Integrated circuit devices with steganographic authentication, and steganographic authentication methods

• US 6,954,855 B2
• Filed: 12/23/2004
• Issued: 10/11/2005
• Est. Priority Date: 11/05/1999
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Guthery, Scott B.
• Primary Examiner(s): Smithers, Matthew
• Assistant Examiner(s): Fields, Courtney
• Application Number:
  US11/021,744
• Publication Number:
  US 20050108522A1
• Time in Patent Office: 292 Days
• Field of Search: 713/172, 713/173, 713/155, 713/159, 713/169, 713/174, 705/41, 705/67
• US Class Current: 713/172
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06F 21/556 involving covert channels, i.e. data leakage between processes inhibiting the analysis of circuitry or operation with measures against power attack G06F21/755
• CPC Class Codes: G06F 21/77 in smart cards
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/12 Card verification
• CPC Class Codes: G07F 7/122 Online card verification
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

Various embodiments pertain to an integrated circuit (IC) device, such as smart cards, electronic wallets, PC cards, and the like, and various methods for steganographically authenticating identities and authorizing transactions based on the authenticated identities.

Claims

1. A smart card authentication system comprising:

means for selecting a set of defined commands each of which has an inherent function that is not associated with authentication;

means for transmitting the selected set of defined commands between a smart card and a receiving/sending unit;

means for receiving the transmitted commands; and

means for authenticating at least one of the smart card and the receiving/sending unit using the transmitted set of defined commands.

2. The smart card authentication system of claim 1, wherein the means for authenticating comprises means for determining an order of the set of defined commands, and means for authenticating based upon said order.

3. The smart card authentication system of claim 1, wherein the means for authenticating comprises means for determining which commands are used to define the set of commands, and means for authenticating based upon which commands are used.

4. The smart card authentication system of claim 1, wherein the means for authenticating comprises:

means for determining which commands are used to define the set of commands; and

means for determining an order of the set of defined commands that are used, and means for authenticating based upon which commands are used and their order.

5. The smart card authentication system of claim 1, wherein the functions are associated with data handling.

6. The smart card authentication system of claim 1, wherein said means for transmitting further comprises means for transmitting at least one false cryptographic command designed to emulate an actual cryptographic operation.

7. An authentication system comprising:

means for transmitting a plurality of data processing commands between a first identity that is to be authenticated and a second identity that is to authenticate the first identity, the data processing commands having an apparent data processing function and a hidden function, the apparent data processing function not being associated with authenticating the first identity, the hidden function being associated with authenticating the first identity;

means for receiving the data processing commands; and

means for evaluating the hidden functions of the commands to ascertain whether the first identity can be authenticated.

8. The authentication system of claim 7, wherein the hidden function defines a sequence of commands that are associated with the first identity.

9. The authentication system of claim 7, wherein the hidden function defines command types that are associated with the first identity.

10. The authentication system of claim 7, wherein the hidden function defines command types that are associated with the first identity and used in connection with a particular data object.

11. The authentication system of claim 7, wherein the hidden function is selected to operate upon data in a manner that is known only to the first and second identities.

12. The authentication system of claim 11, wherein operation of the hidden function is associated with particular data selected by the apparent data processing function that is associated with a hidden function.

13. The authentication system of claim 7, wherein one of the first and second identities comprises a smart card.

14. An authentication system comprising:

means for establishing communication between a pair of authenticatable identities, one of which is to be authenticated by the other;

means for allocating a portion of the communication to steganographic communication; and

means for authenticating the one identity using the steganographic portion of the communication.

15. The authentication system of claim 14 further comprising means for defining the steganographic portion of the communication using one or more data processing commands.

16. The authentication system of claim 14 further comprising means for defining the steganographic portion of the communication using a plurality of data processing commands.

17. The authentication system of claim 16, wherein said means for defining comprises means for arranging the data processing commands into a predefined structure, and wherein said means for authenticating comprises means for recognizing the predefined structure.

18. The authentication system of claim 17, wherein the predefined structure comprises a data processing command order.

19. The authentication system of claim 17, wherein the predefined structure comprises a predefined number of data processing commands.

20. The authentication system of claim 17, wherein the predefined structure comprises data processing command types.