# US 12,001,526 B2 · Method and apparatus for secure information distribution > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,001,526 B2 - Document ID: US12001526B2 - Status: Granted - Kind: B2 - Application number: 17/112,719 - Filed: 2020-12-04 - Published: 2021-04-22 - Granted: 2024-06-04 - Earliest claimed: 2006-09-29 - Assignees: Oracle America, Inc. - Applicants: Oracle America, Inc. - Inventors: James P. Hughes; Robert F. Tow - Web page: https://patentgrep.com/patent/US12001526B2 ## CPC - G06F 21/31: User authentication - G06F 21/78: to assure secure storage of data (address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00) - G06F 21/86: Secure or tamper-resistant housings - G06Q 30/0185: {Product, service or business identity fraud} - G06F 2221/2143: Clearing memory, e.g. to prevent the data from being stolen - G06Q 2220/10: Usage protection of distributed data files - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract A system and method for secure generation and distribution of digital encryption keys is disclosed. The system may also be used to protect and distribute other types of secure information, including digital, audio, video, or analog data, or physical objects. The system may include a tamper-respondent secure token device, which may be configured to destroy or disable access to the secure information contained therein in response to attempts to physically or electronically breach the device. Outputs may be provided in a secure manner through various interfaces without using electricity (wires) or electromagnetic radiation. Inputs may be provided in a secure manner, including through the use of a gesture-based input interface. Destruction or disablement of the device and/or its secure contents may be provided upon detection of tamper attempts or upon input of a self-destruct command. Proof of the destruction or disablement of the device or its contents may be provided. ## Claims ### Claim 1 A device, comprising: a sealed housing; a Faraday cage around the sealed housing; a processor mounted within the sealed housing; a memory mounted within the sealed housing and coupled to the processor, wherein the memory is configured to store secure information; a sensor mounted within the sealed housing and coupled to the processor, wherein the sensor is configured to detect one or more physical gestures applied to the device; and a transmitter mounted within the sealed housing and coupled to the processor, wherein: the transmitter is configured to communicate the secure information through the Faraday cage and the sealed housing to an external device outside of the sealed housing, and the Faraday cage is configured to obscure signals communicated between components within the sealed housing from being detected outside of the sealed housing, wherein the processor is configured to execute program instructions stored in the memory, stored in another memory of the device, or that are integrated into the processor, that cause the processor to: validate a physical gesture command applied to the device requesting access to the secure information stored in the memory, wherein the physical gesture command is detected via the sensor; and cause the transmitter to communicate the secure information through the Faraday cage to the device outside of the sealed housing. ### Claim 2 (depends on 1) The device of claim 1, wherein the transmitter mounted within the sealed housing comprises a solenoid coupled to a transmitter circuit board, wherein the transmitter circuit board is configured to cause the solenoid to: vibrate the device in a digital manner to communicate the secure information through the Faraday cage and the sealed housing to the external device outside of the sealed housing. ### Claim 3 (depends on 1) The device of claim 1, wherein the transmitter mounted within the sealed housing comprises a sounder coupled to a transmitter circuit board, wherein the transmitter circuit board is configured to cause the sounder to: generate sound signals or tones to communicate the secure information through the Faraday cage and the sealed housing to the external device outside of the sealed housing. ### Claim 4 (depends on 1) The device of claim 1, wherein the transmitter mounted within the sealed housing comprises a light source coupled to a transmitter circuit board, wherein the transmitter circuit board is configured to cause the light source to: generate visible or infrared light signals detectable through a transparent window of the sealed housing to communicate the secure information through the Faraday cage and the sealed housing to the external device outside of the sealed housing. ### Claim 5 (depends on 1) The device of claim 1, wherein the transmitter mounted within the sealed housing comprises a magnetic circuit coupled to a transmitter circuit board, wherein the transmitter circuit board is configured to cause the magnetic circuit to: modulate a magnetic field detectable outside of the device to communicate the secure information through the Faraday cage and the sealed housing to the external device outside of the sealed housing. ### Claim 6 (depends on 1) The device of claim 1, wherein the transmitter mounted within the sealed housing comprises a radio transmitter coupled to a transmitter circuit board, wherein the transmitter circuit board is configured to cause the radio transmitter to: generate radio signals having a strength such that the radio signals communicate the secure information through the Faraday cage and the sealed housing to the external device outside of the sealed housing, wherein the Faraday cage obscures weaker signals than the generated radio signals that are communicated between the processor and the memory such that the weaker signals are obscured outside of the Faraday cage and the sealed housing. ### Claim 7 (depends on 1) The device of claim 1, wherein the secure information comprises one or more encryption keys. ### Claim 8 (depends on 1) The device of claim 1, wherein the secure information comprises program instructions for generating one or more encryption keys. ### Claim 9 (depends on 1) The device of claim 1, wherein the physical gesture command comprises a sequence of gesture-based inputs, wherein the program instructions, when executed by the processor further cause the processor to be operable to: accept respective valid gesture-based inputs; cause the transmitter to communicate acceptance of respective ones of the valid gesture-based inputs through the Faraday cage and the sealed housing subsequent to accepting the respective ones of the valid gesture-based inputs; reject other invalid gesture-based inputs; and cause the transmitter to communicate an error or rejection of respective ones of the other invalid gesture-based inputs through the Faraday cage and the sealed housing subsequent to rejecting the respective ones of the other invalid gesture based inputs. ### Claim 10 (depends on 9) The device of claim 9, wherein the program instructions, when executed by the processor further cause the processor to be operable to: reject a gesture-based input entered subsequent to an accepted gesture based input if the subsequent gesture-based input is entered prior to an acceptance being indicated for the accepted gesture-based input. ### Claim 11 (depends on 1) The device of claim 1, wherein the device further comprises: a tamper respondent membrane, and tamper respondent circuitry configured to disable access to the secure information stored in the memory in response to detection of tampering with the tamper-respondent membrane. ### Claim 12 (depends on 11) The device of claim 11, wherein the tamper respondent circuitry is configured to cause the memory to be erased in response to the detection of tampering. ### Claim 13 (depends on 11) The device of claim 11, wherein the tamper respondent circuitry is configured to cause a short-circuit condition that damages the memory in response to the detection of tampering. ### Claim 14 (depends on 11) The device of claim 11, wherein the device further comprises: an explosive charge, and wherein the tamper respondent circuitry or the processor, when executing the program instructions, are configured to: cause the explosive charge to be detonated in order to disable access to the secure information stored in the memory. ### Claim 15 (depends on 11) The device of claim 11, wherein the device further comprises: a secure chamber within the sealed housing configured to store a physical object; and wherein in response to validating the physical gesture command, the program instructions further cause the processor to: issue an unlock signal to a physical lock of the device that secures the secure chamber, thus providing access to the physical object. ### Claim 16 A method, comprising: storing secure information in a memory of a device comprising a sealed housing and a Faraday cage around the sealed housing, wherein: the memory is mounted within the sealed housing and the Faraday cage; and the Faraday cage is configured to obscure signals communicated between components within the sealed housing from being detected outside of the sealed housing; detecting, via a sensor mounted within the sealed housing of the device, one or more gesture-based inputs applied to the device; determining, via a processor mounted within the sealed housing of the device and coupled with the sensor, whether the detected one or more gesture-based inputs constitute a valid command to access the secure information stored in the memory; and communicating, in response to determining the one or more gesture-based inputs constitute a valid command to access the secure information, the secure information through the sealed housing and the Faraday cage, wherein said communicating is performed via a transmitter mounted within the sealed housing and coupled to the processor. ### Claim 17 (depends on 16) The method of claim 16, wherein said communicating comprises: vibrating the device in a digital manner to communicate the secure information through the Faraday cage and the sealed housing; generating sound signals or tones to communicate the secure information through the Faraday cage and the sealed housing; generating visible or infrared light signals detectable through a transparent window of the sealed housing to communicate the secure information through the Faraday cage and the sealed housing; modulating a magnetic field detectable outside of the device to communicate the secure information through the Faraday cage and the sealed housing; or generating radio signals having a strength such that the radio signals communicate the secure information through the Faraday cage and the sealed housing, wherein the Faraday cage obscures weaker signals than the generated radio signals that are communicated between the processor and the memory such that the weaker signals are obscured outside of the Faraday cage and the sealed housing. ### Claim 18 (depends on 16) The method of claim 16, wherein the secure information comprises: one or more encryption keys; or instructions for generating one or more encryption keys. ### Claim 19 (depends on 16) The method of claim 16, further comprising: detecting, via the sensor mounted within the sealed housing of the device, one or more additional gesture-based inputs applied to the device; determining, via the processor mounted within the sealed housing of the device and coupled with the sensor, whether the detected one or more additional gesture-based inputs constitute a valid command to load secure information into the memory of the device; detecting, via the sensor mounted within the sealed housing of the device, additional gesture-based inputs that communicate the secure information to be stored in the memory of the device. ### Claim 20 (depends on 19) The method of claim 19, wherein the secure information comprises one or more encryption keys, instructions for generating one or more encryption keys, or authorization codes for controlling a remote object.