Method and apparatus for uniquely and authoritatively identifying tangible objects

• US 20060107058A1
• Filed: 12/29/2005
• Published: 05/18/2006
• Est. Priority Date: 06/19/2001
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Lewis, David Otto, Remfert, Jeffrey Earl
• Granted Patent: US 7,818,578 B2
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A smart chip protection system contains a unique public/private identity key pair and uses a separate public/private signature key pair. The identity private key is stored in permanent, secure storage such that it can not be read outside the chip. An issuing entity generates a descriptor containing the identity public key, attribute data, and a digital signature. The digital signature is generated by enciphering a derivation of the identity public key and the attribute data with the signature private key known only to the issuer. The authenticity of the descriptor data is verified by decrypting the signature with the signature public key using a known algorithm, and comparing the result to the derivation of the descriptor data. The identity of the object can be verified requesting the smart chip ro perform an encryption/decryption operation using its identity private key, and performing the complement using the public key.

Claims

1. An apparatus having a digital protection mechanism, comprising:

a tangible object;

a digital protection system physically attached to said tangible object, said digital protection system comprising;

(a) an external interface for receiving data requests;

(b) a processor coupled to said external interface, said processor capable of transforming data according to a first public/private key encryption algorithm; and

(c) an internal data storage, said internal data storage storing an identity private key, said identity private key being inaccessible outside said external interface; and

a data descriptor associated with said digital protection system, said data descriptor including an identity public key, attribute data and a digital signature;

wherein said processor performs a first transformation of data responsive to a request received through said external interface, said processor performing said first transformation of said data according to said first public/private key encryption algorithm using said identity private key, wherein a second transformation of data according to said first public private key encryption algorithm using said identity public key is a complementary transformation of said first transformation.

2. The apparatus of claim 1, wherein said digital signature is an encryption of data derived from said identity public key and attribute data, said encryption being according to a second public private key encryption algorithm using a signature private key, said digital signature being capable of decoding according to said second public/private key encryption algorithm using a signature public key.

3. The apparatus of claim 2, wherein said digital signature is an encryption of data derived from said identity public key and attribute data by performing a pre-defined hash function.

4. The apparatus of claim 1, wherein said digital protection system is implemented in digital logic contained on a single integrated circuit substrate.

5. The apparatus of claim 4, wherein said data descriptor is stored in said internal data storage contained on said single integrated circuit substrate.

6. The apparatus of claim 1, wherein said tangible object is a digital data processing device having at least one processor external to said digital protection system, said processor external to said digital protection system communicating with said digital protection system across said interface.

7. The apparatus of claim 1, wherein said external interface mates with a corresponding interface of a digital data processing device separate from said tangible object.

8. The apparatus of claim 1, wherein at least a portion of said attribute data is encrypted.

9. A machine having multiple parts, comprising:

a first replaceable part

a digital controller controlling operation of at least one function of said machine, said digital controller being external to said first replaceable part;

a digital protection system physically attached to said first replaceable part, said digital protection system comprising;

(a) an external interface for receiving data requests,

(b) a processor coupled to said external interface, said processor capable of performing a first data transformation according to a first public/private key encryption algorithm, and

(c) an internal data storage, said internal data storage storing an identity private key, said identity private key being inaccessible outside said external interface; and

a data descriptor associated with said digital protection system, said data descriptor including an identity public key, attribute data and a digital signature;

wherein said controller verifies information concerning said first replaceable part by;

(a) obtaining said data descriptor associated with said digital protection system,

(b) performing a second data transformation of test data according to said first public/private key encryption algorithm using said identity public key, said second data transformation being complementary to said first data transformation,

(c) accessing said digital protection system attached to said first replaceable part to perform said first data transformation of said test data using said identity private key,

(d) comparing data undergoing said first and second data transformations to test data before transformation; and

(e) verifying that said data descriptor has not been altered using said digital signature.

10. The machine of claim 9, wherein said digital signature is an encryption of data derived from said identity public key and attribute data, said encryption being according to a second public private key encryption algorithm using a signature private key, and wherein said controller verifies that said data descriptor has not been altered by:

(e1) decrypting said digital signature according to said second public/private key encryption algorithm using a signature public key, and

(e2) comparing the decrypted digital signature to data derived from said identity public key and said attribute data according to said derivation algorithm to verify said descriptor data..

11. The machine of claim 9, wherein said first data transformation is an encryption of said source test data and said second data transformation is a decryption of said source test data encrypted by said first data transformation, said first data transformation being performed before said second data transformation..

12. The machine of claim 9, wherein said second data transformation is an encryption of said source test data and said first data transformation is a decryption of said source test data encrypted by said second data transformation, said second data transformation being performed before said first data transformation.

13. The machine of claim 9, wherein said machine comprises a plurality of replaceable parts, at least some of which contain a respective digital protection system.

14. The machine of claim 9, wherein said digital protection is implemented in digital logic contained on a single integrated circuit substrate.

15. The machine of claim 14, wherein said data descriptor is stored in said internal data storage contained on said single integrated circuit substrate, said data descriptor containing a unique machine identifier, said unique machine identifier distinguishing said machine from other machines of the same type.

16. A replaceable part for a machine having multiple parts, comprising:

a part performing a function for said machine, and

a digital protection system physically attached to said part, said digital protection system comprising;

(a) an external interface for communicating with a digital controller of said machine, said digital controller being located externally to said replaceable part;

(b) a processor coupled to said external interface, said processor capable of performing a data transformation according to a first public/private key encryption algorithm, and

(c) an internal data storage, said internal data storage storing an identity private key, said identity private key being inaccessible outside said external interface, and a data descriptor, said data descriptor including an identity public key, attribute data and a digital signature;

wherein, responsive to a request received through said external interface, said processor of said digital protection system performs said data transformation according to said first public/private key encryption algorithm using said identity private key.

17. The replaceable part for a machine of claim 16, wherein said machine is a motor vehicle.

18. The replaceable part for a machine having multiple parts of claim 16, wherein said digital signature is an encryption of data derived from said identity public key and attribute data, said encryption being according to a second public private key encryption algorithm using a signature private key, said digital signature being capable of decoding according to said second public/private key encryption algorithm using a signature public key.

19. The replaceable part for a machine having multiple parts of claim 18, wherein said digital signature is an encryption of data derived from said identity public key and attribute data by performing a pre-defined hash function.

20. The replaceable part for a machine having multiple parts of claim 16, wherein said digital protection system is implemented in digital logic contained on a single integrated circuit substrate.

21. A method of operating a machine having multiple parts, including a first replaceable part having a digital protection system and a digital controller external to said first replaceable part for controlling operation of said machine, said digital protection system being a tangible device physically attached to said first replaceable part which receives input data, processes data, and produces output data independently of said machine, said method comprising the steps of:

(a) obtaining a data descriptor associated with said first replaceable part, said data descriptor including an identity public key, attribute data, and a digital signature;

(b) performing a complementary pair of data transformations of source test data to produce resultant test data, including a first data transformation performed by said digital controller according to a first public/private key encryption algorithm using said identity public key, and a second data transformation performed by said digital protection system, said second data transformation being complementary to said first data transformation;

(c) comparing said source test data to said resultant test data;

(d) verifying that said data descriptor has not been altered using said digital signature; and

(e) using the results of steps (c) and (d) in the operation of said machine.

22. The method of operating a machine of claim 21, wherein step (e) comprises at least one action from the set of actions consisting of:

(i) presenting information derived from the results of steps (c) and (d) to a user; and

(ii) selectively disabling at least one function of said machine responsive to the results of steps (c) and (d).

23. The method of operating a machine of claim 21, wherein said data descriptor contains a unique machine identifier, said unique machine identifier distinguishing said machine from other machines of the same type, said method further comprising the step of verifying that said unique machine identifier in said data descriptor matches a unique machine identifier associated with said machine.