Emc Corporation

Marco Ciaffi

William Duane

Daniel A Wilder

Joseph M Pirrotta

Ari Juels

Yedidya Dotan

Daniel Vernon Bailey

Lawrence N Friedman

John Gordon Brainard

Karl Ackerman

John O'Brien

Edward W Vipond

Yong Qiao

Eric Anthony Silva

Larnie Rabinowitz

Igor Shmukler

A method is used in calibrating an internal clock generator. An electronic device is instructed to output a high-speed clock signal which is communicated to an external calibration system. The high-speed clock signal is measured using measurement equipment associated with the external calibration system. One or more calibration values based on the measured clock signal value are calculated. The calculated calibration values are communicated to the electronic device. The electronic device is instructed to generate a calibrated clock signal by applying the one or more calibration values to an internally generated clock signal.

Calibrating a high-speed clock signal generated using a processor internal to the electronic authentication device without using a crystal oscillator

An apparatus comprises a processing device comprising a near field communication (NFC) network interface, a memory and a processor coupled to a memory. The processing device is configured under control of the processor to connect to a host device using the NFC network interface, receive an authentication request from another device through the NFC connection with the host device and authenticate the other device using information stored in the memory. A passcode is presented to the host device responsive to a successful authentication of the other device, the passcode being utilizable to authenticate to a resource protected by the other device.

Near field communication based authentication

A token apparatus is described, including (a) a controller, the controller being configured to generate an OTP in synchronization with a remote authentication server, (b) a display, the display being constructed and arranged to display the OTP, and (c) an input apparatus, the input apparatus being constructed and arranged to receive a user-input alteration code, the user-input alteration code being used to alter the OTP in a standardized manner. A method of operating a token device which displays an OTP in synchronization with a remote authentication server is described, including (a) receiving an alteration code, (b) entering the alteration code onto the token device, and (c) causing an altered OTP to be entered into an application that seeks to authenticate a user, the altered OTP having been generated from the OTP in a standardized manner based on the alteration code. An authentication system is also described.

Techniques for securing a one-time passcode with an alteration code

A technique of message-passing using shared memory of an RF tag involves storing a message in the shared memory while a security processor of the RF tag is in a sleep mode, the security processor being constructed and arranged to access the shared memory when the security processor is in a wakened mode. The technique further involves transitioning the security processor from the sleep mode to the wakened mode, and processing the message from the shared memory using the security processor after the security processor has transitioned from the sleep mode to the wakened mode. If the security processor is awakened only as needed (rather than remain in the wakened mode), lifetime of a battery which powers the security processor can be maximized.

Techniques for message-passing using shared memory of an RF tag

A technique is utilized in the configuration and seeding of security tokens at third party facilities, particularly at facilities of a configuration agent, such that a token can be configured without the configuration agent having security-defeating knowledge about the token. Such a technique allows a third party to provision a token with a seed, but in such a way that the third party will not know, or be able to construct, the seed after the seed provisioning process is complete. The seed may include, by way of example, a symmetric key or other secret shared by two or more entities. In some arrangements, a method is used for secure seed provisioning. Data is derived from inherent randomness in a token or other authentication device. Based on the data, the token or other authentication device is provisioned with a seed.

Secure seed provisioning

An authentication device comprises a processor having a reset input, a trigger source coupled to the reset input of the processor, and interface circuitry for outputting codes generated by the processor. The trigger source may comprise, for example, a trigger button having an associated switch that when actuated supplies a reset to the reset input. The processor is configured to analyze a given reset applied to the reset input to determine if the reset is an inadvertent reset or a reset generated by the trigger source. The processor generates a code responsive to the reset if the reset is determined to be a reset generated by the trigger source. The code may be supplied to a host device which communicates the code to an authentication server for authentication.

Reset-tolerant authentication device

A technique involves the use of an electronic device having a real-time clock (RTC) circuit. In particular, the technique involves obtaining an RTC value from the RTC circuit. The RTC value is based on a previous time value and being arranged to represent current time. The technique further involves generating an adjustment factor arranged to adjust for imperfection in an oscillator of the RTC circuit, and providing a new time value based on the RTC value and the adjustment factor. The new time value represents current time at least as accurately as the RTC value.

RTC circuit with time value adjustment

An authentication device or other type of low-power hand-held device comprises a processor, an external button alternately configurable in an unpressed state and a pressed state, and current drain mitigation circuitry coupled to the external button and a corresponding input of the processor. The current drain mitigation circuitry is configured to connect the input of the processor to a first potential when the external button is in the unpressed state and to connect the input of the processor to a second potential different than the first potential when the external button is in the pressed state, thereby limiting current drain arising from the external button being stuck in the pressed state.

Growing community of inventors

Sudbury, MA, United States of America

Marco Ciaffi