Koninklijke Philips Corporation N.v.

Nxp B.v.

Signify Holding B.v.

Intrinsic Id B.v.

Klaus Kursawe

Oscar Garcia Morchon

Pim Theo Tuyls

Bozena Erdmann

Alphons Antonius Maria Lambertus Bruekers

Paulus Mathias Hubertus Mechtildis Antonius Gorissen

Petrus Johannes Lenoir

Robert Paul Koster

Timothy Kerins

Sye Loong Keoh

Paulus Mathias Hubertus Mechtildis Anton Gorissen

Ileana R Buhan

Pim T Tuyls

The resource metering system comprises: an end-point device () consuming a resource, in particular for usage in a building () or in an outdoor lighting system, said device comprising a detection unit that produces status information and an indicator of usefulness; a smart meter () comprising: a communication circuitry provided with an interface adapted for receiving from said device status information and said indicator of usefulness; a metrology device connected to a medium () that provides the resource to said device; and a control circuitry connected to the metrology device for collecting resource consumption data, the control circuitry being connected to the communication circuitry and adapted to produce monitoring data to be securely transmitted to a server () after processing the status information and said indicator. Monitoring data are used when determining consumption tariffs, so as to encourage energy efficient usage of the device.

Resource metering system and method using such a system for smart energy consumption

It is described a method for encrypting and a method for decrypting at least a portion () of a dataset being stored in a memory (), wherein the dataset has at least two dimensions. The described multi-dimensional cryptographic methods comprise forming a first keystream () being assigned to a first dimension of the dataset and forming a second keystream () being assigned to a second dimension of the dataset. The encrypting method further comprises encrypting each data packet of the portion () of the dataset by using a combination of the first keystream () and the second keystream (). The decrypting method further comprises decrypting each data packet of the portion () of the dataset by using a combination of the first keystream () and the second keystream (). It is further described a method for temporarily storing at least a portion () of a dataset into a memory () and a device for handling a dataset, which method and which device take advantage of the above-described encrypting method and/or the above-described decrypting method.

Encryption and decryption of a dataset in at least two dimensions

A method for securing communications between a first node (N) and a second node (N) in a network () further comprising a management device () provided with root keying materials, the method comprising the following steps: the management device generating, based on root keying materials, a first node keying material shares comprising a number of sub-elements and the first node keying material shares being arranged for generating a first complete key, the management device selecting a subset of sub-elements of the first keying material shares, the number of sub-elements selected being less or equal than the total number of sub-elements of the first keying material shares, and the selected sub-elements forming a first node partial keying material shares or symmetric-key generation engine, the first node generating, based on the first node symmetric-key generation engine and on an identifier of the second node, a first key, used for securing communications with the second node.

Method for secure communication in a network, a communication device, a network and a computer program therefor

The invention relates to a method for identifying compromised nodes in a ZigBee network comprising a general trust center, divided in at least two security domains, each security domain corresponding to a spatial or temporal area, and being associated with a different root keying material, and each node being identified by an identifier, the method comprising: upon detection of a node (U) entering into a security domain (SD), the general trust center (TC) distributing to the node at least one keying material share corresponding to the entered security domain, and upon detecting corruption of at least two security domains, determining, for each security domain, based on information registered by the base station (BTS), a respective set of nodes having received keying material corresponding to said security domain,&#x2014;comparing the respective sets of nodes and identifying the common nodes as being compromised.

Method and system for identifying compromised nodes

The invention provides a method of generating arbitrary numbers given a seed, characterized by providing a challenge derived from the seed to a physical token, receiving an initial response from the physical token, combining the initial response with helper data associated with the challenge to produce a stable response, and generating the arbitrary numbers using a pseudo-random number generator using the stable response as a seed for the generator. Preferably one or more of these pseudo-random permutations are used as one or more round function(s) in a Feistel block cipher. The generated arbitrary numbers may also be used to create a cryptographic key.

Method of generating arbitrary numbers given a seed

This invention relates to a method and system for providing digital security by means of a reconfigurable physical uncloneable function, RPUF. The RPUF comprises a physical system constituted by distributed components arranged to generate a first response when receiving a first challenge at a point of the physical system. The physical reconfiguring of the RPUF comprises redistributing the components such that they generate a second response, which differs from said first response, when again applying the first challenge at the point. The reconfiguration step is further utilized in providing secure storage for digital items. The digital item is data of any kind, including data that needs to be accessed and updated, i.e. which is dynamic in nature. The method is exemplified by implementations such as secure storage of a key, a secure counter and a seed generator.

Growing community of inventors

Eindhoven, Netherlands

Klaus Kursawe