Secure sensor data transport and processing

• US 10,432,627 B2
• Filed: 08/29/2018
• Issued: 10/01/2019
• Est. Priority Date: 09/25/2015
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Khosravi, Hormuzd M., Coury, Bassam N., Zimmer, Vincent J.
• Primary Examiner(s): Shayanfar, Ali
• Application Number:
  US16/116,145
• Publication Number:
  US 20190014113A1
• Time in Patent Office: 398 Days
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

The present disclosure is directed to secure sensor data transport and processing. End-to-end security may prevent attackers from altering data during the sensor-based security procedure. For example, following sensor data capture execution in a device may be temporarily suspended. During the suspension of execution, sensor interface circuitry in the device may copy the sensor data from a memory location associated with the sensor to a trusted execution environment (TEE) within the device. The TEE may provide a secure location in which the sensor data may be processed and a determination may be made as to whether to grant access to the secure resources. The TEE may comprise, for example, match circuitry to compare the sensor data to previously captured sensor data for users that are allowed to access the secured resources and output circuitry to grant access to the secured resources or to perform activities associated with a security exception.

Claims

1. A device including sensor-based security, comprising:

one or more secured resources;

sensor circuitry to generate sensor data;

a trusted execution environment comprising access control circuitry to control access to the secured resources based on the generated sensor data, the access control circuitry including;

matching circuitry to compare the generated sensor data to previously captured sensor data associated with one or more authorized users permitted to access the one or more secured resources; and

output circuitry to, based at least in part on results of the comparison;

permit a user of the device to access the one or more secured resources;

or

prevent the user of the device from accessing the one or more secured resources; and

processing circuitry to;

initiate a temporary suspension of execution in the device; and

during the temporary suspension, transfer the generated sensor data from memory circuitry associated with the sensor circuitry to the trusted execution environment.

2. The device of claim 1, wherein to initiate the temporary suspension of execution in the device includes to cause normal execution in the device to be temporarily suspended by causing the device to enter a system management mode.

3. The device of claim 1, wherein the processing circuitry is further to initiate the temporary suspension of execution in the device in response to a system management interrupt.

4. The device of claim 1, further comprising at least an operating system including a sensor driver to notify the processing circuitry that sensor data has been generated.

5. The device of claim 1, further comprising at least sensor interface circuitry to access the memory circuitry associated with the sensor circuitry and transfer the sensor data.

6. The device of claim 5, wherein the sensor interface circuitry includes at least:

system management interrupt (SMI) handling circuitry; and

host embedded controller interface circuitry.

7. The device of claim 6, wherein the sensor circuitry includes a biometric sensor to capture biometric data from the user of the device.

8. The device of claim 5, wherein:

the sensor circuitry is associated with a memory location that is fixed in the memory circuitry; and

the processing circuitry is further to provide the associated fixed memory location to the sensor interface circuitry during device boot up.

9. The device of claim 1, wherein the previously captured sensor data for the one or more authorized users is stored within the trusted execution environment.

10. The device of claim 1, wherein the trusted execution environment is based on at least one of Secure Guard Extensions (SGX) technology or Management Engine (ME) technology.

11. A method for sensor-based security, comprising:

capturing sensor data using at least one sensor in a device;

initiating, via processing circuitry of the device, a temporary suspension of execution in the device;

transferring, during the temporary suspension and via the processing circuitry of the device, the captured sensor data from memory circuitry associated with the at least one sensor to a trusted execution environment of the device;

comparing, within the trusted execution environment, the captured sensor data to previously stored sensor data associated with one or more authorized users permitted to access one or more secured resources; and

based at least in part on results of the comparing;

permitting a user of the device to access the one or more secured resources;

or

preventing the user of the device from accessing the one or more secured resources.

12. The method of claim 11, wherein transferring the captured sensor data during the temporary suspension comprises:

accessing, via sensor interface circuitry, a first memory location in the memory circuitry associated with the at least one sensor; and

copying, via the sensor interface circuitry, the captured sensor data from the first memory location to a second memory location in the trusted execution environment.

13. The method of claim 12, wherein the first memory location is fixed in the associated memory circuitry, and wherein the method further comprises causing the processing circuitry to provide the first memory location to the sensor interface circuitry during device boot up.

14. The method of claim 11, wherein the at least one sensor includes a biometric sensor to capture biometric data from the user of the device.

15. The method of claim 11, wherein the previously stored sensor data associated with the one or more authorized users is stored within the trusted execution environment.

16. One or more non-transitory machine-readable storage devices having instructions stored thereon which, when executed by at least one processor, cause the at least one processor to perform operations associated with a secured resource access protocol, the operations comprising:

capturing, via at least one sensor of a device, sensor data from a user;

initiating a temporary suspension of execution;

transferring, during the temporary suspension of execution, the captured sensor data from memory circuitry associated with the at least one sensor to a trusted execution environment of the device;

comparing, within the trusted execution environment, the captured sensor data with previously stored sensor data associated with one or more authorized users permitted to access a secured resource; and

based at least in part on the comparing;

permitting a user of the device to access the secured resource;

or preventing the user of the device from accessing the secured resource.

17. The one or more non-transitory machine-readable storage devices of claim 16, wherein transferring the captured sensor data to the trusted execution environment includes:

accessing, via sensor interface circuitry, a first memory location in the memory circuitry associated with the at least one sensor; and

copying the captured sensor data from the first memory location to a second memory location in the trusted execution environment.

18. The one or more non-transitory machine-readable storage devices of claim 17, wherein the first memory location is fixed in the memory circuitry, and wherein the performed operations further include providing the first memory location to the sensor interface circuitry during device boot up.

19. The one or more non-transitory machine-readable storage devices of claim 16, wherein the at least one sensor includes a biometric sensor to capture biometric data from the user of the device.

20. The one or more non-transitory machine-readable storage devices of claim 16, wherein the previously stored sensor data associated with the one or more authorized users is stored within the trusted execution environment.