Title: Multi-factor authentication

Abstract

Detection and deterrence of spoofing of user authentication may be achieved by including a cryptographic fingerprint unit within a hardware device for authenticating a user of the hardware device. The cryptographic fingerprint unit includes an internal physically unclonable function ("PUF") circuit disposed in or on the hardware device, which generates a PUF value. Combining logic is coupled to receive the PUF value, combines the PUF value with one or more other authentication factors to generate a multi-factor authentication value. A key generator is coupled to generate a private key and a public key based on the multi-factor authentication value while a decryptor is coupled to receive an authentication challenge posed to the hardware device and encrypted with the public key and coupled to output a response to the authentication challenge decrypted with the private key.

Inventors:

Hamlet, Jason R; Pierson, Lyndon G

Issue Date:

2014-10-21

Research Org.:

Sandia National Lab. (SNL-NM), Albuquerque, NM (United States)

Sponsoring Org.:

USDOE

OSTI Identifier:

1160234

Patent Number(s):

8868923

Application Number:

12/908,414

Assignee:

Sandia Corporation (Albuquerque, NM)

Patent Classifications (CPCs):

H - ELECTRICITY H04 - ELECTRIC COMMUNICATION TECHNIQUE H04L - TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION

H - ELECTRICITY H03 - BASIC ELECTRONIC CIRCUITRY H03K - PULSE TECHNIQUE

Show more

H - ELECTRICITY H04 - ELECTRIC COMMUNICATION TECHNIQUE H04L - TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION

H04L9/3231 - {Biological data, e.g. fingerprint, voice or retina
H04L29/06809 - {using biometrical features, e.g. fingerprint, retina-scan}
H04L63/0861 - {using biometrical features, e.g. fingerprint, retina-scan
H04L9/00 - {Cryptographic mechanisms or cryptographic} arrangements for secret or secure communication {
H04L9/3278 - {using physically unclonable functions [PUF]}

H - ELECTRICITY H03 - BASIC ELECTRONIC CIRCUITRY H03K - PULSE TECHNIQUE

H03K19/003 - Modifications for increasing the reliability {for protection}

H - ELECTRICITY H04 - ELECTRIC COMMUNICATION TECHNIQUE H04N - PICTORIAL COMMUNICATION, e.g. TELEVISION

H04N1/442 - {using a biometric data reading device}

G - PHYSICS G06 - COMPUTING G06F - ELECTRIC DIGITAL DATA PROCESSING

G06F21/32 - using biometric data, e.g. fingerprints, iris scans or voiceprints

G - PHYSICS G05 - CONTROLLING G05B - CONTROL OR REGULATING SYSTEMS IN GENERAL

G05B19/00 - Programme-control systems

G - PHYSICS G06 - COMPUTING G06F - ELECTRIC DIGITAL DATA PROCESSING

G06F21/00 - Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity

H - ELECTRICITY H04 - ELECTRIC COMMUNICATION TECHNIQUE H04N - PICTORIAL COMMUNICATION, e.g. TELEVISION

H04N21/4415 - using biometric characteristics of the user, e.g. by voice recognition or fingerprint scanning {

H - ELECTRICITY H04 - ELECTRIC COMMUNICATION TECHNIQUE H04L - TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION

H04L9/0866 - {involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics}

Show less

DOE Contract Number:  

AC04-94AL85000

Resource Type:

Patent

Resource Relation:

Patent File Date: 2010 Oct 20

Country of Publication:

United States

Language:

English

Subject:

97 MATHEMATICS AND COMPUTING