# US 10,771,442 B2 · System and method for authenticating and enabling an electronic device in an electronic system > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,771,442 B2 - Document ID: US10771442B2 - Status: Granted - Kind: B2 - Application number: 16/371,043 - Filed: 2019-03-31 - Published: 2019-07-25 - Granted: 2020-09-08 - Earliest claimed: 2015-05-19 - Assignees: Anvaya Solutions, Inc. - Applicants: Anvaya Solutions, Inc. - Inventors: Sathyamurthi Sadhasivan; Shobha Rani Mallarapu; Srinivas Atluri - Web page: https://patentgrep.com/patent/US10771442B2 ## CPC - H04L 63/06: {for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08)} - G09C 1/00: Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system (cryptographic typewriters G09C3/00) - H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)} - H04L 2209/16: Obfuscation or hiding, e.g. involving white box - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G09C: CIPHERING OR DECIPHERING APPARATUS FOR CRYPTOGRAPHIC OR OTHER PURPOSES INVOLVING THE NEED FOR SECRECY ## Abstract A system and method for authenticating and enabling an electronic device in an electronic system are disclosed. A particular embodiment includes: an electronic system comprising: a protected device; a requesting device node, executing on a computing system, the requesting device node including: a device query data packet generator to generate a device query packet including data representing one or more identifiers of the protected device and a particular paired system; and an authentication key retriever to obtain an authentication key based on the device query data packet from an authentication provisioning node using an external data communication; and an obfuscation state machine of the particular paired system configured with a pre-defined quantity of state elements, a pre-defined quantity of the state elements being functional state elements, the obfuscation state machine being programmed with the authentication key to cause the obfuscation state machine to transition the protected device from an initial obfuscation state to a functional state. ## Claims ### Claim 1 A requesting device node, executing on a computing system, the requesting device node comprising: a device query data packet generator, executing on the computing system, to generate a device query packet including data representing one or more identifiers of a protected device and a particular paired system; and an obfuscation state machine of the particular paired system configured with a pre-defined quantity of state elements, a pre-defined quantity of the state elements being functional state elements, the obfuscation state machine being programmed with an authentication key to cause the obfuscation state machine to transition the protected device from an initial obfuscation state to a functional state, the protected device being further configured to obtain the authentication key from secure data storage if a flag is asserted. ### Claim 2 (depends on 1) The requesting device node of claim 1 wherein the device query packet includes an obfuscation state value and a nonce value. ### Claim 3 (depends on 1) The requesting device node of claim 1 wherein the authentication key includes an authentication code and a nonce value. ### Claim 4 (depends on 1) The requesting device node of claim 1 wherein the requesting device node and an authentication provisioning node being in data communication via a secure internet connection. ### Claim 5 (depends on 1) The requesting device node of claim 1 wherein the protected device being further configured to check a ‘Valid Authentication Key Programmed’ flag and to obtain the authentication key from the secure data storage instead of from an authentication provisioning node if the ‘Valid Authentication Key Programmed’ flag is asserted. ### Claim 6 An authentication provisioning node, executing on a computing system, the authentication provisioning node comprising: a device query data packet receiver, executing on the computing system, to receive from a requesting device node a device query packet including data representing one or more identifiers of a protected device; and an authentication key generator, executing on the computing system, to generate an authentication key based on the device query packet, the authentication key being configured to cause an obfuscation state machine to transition the protected device from an initial obfuscation state to a functional state, the authentication key generator being further configured to check the one or more identifiers of the protected device for potential status as a spurious or disqualified part. ### Claim 7 (depends on 6) The authentication provisioning node of claim 6 wherein the device query packet includes an obfuscation state value and a nonce value. ### Claim 8 (depends on 6) The authentication provisioning node of claim 6 wherein the authentication key includes an authentication code and a nonce value. ### Claim 9 (depends on 6) The authentication provisioning node of claim 6 wherein the requesting device node and an authentication provisioning node being in data communication via a secure internet connection. ### Claim 10 A method comprising: generating a device query packet including data representing one or more identifiers of a protected device and a particular paired system; obtaining an authentication key based on the device query packet; and programming an obfuscation state machine of the particular paired system with the authentication key to cause the obfuscation state machine to transition the protected device from an initial obfuscation state to a functional state, the protected device being further configured to obtain the authentication key from secure data storage if a flag is asserted. ### Claim 11 (depends on 10) The method of claim 10 wherein the device query packet includes an obfuscation state value and a nonce value. ### Claim 12 (depends on 10) The method of claim 10 wherein the authentication key includes an authentication code and a nonce value. ### Claim 13 (depends on 10) The method of claim 10 including providing an external data communication being a secure internet connection. ### Claim 14 (depends on 10) The method of claim 10 including checking a ‘Valid Authentication Key Programmed’ flag and obtaining the authentication key from the secure data storage instead of from an authentication provisioning node if the ‘Valid Authentication Key Programmed’ flag is asserted. ### Claim 15 A method comprising: receiving from a requesting device node a device query packet including data representing one or more identifiers of a protected device; and generating an authentication key based on the device query packet, the authentication key being configured to cause an obfuscation state machine to transition the protected device from an initial obfuscation state to a functional state, and checking the one or more identifiers of the protected device for potential status as a spurious or disqualified part. ### Claim 16 (depends on 15) The method of claim 15 wherein the device query packet includes an obfuscation state value and a nonce value. ### Claim 17 (depends on 15) The method of claim 15 wherein the authentication key includes an authentication code and a nonce value. ### Claim 18 (depends on 15) The method of claim 15 including providing an external data communication being a secure internet connection.