Intrinsic Id B.v.

Koninklijke Philips Corporation N.v.

Nxp B.v.

Geert Jan Schrijen

Pim Theo Tuyls

Boris Skoric

Erik Van Der Sluis

Claudine Conrado

Helena Handschuh

Franciscus Lucas Antonius Johannes Kamperman

Thomas Andreas Maria Kevenaar

Robert Paul Koster

Antoon Marie Henrie Tombeur

Roel Maes

Derk Jan Meuleman

Stefan Maubach

Abraham C Kruseman

Daniel Willem Elisabeth Schobben

Milan Petkovic

Franciscus L A J Kamperman

Jorge Guajardo Merchan

Sebastiaan Antonius Fransiscus Arnoldus Van Den Heuvel

Vincent Van Der Leest

Petrus Wijnandus Simons

Sebastiaan A F A Van Den Heuvel

Roelof H W Salters

Rutger S Van Veen

Manuel P C Heiligers

Héléna Handschuh

Shankaran S Kumar

Daniël Willem Elisabeth Schobben

Thomas A M Kevenaar

Stefan J Maubach

Claudine V Conrado

An assigning device () for assigning fixed identifiers to fuzzy identifiers, the assigning device comprising a database storing multiple fuzzy identifiers, and a matching unit () arranged to determine if a matching fuzzy identifier exists in the database that matches a fuzzy input identifier according to a matching criterion and to determine if a matching fuzzy identifier does not exist in the database according to an absent criterion.

Assigning device

Some embodiments are directed to an electronic cryptographic device arranged to determine a cryptographic key. The cryptographic device can include a physically unclonable function (PUF) arranged to produce a first noisy bit string during the enrollment phase and a second noisy bit string during the reconstruction phase, and a statistical unit arranged to execute a statistical test for verifying correct functioning of the physical unclonable function. The statistical test computes a statistical parameter for the physical unclonable function using helper data. The statistical test determines correct functioning if the statistical parameter satisfies a criterion of the statistical test.

Cryptographic device having physical unclonable function

Some embodiments are directed to a cryptographic device, including

Cryptographic device and memory based PUF

A programming device () arranged to obtain and store a random bit string in a memory device (), the memory device () comprising multiple one-time programmable memory cells (), a memory cell having a programmed state and a not-programmed state, the memory cell being one-time programmable by changing the state from the not-programmed state to the programmed state through application of an electric programming energy to the memory cell.

Programming device arranged to obtain and store a random bit string in a memory device

To ensure that digital rights cannot be forged or tampered with, they can be digitally signed. However, this means that updating the digital rights is no longer possible, as this would invalidate the digital signature. The present invention proposes that the issuer of digital rights issues rights which are signed in elementary pieces, rather than as a whole. Rather than issuing a right to play back a piece of content three times, the provider issues for example three rights to play back the content once in a particular AD, of which two may be transferred to other domains. The digital rights are individually protected by signatures and it is no longer possible to forge digital rights. As an enhancement the rights that can be transferred are indicated as such and stored securely to prevent tampering. When the right is transferred, it must be signed by the person who originally received it.

Divided rights in authorized domain

This invention relates to a system and a method of generating an Authorized Domain (AD) by selecting a domain identifier, and binding at least one person (P, P, . . . , PN), at least one device (D, D, . . . , DM), and at least one content item (C, C, . . . , CN) to the Authorized Domain (AD) given by the domain identifier (Domain_ID). Hereby, a number of verified devices (D, D, . . . , DM) and a number of verified persons (P, P, . . . , PN) that is authorized to access a content item of the Authorized Domain () is obtained. In this way, access to a content item of an authorized domain by a person operating a device is obtained either by verifying that the content item and the person are linked to the same domain or by verifying that the device and the content item are linked to the same domain. Thereby, enhanced flexibility for one or more persons when accessing content in an authorized domain is obtained while security of the content is still maintaining. This is further done in a simple, secure, and reliable way.

Hybrid device and person based authorization domain architecture

Some embodiments are directed to a cryptographic method for providing an electronic first device, an electronic second device and an electronic intermediary device, the cryptographic method establishing a cryptographically protected communication channel between the first device and the second device. The method comprises establishing a session identifier (SID) between the first device and the intermediary device. The first device sends the session identifier and a first key element to the second device over an out-of-band channel. The second device sends a registration message comprising the session identifier to the intermediary device. The first and derived at the first and second device.

Method for establishing a cryptographically protected communication channel

A transponder () comprises at least one memory (MEM, MEM) for storing encrypted information (E_k(EPC, PI)) that has been encrypted by use of a key (k) and for storing the key (k) associated with the encrypted information (E_k(EPC, PI)). The transponder () is adapted to send the key (k) slower response than the encrypted information (E_k(EPC, PI)) in response to queries of a reading device (), which is preferably done by delaying the transmission of the key (k) or by limiting the response rate at which the key (k) is transmitted. In particular the invention is related to RFID systems.

Transponder system for transmitting key-encrypted information and associated keys

A random number generating system for generating a sequence of random numbers comprising a memory, the memory being writable, volatile and configured such that the memory contains an at least partially random memory content upon each powering-up of the memory, an instantiating unit configured for seeding the random number generating system with a seed dependent upon the at least partially random memory content, the sequence of random numbers being generated in dependence upon the seed, and an over-writing unit configured for over-writing at least part of the memory with random numbers generated by the random number generating system in dependence upon the seed.

Random number generating system based on memory start-up noise

In systems for establishing a cryptographic key depending on a physical uncloneable function (PUF) it may be a problem that internal information correlated with the cryptographic key is leaked to the outside of the system via a side-channel. To mitigate this problem a cryptographic system for reproducibly establishing a cryptographic key is presented. The system comprises a physical system comprising a physical, at least partially random, configuration of components from which an initial bit-string is derived. An error corrector corrects deviations occurring in the initial bit-string. Through the use of randomization the error corrector operates on a randomized data. Information leaking through a side channel is thereby reduced. After error correction a cryptographic key may be derived from the initial bit-string.

System for establishing a cryptographic key depending on a physical system

A method () is disclosed of generating an identifier from a semiconductor device () comprising a volatile memory () having a plurality of memory cells. The method comprises causing () the memory cells to assume a plurality of pseudo-random bit values inherent to variations in the microstructure of the memory cells; retrieving () the bit values from at least a subset of the plurality of memory cells; and generating the identifier from the retrieved bit values. The method () is based on the realization that a substantial amount of the cells of a volatile memory can assume a bit value that is governed by underlying variations in manufacturing process parameters; this for instance occurs at power-up for an SRAM or after a time period without refresh for a DRAM. This can be used for several identification purposes, such as identifying a semiconductor device () comprising the volatile memory (), or for secure key generation by mapping error-correcting code words onto the identifier bit locations. The present invention further includes a semiconductor device () configured to be subjectable to the method () of the present invention.

Semiconductor device identifier generation method and semiconductor device

This invention relates to a system and a method of generating an Authorized Domain (AD) by selecting a domain identifier, and binding at least one person (P, P, PN), at least one device (D, D, . . . , DM), and at least one content item (C, C, . . . , CNZ) to the Authorized Domain (AD) given by the domain identifier (Domain ID). Hereby, a number of verified devices (D, D, . . . , DM) and a number of verified persons (P, P, . . . , PN) that is authorized to access a content item of the Authorized Domain () is obtained. In this way, access to a content item of an authorized domain by a person operating a device is obtained either by verifying that the content item and the person are linked to the same domain or by verifying that the device and the content item are linked to the same domain. Thereby, enhanced flexibility for one or more persons when accessing content in an authorized domain is obtained while security of the content is still maintaining. This is further done in a simple, secure and reliable way.

Hybrid device and person based authorized domain architecture

This invention relates to physical uncloneable function (PUF) devices for determining authenticity of an item, systems for determining authenticity of a physical item, and methods for determining authenticity of an item. A PUF pattern of the PUF device is damaged when using the item for the first time.

Device, system and method for determining authenticity of an item

An electric physical unclonable function (PUF) () is provided comprising a semiconductor memory element () connectable to a PUF control means for reading content from the memory element and for deriving at least in part from said content a digital identifier, such as a secret key. Upon powering the memory element it settles into one of at least two different stable states. The particular stable state into which the memory element settles is dependent at least in part upon random physical characteristics of the memory element introduced during manufacture of the memory element. Settling of the memory element is further dependent upon a control input () of the memory element. The electric physical unclonable function comprises shielding means () for shielding, during a time period including the power-up of the memory element and lasting at least until the settling of the memory element, the control input from receiving control signals upon which the particular stable state into which the memory element settles is dependent. In this way, the dependency of the memory element on its physical characteristics is improved, and dependency on possibly irreproducible control signals is reduced.

Physical unclonable function with improved start-up behavior

An electronic system () having a memory () with multiple memory locations, each specific memory location of the multiple memory locations being arranged to produce a respective value, the respective value depending on a physical, at least partially random, configuration of components constructing the specific memory location, the electronic system comprises a key extraction means () arranged to retrieve multiple values in a first order from the multiple memory locations and for determining a reproducible cryptographic key in dependency on the multiple values, characterized in that the electronic system further comprises a re-ordering () means in between the memory and the key extraction means for providing the multiple values to the key extraction means in a second order, different from the first order, prior to determining the cryptographic key.

Growing community of inventors

Eindhoven, Netherlands

Geert Jan Schrijen