Obfuscated authentication systems, devices, and methods
AssigneeSandia Corporation
InventorsRobert C. Armstrong, Robert L. Hutchinson
Life of this patent
Estimating the term…
Abstract
Embodiments of the present invention are directed toward authentication systems, devices, and methods. Obfuscated executable instructions may encode an authentication procedure and protect an authentication key. The obfuscated executable instructions may require communication with a remote certifying authority for operation. In this manner, security may be controlled by the certifying authority without regard to the security of the electronic device running the obfuscated executable instructions.
Claims20
A. portable electronic device comprising:
- at least one processing unit;
- a computer readable medium, coupled to the at least one processing unit and encoded with:
- executable instructions, wherein the executable instructions are obfuscated that, when executed by the at least one processing unit, cause the at least one processing unit to implement an obfuscated state machine configured to authenticate a user of the portable electronic device at least in part in response to receiving a signal from a certifying authority separate from the portable electronic device;
- and
- an authentication key, wherein the authentication key is protected by the obfuscated state machine.
A method for authenticating a user to an electronic device, the method comprising:
- activating an obfuscated state machine encoding an authentication procedure;
- transmitting a request for an oracle to a certifying authority, wherein the certifying authority is separate from the electronic device;
- receiving, at the electronic device, the oracle from the certifying authority;
- and
- wherein the obfuscated state machine is configured to authenticate the user responsive to receiving the oracle and executing the authentication procedure.
A method for denying access to an electronic device, the method comprising:
- storing at least one oracle at a certifying authority, wherein the oracle is configured to enable an obfuscated state machine on the electronic device, and wherein the obfuscated state machine is configured to perform an authentication procedure;
- receiving, at the certifying authority, an unauthorized request from the electronic device for the at least one oracle;
- and
- denying the oracle to the electronic device.
Dependencies are inferred from the claim text.