Method and apparatus for secure measurement certification

• US 6,282,648 B1
• Filed: 11/06/2000
• Issued: 08/28/2001
• Est. Priority Date: 04/08/1996
• Status: Expired due to Term

• Current Assignee: Certified Measurements LLC (Walker Innovation Inc. (f/k/a Patent Properties, Inc.))
• Original Assignee: Walker Digital LLC (Walker Innovation Inc. (f/k/a Patent Properties, Inc.))
• Inventors: Schneier, Bruce, Walker, Jay S., Jorasch, James A.
• Primary Examiner(s): Peeso, Thomas R.
• Application Number:
  US09/706,646
• Time in Patent Office: 295 Days
• Field of Search: 713/156, 713/157, 713/158, 713/161, 713/166, 713/168, 713/169, 713/175, 713/176, 713/178
• US Class Current: 713/156
• CPC Class Codes: G06Q 50/06 Energy or water supply
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees
• CPC Class Codes: Y02P 90/845 Inventory and reporting systems for greenhouse gases [GHG]

Abstract

The invention relates to methods and apparatuses for acquiring a physical measurement, and for creating a cryptographic certification of that measurement, such that its value and time can be verified by a party that was not necessarily present at the measurement.

The certified measurement may also include corroborative information for associating the actual physical measurement process with the certified measurement. Such corroborative information may reflect the internal or external state of the measurement certification device, as well as witness identifiers of any persons that may have been present at the measurement acquisition and certification.

The certification may include a signal receiver to receive timing signals from a satellite or other external source. The external timing signals may be used to generate the time included in the certified measurement, or could be used to determine the location of the measurement certification device for inclusion in the certified measurement.

Claims

1. A device for secure measurement acquisition and certification, comprising:

(a) a sensor;

(b) a time generator;

(c) a computing device, including a computer processor and a memory, coupled to receive (i) a digital signal representative of a physical measurement from the sensor and (ii) a time from the time generator;

said computing device configured for forming an augmented measurement including the digital signal and the time, and for performing a cryptographic operation on at least a portion of the augmented measurement to form a certified measurement; and

(d) an output device, coupled to the computing device, for writing the certified measurement in response to a certified measurement request;

wherein the sensor, the time generator, and the computing device are configured to be resistant to tampering.

2. The device of claim 1 wherein the time generator is a signal receiver configured for receiving an external timing signal.

3. The device of claim 2 wherein the external timing signal is a satellite-based signal.

4. The device of claim 2 wherein the external timing signal is a ground-based signal.

5. The device of claim 2 wherein the signal receiver is configured for receiving an encrypted signal.

6. The device of claim 2 further comprising a clock.

7. The device of claim 1 wherein the time generator includes a clock.

8. The device of claim 1 configured to generate the certified measurement request according to a predetermined schedule.

9. The device of claim 1 wherein the cryptographic operation includes a one-way function.

10. The device of claim 9 wherein the one-way function is associated with a cryptographic key.

11. The device of claim 9 wherein the one-way function includes a representation of the time.

12. The device of claim 9 wherein the one-way function includes a representation of a non-time datum.

13. The device of claim 9 wherein the one-way function includes a representation of an earlier certified measurement.

14. The device of claim 1 wherein the cryptographic operation includes encryption with an encryption key.

15. The device of claim 14 wherein the encryption incorporates a representation of an earlier certified measurement.

16. The device of claim 14 wherein the encryption key belongs to an asymmetric cryptographic protocol.

17. The device of claim 14 where the encryption key belongs to a symmetric cryptographic protocol.

18. The device of claim 1 where the memory is configured for storing a device identification to be included in the certified measurement.

19. The device of claim 1 further comprising an input device for receiving the certified measurement request.

20. The device of claim 19 wherein the input device includes a signal receiver.

21. The device of claim 19 wherein the certified measurement request includes a password.

22. The device of claim 19 wherein the certified measurement request includes a quantity encrypted with an encryption key.

23. The device of claim 22 wherein the encryption key belongs to an asymmetric cryptographic protocol.

24. The device of claim 22 wherein the encryption key belongs to a symmetric cryptographic protocol.

25. The device of claim 19 wherein the certified measurement request includes a datum for use with a challenge-response protocol.

26. The device of claim 1 further comprising a number generator.

27. The device of claim 1 wherein the output device is a printer.

28. The device of claim 27 wherein the printer is configured for producing a dot-based output.

29. The device of claim 28 wherein the printer is a facsimile machine.

30. The device of claim 27 wherein the printer is configured for producing character-based output.

31. The device of claim 27 wherein the printer is configured for printing a certified measurement with an uncopyable ink.

32. The device of claim 27 wherein the printer is configured for printing the certified measurement as an uncopyable pattern.

33. The device of claim 1 wherein the output device is configured for use with a magnetic medium.

34. The device of claim 1 wherein the output device is configured for use with an optical medium.

35. The device of claim 1 wherein the output device is configured for use with a semiconductor medium.

36. The device of claim 1 wherein the output device includes a display.

37. The device of claim 1 further comprising a transmitter.

38. The device of claim 1 wherein the digital signal is representative of a location.

39. The device of claim 38 wherein the digital signal acts as the certified measurement request.

40. The device of claim 38 wherein the digital signal includes an encrypted quantity.

41. The device of claim 1 further comprising a signal generator for providing a corroborative datum, indicative of an operational condition of the device, to be included in the certified measurement.

42. The device of claim 41 wherein the signal generator is a sensor responsive to an external state of the device.

43. The device of claim 41 wherein the signal generator is a biometric reader.

44. The device of claim 41 wherein the signal generator is a sensor responsive to an internal state of the device.

45. The device of claim 41 wherein the signal generator is an input station configured for receiving a witness identifier.

46. The device of claim 41 wherein the signal generator is configured for receiving the corroborative datum from a second measurement device.

47. A device for secure measurement acquisition and certification, comprising:

(a) a sensor;

(b) a signal receiver;

(c) a computing device, including a computer processor and a memory, coupled to receive (i) a digital signal representative of a physical parameter from the sensor and (ii) an external timing signal from the signal receiver;

said computing device configured for forming an augmented measurement including the digital signal and a representation of the external timing signal, and for performing a cryptographic operation on at least a portion of the augmented measurement to form a certified measurement;

wherein the sensor, the signal receiver, and the computing device are configured to be resistant to tampering.

48. The device of claim 47 wherein the external timing signal is a satellite-based signal.

49. The device of claim 47 wherein the external timing signal is a ground-based signal.

50. The device of claim 47 wherein the signal receiver is configured for receiving an encrypted signal.

51. The device of claim 47 further comprising a clock.

52. The device of claim 47 wherein the external timing signal is representative of time.

53. The device of claim 47 configured to generate the certified measurement request according to a predetermined schedule.

54. The device of claim 47 wherein the cryptographic operation includes a one-way function.

55. The device of claim 54 wherein the one-way function is associated with a cryptographic key.

56. The device of claim 54 wherein the one-way function includes a representation of time derived from the external timing signal.

57. The device of claim 54 wherein the one-way function includes a representation of a non-time datum.

58. The device of claim 55 wherein the one-way function includes a representation of an earlier certified measurement.

59. The device of claim 47 wherein the cryptographic operation includes encryption with an encryption key.

60. The device of claim 59 wherein the encryption incorporates a representation of an earlier certified measurement.

61. The device of claim 59 wherein the encryption key bclongs to an asymmetric cryptographic protocol.

62. The device of claim 59 where the encryption key belongs to a symmetric cryptographic protocol.

63. The device of claim 47 where the memory is configured for storing a device identification to be included in the certified measurement.

64. The device of claim 47 further comprising an input device for receiving the certified measurement request.

65. The device of claim 64 wherein the input device includes a signal receiver.

66. The device of claim 64 wherein the certified measurement request includes a password.

67. The device of claim 64 wherein the certified measurement request includes a quantity encrypted with an encryption key.

68. The device of claim 67 wherein the encryption key belongs to an asymmetric cryptographic protocol.

69. The device of claim 67 wherein the encryption key belongs to a symmetric cryptographic protocol.

70. The device of claim 64 wherein the certified measurement request includes a datum for use with a challenge-response protocol.

71. The device of claim 47 further comprising a number generator.

72. The device of claim 47 further comprising an output device for writing the certified measurement.

73. The device of claim 72 wherein the output device is a printer.

74. The device of claim 73 wherein the printer is configured for producing a dot-based output.

75. The device of claim 74 wherein the printer is a facsimile machine.

76. The device of claim 73 wherein the printer is configured for producing character-based output.

77. The device of claim 73 wherein the printer is configured for printing a certified measurement with an uncopyable ink.

78. The device of claim 73 wherein the printer is configured for printing the certified measurement as an uncopyable pattern.

79. The device of claim 72 wherein the output device is configured for use with a magnetic medium.

80. The device of claim 72 wherein the output device is configured for use with an optical medium.

81. The device of claim 72 wherein the output device is configured for use with a semiconductor medium.

82. The device of claim 72 wherein the output device includes a display.

83. The device of claim 47 further comprising a transmitter.

84. The device of claim 47 wherein the external timing signal is representative of a location.

85. The device of claim 84 wherein the external timing signal acts as the certified measurement request.

86. The device of claim 84 wherein the external timing signal includes an encrypted quantity.

87. The device of claim 47 further comprising a signal generator for providing a corroborative datum, indicative of an operational condition of the device, to be included in the certified measurement.

88. The device of claim 87 wherein the signal generator is a sensor responsive to an external state of the device.

89. The device of claim 87 wherein the signal generator is a biometric reader.

90. The device of claim 87 wherein the signal generator is a sensor responsive to an internal state of the device.

91. The device of claim 87 wherein the signal generator is an input station configured for receiving a witness identifier.

92. The device of claim 87 wherein the signal generator is a receiver for receiving the corroborative datum from a second measurement device.

93. A device for secure measurement acquisition and certification, comprising:

(a) a sensor;

(b) a time generator;

(c) a signal generator;

(d) a computing device, including a computer processor and a memory, coupled to receive (i) a digital signal representative of a physical parameter from the sensor, (ii) a time from the time generator, and (iii) a corroborative datum indicative of an operating condition of the device from the signal generator, said computing device configured for forming an augmented measurement including the digital signal, the time, and the corroborative datum, and for performing a cryptographic operation on at least a portion of the augmented measurement to form a certified measurement;

wherein the sensor, the time generator, the signal generator, and the computing device are configured to be resistant to tampering.

94. The device of claim 93 wherein the time generator is a signal receiver configured for receiving an external timing signal.

95. The device of claim 94 wherein the external timing signal is a satellite-based signal.

96. The device of claim 94 wherein the external timing signal is a ground-based signal.

97. The device of claim 94 wherein the signal receiver is configured for receiving an encrypted signal.

98. The device of claim 94 further comprising a clock.

99. The device of claim 93 wherein the time generator includes a clock.

100. The device of claim 93 configured to generate the certified measurement request according to a predetermined schedule.

101. The device of claim 93 wherein the cryptographic operation includes a one-way function.

102. The device of claim 101 wherein the one-way function is associated with a cryptographic key.

103. The device of claim 101 wherein the one-way function includes a representation of the time.

104. The device of claim 101 wherein the one-way function includes a representation of a non-time datum.

105. The device of claim 101 wherein the one-way function includes a representation of an earlier certified measurement.

106. The device of claim 93 wherein the cryptographic operation includes encryption with an encryption key.

107. The device of claim 106 wherein the encryption incorporates a representation of an earlier certified measurement.

108. The device of claim 106 wherein the encryption key belongs to an asymmetric cryptographic protocol.

109. The device of claim 106 where the encryption key belongs to a symmetric cryptographic protocol.

110. The device of claim 93 where the memory is configured for storing a device identification to be included in the certified measurement.

111. The device of claim 93 further comprising an input device for receiving the certified measurement request.

112. The device of claim 111 wherein the input device includes a signal receiver.

113. The device of claim 111 wherein the certified measurement request includes a password.

114. The device of claim 111 wherein the certified measurement request includes a quantity encrypted with an encryption key.

115. The device of claim 114 wherein the encryption key belongs to an asymmetric cryptographic protocol.

116. The device of claim 114 wherein the encryption key belongs to a symmetric cryptographic protocol.

117. The device of claim 111 wherein the certified measurement request includes a datum for use with a challenge-response protocol.

118. The device of claim 93 further comprising a number generator.

119. The device of claim 93 further comprising an output device for writing the certified measurement.

120. The device of claim 119 wherein the output device is a printer.

121. The device of claim 120 wherein the printer is configured for producing a dot-based output.

122. The device of claim 121 wherein the printer is a facsimile machine.

123. The device of claim 120 wherein the printer is configured for producing character-based output.

124. The device of claim 120 wherein the printer is configured for printing the certified measurement with an uncopyable ink.

125. The device of claim 120 wherein the printer is configured for printing the certified measurement as an uncopyable pattern.

126. The device of claim 119 wherein the output device is configured for use with a magnetic medium.

127. The device of claim 119 wherein the output device is configured for use with an optical medium.

128. The device of claim 119 wherein the output device is configured for use with a semiconductor medium.

129. The device of claim 119 wherein the output device includes a display.

130. The device of claim 93 further comprising a transmitter.

131. The device of claim 93 wherein the time generator is configured for generating a location signal, in addition to the time.

132. The device of claim 131 configured for including a representation of the location signal in the certified measurement.

133. The device of claim 131 wherein the location signal acts as the certified measurement request.

134. The device of claim 131 wherein the location signal includes an encrypted quantity.

135. The device of claim 93 further comprising a signal generator for providing a corroborative datum, indicative of an operational condition of the device, to be included in the certified measurement.

136. The device of claim 135 wherein the signal generator is a sensor responsive to an external state of the device.

137. The device of claim 135 wherein the signal generator is a biometric reader.

138. The device of claim 135 wherein the signal generator is a sensor responsive to an internal state of the device.

139. The device of claim 135 wherein the signal generator is an input station configured for receiving a witness identifier.

140. The device of claim 135 wherein the signal generator is a receiver for receiving the corroborative datum from a second measurement device.

141. A method for measuring and certifying a physical parameter, comprising the steps of:

(a) measuring a physical parameter to provide a digital signal representative thereof;

(b) providing a time;

(c) forming an augmented measurement including the digital signal and the time;

(d) performing a cryptographic operation on at least a portion of the augmented measurement to form a certified measurement; and

(e) outputting the certified measurement to a local output device;

wherein the steps of measuring the physical parameter, providing the time, forming the augmented measurement, and performing the cryptographic operation are performed in a tamper-resistant manner.

142. A method for measuring and certifying a physical parameter, comprising the steps of:

(a) measuring a physical parameter to provide a digital signal representative thereof;

(b) providing an external timing signal;

(c) forming an augmented measurement including the digital signal and a representation of the external timing signal;

(d) performing a cryptographic operation on at least a portion of the augmented measurement to form a certified measurement; and

(e) outputting the certified measurement;

wherein the steps of measuring the physical parameter, receiving the external timing signal, forming the augmented measurement, and performing the cryptographic operation are performed in a tamper-resistant manner.

143. A method for measuring and certifying a physical parameter, comprising the steps of:

(a) measuring a physical parameter to provide a digital signal representative thereof;

(b) providing a time;

(c) providing a corroborative datum indicative of an operating condition of the device;

(d) forming an augmented measurement including the digital signal, the time, and the corroborative datum;

(e) performing a cryptographic operation on at least a portion of the augmented measurement to form a certified measurement; and

(f) outputting the certified measurement;

wherein the steps of measuring the physical parameter, providing the time, providing the corroborative datum, forming the augmented measurement, and performing the cryptographic operation are performed in a tamper-resistant manner.