Data Processing Systems and Methods

• US 20090144534A1
• Filed: 05/05/2008
• Published: 06/04/2009
• Est. Priority Date: 03/03/2005
• Status: Active Grant

• Current Assignee: Digimarc Corporation
• Original Assignee: Digimarc Corporation
• Inventors: Carr, J. Scott, Rodriguez, Tony F., Calhoon, Sean
• Granted Patent: US 8,051,293 B2
• Time in Patent Office: Days
• US Class Current: 713/2
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: H04L 2209/608 Watermarking
• CPC Class Codes: H04L 9/0662 with particular pseudorandom sequence generator
• CPC Class Codes: H04L 9/3278 using physically unclonable functions [PUF]

Abstract

Various improvements to data processing systems involve enhancements to BIOS functionality, use of identifiers associated with specific instances of hardware, and data hiding techniques—sometimes alone, sometimes in combination. Many of these improvements can be applied to increase the security of computer systems, and networks of which they form part.

Claims

1. In a computer device that employs BIOS code, part of which performs a Power On Self Test sequence of operations, part of which collects hardware configuration information and provides same in connection with initiating an operating system, at least some of said BIOS code being stored in a non-volatile memory, an improvement wherein said BIOS code includes code to perform one or more functions from a group consisting of:

watermark decoding, watermark encoding and content fingerprinting.

2. The computer system of claim 1 wherein the system allows said function to be invoked by a process that runs after an operating system has been initiated.

3. A method practiced on the computer system of claim 1, wherein the BIOS code decodes digitally watermarked information from stored host data.

4. The method of claim 3 wherein said BIOS code decodes said digitally watermarked information during an initial phase of the system'"'"'s operation, prior to loading of the operating system.

5. The method of claim 4 wherein said stored host data comprises image data stored on a data storage disk.

6. The method of claim 4 that includes comparing said decoded information with reference information to determine whether they correspond in an expected manner.

7. The method of claim 4 that includes removing the digital watermark information from said host data, and replacing same with new digital watermark information.

8. The method of claim 4 wherein certain instructions or data employed by the computer system during said initial phase of operation are hidden using steganographic techniques.

9. The method of claim 8 wherein certain data used to check the integrity or authenticity of a component of said system is encoded as a digital watermark in other data.

10. The method of claim 3 wherein the information decoded from the digital watermark allows the BIOS code to perform a cryptographic operation.

26. The computer device of claim 1 wherein said BIOS code includes code to perform content fingerprinting.

11. In an initial, boot phase of a computer system'"'"'s operation that comprises executing BIOS code to perform a Power On Self Test series of operations, and thereafter initiating operating system software, the system including a semiconductor device, an improvement comprising determining an essentially unique identifier associated with said semiconductor device before initiation of said operating system software, and after said initial boot phase of operation, making data related to said identifier available to application software executing on said computer system.

12. The method of claim 11 wherein said semiconductor device comprises a memory in which at least certain of said BIOS code is stored.

13. The method of claim 11 that includes generating a session identifier by reference to said data, said session identifier being different each time the computer system is booted.

14. The method of claim 13 in which said session identifier is a function of data that changes with time.

15. The method of claim 13 that includes seeding a pseudo random number generator with said session identifier.

16. The method of claim 15 that includes using data produced by said pseudo random number generator in connection with a cryptographic operation.

17. In a method that includes digitally watermarking an audio or visual content object with data, an improvement that includes determining from a semiconductor device an identifier associated therewith, said identifier being essentially unique because of random process variations inherent in fabrication of said device, and wherein said watermark is determined, at least in part, by reference to said identifier.

18. The method of claim 17 wherein the system comprises an imaging system for capturing image data, and the method includes digitally watermarking the captured image data with said watermark payload that is determined by reference to said identifier.

19. A method employing a computer system with a semiconductor device, the method comprising the acts:

during a boot phase of the computer system operation that includes executing BIOS code to perform a Power On Self Test series of operations and thereafter initiating operating system software, determining an essentially unique identifier associated with said semiconductor device, said identifier being essentially unique because of random process variations inherent in fabrication of said device; and

making data related to said identifier available to a computer system process that follows said initiation of the operating system software.

20. The method of claim 19 wherein said semiconductor device comprises a memory in which at least certain of said BIOS code is stored.

21. The method of claim 19 that includes generating a session identifier by reference to said data, said session identifier being different each time the computer system is booted.

22. The method of claim 21 in which said session identifier is a function of data that changes with time.

23. The method of claim 21 that includes seeding a pseudo random number generator with said session identifier.

24. The method of claim 23 that includes using data produced by said pseudo random number generator in connection with a cryptographic operation.

25. A method employing a computer system with a semiconductor device, the method comprising the acts:

during a boot phase of the computer system operation that includes executing BIOS code to perform a Self Test Power On series of operations and thereafter initiating operating system software, determining an essentially unique identifier associated with said semiconductor device;

generating a session identifier by reference to data related to said identifier, said session identifier being different each time the computer system is booted; and

providing said session identifier to a software application or the operating system software.