Hewlett-packard Development Company, L.p.

Hewlett-packard Company

Hewlett Packard Enterprise Development LP

Martin Sadler

Keith Alexander Harrison

Marco Casassa Mont

Liqun Chen

William John Munro

Timothy Paul Spiller

Christopher Tofts

Andrew D Thomas

Stephen John Hinde

Nigel John Edwards

Boris Balacheff

Chris I Dalton

James Thomas Edward McDonnell

Siani Lynne Pearson

Robert Francis Squibbs

Fraser John Dickin

Simon Edwin Crouch

Simon Kai-Ying Shiu

Simon Shiu

An electronic device for management of cryptographic keys, and a corresponding method implemented in a computing device comprising a physical processor, transmit feature data of the device to a key generation module, wherein the feature data comprises information corresponding to an identifier or an attribute of the device, and receive, by the device from the key generation module, a digital signature of the transmitted feature data. The device installs the received digital signature as a cryptographic private key for communication, and performs a cryptographic operation using the installed digital signature as the cryptographic private key.

Management of cryptographic keys

Secret random data is distributed to a plurality of devices to provision them with new one-time pad data for use in interacting with apparatus holding the same one-time pad data. This distribution is effected by provisioning a first device with a block of secret random data that is, or will become, available to the apparatus. Part of the secret random data is then distributed from the first device to one or more other devices in a hierarchical distribution pattern headed by the first device. Each device, other than those at the bottom of the distribution hierarchy, retains part of the secret random data it receives and passes on the remainder. Each device uses that part of the secret random data it has retained to provide the device with new one-time pad data. A method is also provided for tracking service usage based on the distributed one-time pad data.

Method of provisioning devices with one-time pad data, device for use in such method, and service usage tracking based on one-time pad data

A device stores one-time pad data for use in carrying out various tasks. In order to preserve the ability to carry out important tasks that require the use of one-time data, use of the one-time pad data held by the device is controlled such that an amount of this one-time pad data is only usable by a predetermined set of important tasks comprising at least a replenishment task for replenishing the device with one-time pad data.

Method of managing one-time pad data and device implementing this method

A memory tag has a memory. Associated with the memory tag there is a readable structure. The readable structure can be read to generate an identifier. However, the readable structure cannot be provided so as to encode a predetermined identifier.

Identifier for memory tags

First data to be sent by a first party to a second party is encrypted using an encryption key string formed using at least a hash value generated using second data and a secret, shared with a trusted party, that serves as identification of the first party. The second data comprises, for example, one or more conditions that serve as identifiers of the second party, and a hash-value element generated by hashing the first data. The encrypted first data and the encryption key string is made available to the second party which forwards the encryption key string to the trusted party with a request for the corresponding decryption key. The trusted party carries out at least one check on the basis of data contained in the encryption key string and, if this at least one check is satisfactory, provides a decryption key to the second party.

Cryptographic method and apparatus

When sending personal data to a recipient, the data owner encrypts the data using both a public data item provided by a trusted party and an encryption key string formed using at least policy data indicative of conditions to be satisfied before access is given to the personal data. The encryption key string is typically also provided to the recipient along with the encrypted personal data. To decrypt the personal data, the recipient sends the encryption key string to the trusted party with a request for the decryption key. The trusted party determines the required decryption key using the encryption key string and private data used in deriving its public data, and provides it to the requesting recipient. However, the decryption key is either not determined or not made available until the trusted party is satisfied that the associated policy conditions have been met by the recipient.

Privacy management of personal data

A method for encrypting data comprising deriving a public key using a first data set provided by a second party; encrypting a second data set with the public key; providing the encrypted third data set to the second party; providing the public key to a third party to allow validation of the first data set such that on validation of the first data set the third party provides an associated private key to the second party to allow decryption of the encrypted second data set.

Method and apparatus for data validation

A computer system comprises a first computer entity arranged to encrypt data using an encryption key comprising a time value, and a second computer entity arranged to generate, at intervals, a decryption key using a current time value. The encryption and decryption processes are such that the decryption key generated using a current time value corresponding to that used for the encryption key, is apt to decrypt the encrypted s data.

Method and apparatus for encrypting/decrypting data using timed-release keys

A software system for installation on computing apparatus (and a method of installing such a software system on computing apparatus), wherein the software system is provided in the form of a software package including a plurality of software components, one or more of the software components being provided as a plurality of different implementations, the apparatus including an installation engine for installing the software system only a selected one implementation of the or each of the software components having multiple implementations, and a random selector module for selecting one of the plurality of implementations of a software component for installation. Thus, software package would still be distributed to its consumers as a single version but each installation of the package on a user's computing apparatus is potentially different, which reduce the risk of faults in and attacks against software components having one or more 'bugs' therein because not all consumers will have the same implementation of any one software component.

Software installation and operation with random selection

A browser with a sound input receives a sound passage associated with a content site. The browser sends a representation of the sound passage to a service system where it is compared with stored representations of sound passages that each have an associated URI. On finding a match, the service system sends back the URI associated with the matched stored sound-passage representation. The browser uses this URI to access the content site.

Sound link translation

Audio alerts are provided in an environment, such as a house, concerning categorized events to be reported. Examples of the events are receipt of e-mails and voice mails. The presence of a person entering or leaving a space of the environment is detected and a processing system determines reportable event categories that have occurred. Each possible event category has a corresponding audio signature. The event categories signatures that have occurred are played either simultaneously or sequentially, within the hearing of the person detected.

Growing community of inventors

Bristol, United Kingdom

Martin Sadler