Ncipher Security Limited

Trustonic Limited

Alec Milne Edgington

Neil Walker

David O'Doherty

Richard Kettlewell

Ian Bygrave

Nicholas Smith

Jan-Erik Gustav Ekberg

Chris Loreskar

John Dent

A method of data transfer from a tenant to a service provider comprises encrypting the data with a public key of a key pair generated by a secure device within the service provider system. The data thus cannot be accessed by the service provider during transmission. The data is generated with a corresponding access control list, which specifies that a valid certificate must be presented in order to grant a particular use of the data once stored. The tenant can thus retain control of the use of the data even though it has been transferred out of the tenant system. A method of controlling use of data securely stored in the service provider system comprises issuing a use certificate having an expiry time to the party requesting use of the data. The use certificate must be validated before use of the stored data is granted. This enables the tenant to grant use of the stored data for a limited time period.

Method of data transfer, a method of controlling use of data and cryptographic device

An anonymous attestation cryptographic protocol is provided for enabling a target (device) to attest to a predetermined property of the device without needing to reveal its identity to a verifier (). When obtaining a credential from an issuer () to attest to the predetermined property, the credential is validated by an intermediary device () which is a separate consumer electronics device to the target device () itself. This allows the relatively processor-intensive calculations required for validating the credential to be performed on a separate device () from the device () for which the attestation has been made, allowing anonymous attestation protocols to be used for lower powered target devices such as sensors in the internet of things.

Anonymous attestation

Method of data transfer, a method of controlling use of data and a cryptographic device

A method of post-manufacture generation of the device certificatefor verifying an electronic deviceaccording to a public key infrastructure is provided. The method comprises obtaining, at a certificate generating apparatus, a first keyassociated with the device. A second keyfor the electronic device is derived from the first key. The device certificatefor the PKI is generated with the second key acting as the public keyassociated with the device certificate. In a corresponding way a private keyfor the PKI can be generated by the electronic devicebased on a shared first key. This approach enables the manufacturing cost for manufacturing an electronic device to be reduced whilst still enabling use of a PKI for attesting to properties of the device

Post-manufacture generation of device certificate and private key for public key infrastructure

Growing community of inventors

Cambridge, United Kingdom

Alec Milne Edgington