entropy provider

Abstract

An entropy provider for providing entropy to a computing device external to the entropy provider, the entropy provider comprising a power source and an entropy supply, wherein the power source is adapted to provide power to the entropy supply, and wherein the entropy provider comprises a transfer component for transferring entropy from the entropy supply to the external computing device.

Description

Technical Field

[0001] The present invention relates to an entropy provider for providing entropy to a computing device outside the entropy provider, and a method for transferring entropy from the entropy provider to the computing device outside the entropy provider. Background Technology

[0002] Computing devices have become an integral part of daily life. This refers not only to computing devices used privately by their owners, such as at home (in the form of personal computers) or while on the go (such as mobile devices like laptops and smartphones), but also to computing devices used in the workplace. Furthermore, it refers to inexpensive sensors and actuators used as part of devices connected to the Internet (Internet of Things, IoT), for example. These can exchange private and / or sensitive information, such as in smart home environments. Further applications of such devices can be found in industrial equipment, particularly in the field known as "Industry 4.0."

[0003] Given the sensitive data typically handled in the workplace and used in private settings (bank accounts or general communications), the use of entropy in the form of, for example, random numbers or specially designed bit sequences becomes increasingly important. In some IoT scenarios, such as in the power and water supply sectors, the security of communications and data transmission can even have a direct impact on the physical safety of people and / or property.

[0004] The generation and use of entropy typically require specially adapted programs and / or hardware, such as entropy generators, which use inherently random physical processes to generate entropy. However, rapidly generating unpredictable random numbers is challenging. Generating entropy using such generators can require significant space or processing complexity. This can lead to a poor user experience for computing devices running random number generation, or be completely unaffordable for some IoT devices requiring extreme integration or low complexity. These requirements make the generation of high-quality random values ​​even more challenging, thus impacting the security of general inter-device communication and data transmission.

[0005] While (for example, in the field of managing bank accounts) systems are known to communicate directly with external servers that permanently create tokens or random numbers, it is also known that devices providing entropy to specific computing devices used by users are provided internally to these computing devices, or in a manner that utilizes the hardware of the computing devices (e.g., in the form of a USB flash drive containing a specific program that is ultimately run by the computing system to which the USB flash drive is connected). Thus, the device utilizes the processing power or power of the device to which it is installed.

[0006] Although portable devices such as USB flash drives can be carried around and, for example, used with multiple computing devices, they still have the aforementioned drawbacks. Summary of the Invention

[0007] question

[0008] Therefore, the technical problem to be solved by the present invention is to provide a means that allows the provision or generation of entropy used by a computing device while preventing an adverse user experience, and without requiring additional hardware or at least reducing the need for additional hardware.

[0009] Solution

[0010] The entropy provider according to the present invention and the method according to the present invention for providing entropy to a computing device using a corresponding entropy provider solve this problem. Preferred embodiments are provided in the present invention.

[0011] An entropy provider according to the invention for providing entropy to a computing device outside the entropy provider includes a power source and an entropy supply unit, wherein the power source is adapted to provide power to the entropy supply unit, and wherein the entropy supply unit includes a transmission component for transmitting entropy from the entropy supply unit to the external computing device.

[0012] The computing device outside the entropy provider can be any device with computing capabilities. This does not refer to an isolated device used for storing data. The computing device should therefore possess at least processing power, i.e., the ability to use entropy (e.g., for encrypted communication). However, the computing device is not limited to devices such as smartphones or personal computers. Furthermore, industrial equipment and devices from the "Internet of Things" (IoT) field (e.g., refrigerators and sensors) are considered computing devices capable of being outside the entropy provider and can be provided with entropy if needed. Additionally, devices such as wireless headsets or microphones can be considered computing devices outside the entropy provider. For example, transmitting entropy to these devices can facilitate secure communication via wireless channels.

[0013] Therefore, the entropy provider according to the invention is preferably designed to generate entropy (e.g., in the form of random numbers or random bit sequences) in a manner independent of the processing power of the external computing device, and to transmit the random numbers to a specific computing device after the random numbers are generated, but only requires that the external computing device has sufficient storage space to store the entropy.

[0014] In one embodiment, an entropy provider for generating a true entropy value using a physically random process is understood to include, or comprises, a chip or other combination of software and / or hardware that utilizes a physical process, preferably occurring on the entropy chip, to generate a random or entropy value. For example, this could include arbitrary interference values ​​of laser sources, wherein the source or at least one of the sources is powered to a value that nearly reaches and only occasionally exceeds a laser threshold. This generates a random phase relationship between two signals, allowing the generation of a true random entropy value. A corresponding system in the form of optical components is described in EP 19382318.4, owned by the applicant, the contents of which are incorporated herein by reference.

[0015] Also known as an entropy source or entropy generator is WO 2019 / 086730 A1, the contents of which are incorporated herein by reference.

[0016] Specifically, this document describes a physical process for generating random numbers, comprising the following steps: periodically modulating the gain of a vertical-cavity surface-emitting laser from a lower threshold to an upper threshold, and then modulating it back; maintaining a positive round-trip gain for a period longer than the cavity round-trip time; maintaining a negative net gain for each round trip for a period longer than the cavity round-trip time to create random amplitude pulses; detecting optical pulses; converting the optical pulses into electrical analog pulses; and digitizing the electrical analog pulses into random numbers. The physical components used to implement this process can be used as an entropy source or entropy generator in the context of this invention.

[0017] Another random number generator, or entropy generator, is described in US 9,218,160 B2, the contents of which are incorporated herein by reference.

[0018] A process for generating random numbers via a quantum random number generator is described, comprising the steps of: a) operating a laser in a single-mode and high-modulation-bandwidth manner via an electrical pulse driver to generate phase-randomized optical pulses; b) converting the phase-randomized optical pulses generated in a) into optical pulses with random amplitudes; and c) detecting the generated random amplitude signal via a fast photodiode, thereby generating random numbers based solely on the random amplitude signal. The random numbers generated in this way can be used in the context of this invention.

[0019] Because entropy providers do not require an external power source, they can be used to provide entropy at any location, making it easier for users to utilize the resulting entropy in any environment and enabling its use in distributed devices, such as in production equipment.

[0020] Preferably, the transmission component according to the invention is particularly suitable for transmitting only data in the form of entropy, or potentially transmitting additional data for further processing of entropy. However, the transmission component is not intended or designed to also transfer energy from the entropy generator to an external computing device. Therefore, the energy generated by the power source can be entirely used by the entropy provider to generate and / or manage and / or transmit entropy. The entropy provider according to the invention itself may not necessarily be able to generate entropy, but may only be able to store entropy, and therefore can also be implemented in the form of a storage device such as flash memory or other solid-state storage.

[0021] In one embodiment, the entropy supplier includes an entropy generator for generating entropy.

[0022] Thus, for example, when the entropy provider is connected to an external computing device, entropy can be generated "dynamically (on the fly)" using the entropy provider. Alternatively, as long as the entropy provider is not connected to an external computing device, its power supply can still allow entropy generation, thereby allowing the entropy provider to generate a "pool" of entropy, which can be stored, for example, in the entropy provider's internal storage for later use.

[0023] In another embodiment, the entropy provider includes control components for controlling the entropy generator to generate entropy and / or supplying power from a power source to the entropy generator.

[0024] Using this control unit, it is possible to manage the entropy generated and the power used by the entropy provider. Since the entropy provider according to the invention is an independent device not necessarily connected to an external power source, the power available to the entropy provider is necessarily limited. By managing the use of this power using the control unit, the lifespan and availability of the entropy provider can be increased.

[0025] In addition, the control unit may include at least one button, which, when actuated, can cause the power source to supply power to the entropy generator, and / or cause the entropy generator to generate entropy, and / or cause the entropy provider to provide the entropy generated by the entropy generator to an external computing device.

[0026] By providing such buttons to the control components, the entropy provider's functionality can be controlled by the user as needed, making user-defined entropy management easier.

[0027] In an alternative embodiment, the entropy provider includes a memory for storing entropy, and wherein the entropy provider includes a receiving means for receiving entropy from an external entropy source, and wherein the entropy provider is adapted to store the entropy received from the external entropy source in the memory.

[0028] While the above embodiments may include a storage device associated with the entropy generator, this embodiment is intended to relate to an entropy provider that does not include an entropy generator within the entropy provider, or at least to a storage device in the entropy provider that is not connected to such an entropy generator. This storage device can only receive entropy generated elsewhere and can store the corresponding entropy in memory.

[0029] The memory according to this embodiment can be provided as volatile memory or non-volatile memory. If it is provided as volatile memory, it can be provided as volatile memory permanently powered by a power source in order to maintain the entropy stored in the memory.

[0030] Using this embodiment, the entropy provider can be implemented as an inexpensive device that only requires storage capacity and a processing component that allows receiving entropy and transmitting it to an external computing device. Because data storage and transmission do not require a large amount of energy, the power supply can be small, thus reducing the overall size of the entropy provider and significantly simplifying the overall architecture of the external computing device (such as a sensor, actuator, or computing device).

[0031] In one embodiment, the entropy provider includes a control component for controlling the receipt of entropy from an external entropy source and / or the provision of entropy from memory to an external computing device via a transfer component, wherein the control component optionally includes an actuation component that, when actuated, causes the entropy provider to begin receiving entropy from an external entropy source and / or to begin providing entropy from memory to an external computing device.

[0032] This control component allows for the efficient management of the reception, storage, and provision of entropy, thereby enabling efficient management of available energy via the power supply. If the actuation component is provided, for example, in the form of a touchscreen or button on a mobile application running on a smartphone, manual control of this management is provided to the user.

[0033] In another embodiment, entropy includes random numbers and / or random bit sequences.

[0034] Depending on the application of the entropy, using random numbers or random bit sequences may be advantageous. Random numbers can have a specific length (e.g., 100 digits). Random bit sequences can also be sequences of a specific length, such as 128 or 256 full-entropy bits, in which only the provision of 0s and 1s is actually random. Alternatively, random numbers and / or random bit sequences can be specified to have a maximum length and / or include at least a minimum length (e.g., 10 digits other than zero or at least 20 bits) of random / arbitrary length.

[0035] In another embodiment, the power source includes at least one of the following: a battery, a rechargeable battery rechargeable via a power source external to the entropy provider, a solar cell; and / or wherein the transmission component includes at least one of the following: a wireless transmitter for wirelessly transmitting entropy to an external computing device; and a port for connecting a cable for data transmission to transmit entropy to the external computing device.

[0036] Various power sources allow for the widespread application of entropy providers, with the use of solar cells, in particular, making the entropy provider completely independent of any external power source, while the use of batteries or rechargeable batteries provides a more stable power supply. The use of wireless transmitters makes entropy transmission easy for users and eliminates the need for physical port availability. Using physical ports for cable connections between the entropy provider and external computing devices reduces the risk of malicious attackers accessing the entropy provided from the entropy provider to the external computing device. Near-field wireless transmission offers both the convenience of wireless connectivity and mitigates the risks associated with potential malicious attackers.

[0037] According to the present invention, a method for transferring entropy from an entropy provider to a computing device outside the entropy provider includes a power source and an entropy supply unit. The method includes the power source supplying power to the entropy supply unit, and wherein the entropy provider includes a transmission component that transfers entropy from the entropy supply unit to the external computing device when the entropy provider and the external computing device are connected via the transmission component.

[0038] This method allows for the simple and efficient provision of entropy to external computing devices without negatively impacting the user experience when using external computing devices.

[0039] In one embodiment, the entropy source includes an entropy generator for generating entropy, and wherein the entropy generator generates entropy when powered by a power source.

[0040] This embodiment of the method allows entropy to be generated using the entropy provider itself, ensuring that, in principle, any amount of entropy can be generated as needed. For example, if an external computing device requires 100 MB of entropy, this entropy can be generated using the entropy generator simultaneously with or before establishing a connection with the external computing device, thus requiring only further transmission of the already generated entropy. Additional entropy can be generated as needed if required.

[0041] In addition, the entropy provider may include a control component that controls the entropy generator to generate entropy and / or supplies power from a power source to the entropy generator.

[0042] This embodiment enables efficient management of entropy and available power.

[0043] Alternatively, the control unit may include at least one button that, when actuated, causes a power source to begin supplying power to the entropy generator, and / or causes the entropy generator to generate entropy, and / or causes an entropy provider to supply the entropy generated by the entropy generator to an external computing device.

[0044] This embodiment enables user-related management of available entropy and / or electricity.

[0045] In an alternative embodiment, the entropy supplier includes a memory for storing entropy, and wherein the entropy supplier includes a receiving component that receives entropy from an external entropy source when the entropy supplier is connected to an external entropy source via the receiving component, and wherein the entropy supplier stores the entropy received from the external entropy source in the memory, wherein optionally, the memory stores entropy without requiring energy from a power source.

[0046] In this embodiment, the entropy provider acts as a portable entropy memory that allows entropy to be transferred from the actual entropy generator (e.g., a specific dedicated computing device) to the computing device that will actually utilize the generated entropy. This embodiment makes it easy for users to transfer the entropy they need.

[0047] In another embodiment, the entropy provider includes a control component that controls the receiving of entropy from an external entropy source and / or the provision of entropy from memory to an external computing device via a transmission component. Optionally, the control component includes an actuation component that, upon actuation, causes the entropy provider to begin receiving entropy from an external entropy source, and / or to begin providing entropy from memory to an external computing device, and / or to provide the same entropy to more than one external computing device.

[0048] This allows for efficient management of entropy and power supply, as well as manual management of it.

[0049] In one embodiment, entropy includes random numbers and / or random bit sequences.

[0050] Depending on the application, the use of random numbers or random bit sequences may be advantageous. Specifically, random bit sequences can be used when encrypting communications and / or authentication, while random numbers can be used in areas such as gaming, random algorithms, or identification for accessing specific accounts.

[0051] In the embodiments described above so far, the entropy supplier has been described as including an entropy generator or a memory that can provide entropy via an external entropy source. However, combinations are also possible. For example, a memory for storing entropy from an external entropy source can be provided in the entropy supplier. Additionally, an entropy generator as described above can be provided in the entropy supplier to further generate entropy. The entropy generated by this entropy generator can also be stored in memory, or additional memory for storing the entropy generated by the entropy generator can be provided. This is useful when the entropy generator generates entropy with different security levels compared to the entropy generated by the external entropy source. For example, if the entropy generator provided on the entropy supplier is implemented in the form of an algorithmic entropy generator, its pseudo-random values ​​may be useful for further applications on external computing devices that require only a lower level of security. The external entropy source can then be implemented in a way that provides entropy with higher security (e.g., using truly random numbers from one or more physical processes). These random numbers are then sent to a corresponding memory and, if increased security is required (e.g., for encrypted communication), are then used to transmit them to the external computing device. This offers the advantage that because generating true entropy using physical processes is typically much larger than generating pseudo entropy using algorithmic entropy generators, the energy required for the entropy provider can be reduced. Attached Figure Description

[0052] Figure 1 A schematic diagram of a general embodiment of an entropy provider according to the present invention is shown.

[0053] Figure 2 An embodiment of an entropy provider including a control component having at least one button is shown according to one embodiment.

[0054] Figure 3 It is an embodiment of an entropy provider that includes a memory for storing entropy. Detailed Implementation

[0055] Figure 1 An entropy provider 100 according to an embodiment of the present invention is shown. The entropy provider 100 in... Figure 1 The following description is in conjunction with an external computing device 130. According to the present invention, the entropy provider is adapted to transmit entropy to the external computing device to which it is connected.

[0056] Therefore, the entropy provider 100 includes at least an entropy supplier 111 and a transmission component 114 for transmitting entropy from the entropy supplier 111 to an external computing device.

[0057] The transmission component 114 can be implemented as a wireless transmission component or a wired transmission component. This means that, in the case of a wireless transmission component, the transmission component 114 includes at least a wireless transmitter that can generate, for example, electromagnetic signals or acoustic signals, or other signals that do not require cables to transmit data. By modulating these signals, data in the form of entropy from an entropy source can be provided from the entropy provider to an external computing device via the transmission component 114. For example, the transmission component 114 can be provided in the form of a known wireless transmitter or wireless transceiver.

[0058] When the transmission component is implemented as a cable-connected component, it can be provided as a cable-connectable port, wherein the port is adapted to transmit data from the entropy provider to an external computing device via a corresponding cable. For example, in this case, the transmission component can be implemented as a USB port, a Mini-USB port, a Micro-USB port, or a Lightning port. When the port is connected to an external computing device using a corresponding cable, entropy can be provided to the external computing device via the transmission component (i.e., via the port) through the cable.

[0059] In a preferred embodiment, the data transmitted via the transmission component is intended to be stored in a dedicated memory at an external computing device (e.g., for later use). However, the actual use of entropy by the external computing device is not intended to limit the invention, and therefore how entropy is actually used is arbitrary, such as for encrypted communication, providing random numbers for logging in or maintaining bank account connections, or for any other application purpose.

[0060] The entropy provided by the entropy supplier can be in the form of random numbers and / or random bit sequences. In the case of random numbers, this means that the entropy is provided in the form of human-readable bit sequences, such as 123 and 456. In the case of providing entropy in the form of random bit sequences, the entropy is provided by the entropy supplier in the form of bit sequences of 0s and 1s randomly distributed on the corresponding sequences.

[0061] Random numbers and / or random bit sequences can be provided as numbers or sequences of a specific length (e.g., 20 digits in the case of random numbers, or 40 bits in the case of bit sequences). However, it is also possible to generate random numbers of almost arbitrary length and / or random bit sequences of arbitrary length. When random numbers and / or bit sequences are of arbitrary length, the length can be set to a range from a minimum (e.g., 20 digits or 20 bits) to a maximum (e.g., 500 digits or 2000 bits). However, the actual minimum and / or maximum lengths are not limited and can have arbitrary values ​​deemed appropriate, taking into account security requirements, such as those associated with encrypted communication utilizing the corresponding entropy. It is even possible that the entire storage space of a computing device is filled with random numbers or random bits, such as 1 GB, 5 GB, 10 GB, or 100 GB. This also depends on the available storage space of the device.

[0062] The entropy supplier 111 can be provided in several forms. Basically, the entropy supplier can include an entropy generator (and potentially associated components), or it can be provided in the form of a memory used only for storing entropy.

[0063] In the first case, the entropy generator can be implemented as either a physical entropy generator or an algorithmic entropy generator. The first refers to an entropy generator that uses (e.g., governed by the laws of thermodynamics or by utilizing quantum physical processes) physical processes to generate (truly) random numbers due to the (truly) randomness of the corresponding physical processes. For example, due to the laws of quantum mechanics, the phase of the first "reference" laser source and the phase of laser sources driven near and above the laser threshold are completely arbitrary. Such a system, implemented using an entropy feeder, generates arbitrary interference signals of the individual laser signals, which can then be used to generate unpredictable random values ​​(e.g., numbers or bits).

[0064] Algorithmic entropy generators can be implemented within entropy suppliers, for example, by providing a processor or other entity that uses specific program code to generate random numbers. These random numbers are typically only "pseudo" random numbers because they use a precisely defined and therefore deterministic algorithm that uses, for example, a date or actual time as an initial value to create numbers or sequences or bits. Because the underlying program code is deterministic, the resulting numbers or bits are not truly random, but rather "pseudo-random."

[0065] When the entropy supplier is provided solely in the form of a memory for storing entropy, this memory can be provided as a volatile or non-volatile memory, wherein entropy can be supplied to this volatile or non-volatile memory by an external entropy source.

[0066] The entropy source can be a specific dedicated computing system that generates entropy (in the form of random numbers, sequences, or bits). When the entropy provider is connected to the computing device, for example via a wired or wireless connection (e.g., formed using transmission component 114), the entropy can be "downloaded" from the external entropy source and transferred to a memory that stores the entropy for later use.

[0067] Furthermore, the entropy provider includes a power supply 113 for supplying power to the entropy provider. If the entropy provider is provided in the form of an entropy generator, this power can be used to generate entropy. Furthermore, if the entropy provider is provided in the form of memory, and if the memory is implemented as volatile memory, the power supply can be used to power the memory so as to retain information (i.e., entropy) in the volatile memory. Additionally, the power supplied by the power supply 113 can be used to transfer entropy from the entropy provider to an external computing device 130 via a transmission component. Specifically, if the transmission component is implemented as a wireless transmitter, the power supplied by the power supply 113 can be used to power the wireless transmitter. Correspondingly, if the transmission component 114 is provided in the form of a USB port or any other physical port, the power supplied by the power supply can be used to generate a corresponding electrical signal for transferring entropy from the entropy provider to the external computing device via the port.

[0068] The power source 113 can be implemented in various forms. In one embodiment, the power source is provided as at least one battery. Alternatively, the power source can be provided in the form of a rechargeable battery or other rechargeable energy unit. In this case, the power source can be connected to, for example, Figure 1 An external power source, such as an electrical outlet 120, is exemplarily depicted in the diagram. Once the rechargeable battery is charged (fully charged or reaching different needs), the entropy provider can be disconnected from the external power source and can be carried by the user to connect to an external computing device and transfer entropy to that external computing device.

[0069] In another alternative, power source 113 may be provided in the form of one or more solar cells that can absorb solar energy and provide the resulting electrical energy to power the components of the entropy provider, particularly the entropy supply unit.

[0070] In any case, the intention is that the entropy provider is "self-sufficient" in the manner of its own integrated power supply 113, which can provide power to the entropy provider at least for a certain period of time. This allows the entropy provider to be carried with the user and to provide entropy to other external computing devices without the need for an additional power supply.

[0071] Furthermore, the entropy provider may include an additional component 112. This component may be, for example, internal circuitry or connections controlling the power supply 113 and / or the entropy source and / or transmission components, or other components. When the entropy provider is implemented as an entropy generator, this component may be implemented as one or more processors or storage devices or other components necessary for storing or further processing the entropy generated by the entropy generator, for example. Furthermore, if the entropy provider is implemented as a storage device as described above, and as referenced... Figure 3 Further discussion reveals that such components can be used to manage the entropy storage in the entropy supplier. These additional components can also further process the generated entropy to determine whether the entropy should be (on request) transmitted to an external computing device.

[0072] For example, suppose the entropy comprises multiple random numbers. If the length of the random numbers remains open during their generation, the random numbers can include random numbers with a length less than a given threshold (e.g., 100 digits) and random numbers with a length exceeding that threshold. If further processing using entropy on an external computing device requires random numbers with a minimum length of 100 digits, the add-on component 112 can control the transmission of entropy such that only random numbers with at least 100 digits are transmitted to the external computing device, while other random numbers are either retained in the entropy provider or deleted. Of course, the threshold can be set to any predetermined value, and the above is merely an example.

[0073] Furthermore, to enhance the security of further processing performed on an external computing device using the entropy provided by the entropy provider, the components can ensure that the entropy transmitted to the external computing device is completely erased from the entropy provider 100. This ensures that the entropy is not reused multiple times, which could compromise the security of processing at the external computing device using the entropy. Additionally, the entropy can be transmitted along with additional information and / or processing to securely transfer the entropy to the computing device.

[0074] The entropy provider may further include a housing 101, within which dedicated components, namely the entropy provider, transmission component 114, and power supply 113, as well as (if provided) additional components 112, are provided. The housing 101 may include physically secure hardware that may be required in certain secure environments to prevent the entropy provider from being turned on.

[0075] Figure 2 As shown Figure 1 Another embodiment of the entropy provider is shown. In this embodiment, in addition to the components discussed so far, a control component 215 is also provided. These control components may also form part of the additional components 112 described above; however, since the control components described in this embodiment perform specific tasks, they are described as additional components for ease of explanation.

[0076] A control unit can be provided to control specific functions of the entropy provider. Among these functions, if the entropy provider is implemented as an entropy generator, the control unit can control the generation of entropy, and / or the control unit can control the power supply from the power source to the entropy generator. If the entropy provider is implemented as a memory, control unit 215 can be provided to control the power supply from an external entropy source (see [link to memory]). Figure 3 The receiving entropy and / or the control unit 215 can control the provision of entropy from the memory to an external computing device by utilizing the transmission unit 114.

[0077] The control unit may include circuitry and / or a processor for performing the tasks described above. It may also include additional memory for, for example, storing specific programs that allow the control unit 215 to control other components. Essentially, the control unit can be implemented as an automatically operating control unit. For example, if a connection to an external computing device is established, the control unit can cause the entropy generator to generate entropy whenever the external computing device requests entropy from the entropy provider. Similarly, if the entropy provider is provided in the form of memory, the control unit can control the components of the entropy provider to receive and store entropy from the external entropy source whenever a connection to the external entropy source is established and / or whenever the memory has the further capability to store additional entropy.

[0078] More complex programs can be provided with control components to manage the provision or storage of entropy in a specific manner. Furthermore, the provision of entropy to different devices can be managed. This can include transmitting the same random number to multiple devices (2, 3, or more than 3), or not transmitting the same entropy to different devices.

[0079] In addition to or as an alternative to the automatic management of the corresponding functions of the entropy provider, control component 215 may also include buttons 211 to 214 (or any other number of buttons) that allow physical interaction with the user. Instead of buttons, other physical or even virtual components may be provided for user interaction. For example, a user-actuable touchscreen may be provided. Furthermore, (mobile) applications running on computing devices such as smartphones may be used to provide user interaction. Generally, components 211 to 215 can be considered as “actuating components” that allow user interaction. Components integrated with and / or located away from the entropy provider may be provided. Combinations of actuating components integrated with the entropy provider (such as one or more buttons) and actuating components located away from or outside the entropy provider (such as a fingerprint scanner on a smartphone for authenticating the user of the entropy provider) may also be implemented. Furthermore, applications running on additional hardware and including, for example, a special user interface or a set of functions that can be activated by software may be considered actuating components in the sense of this invention.

[0080] In the following description, buttons will be referenced for ease of explanation. However, these buttons should only be considered as specific examples of the actuating components described above. Any function provided by the buttons explained below can also be implemented using any actuating component.

[0081] Once one or more of these buttons are actuated, control unit 215 can perform its respective function. For example, button 211 can be used to cause control unit to begin providing entropy from the entropy provider (specifically, the entropy supply) to an external computing device. This means that the transfer of entropy from the entropy supply to the external computing device preferably does not begin immediately after the corresponding connection via the transfer unit is established. Further input from the user via button 211 may be necessary to initiate the process, wherein control unit 215 is subsequently actuated to cause the entropy supply (and optionally one or more additional components 112) to transfer available entropy. Further activation of the button can cause the transfer of entropy from the entropy source to the external computing device to cease, regardless of whether the connection via the transfer unit to the external computing device still exists.

[0082] Accordingly, another button 212 can be provided (e.g., in the case where the entropy supplier is implemented as an entropy memory) which, when actuated, causes the control unit to start or stop the transfer of entropy from an external entropy source to the entropy supplier. Another button 213 can be provided, which, when actuated, supplies power to the entropy generator of the entropy supplier, regardless of whether there is a connection to an external computing device that requires entropy. Therefore, the user has complete control over when entropy is generated using the entropy supplier. Another button 214 can be provided, which activates the transmission unit when actuated. Without actuating this button, a connection cannot be established with any external device (whether an external entropy source or an external computing device that requires entropy). Therefore, especially when the transmission unit is a wireless transmission unit, a further security barrier is established, making it more difficult for a malicious attacker to access the entropy stored on the entropy supplier, provided that the attacker does not physically access the entropy supplier.

[0083] Depending on the functionality provided for the entropy provider, these buttons can also be used to perform other functions.

[0084] Figure 3 Another embodiment of an entropy provider is shown, wherein the entropy provider includes a memory 321 adapted to store entropy and upload the entropy (via a transmission component) to an external computing device that requires entropy.

[0085] The entropy provider according to this embodiment of the invention does not include an integrated entropy generator and therefore cannot generate entropy itself. However, it still includes, as referenced... Figure 1 and Figure 2 The power supply mentioned herein, and will also include, as referenced Figure 1 and Figure 2The aforementioned transmission component is used to transmit entropy to an external computing device that requires the corresponding entropy. Regarding the above... Figure 1 and 2 All other embodiments described can also be applied. Figure 3 In the embodiments (except, in accordance with) Figure 3 The entropy provider does not provide an entropy generator.

[0086] To provide entropy to memory 321, a connection component 322 can be provided, which can be used to establish a connection to an external entropy source 323. The connection component 322 can be the same as the transmission component, or it can be provided as another component. For example, although the aforementioned transmission component can be implemented as a wireless transmission component, the connection component 322 can be provided as a physical port for connecting a cable that can be connected to the external entropy source. Therefore, access to the external entropy source can be restricted to means that establish a wired connection with the external entropy source.

[0087] Once the entropy provider is charged with the appropriate entropy from the external entropy source, it can disconnect from the external entropy source and then connect to an external computing device to transfer entropy. To further enhance the security of the external entropy source, it can be stipulated that a data transfer connection between one entropy provider and the other external entropy source can only be established when the entropy provider is not simultaneously connected to the external computing device. This prevents the external computing device from indirectly accessing the external entropy source via the entropy provider.

[0088] The memory 321 in this embodiment can be provided as volatile memory or non-volatile memory.

[0089] When memory is provided in the form of volatile memory, energy is always required to maintain the entropy supplied to that memory. Therefore, in this particular embodiment, the power supply of the entropy provider can be adapted to permanently deliver a sufficient amount of power to the volatile memory to maintain the entropy stored therein. This memory can be implemented as non-volatile memory, for example, in the form of flash memory or any other solid-state storage device. To reduce the size of the entropy provider, implementation using flash memory or other memory may be preferred compared to other hard disk drives.

[0090] To ensure that the memory can store enough entropy to provide it to at least one external computing device, the storage capacity of the memory device can be at least 100 MB or up to several gigabytes.

[0091] In the embodiments described above so far, the entropy supplier has been described as including an entropy generator or a memory that can provide entropy via an external entropy source. However, combinations are also possible. For example, a memory for storing entropy from an external entropy source can be provided in the entropy supplier. Additionally, an entropy generator as described above can be provided in the entropy supplier to further generate entropy. The entropy generated by this entropy generator can also be stored in memory, or additional memory for storing the entropy generated by the entropy generator can be provided. This is useful when the entropy generator generates entropy with different security levels compared to the entropy generated by the external entropy source. For example, if the entropy generator provided on the entropy supplier is implemented in the form of an algorithmic entropy generator, its pseudo-random values ​​may be useful for further applications on external computing devices that require only a lower level of security. The external entropy source can then be implemented to provide entropy with higher security (e.g., using truly random numbers from one or more physical processes). These random numbers are then sent to the appropriate memory for use in cases requiring increased security, such as for encrypted communication, and then used to transmit the data to the external computing device. This offers the advantage of reducing the energy required for entropy providers, since generating true entropy using physical processes is typically much larger than generating pseudo-entropy using algorithmic entropy generators.

Claims

1. An entropy provider for providing entropy to a computing device external to the entropy provider, the entropy provider comprising a power supply and an entropy supply unit, wherein, The power source is adapted to provide power to the entropy supplier, and the entropy supplier includes a transmission component for transmitting the entropy from the entropy supplier to an external computing device. The entropy supplier includes an entropy generator for generating entropy in a manner independent of the processing power of the external computing device, and the entropy generator is configured to generate entropy in a manner independent of the processing power of the external computing device when the entropy generator is powered by the power supply, and the entropy supplier is an independent device having its own integrated power supply that supplies power to the entropy generator independently of whether the entropy supplier is connected to the external computing device, such that the entropy generator can generate entropy when the entropy supplier is not connected to the external computing device.

2. The entropy provider according to claim 1, wherein, The entropy provider includes control components for controlling the entropy generator to generate entropy and / or supplying power from the power source to the entropy generator.

3. The entropy provider according to claim 2, wherein the control component includes at least one actuating component, which, when actuated, enables the power source to supply power to the entropy generator, and / or enables the entropy generator to generate entropy, and / or enables the entropy provider to provide the entropy generated by the entropy generator to an external computing device.

4. The entropy provider according to claim 1, wherein, The entropy supplier includes a memory for storing entropy, the entropy supplier includes a receiving component for receiving entropy from an external entropy source, and the entropy supplier is adapted to store the entropy received from the external entropy source in the memory.

5. The entropy provider according to claim 4, wherein, The entropy provider includes a control component for controlling the reception of entropy from an external entropy source and / or the provision of entropy from the memory to an external computing device via the transmission component.

6. The entropy provider according to claim 5, wherein, The control component includes at least one actuation component, which, when actuated, causes the entropy provider to begin receiving entropy from the external entropy source and / or to begin providing entropy from the memory to the external computing device.

7. The entropy provider according to any one of claims 1 to 6, wherein, The entropy includes random numbers and / or random bit sequences.

8. The entropy provider according to any one of claims 1 to 6, wherein, The power source includes at least one of the following: a battery, a rechargeable battery that can be charged via a power source external to the entropy provider, and a solar cell; And / or The transmitting component includes at least one of the following: a wireless transmitter for wirelessly transmitting entropy to an external computing device; And a port for connecting cables, wherein the cables are used for data transmission to transmit entropy to an external computing device.

9. A method for transferring entropy from an entropy provider to a computing device outside the entropy provider, the entropy provider comprising a power supply and an entropy supply unit, wherein, The power source provides power to the entropy supplier, and the entropy supplier includes a transmission component for transmitting entropy from the entropy supplier to the external computing device when the entropy supplier and the external computing device are connected via the transmission component. The entropy supplier includes an entropy generator for generating entropy in a manner independent of the processing power of the external computing device, and the entropy generator generates entropy in a manner independent of the processing power of the external computing device when the entropy generator is powered by the power supply, and the entropy supplier operates as an independent device having its own integrated power supply that supplies power to the entropy generator independently of whether the entropy supplier is connected to the external computing device, such that the entropy generator can generate entropy when the entropy supplier is not connected to the external computing device.

10. The method according to claim 9, wherein, The entropy provider includes control components for controlling the entropy generator to generate entropy and / or supplying power from the power source to the entropy generator.

11. The method according to claim 10, wherein, The control component includes at least one actuating component, which, when actuated, causes the power source to begin supplying power to the entropy generator, and / or causes the entropy generator to generate entropy, and / or causes the entropy provider to provide the entropy generated by the entropy generator to an external computing device.

12. The method according to claim 9, wherein, The entropy supplier includes a memory for storing entropy; the entropy supplier includes a receiving component for receiving entropy from an external entropy source when the entropy supplier is connected to an external entropy source via the receiving component. Furthermore, the entropy provider is adapted to store the entropy received from the external entropy source in the memory.

13. The method according to claim 12, wherein, The memory stores the entropy without requiring energy from the power source.

14. The method according to claim 12, wherein, The entropy provider includes a control component for controlling the reception of entropy from an external entropy source and / or the provision of entropy from the memory to the external computing device via the transmission component.

15. The method according to claim 14, wherein, The control component includes at least one actuation component, which, when actuated, causes the entropy provider to begin receiving entropy from the external entropy source, and / or to begin providing entropy from the memory to the external computing device, and / or to provide the same entropy to more than one external computing device.

16. The method according to any one of claims 9 to 14, wherein, The entropy includes random numbers and / or random bit sequences.

Images