Cisco Technology, Inc.

Michael G Curcio

Kent H Hoult

Kevin T Mortimer

Archana Nagaraj

Rachel Weeks

Chandana Prakash

In an example method, a presence of a component with a cryptographic identity is detected. The component is detected by an authenticator component capable of authenticating a component. The example method further includes determining an authentication status of the detected component. The authentication status of the component is added to an extensible list of volatile, runtime data. Further, the authenticator component signs the extensible list with a private key to create a group identity. Finally, the authenticator component sends the group identity to a next higher component in an authentication hierarchy.

Distributed hierarchical authentication of system component identities

An apparatus includes a carry chain circuit and a detector circuit. The carry chain circuit includes a plurality of stages. Each stage of the plurality of stages includes a plurality of lookup table elements coupled in sequence. The carry chain circuit propagates a clock signal through the plurality of lookup table elements of the plurality of stages. The detector circuit determines, based on a value of the clock signal stored by a final lookup table element of each stage of the plurality of stages, which stage of the plurality stages contains an edge of the clock signal. The detector circuit then outputs a zero if the determined stage is assigned to a first group of the plurality of stages and a one if the determined stage is assigned to a second group of the plurality of stages.

Random number generator

An apparatus includes a ring oscillator, a carry chain circuit, and a detector circuit. The ring oscillator produces a clock signal. The carry chain circuit includes a plurality of stages. Each stage of the plurality of stages includes a plurality of lookup table elements coupled in sequence. The carry chain circuit propagates the clock signal through the plurality of lookup table elements of the plurality of stages. The detector circuit determines, based on a value of the clock signal stored by a final lookup table element of each stage of the plurality of stages, which stage of the plurality stages contains an edge of the clock signal. The detector circuit then outputs a zero if the determined stage is assigned to a first group of the plurality of stages and a one if the determined stage is assigned to a second group of the plurality of stages.

Growing community of inventors

Cary, NC, United States of America

Michael G Curcio