Authentication With a Physical One-Way Function
    3.
    发明申请
    Information Carrier Authentication With a Physical One-Way Function 有权
    具有物理单向功能的信息载体认证

    公开(公告)号:US20080229119A1

    公开(公告)日:2008-09-18

    申请号:US12064089

    申请日:2006-08-16

    IPC分类号: G06F21/00

    摘要: The present invention relates to a method of enabling authentication of an information carrier (105), the information carrier (105) comprising a writeable part (155) and a physical token (125) arranged to supply a response upon receiving a challenge, the method comprising the following steps; applying a first challenge (165) to the physical token (125) resulting in a first response (170), and detecting the first response (170) of the physical token (125) resulting in a detected first response data (175), the method being characterized in that it further comprises the following steps; forming a first authentication data (180) based on information derived from the detected first response data (175), signing the first authentication data (180), and writing the signed authentication data (185) in the writeable part (155) of the information carrier (105). The invention further relates to a method of authentication of an information carrier (105), as well as to devices for both enabling authentication as well as authentication of an information carrier (105).

    摘要翻译: 本发明涉及一种能够认证信息载体(105)的方法,所述信息载体(105)包括布置成在接收到挑战时提供响应的可写入部分(155)和物理令牌(125),所述方法 包括以下步骤: 将第一挑战(165)应用于所述物理令牌(125),从而产生第一响应(170),并且检测所述物理令牌(125)的第一响应(170),从而产生检测到的第一响应数据(175) 其特征在于还包括以下步骤: 基于从检测到的第一响应数据(175)导出的信息,形成第一认证数据(180),对第一认证数据(180)进行签名,并将签名认证数据(185)写入信息的可写入部分(155) 载体(105)。 本发明还涉及信息载体(105)的认证方法,以及用于启用认证以及信息载体(105)的认证的设备。

    Integrated Puf
    5.
    发明申请
    Integrated Puf 审中-公开
    集成Puf

    公开(公告)号:US20080237506A1

    公开(公告)日:2008-10-02

    申请号:US12090364

    申请日:2006-10-11

    IPC分类号: G01N23/00

    CPC分类号: H04L9/3278 H04L2209/805

    摘要: In a device for providing challenge-response pairs a radiation detection element, a challenge-modifying element and preferably also a light source are arranged on the same side of an imaginary plane, which separates said radiation-detecting element from a radiation scattering element. Hence, generation of a speckle pattern having a desired minimum speckle size is facilitated and a more easily assembled device is provided.

    摘要翻译: 在用于提供挑战 - 响应对的装置中,辐射检测元件,挑战修改元件以及优选地还有光源被布置在虚拟平面的同一侧上,该假平面将辐射检测元件与辐射散射元件分离。 因此,有助于产生具有期望的最小散斑尺寸的散斑图案,并且提供更容易组装的装置。

    Integrated Physical Unclonable Function (Puf) with Combined Sensor and Display
    6.
    发明申请
    Integrated Physical Unclonable Function (Puf) with Combined Sensor and Display 审中-公开
    具有组合传感器和显示器的集成物理不可克隆功能(Puf)

    公开(公告)号:US20080231418A1

    公开(公告)日:2008-09-25

    申请号:US12090414

    申请日:2006-10-02

    IPC分类号: H04L9/32

    摘要: The present invention relates to a device (100, 200, 300) and a method for creating challenge-response pairs. A basic idea of the present invention is to create a challenge in the form of light emitted onto a light scattering element (103, 203), which light will be scattered in the light scattering element and detected as a response to the challenge by light detecting elements (105, 205). The light scattering element comprises a transmissive material which contains randomly distributed light scattering particles (104, 204), which scatter incident light such that a random speckle pattern is created and spread over the light detecting elements. This random pattern is detected by the light detecting elements, and is known as the response to the challenge (i.e. the light) that was supplied to the light scattering element. Hence, a challenge-response pair is created. Further, picture elements (109, 209) are included in the device in order to enable modification of the challenge created by a light source (101, 201) and supplied to the light scattering element. By activating picture elements and thereby modifying the challenge, one will also modify the response that corresponds to the modified challenge.

    摘要翻译: 本发明涉及一种用于创建挑战 - 响应对的装置(100,200,300)和方法。 本发明的基本思想是以光散射元件(103,203)的光的形式产生挑战,该光将散射在光散射元件中,并通过光检测作为对挑战的响应进行检测 元素(105,205)。 光散射元件包括透射材料,其包含随机分布的光散射粒子(104,204),其散射入射光,使得随机散斑图案被产生并分布在光检测元件上。 该随机图案由光检测元件检测,并且被称为对提供给光散射元件的挑战(即,光)的响应。 因此,创建了一个挑战 - 响应对。 此外,图像元素(109,209)包括在装置中,以便能够修改由光源(101,201)产生并提供给光散射元件的挑战。 通过激活图片元素并从而修改挑战,还将修改对应于修改的挑战的响应。

    Method and apparatus for information carrier authentication
    7.
    发明授权
    Method and apparatus for information carrier authentication 有权
    用于信息载体认证的方法和装置

    公开(公告)号:US08887309B2

    公开(公告)日:2014-11-11

    申请号:US12064089

    申请日:2006-08-16

    摘要: The present invention relates to a method of enabling authentication of an information carrier (105), the information carrier (105) comprising a writeable part (155) and a physical token (125) arranged to supply a response upon receiving a challenge, the method comprising the following steps; applying a first challenge (165) to the physical token (125) resulting in a first response (170), and detecting the first response (170) of the physical token (125) resulting in a detected first response data (175), the method being characterized in that it further comprises the following steps; forming a first authentication data (180) based on information derived from the detected first response data (175), signing the first authentication data (180), and writing the signed authentication data (185) in the writeable part (155) of the information carrier (105). The invention further relates to a method of authentication of an information carrier (105), as well as to devices for both enabling authentication as well as authentication of an information carrier (105).

    摘要翻译: 本发明涉及一种能够认证信息载体(105)的方法,所述信息载体(105)包括布置成在接收到挑战时提供响应的可写入部分(155)和物理令牌(125),所述方法 包括以下步骤: 将第一挑战(165)应用于所述物理令牌(125),从而产生第一响应(170),并且检测所述物理令牌(125)的第一响应(170),从而产生检测到的第一响应数据(175) 其特征在于还包括以下步骤: 基于从检测到的第一响应数据(175)导出的信息,形成第一认证数据(180),对第一认证数据(180)进行签名,并将签名认证数据(185)写入信息的可写入部分(155) 载体(105)。 本发明还涉及信息载体(105)的认证方法,以及用于启用认证以及信息载体(105)的认证的设备。

    AUTHENTICATING BANKNOTES OR OTHER PHYSICAL OBJECTS
    8.
    发明申请
    AUTHENTICATING BANKNOTES OR OTHER PHYSICAL OBJECTS 审中-公开
    认证银行或其他物理对象

    公开(公告)号:US20090008924A1

    公开(公告)日:2009-01-08

    申请号:US11913716

    申请日:2006-05-10

    摘要: A system 100 for authenticating a physical product 110, such as a banknote, including at least one physical product and a verification device 130. The physical product including a random distribution of a plurality of physically detectable particles 112 in a substrate of the product. In association with the physical product, a digital representation (114) is stored (‘stored representation’) of measured physical properties of the particles including an actual distribution of at least some of the particles, where the physical properties are measured through reflection and transmission. The verification device includes a measurement unit 450 for determining a digital representation (‘measured representation’) based on measurements of physical properties of the particles, including an actual distribution of at least some of the particles, through reflection and transmission; and a comparison unit 470 for comparing the measured representation with the stored representation.

    摘要翻译: 用于认证包括至少一个物理产品和验证装置130的物理产品110(例如钞票)的系统100.该物理产品包括多个物理上可检测的颗粒112在产品的基底中的随机分布。 与物理产品相关联,数字表示(114)被存储(“存储表示”)的粒子的测量物理性质,包括至少一些颗粒的实际分布,其中物理特性通过反射和透射来测量 。 验证装置包括测量单元450,用于通过反射和透射来确定包括粒子的至少一些的实际分布的颗粒的物理性质的数字表示(“测量表示”); 以及比较单元470,用于将测量的表示与存储的表示进行比较。

    Method and apparatus for detection of a speckle based physically unclonable function
    9.
    发明授权
    Method and apparatus for detection of a speckle based physically unclonable function 失效
    用于检测基于散斑的物理不可克隆功能的方法和装置

    公开(公告)号:US07432485B2

    公开(公告)日:2008-10-07

    申请号:US10582383

    申请日:2004-11-24

    IPC分类号: G02B7/04 H01L27/00

    CPC分类号: G02B27/48 H04L9/3278

    摘要: An optical arrangement of at least a coherent light source (1), a strongly scattering object (5) (the PUF), and a pixe-lated photo-detector (6), wherein the pixels are comparable in size with the bright and dark patches of the speckle pattern produced by coherent radiation traversing the scattering object (5). Quantitively, the pixel size should be roughly λ/NA, where λ is the wave-length, and (i) NA=a/z for free-space geometry, with a being the beam radius and z being the distance between the exit surface of the PUF (5) and the pixelated detector (6), or (ii) NA is the numerical aperture of a lens (7) in an imaging geometry. In a preferred embodiment of the invention, there are tentative requirements that the pixels should be at least smaller than ηmaxλNA and preferably larger than ηmaxλ/NA, where (in an exemplary embodiment) ηmax=5 and ηmin=0.05, say. It will be understood by a person skilled in the art that the present invention is concerned with the optical arrangement of the PUF (5) and the photo-detector (6), rather than the photo -detector (6) per se.

    摘要翻译: 至少相干光源(1),强散射物体(5)(PUF)和像素照片检测器(6)的光学布置,其中像素在尺寸上与明暗相当 通过穿过散射物体(5)的相干辐射产生的斑点图案的斑块。 数量上,像素尺寸应该大致为λ/ NA,其中λ是波长,和(i)NA =自由空间几何的a / z,其中光束半径和z是出射表面之间的距离 的PUF(5)和像素化检测器(6),或者(ii)NA是成像几何形状中的透镜(7)的数值孔径。 在本发明的优选实施例中,暂时要求像素应该至少小于λmaxλNA,并且优选地大于等于λmax /λ,其中( 在一个示例性实施例中),例如,max = 5和eta分钟= 0.05。 本领域技术人员将理解,本发明涉及PUF(5)和光电检测器(6)的光学布置,而不是光电检测器(6)本身。

    Transponder System for Transmitting Key-Encrypted Information and Associated Keys
    10.
    发明申请
    Transponder System for Transmitting Key-Encrypted Information and Associated Keys 有权
    用于发送密钥加密信息和关联密钥的转发器系统

    公开(公告)号:US20080199011A1

    公开(公告)日:2008-08-21

    申请号:US11917041

    申请日:2006-06-14

    IPC分类号: H04L9/08 G06F7/58

    摘要: A transponder (1) comprises at least one memory (MEM1, MEM2) for storing encrypted information (E_k(EPC, PI)) that has been encrypted by use of a key (k) and for storing the key (k) associated with the encrypted information (E_k(EPC, PI)). The transponder (1) is adapted to send the key (k) slower response than the encrypted information (E_k(EPC, PI)) in response to queries of a reading device (2), which is preferably done by delaying the transmission of the key (k) or by limiting the response rate at which the key (k) is transmitted. In particular the invention is related to RFID systems.

    摘要翻译: 应答器(1)包括至少一个存储器(MEM1,MEM2),用于存储已经通过使用密钥(k)加密并用于存储关联的密钥(k)的加密信息(E_k(EPC,PI)) 加密信息(E_k(EPC,PI))。 响应于读取装置(2)的查询,应答器(1)适于发送比加密信息(E_k(EPC,PI))更慢的响应的响应(k),其优选地通过延迟 密钥(k)或限制发送密钥(k)的响应速率。 特别地,本发明涉及RFID系统。