Maxim Integrated Products, Inc.

Christophe Tremlet

Frank Lhermet

Vincent Debout

Yann Yves René Loisel

Yann Yves Rene Loisel

Scott E Jones

Grégory Rome

Dany J Nativel

Renaud Guigue

The invention relates to an electronic device, and more particularly, to systems, devices and methods of authenticating the electronic device using a challenge-response process that is based on a physically unclonable function (PUF). The electronic device comprises a PUF element, a processor and a communication interface. The PUF element generates an input signal based on at least one PUF that has unique physical features affected by manufacturing variability. A challenge-response database, comprising a plurality of challenges and a plurality of corresponding responses, is set forth by the processor based on the PUF-based input and further provided to a trusted entity. During the trusted transaction, the processor generates a response in response to a challenge sent by the trusted entity based on the PUF-based input, and thereby, the trusted entity authenticates the electronic device by comparing the response with the challenge-response database.

Secure authentication based on physically unclonable functions

Presented are systems, devices, and methods for reliably authenticating asymmetric cryptography-based ICs based on Physically Unclonable Functions (PUFs) that are immune to reverse engineering. Various embodiments of the invention enhance the level of security in IC architectures without the need to connect to a remote certification authority, thereby, eliminating shortfalls associated with online authentication. Certain embodiments accomplish this by using a PUF-generated secure private key that need never be output by or exported from the PUF.

Systems and methods for authentication based on physically unclonable functions

The present invention relates to key management in a secure microcontroller, and more particularly, to systems, devices and methods of automatically and transparently employing logic or physical address based keys that may also be transferred using dedicated buses. A cryptographic engine translates a logic address to at least one physical address, and processes a corresponding data word based on at least one target key. The target key is selected from a plurality of keys based on the logic or physical address. A universal memory controller stores each processed data word in the corresponding physical address within a memory. Each key is associated with a memory region within the memory, and therefore, the logic or physical address associated with a memory region may be used to automatically identify the corresponding target key. A dedicated secure link may be used to transport key request commands and the plurality of keys.

Systems and methods for managing cryptographic keys in a secure microcontroller

Various embodiments of the present invention relate to incorporating an embedded secure element into a mobile device, and more particularly, to systems, devices and methods of incorporating the embedded secure element into a mobile device for identity authentication, data storage and processing in trusted transactions. These trusted transactions require a high security level to protect sensitive data or programs in bank account management, purchasing orders, contactless payment, passport verification, and many other high-security applications. The secure element will provide a root of trust such that that applications running on the mobile device are executed in a controlled and trusted environment. In addition to conventional password or encryption protection, alternative security features are introduced from both software and hardware levels based on the embedded secure element. Therefore, the security level of the mobile device is not only enhanced, but also may potentially exceed that of the conventional POS terminals.

Embedded secure element for authentication, storage and transaction within a mobile terminal

An integrated circuit has a keypress entry interface and a pass-through data path. In a pass-through mode, the keypress entry interface is disabled and the pass-through data path is enabled such that untrusted information (for example, video) from an external untrusted source can be driven into the integrated circuit, through the pass-through data path, and out of the secure integrated circuit and to a display. In a trusted mode, the keypress entry interface is enabled and is usable to receive keypress information in a financial transaction. The pass-through data path is, however, disabled so that unauthorized information cannot be driven through the integrated circuit to the display. Signed images previously stored on the integrated circuit can be verified and driven to the display in a secure fashion. The architecture is flexible and allows an external general purpose video decoder to be used to drive the display in the pass-through mode.

Trusted display based on display device emulation

The invention relates to the creation of a housing for an integrated circuit which makes it possible to detect physical ingression into said housing. The invention applies in particular to the protection of secrets which may possibly be contained in said integrated circuit, in the event of physical attack, for example by destroying the secrets contained in an integrated circuit in the event of ingression into the housing thereof.

Growing community of inventors

Aubagne, France

Christophe Tremlet