Koninklijke Philips Corporation N.v.

Intrinsic Id B.v.

Nxp B.v.

Other

Tp Vision Holding B.v.

Genkey Netherlands B.v.

Koninklijke Philips Electronics N.v.

Pim Theo Tuyls

Geert Jan Schrijen

Boris Skoric

Antonius Hermanus Maria Akkermans

Willem Gerard Ophey

Thomas Andreas Maria Kevenaar

Berry Schoenmakers

Michel Cornelis Josephus Marie Vissenberg

Daniel Willem Elisabeth Schobben

Robertus Adrianus Maria Wolters

Franciscus Lucas Antonius Johannes Kamperman

Marten Erik Van Dijk

Antoon Marie Henrie Tombeur

Klaus Kursawe

Alexis Stephen Richard Ashley

Evgeny Verbitskiy

Marcellinus Petrus Carolus Michael Krijn

Johan Cornelis Talstra

Sjoerd Stallinga

Nicolaas G Vink

Johan Paul Marie Gerard Linnartz

Theodorus Jacobus Johannes Denteneer

Tjerk G Spanjer

Bruce Murray

Milan Petkovic

Helena Handschuh

Johan P M G Linnartz

Maarten Vertregt

Hans De Jong

Mehmet Utku Celik

Erik Van Der Sluis

Petra Elisabeth De Jongh

Claudine Conrado

Jorge Guajardo Merchan

Mathias Wagner

Antonius H M Akkermans

Abraham C Kruseman

Albertus Aemilius Seyno Sluyterman

Robertus A M Wolters

Wilhelmus Henrica Cornelis Theuws

Frans J List

Theodorus J J Denteneer

Stefan Maubach

Vincent Van Der Leest

Frank Zachariasse

Johannes A J Van Geloven

Christiaan Kuipers

Petrus Wijnandus Simons

Timothy Kerins

Nynke Verhaegh

Arjan Mels

Markus Laubscher

Marteijn De Jong

Roelof H W Salters

Rutger S Van Veen

Manuel P C Heiligers

Gregory Krimhild Rene Neven

Jasper Johannes Adrianus Goseling

Jasper Goseling

Wil Ophey

Johannes Maria Maassen

Gregory K R Neven

Milan Petkovi

Marten E Van Dijk

Daniel W E Schobben

Evgeny A Verbitskiy

Daniël Willem Elisabeth Schobben

Geert-Jan Schrijen

Héléna Handschuh

Some embodiments are directed to a cryptographic device, including

Cryptographic device and memory based PUF

A programming device () arranged to obtain and store a random bit string in a memory device (), the memory device () comprising multiple one-time programmable memory cells (), a memory cell having a programmed state and a not-programmed state, the memory cell being one-time programmable by changing the state from the not-programmed state to the programmed state through application of an electric programming energy to the memory cell.

Programming device arranged to obtain and store a random bit string in a memory device

The present invention relates to a method of enabling authentication of an information carrier, the information carrier comprising a writeable part and a physical token arranged to supply a response upon receiving a challenge, the method comprising the following steps; applying a first challenge to the physical token resulting in a first response, and detecting the first response of the physical token resulting in a detected first response data, the method being characterized in that it further comprises the following steps; forming a first authentication data based on information derived from the detected first response data, signing the first authentication data, and writing the signed authentication data in the writeable part of the information carrier. The invention further relates to a method of authentication of an information carrier, as well as to devices for both enabling authentication as well as authentication of an information carrier.

Method and apparatus for information carrier authentication

The present invention relates to a method of converting an encrypted data set into an encryption of individual bits representing the data set. Further, the invention relates to a system for converting an encrypted data set into an encryption of individual bits representing the data set. A basic idea of the present invention is to provide a protocol in which it is possible to divide an encryption of a data set in the form of e.g. a biometric feature, such as a number x, where x&#x2208;{0, 1, . . . , n&#x2212;1}, into an encryption of respective bits x, x, . . . , xforming the number x, where t is the number of bits of the number n&#x2212;1, without leaking any information about x or its bits x, x, . . . , x. Hence, the present invention enables splitting of the encryption [[x]] into the respective encrypted bits [[x]], [[x]] . . . , [[x]] forming the encrypted number x=&#x3a3;x.

Secure threshold decryption protocol computation

A transponder () comprises at least one memory (MEM, MEM) for storing encrypted information (E_k(EPC, PI)) that has been encrypted by use of a key (k) and for storing the key (k) associated with the encrypted information (E_k(EPC, PI)). The transponder () is adapted to send the key (k) slower response than the encrypted information (E_k(EPC, PI)) in response to queries of a reading device (), which is preferably done by delaying the transmission of the key (k) or by limiting the response rate at which the key (k) is transmitted. In particular the invention is related to RFID systems.

Transponder system for transmitting key-encrypted information and associated keys

The present invention relates to a system and a method of verifying the identity of an individual by employing biometric data associated with the individual (), wherein privacy of said biometric data (X, Y) is provided. A helper data scheme (HDS) is employed to provide privacy of the biometric data. The present invention is advantageous for number of reasons. First, processing of security sensitive information is performed in a secure, tamper-proof environment () which is trusted by the individual. This processing, combined with utilization of a helper data scheme, enables set up of a biometric system where the biometric template is available in electronic form only in the secure environment. Moreover, electronic copies of the biometric templates are not available in the secure environment permanently, but only when the individual offers her template to the sensor.

Architectures for privacy protection of biometric templates

A method of encrypting data using a first key and multiple encryption keys at least in part based on the first key. The method includes encoding the data into a redundant representation by distributing the information content of the data among a number of groups, each group being associated with a respective encryption key of the multiple encryption keys, each encryption key being associated with at least one group, the redundant representation allowing recovery of the data in the absence of the groups associated with the at least one of the multiple encryption keys, and encrypting each group by the respective associated encryption key.

Method and apparatus for encrypting/decrypting data

In systems for establishing a cryptographic key depending on a physical uncloneable function (PUF) it may be a problem that internal information correlated with the cryptographic key is leaked to the outside of the system via a side-channel. To mitigate this problem a cryptographic system for reproducibly establishing a cryptographic key is presented. The system comprises a physical system comprising a physical, at least partially random, configuration of components from which an initial bit-string is derived. An error corrector corrects deviations occurring in the initial bit-string. Through the use of randomization the error corrector operates on a randomized data. Information leaking through a side channel is thereby reduced. After error correction a cryptographic key may be derived from the initial bit-string.

System for establishing a cryptographic key depending on a physical system

A method of and system () for controlled activation of at least one function in a product or component at a remote location, which activation requires a correct activation data item to be available in the product or component. The method comprises receiving one or more noisy outputs of an unclonable element associated with the component from the remote location, and providing helper data to the remote location, which helper data transforms the one or more noisy outputs to a single value which corresponds to the correct activation data item.

Controlled activation of function

A method () is disclosed of generating an identifier from a semiconductor device () comprising a volatile memory () having a plurality of memory cells. The method comprises causing () the memory cells to assume a plurality of pseudo-random bit values inherent to variations in the microstructure of the memory cells; retrieving () the bit values from at least a subset of the plurality of memory cells; and generating the identifier from the retrieved bit values. The method () is based on the realization that a substantial amount of the cells of a volatile memory can assume a bit value that is governed by underlying variations in manufacturing process parameters; this for instance occurs at power-up for an SRAM or after a time period without refresh for a DRAM. This can be used for several identification purposes, such as identifying a semiconductor device () comprising the volatile memory (), or for secure key generation by mapping error-correcting code words onto the identifier bit locations. The present invention further includes a semiconductor device () configured to be subjectable to the method () of the present invention.

Semiconductor device identifier generation method and semiconductor device

The present invention relates to a method of converting an encrypted data set into an encryption of individual bits representing the data set. Further, the invention relates to a system for converting an encrypted data set into an encryption of individual bits representing the data set. A basic idea of the present invention is to provide a protocol in which it is possible to divide an encryption of a data set in the form of e.g. a biometric feature, such as a number x, where x&#x3b5;{0, 1, . . . , n&#x2212;1}, into an encryption of respective bits x, x, . . . , xforming the number x, where t is the number of bits of the number n&#x2212;1, without leaking any information about x or its bits x, x, . . . , xHence, the present invention enables splitting of the encryption [[x]] into the respective encrypted bits [[x]], [[x]], . . . , [[x]] forming the encrypted number x=&#x3a3;I=1x2.

The present invention relates to a method of enabling authentication of an information carrier (), the information carrier () comprising a writeable part () and a physical token () arranged to supply a response upon receiving a challenge, the method comprising the following steps; applying a first challenge () to the physical token () resulting in a first response (), and detecting the first response () of the physical token () resulting in a detected first response data (), the method being characterized in that it further comprises the following steps; forming a first authentication data () based on information derived from the detected first response data (), signing the first authentication data (), and writing the signed authentication data () in the writeable part () of the information carrier (). The invention further relates to a method of authentication of an information carrier (), as well as to devices for both enabling authentication as well as authentication of an information carrier ().

The invention relates to a method for proving authenticity of a prover PRV to a verifier VER, the method comprising generating a secret S using a physical token by the prover PRV. Obtaining a public value PV by the verifier, where the public value PV has been derived from the secret S using a function for which the inverse of said function is computationally expensive. The method further comprising a step for conducting a zero knowledge protocol between the prover PRV and the verifier VER in order to prove to the verifier VER, with a pre-determined probability, that the prover PRV has access to the physical token, where the prover PRV makes use of the secret S and the verifier VER makes use of the public value PV. The invention further relates to a system employing the method, and an object for proving authenticity.

Method, apparatus and system for verifying authenticity of an object

A method of providing automatically verifiable trust in a content resolution process in which a PDR resolves a content reference identifier (CRID) identifying a content item using a resolution authority record (RAR) to obtain a locator identifying a location where the PDR can obtain the content item. Preferably, the measure comprises computing a digital signature over at least part of the contents of the CRID, the locator and/or the RAR. The method may also comprise encrypting at least a data portion of the CRID, RAR or locator. Digital rights needed to access the content item can be provided with the CRID, RAR or locator.

Enhanced content resolution method

This invention relates to physical uncloneable function (PUF) devices for determining authenticity of an item, systems for determining authenticity of a physical item, and methods for determining authenticity of an item. A PUF pattern of the PUF device is damaged when using the item for the first time.

Device, system and method for determining authenticity of an item

Growing community of inventors

Eindhoven, Netherlands

Pim Theo Tuyls