Barclays Bank Plc

Barclays Services Corporation

George French

David Taylor

Evan Hood

Peter Dooman

Ashutosh K Sureka

Michael J Naggar

Jeremy Goldstone

Steven Bradley

Andrew Crichton

Ian Sayers

Paul Bilke

Arthur Leung

Andrew Whaley

Akhil Lalwani

Darren Foulds

Shaygan Kheradpir

Philip Sowter

Sean Gilchrist

Trish Stockton

Jenny Murray

Simon Bartlett

Suzanne Young

Michael Naggar

An electronic device that implements each module of a plurality of modules to jointly perform a secure multiparty cryptographic process to generate authorisation data based on input data, the authorisation data being suitable for use in authorising the electronic device, wherein each module uses secure data that is not shared outside that module to generate intermediate data for use in the secure multiparty cryptographic process to generate authentication data.

Device for secure multi-party cryptographic authorization

An electronic device includes one or more processors that perform at least one secure multiparty cryptographic process using a plurality of modules that jointly generate authentication data based on input data. Each of the modules performs that module's part of the secure multiparty cryptographic process using secure data that is not shared outside that module. The processors update the respective secure data of at least two of the modules. The respective secure data of a first module of the at least two of the modules is updated using a modification value, and the respective secure data of a second module of the at least two of the module is updated using the modification value. The updated secure data is arranged so that, for each possible value of the operation data, performance of the secure multiparty computation using the updated secure data generates the same authentication data as performance of the secure multiparty computation using the secure data prior to the step of updating. The device further includes an output interface that transmits to a terminal the generated authentication data. The authentication data is suitable for authorizing the mobile electronic device.

Apparatus and system having multi-party cryptographic authentication

In a credential recovery process, a user is authenticated using an application running on a mobile communications device, and requests recovery of a credential. The application generates a session key encrypted with the public key of a gateway, and sends the encrypted key to the gateway. The gateway recovers the credential from a depository, encrypted using a symmetric key shared with the depository. The gateway decrypts the credential and re-encrypts the credential using the session key. Preferably, the decryption and re-encryption is performed within a hardware secure module within the gateway. The re-encrypted credential is sent to the application, which decrypts the credential and outputs it to the user. In this way, the credential is provided securely to the user and may be made available for use immediately, or nearly so.

Credential recovery

A user inputs a pattern consisting of a plurality of lines. The lines are classified by relative length, overall direction and degree of curvature. Where a line is started from a new position, the direction from the previous starting point is taken into account. The series of lines is then serialized into a key value, which may then be used to decrypt data stored on a device. This enables data to be securely stored since the key is supplied by the user at runtime and is not itself stored on the device.

User access control based on a graphical signature

An encryption service system comprises an API for receiving requests from one or more calling applications. Each request comprises information identifying the operations to be performed on data to be processed and information identifying the origin and target of the data. The encryption service system further comprises a cryptographic server for processing the requests and determining, for each request, an encryption policy to be applied.

Method and system for provision of cryptographic services

In a secure computing environment, a method, system and device are provided for loading stored encryption key data from a protected non-volatile memory of a portable device. A boot loader program is initiated after the portable device is powered on, encryption key data is loaded from the protected non-volatile memory of the portable device, and access to the protected non-volatile memory is disabled after a predetermined time after the portable device is powered on. In this way, the encryption key data is loaded from the protected non-volatile memory of a portable device before the boot operating system is loaded.

Device and method for secure memory access

Growing community of inventors

Bedford, United Kingdom

George French