Method and apparatus for secure information distribution
Inventors
Hughes, James P. • Tow, Robert F.
Assignees
Interested in licensing this patent?
MTEC can help explore whether this patent might be available for licensing for your application.
Publication Number
US-10860696-B2
Publication Date
2020-12-08
Expiration Date
Abstract
A system and method for secure generation and distribution of digital encryption keys is disclosed. The system may also be used to protect and distribute other types of secure information, including digital, audio, video, or analog data, or physical objects. The system may include a tamper-respondent secure token device, which may be configured to destroy or disable access to the secure information contained therein in response to attempts to physically or electronically breach the device. Outputs may be provided in a secure manner through various interfaces without using electricity (wires) or electromagnetic radiation. Inputs may be provided in a secure manner, including through the use of a gesture-based input interface. Destruction or disablement of the device and/or its secure contents may be provided upon detection of tamper attempts or upon input of a self-destruct command. Proof of the destruction or disablement of the device or its contents may be provided.
Core Innovation
A tamper-respondent secure digital token device stores secure information in a memory enclosed by a housing and a tamper-respondent surface enclosure. The device includes a gesture-based input interface that detects physical gesture sequences applied to the device and an output interface that provides secure information when access is authorized.
Access to the secure information is granted only after the device determines that a first sequence of physical gestures comprises a valid command requesting access. When a self-destruct command is detected or when tampering with the device is detected via the tamper-respondent surface enclosure, the device permanently disables access to the secure information stored in the memory.
The device prevents removal of a proof-of-destruction component from the housing until access to the secure information has been permanently disabled. The document further describes exchanging secure information among two or more users by using a first gesture sequence to load secure information, a second gesture sequence to request access, and then permanently disabling access when a self-destruct command or tampering is detected.
Claims Coverage
The partial content includes two independent claims. Across these claims, the inventive coverage centers on gesture-based authorization for loading and accessing secure information, tamper-respondent enclosure handling, and a self-destruct/tamper-triggered disable flow that prevents removal of a proof-of-destruction component until permanent disablement occurs.
Storing and gesture-validated access with tamper-respondent enclosure disablement
storing secure information in a memory of a device comprising a housing and a tamper-respondent surface enclosure that encloses the memory within the housing; detecting, by a gesture-based input interface of the device, a first sequence of physical gestures applied to the device, wherein the first sequence of physical gestures comprises a request to access the secure information stored in the memory; determining, by a processor of the device, whether the first sequence of physical gestures comprises a valid command requesting access to the secure information stored in the memory; in response to determining that the first sequence of physical gestures comprises a valid command requesting access to the secure information, providing, via an output interface of the device, the secure information; detecting a second sequence of physical gestures applied to the device comprising a self-destruct command, or detecting, via the tamper-respondent surface enclosure, tampering with the device; in response to said detecting the self-destruct command or the tampering, permanently disabling access to the secure information stored in the memory; and preventing removal of a proof-of-destruction component from the housing until access to the secure information stored in the memory has been permanently disabled.
Exchanging secure information using gesture sequences for load, access, and self-destruct/tamper disablement
exchanging secure information among two or more users by applying, by a given one of the two or more users, a first sequence of physical gestures to a device comprising a housing and tamper-respondent enclosure that encloses a memory of the device within the housing; determining, by a processor of the device, whether the first sequence of physical gestures comprises a valid request to load secure information into the memory of the device; in response to determining that the first sequence of physical gestures comprises a valid request to load secure information into the memory of the device, loading the secure information into the memory of the device; applying a second sequence of physical gestures corresponding to a command requesting access to the secure information loaded in the memory, by a second one of the two or more users; determining, by the device, whether the second sequence of physical gestures comprises a valid command requesting access to the secure information; and in response to determining that the second sequence of physical gestures comprises a valid command requesting access to the secure information, providing, by the device, access to the secure information; detecting a third sequence of physical gestures applied to the device comprising a self-destruct command, or detecting, via the tamper-respondent surface enclosure, tampering with the device; in response to said detecting the self-destruct command or the tampering, permanently disabling access to the secure information loaded in the memory; and preventing removal of a proof-of-destruction component from the housing until access to the secure information stored in the memory has been permanently disabled.
The claim set requires gesture-based detection and processor determination of valid commands for loading and granting access to secure information, with a tamper-respondent surface enclosure and a self-destruct/tamper-triggered permanent disablement of access. Both independent claims also require preventing removal of a proof-of-destruction component until the access has been permanently disabled.
Stated Advantages
Enables providing secure information only in response to detecting a valid command requesting access via a gesture-based input interface.
Permanently disables access to stored secure information in response to detecting a self-destruct command or detecting tampering via a tamper-respondent surface enclosure.
Prevents removal of a proof-of-destruction component from the housing until access to the secure information has been permanently disabled.
Supports exchanging secure information among two or more users using gesture sequences to load and then access the stored secure information.
Documented Applications
Exchanging secure information among two or more users using first and second gesture sequences for loading and access, followed by self-destruct/tamper disablement and proof-of-destruction handling.
Interested in licensing this patent?