METHOD AND APPARATUS FOR PREVENTION OF TAMPERING AND UNAUTHORIZED USE, AND UNAUTHORIZED EXTRACTION OF INFORMATION FROM SECURED DEVICES

• US 20150026485A1
• Filed: 07/10/2014
• Published: 01/22/2015
• Est. Priority Date: 07/22/2013
• Status: Active Grant

• Current Assignee: Enterprise Sciences, Inc.
• Original Assignee: Enterprise Sciences, Inc.
• Inventors: Mostovych, Andrew N.
• Granted Patent: US 9,323,958 B2
• Time in Patent Office: Days
• US Class Current: 713/194
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen

Abstract

The present invention considers an apparatus for prevention of tampering, unauthorized use, and unauthorized extraction of information from at least one secure system including at least one information device arranged to process information, at least one integrated encryption segment arranged to encrypt the information using at least one encryption process enabled by a set of encryption key information incorporated in at least one secure information storage of the at least one information device, at least one destruction driver arranged to initiate and support at least one controllable energy release in a proximity of the at least one secure information storage of the at least one information device incorporating the set of encryption key information, such that at least fraction of the set of encryption key information has been obliterated during the controllable energy discharge.

Claims

1. An apparatus for prevention of tampering, unauthorized use, and unauthorized extraction of information from at least one secure system, comprising:

at least one information device arranged to communicate, assemble, control, process, or store information;

at least one integrated encryption segment associated with at least one encryption device and arranged to encrypt the information using at least one encryption process enabled by at least one predetermined set of encryption key information incorporated in at least one secure information storage of the at least one information device;

at least one destruction driver arranged to initiate, and support at least one controllable energy release in a proximity of the at least one secure information storage of the at least one information device incorporating the at least one predetermined set of encryption key information, such that at least a fraction of the at least one predetermined set of encryption key information has been obliterated during the controllable energy release;

wherein, the obliterated fraction of the at least one predetermined set of encryption key information has been preselected to include a functional segment of encrypting key information necessary for decoding of the at least one information device communicated, assembled, controlled, processed, or stored information.

2. The apparatus of claim 1 comprising at least one system enclosure arranged to indicate at least one outer boundary, enclosing the at least one information device and at least one associated functional device arranged to generate at least one signal indicative of an attempt of tampering.

3. The apparatus of claim 1, comprising at least one destruction device associated to at least one destruction conduit and arranged to localize the at least one controllable energy release in the proximity of the at least one secure information storage of the at least one information device incorporating the at least one predetermined set of encryption key information, such that at least a fraction of the at least one predetermined set of encryption key information has been obliterated during the controllable energy release.

4. The apparatus of claim 1, wherein the at least one information device comprises at least one secure information region arranged to store at least a portion of the predetermined encryption key information and at least one information region arranged to store a portion of preselected verification information such that the at least one controllable energy release that obliterates at least the portion of at least one secure information region destroys at least the portion of the preselected verification information, so that a failure to retrieve the preselected verification information indicates the obliteration of the at least the portion of the predetermined encryption key information.

5. The apparatus of claim 4 comprising at least one additional information destruction device arranged to destroy the at least one portion of the preselected verification information substantially simultaneously with the at least one controllable energy release.

6. The apparatus of claim 1, wherein the at least one information device comprises at least one secure information region arranged to store in a substantially collocated manner at least a portion of the predetermined encryption key information and at least a portion of preselected verification information such that the at least one controllable energy release in the proximity of the at least one secure information region substantially simultaneously obliterates at least the portion of the predetermined encryption key information and the portion of the preselected verification information, so that a failure to retrieve the preselected verification information indicates the obliteration of the at least the portion of the predetermined encryption key information.

7. The apparatus of claim 1, wherein the at least one information device comprises at least one observation window arranged to provide an observable indication of the obliteration of the obliterated fraction of the at least one predetermined set of encryption key information.

8. The apparatus of claim 7, wherein the at least one observation window has been arranged to provide a visual indication of the obliteration of the obliterated fraction of the at least one predetermined set of encryption key information.

9. The apparatus of claim 1, wherein the at least one integrated encryption segment represents a dedicated encryption device arranged to store at least a portion of the predetermined encryption key information.

10. The apparatus of claim 1, wherein the at least one information device comprises at least one physical key generator arranged to dynamically generate at least ore variable portions of encryption key information.

11. The apparatus of claim 1, wherein the at least one secured system have been arranged to support at least one removable information device arranged for insertion and removal without needs for additional reconfiguration of the secure system.

12. The apparatus of claim 1, wherein the at least one integrated encryption segment incorporates at least one dedicated encryption device arranged to combine the at least one integrated encryption device and at least one collocated physical key generator.

13. The apparatus of claim 1 comprising at least one of information devices chosen from set of devices consisting of disc storage device, electronic memory device, magnetic memory device, RAM, DRAM, FPM DRAM, EDO DRAM, VRAM, SDRAM, RDRAM, SGRAM, PSRAM, SRAM, ROM, PROM, EPROM, EEPROM, NVRAM, MRAM, and combinations.

14. The apparatus of claim 1 comprising at least one functional device chosen from set of functional devices consisting of push-button positive electrical contact switches, multiple press push-button trigger sequence generators, keypad trigger generators, physical key switches, rotational encoder switch, touch pad switches, capacitive switches, fingerprint readers, palm readers, retinal readers, tamper sensors, pressure sensors, radiation sensors, thermal sensors, electromagnetic radiation sensors, acoustic sensors, vibration sensors, keyboards, keypads, switches, sensors, thermal sensors, pressure sensors, optical detectors, image detectors, radio receivers, encoders, rf transmitters, servo motors, electromechanical actuators, transducers, plasma generators, lasers, video displays, LED displays, LCD displays, indicator light devices, and combinations.

27. The apparatus of claim 1, comprising at least one destruction device associated to at least one destruction conduit and arranged to localize the at least one controllable energy release in the proximity of the at least one secure information storage and at least one chemically active portion such that at least one fraction of the set of encryption key information has been obliterated during the at least one controllable energy release, and at least another fraction of the set of encryption key information has been obliterated by chemical reaction between the at least one chemically active portion and the at least one secure information storage.

28. The apparatus of claim 27, wherein the at least one chemically active portion incorporates chemically active compounds chosen from set of chemically active compounds consisting of hydrofluoric acid, sodium hydroxide, potassium hydroxide, sodium oxide, potassium oxide, lead(II) oxide, zinc oxide, mixtures of potassium oxide and sodium hydroxide, and mixtures of the listed oxides.

15. An apparatus for prevention of tampering, unauthorized use, and unauthorized extraction of information from at least one distributed secure system, comprising at least one processing subsystem and at least one security module, wherein

the at least one processing subsystem includes at least one information device arranged to communicate, assemble, control, process, or store information;

and at least one destruction driver arranged to initiate, and support at least one controllable energy release; and

the at least one security module includes at least another information device arranged to encrypt the information using at least one encryption process enabled by a set of encryption key information, and at least one destruction device arranged to localize at last one controllable energy release in a proximity of the at least one set of encryption key information, such that at least a fraction of the set of encryption key information has been obliterated during the controllable energy release; and

herein, the obliterated fraction of the set of encryption key information has been preselected to include a functional segment of encrypting key information necessary for decoding of the at least one information device communicated, assembled, controlled, processed, or stored information.

16. An apparatus of claim 15, comprising at least one integrated connecting element arranged to functionally connect and disconnect at least one processing subsystem and at least one security module.

17. The apparatus of claim 15, wherein the at least one information device comprises at least one secure information region arranged to store at least a portion of the encryption key information and at least one information region arranged to store a portion of preselected verification information such that the at least one controllable energy release that obliterates at least the portion of at least one secure information region also destroys at least the portion of the preselected verification information, so that a failure to retrieve the preselected verification information indicates the obliteration of the at least the portion of the encryption key information.

18. The apparatus of claim 15 comprising at least one additional information destruction device arranged to destroy the at least one portion of the preselected verification information substantially simultaneously with the at least one controllable energy release in the proximity of the at least one set of encryption key information.

19. The apparatus of claim 15, comprising at least one dedicated encryption device arranged to store in at least one secure information region in a substantially collocated manner at least a portion of the encryption key information and at least a portion of preselected verification information such that the at least one controllable energy release in the proximity of the at least one secure information region substantially simultaneously obliterates at least the portion of the encryption key information and the portion of the preselected verification information, so that a failure to retrieve the preselected verification information indicates the obliteration of the at least the portion of the encryption key information.

20. The apparatus of claim 15, wherein the at least one information device comprises at least one transparent viewing window arranged to provide a visual indication of the obliteration of the obliterated fraction of the set of encryption key information.

21. The apparatus of claim 15, wherein the at least one security module includes at least one tamper sensor arranged to detect and to classify at least one attempt of unauthorized extraction of information from the at least one distributed secure system.

22. The apparatus of claim 15, wherein the at least one processing subsystem includes at least one destruction driver associated with the at least one destruction device incorporated in the at least one security module.

23. A subsystem for prevention of tampering, unauthorized use, and unauthorized extraction of information from at least one secure system, comprising at least one information device arranged to communicate assemble, control, process, or store information;

at least one integrated encryption segment associated with the at least one information device and arranged to encrypt the information using at least one encryption process enabled by a set of encryption key information incorporated in at least one secure information storage of the at least one information device;

at least one mechanical destruction driver arranged to initiate, and support at least one controllable energy release in a proximity of the at least one secure information storage of the at least one information device incorporating the set of encryption key information, such that at least a fraction of the set of encryption key information has been obliterated during the controllable energy discharge;

wherein, the at least one controllable energy release has been initiated, controlled, and driven by actions of at least one external participant.

24. The subsystem of claim 23, wherein the at least one mechanical destruction driver incorporate at least one adhesive portion arranged to adhere to the at least one secure information storage of the at least one information device and to actuate the controlled energy release substantially utilizing work of forces of adhesion between the at least one adhesive portion and the at least one secure information storage of the at least one information device.

25. The subsystem of claim 23, wherein the at least one mechanical destruction driver incorporate at least one resilient portion arranged for an impactual interaction with the at least one secure information storage of the at least one information device and to actuate the controlled energy release substantially utilizing work of forces of the impactual interaction upon the at least one secure information storage of the at least one information device.

26. The subsystem of claim 23, wherein the at least one mechanical destruction driver incorporate at least one chemically active portion arranged in a proximity of the at least one secure information storage of the at least one information device and to actuate a controllable distribution of the at least one chemically active portion and to support at least one chemical reaction between the at least one chemically active portion and the at least one secure information storage of the at least one information device such that at least a fraction of the set or encryption key information has been obliterated during the at least one chemical reaction.