Adaptive system profile
AssigneeKonvax Corporation
InventorsMaurizio Talamo, Franco Arcieri, Christian H. Schunck
Life of this patent
Estimating the term…
Abstract
An approach to generating and regenerating a profile value from features of a system (e.g., a computer system), allows for certain changes of features of the system over time. The system may correspond to a client computer or a particular component of the client computer or a user of a client computer, and may also correspond to a combination of the user (i.e., a biometric characterization of the user) and the client computer or a component of the computer. The profile value may be used, for example, for purposes including identification, authentication, key generation, and other cryptographic functions involving the system.
Claims19
A method for secure interaction with a remote system by repeatedly generating a profile value on a system, the method comprising:
- in a first phase,
- determining a plurality of features of the system,
- grouping the determined features into a plurality of groups such that at least some features of the plurality of features is omitted from each group of one or more of the groups,
- computing a function of the features in each of the groups to yield a plurality of corresponding group-specific values,
- encoding a profile value using the group-specific values to yield an encoding such that the profile value is regeneratable from the encoding and fewer than all the group-specific value,
- storing said encoding, and
- removing the profile value from the system, and
- repeatedly in successive phases after the first phase, without accessing stored information that depends on the profile value from which the profile value is regeneratable, determining some or all of the plurality of features of the system,
- grouping the determined features into at least some of the plurality of groups used in a prior phase of the first phase or the successive phases, and
- recomputing the function of the features in each of the at least some of the groups to yield a plurality of corresponding recomputed group-specific values,
- processing the stored encoding and the recomputed group-specific values to yield a regenerated profile value;
- and
- securely interacting with the remote system based at least in part on the regenerated profile value, wherein security interacting includes at least one of generating one or more cryptographic keys based at least in part on the regenerated profile value and interacting with the remote system using the one or more keys, authentication of the system to the remote system based at least in part on the regenerated profile value, responding to a challenge from the remote system based at least in part on the regenerated profile value, and securely exchanging information with the remote system based at least in part on the regenerated profile value.
A non-transitory machine-readable medium having software comprising instructions stored thereon that when executed by a processor:
- in a first phase,
- determine a plurality of features of a system,
- group the determined features into a plurality of groups such that at least some features of the plurality of features is omitted from each group of one or more of the groups,
- compute a function of the features in each of the groups to yield a plurality of corresponding group-specific values,
- encode a profile value using the group-specific values to yield an encoding such that the profile value is regeneratable from the encoding and fewer than all the group-specific values,
- storing said encoding, and
- removing the profile value from the system, and
- repeatedly in successive phases after the first phase, without accessing stored information that depends on the profile value from which the profile value is regeneratable,
- determine some or all of the plurality of features of the system,
- group the determined features into at least some of the plurality of groups used in a prior phase of the first phase or the successive phases, and
- recompute the function of the features in each of the at least some of the groups to yield a plurality of corresponding recomputed group-specific values, and
- processing the stored encoding and the recomputed group-specific values to yield a regenerated profile value;
- and
- securely interacting with a remote system based at least in part on the regenerated profile value, wherein securely interacting includes at least one of generating one or more cryptographic keys based at least in part on the regenerated profile value and interacting with the remote system using the one or more keys, authentication of the system to the remote system based at least in part on the regenerated profile value, responding to a challenge from the remote system based at least in part on the regenerated profile value, and securely exchanging information with the remote system based at least in part on the regenerated profile value.
Dependencies are inferred from the claim text.