Enhancing Security of Sensor Data for a System Via an Embedded Controller

• US 20130246800A1
• Filed: 03/15/2013
• Published: 09/19/2013
• Est. Priority Date: 03/19/2012
• Status: Abandoned Application

• Current Assignee: Microchip Technology Incorporated
• Original Assignee: Microchip Technology Incorporated
• Inventors: Stewart, Guy A.
• Application Number:
  US13/843,530
• Publication Number:
  US 20130246800A1
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

System and method for securing sensor data in a computer system that includes a host processor and memory that stores an operating system, and an embedded controller coupled to the host processor. The embedded processor receives sensor data for a user from at least one sensor, and encrypts and/or digitally signs the sensor data, thereby generating protected sensor data, or performs pattern recognition on the sensor data, thereby generating user identification data. The embedded processor then sends the protected sensor data or the user identification data to the operating system or another process coupled to the computer system. The protected sensor data or the user identification data are used for secure transmission of the sensor data.

Claims

1. A system, comprising:

a host processor and memory, wherein the memory stores an operating system;

an embedded controller coupled to the host processor, wherein the embedded controller comprises a memory medium;

a sensor unit coupled with the embedded controller to feed sensor data for a user from at least one sensor;

wherein the memory medium stores program instructions executable to;

receive the sensor data from the sensor unit;

encrypt and/or digitally sign the sensor data, thereby generating protected sensor data; and

send the protected sensor data to the operating system or another process coupled to the computer system;

wherein the protected sensor data are useable for secure login by the user.

2. The system of claim 1, wherein the at least one sensor comprises one or more of:

a still camera;

a video camera;

a fingerprint sensor;

a retinal scanner;

a voiceprint sensor;

or

a DNA scanner.

3. The system of claim 1, wherein the sensor data comprises a data stream.

4. The system of claim 1, further comprising:

at least one output device directly coupled to the embedded controller, wherein the at least one output device is configured to provide output based on the sensor data;

wherein the program instructions are further executable to;

receive output directly from the at least one output device; and

verify origin of authentication challenges or transaction details from the operating system or the other process coupled to the computer system.

5. The system of claim 1, wherein the at least one sensor comprises a biometric sensor.

6. The system of claim 1, wherein the host processor is a central processing unit of a stationary personal computer, a mobile personal computer.

7. The system of claim 1, wherein the sensor unit is coupled with the embedded controller via a serial interface.

8. The system of claim 1, further comprising a template memory providing secure storage for information or data.

9. The system of claim 8, wherein the template memory stores sensor data for one or more authorized users of the system.

10. The system of claim 9, wherein the sensor data comprise at least one of facial image, voice print, or fingerprint data.

11. The system of claim 8, wherein the template memory stores identification information for authorized users, and wherein the embedded controller is configured to compare the stored identification information to identify information provided by a smart card, or other personal identification medium.

12. A system, comprising:

a host processor and memory, wherein the memory stores an operating system;

an embedded controller coupled to the host processor, wherein the embedded controller comprises a memory medium;

a sensor unit coupled with the embedded controller to feed sensor data for a user from at least one sensor;

wherein the memory medium stores program instructions executable to;

receive the sensor data from the sensor unit;

perform one or more of;

encrypt and/or digitally sign the sensor data, thereby generating protected sensor data;

or

perform pattern recognition on the sensor data, thereby generating digitally signed user identification data; and

send the protected sensor data or the digitally signed user identification data to the operating system or another process coupled to the computer system;

wherein the protected sensor data or the digitally signed user identification data are useable for secure login by the user.

13. A method for secure login using a computer system that includes a host processor and memory, and an embedded controller coupled to the host processor, the method comprising:

receiving, by the embedded processor, sensor data for a user from at least one sensor;

encrypting and/or digitally signing the sensor data, thereby generating protected sensor data, or performing pattern recognition on the sensor data, thereby generating digitally signed user identification data; and

sending the protected sensor data or the digitally signed user identification data to the operating system or another process coupled to the computer system;

wherein the protected sensor data or the digitally signed user identification data are useable for secure login by the user.

14. The method of claim 13, wherein the protected sensor data are routed to the another process for one of:

secure and private biometric pattern recognition, enterprise login, or financial transaction authorization.

15. The method of claim 13, wherein the sensor data comprises a data stream.

16. The method of claim 13, further comprising:

providing output by at least one output device directly coupled to the embedded controller based on the sensor data;

wherein embedded processor receives the output directly from the at least one output device; and

verifies an origin of authentication challenges or transaction details from the operating system or the another process.

17. The method of claim 13, the sensor data are received via a serial interface.

18. The method of claim 13, further comprising storing sensor data for one or more authorized users of the system in a template memory coupled with the embedded controller.

19. The method of claim 17, wherein the sensor data comprise at least one of facial image, voice print, or fingerprint data.

20. The method of claim 13, further comprising storing identification information for authorized users in a template memory coupled with the embedded controller, and comparing the stored identification information by the embedded controller to identify information provided by a smart card, or other personal identification medium.