Integrated circuit devices with steganographic authentication and steganographic authentication methods

• US 7,055,033 B2
• Filed: 05/21/2004
• Issued: 05/30/2006
• Est. Priority Date: 11/05/1999
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Guthery, Scott B.
• Primary Examiner(s): Smithers, Matthew
• Assistant Examiner(s): Fields, Courtney
• Application Number:
  US10/850,839
• Publication Number:
  US 20040255131A1
• Time in Patent Office: 739 Days
• Field of Search: 713/172, 713/173, 713/174, 713/155, 713/159, 713/169, 713/171, 713/193, 705/41, 705/67
• US Class Current: 713/172
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: G06F 21/556 involving covert channels, i.e. data leakage between processes inhibiting the analysis of circuitry or operation with measures against power attack G06F21/755
• CPC Class Codes: G06F 21/77 in smart cards
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06Q 20/105 involving programming of a portable memory device, e.g. IC cards, "electronic purses"
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/12 Card verification
• CPC Class Codes: G07F 7/122 Online card verification
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

Various embodiments pertain to an integrated circuit (IC) device, such as smart cards, electronic wallets, PC cards, and the like, and various methods for steganographically authenticating identities and authorizing transactions based on the authenticated identities.

Claims

1. An integrated circuit device comprising:

a processor;

one or more computer-readable media;

computer-readable instructions resident on the one or more computer-readable media which, when executed by the processor, implement a method comprising;

selecting a set of defined commands each of which has an inherent function that is not associated with authentication;

transmitting the selected set of defined commands between the integrated circuit device and a receiving/sending unit effective to enable the receiving/sending unit to authenticate the integrated circuit device using the transmitted set of defined commands.

2. The integrated circuit device of claim 1, wherein authentication can take place based on an order of the set of defined commands, and authenticating based upon said order.

3. The integrated circuit device of claim 1, wherein authentication can take place based on which commands are used to define the set of commands.

4. The integrated circuit device of claim 1, wherein said authentication can take place based on:

which commands are used to define the set of commands; and

an order of the set of defined commands that are used.

5. The integrated circuit device of claim 1, wherein the functions are associated with data handling.

6. The integrated circuit device of claim 1, wherein said transmitting further comprises transmitting at least one false cryptograpbic command designed to emulate an actual cryptographic operation.

7. An integrated circuit device comprising:

a processor;

one or more computer-readable media;

computer-readable instructions resident on the one or more computer-readable media which, when executed by the processor, implement a method comprising;

transmitting a plurality of data processing commands between a first identity that is to be authenticated and a second identity that is to authenticate the first identity, the data processing commands having an apparent data processing function and a hidden function, the apparent data processing function not being associated with authenticating the first identity, the hidden function being associated with authenticating the first identity.

8. The integrated circuit device of claim 7, wherein the hidden function defines a sequence of commands that are associated with the first identity.

9. The integrated circuit device of claim 7, wherein the hidden function defines command types tat are associated with the first identity.

10. The integrated circuit device of claim 7, wherein the hidden function defines command types that are associated wit the first identity and used in connection with a particular data object.

11. The integrated circuit device of claim 7, wherein the hidden function is selected to operate upon data in a manner that is known only to the first and second identities.

12. The integrated circuit device of claim 11, wherein operation of the hidden function is associated with particular data selected by the apparent data processing function that is associated with a hidden function.

13. The integrated circuit device of claim 7, wherein one of the first and second identities comprises a smart card.

14. An integrated circuit device comprising

a processor;

one or more computer-readable media;

computer-readable instructions resident on the one or more computer-readable media which, when executed by the processor, implement a method comprising;

establishing communication between a pair of authenticatable identities,

one of which is to be authenticated by the other;

allocating a portion of the communication to steganographic communication; and

authenticating the one identity using the steganographic portion of the communication.

15. The integrated circuit device of claim 14 wherein said method further comprises defining the steganographic portion of the communication using one or more data processing commands.

16. The integrated circuit device of claim 14 wherein said method further comprises defining the steganographic portion of the communication using a plurality of data processing commands.

17. The integrated circuit device of claim 16, wherein said defining comprises arranging the data processing commands into a predefined structure, and wherein said authenticating comprises recognizing the predefined structure.

18. The integrated circuit device of claim 17, wherein the predefined structure comprises a data processing command order.

19. The integrated circuit device of claim 17, wherein the predefined structure comprises a predefined number of data processing commands.

20. The integrated circuit device of claim 17, wherein the predefined structure comprises data processing command types.

21. The integrated circuit device of claim 14, wherein one of the identities comprises the integrated circuit device.

22. An integrated circuit device comprising:

a processor;

one or more computer-readable media;

computer-readable instructions resident on the one or more computer-readable media which, when executed by the processor, implement a method comprising;

defining a plurality of unencrypted authentication structures, each authentication structure containing at least one command;

associating each authentication structure with an identity that is to be authenticated;

establishing an unencrypted dialog between a pair of identities;

incorporating an authentication structure into the unencrypted dialog, the authentication structure being capable of being evaluated for authenticating an identity if the authentication structure corresponds to the identity seeking to be authenticated.

23. The integrated circuit device of claim 22, wherein the unencrypted authentication structures compose one or more data processing commands.

24. The integrated circuit device of claim 22, wherein the defining of the authentication structures comprise arranging a plurality of data-processing commands into defined arrangements for each authentication structure.

25. The integrated circuit device of claim 24, wherein some of the defined arrangements have different collections of data-processing commands.

26. The integrated circuit device of claim 24, wherein the defined arrangements have different sequences of data-processing commands.

27. The integrated circuit device of claim 24, wherein some of the defined arrangements different collections of data-processing commands, and all of the defined arrangements have different sequences of data-processing commands.

28. The integrated circuit device of claim 22, wherein said method further comprises incorporating a false cryptographic operation into the unencrypted dialog, the false cryptographic operation being designed to emulate a real cryptographic operation.

29. The integrated circuit device of claim 22, wherein the authenticating is performed by the integrated circuit device.

30. An integrated circuit device comprising:

a processor;

one or more computer-readable media; and

an authentication table stored in the one or more computer-readable media to hold a plurality of identities and to correlate data-processing commands with each identity, the data-processing commands for each identity having a unique identity-specific organization which, when recognized, can be used to authenticate an associated identity.

31. The integrated circuit device of claim 30, wherein each identity-specific organization is embodied as a specific order of data-processing commands.

32. The integrated circuit device of claim 30, wherein each identity-specific organization is embodied as a specific collection of data-processing commands.

33. The integrated circuit device of claim 30 embodied as a smart card.

34. An integrated circuit device comprising:

one or more computer-readable media; and

steganographic authentication means stored in the one or more computer-readable media and configured for steganographically authenticating one or more authenticatable identities.

35. The integrated circuit device of claim 34, wherein the steganographic authentication means comprises a collection of data processing commands.

36. The integrated circuit device of claim 34, wherein the steganographic authentication means comprises a collection of data processing commands arranged into a predefined order.