Granted Patent B2

US 8,800,017 · App. 12/474,681 · Granted Aug 5, 2014

Inventors: Subir Ghosh (San Jose, CA); Gabriele Sartori (Fremont, CA)

Assignee: nComputing, Inc.

H04L9/3234H04L2209/605

Abstract

Claims (42)

1. A method of authenticating an electronic device, said method comprising:

transmitting a token value and a parameter value to said electronic device;

creating a generated private key using said parameter value, said generated private key being created using a combination of at least a portion of at least one private key within a set of stored private keys stored on said electronic device;

selecting a private key from a set of private keys using a multiplexer of said electronic device including selecting said selected private key using said parameter value as an input to said multiplexer, said set of private keys including said set of stored private keys and said generated private key;

processing, by said electronic device, said token value with said selected private key using a particular method specified by said parameter value to generate a processed token;

wherein said selecting said selected private key and said processing said token value are performed within an integrated circuit and wherein said selected private key and said processing said token value are not externally readable from outside of the integrated circuit;

comparing said processed token with an expected processed token; and

authenticating said electronic device if said processed token compares favorably with said expected processed token.

2. The method of authenticating an electronic device as set forth in claim 1 wherein said processing said token value comprises a logical exclusive-OR operation.

3. The method of authenticating an electronic device as set forth in claim 1 wherein said processing said token value comprises rotating said token.

4. The method of authenticating an electronic device as set forth in claim 3 wherein said rotating said token comprises rotating said token a value specified by said parameter value.

5. The method of authenticating an electronic device as set forth in claim 1 wherein said token value and said parameter value comprise a single value known as a token/parameter value.

6. The method of authenticating an electronic device as set forth in claim 1 wherein said steps of transmitting, comparing, and authenticating are performed by software.

7. The method of authenticating an electronic device as set forth in claim 6 wherein said software is periodically replaced with updated software, said updated software using a new parameter value not used as said parameter value by said existing software.

8. The method of claim 1 , further comprising:

randomly performing additional authentication of said electronic device while said electronic device is being used.

9. An electronic device having a security system, said electronic device comprising:

receiving communication circuitry for receiving a token value and a parameter value from an authenticator;

authentication circuitry, said authentication circuitry:

creating a generated private key using said parameter value, said generated private key being created using a combination of at least a portion of at least one private key within a set of stored private keys stored on said electronic device;

selecting a private key from a set of private keys using said parameter value as an input to a multiplexer of said authentication circuitry, said set of private keys including said set of stored private keys and said generated private key;

processing said token value with said private key using a particular method specified by said parameter value to generate a processed token;

wherein said authentication circuitry is implemented within an integrated circuit and wherein said selected private key and said processing said token value are not externally readable from outside of the integrated circuit; and

transmitting communication circuitry for transmitting said processed token to said authenticator, said authenticator authenticating said electronic device by comparing said processed token with an expected processed token.

10. The electronic device as set forth in claim 9 wherein said processing said token value comprises rotating said token.

11. The electronic device as set forth in claim 10 wherein said rotating said token comprises rotating said token a value specified by said parameter value.

12. The electronic device as set forth in claim 9 wherein said token value and said parameter value comprise a single value known as a token/parameter value.

13. The electronic device as set forth in claim 9 wherein said authenticator comprises software.

14. The electronic device as set forth in claim 13 wherein said software is periodically replaced with updated software, said updated software using a new parameter value not used as said parameter value by said existing software.

15. An electronic device having a security system, said electronic device comprising:

means for receiving a token value and a parameter value from an authenticator;

processing means, said processing means for:

creating a generated private key using said parameter value, said generated private key being created using a combination of at least a portion of at least one private key within a set of stored private keys stored on said electronic device;

selecting a private key from a set of private keys using said parameter value as an input to a multiplexer of said processing means, said set of private keys including said set of stored private keys and said generated private key;

processing said token value with said private key using a particular method specified by said parameter value to generate a processed token;

wherein said processing means is implemented within an integrated circuit and wherein said selected private key and said processing said token value are not externally readable from outside of the integrated circuit; and

means for transmitting said processed token to said authenticator, said authenticator authenticating said electronic device by comparing said processed token with an expected processed token.

16. The electronic device of claim 9 , wherein said authenticator randomly performs additional authentication of said electronic device while said electronic device is being used.

17. The electronic device as set forth in claim 15 wherein said token value and said parameter value comprise a single value known as a token/parameter value.

18. The electronic device as set forth in claim 15 wherein said authenticator comprises software.

19. The electronic device as set forth in claim 18 wherein said software is periodically replaced with updated software, said updated software using a new parameter value not used as said parameter value by said existing software.

20. The electronic device of claim 15 , wherein said authenticator randomly performs additional authentication of said electronic device while said electronic device is being used.

Assignments (8)

Continuity (1)