Resilient Device Authentication System

Abstract

A resilient device authentication system comprising: one or more verification authorities (VAs) including a memory loaded with a complete verification set that includes hardware part-specific data, and configured to create a limited verification set (LVS) therefrom; one or more provisioning entities (PEs) each connectable to at least one of the VAs, including a memory loaded with a LVS, and configured to select a subset of data therefrom so as to create an application limited verification set (ALVS); and one or more device management systems connectable to at least one of the PEs, including a memory loaded with an ALVS, and configured to manage device security-related applications through the performance of security-related functions on devices associated with the hardware part-specific data.

Description

RELATED APPLICATIONS[0001]This application claims the benefit of U.S. provisional patent application Ser. No. 61 / 597,819 filed Feb. 12, 2012 and entitled “Key Management Utilizing Physically-Unclonable Functions, and Cyber-Physical Security Measures,” which is incorporated herein by reference.BACKGROUND[0002]Managing authentication and identity across systems, users, and enterprises is complex and threat-prone, and increasingly so as endpoints and cloud-based systems continue proliferating. Current solutions for identity management, authentication, and key management are typically disparate in nature and confined in design and purpose to specific applications (e.g., network authentication protocols, PKIs, code-signing, biometrics, etc.). Various methods for deploying identity authentication technologies in contexts such as “smart grids,” cloud computing, and enterprise networks and network extensions typically include a variety of applications that would require a number of dissimil...

AI Technical Summary

Benefits of technology

The present patent describes a new system for verifying the identity of users and ensuring the safety and integrity of electronic devices. This system uses hardware biometrics to create a holistic trust mechanism that extends from the physical hardware to the operating system, applications, and whole systems. The system can be used in a variety of applications and throughout the device's lifecycle. The hardware-based security functions include authentication, supply chain security, encryption, policy management, data or document certification, key management, and others. This innovation addresses the limitations of existing systems and offers a more efficient and effective solution for securing electronic devices.

Problems solved by technology

Managing authentication and identity across systems, users, and enterprises is complex and threat-prone, and increasingly so as endpoints and cloud-based systems continue proliferating.

Hitherto, the presumably attendant limitations and ongoing added operating complexity, risk, and overhead would have discouraged attempts to employ hardware biometrics in any types of architectures known to Applicant for managing and authenticating identities across systems, users, and enterprises, as would be required for a manufacturing through end-use approach.

Images