Labelling of secret information

• US 7,523,111 B2
• Filed: 12/02/2003
• Issued: 04/21/2009
• Est. Priority Date: 12/02/2002
• Status: Expired due to Fees

• Current Assignee: Memjet Technology Ltd. (Memjet Limited)
• Original Assignee: Silverbrook Research Pty Limited
• Inventors: Walmsley, Simon Robert
• Primary Examiner(s): LEWIS, CHERYL RENEA
• Application Number:
  US10/727,161
• Publication Number:
  US 20050152596A1
• Time in Patent Office: 1,967 Days
• Field of Search: 707 1- 5, 707/9, 707182-184, 707/190, 707/191
• US Class Current: 1/1
• CPC Class Codes: B41J 2/04505 aiming at correcting alignment
• CPC Class Codes: B41J 2/04508 aiming at correcting other parameters
• CPC Class Codes: B41J 2/0451 for detecting failure, e.g. clogging, malfunctioning actuator
• CPC Class Codes: B41J 2/04528 aiming at warming up the head
• CPC Class Codes: B41J 2/04541 Specific driving circuit
• CPC Class Codes: B41J 2/04543 Block driving
• CPC Class Codes: B41J 2/04563 detecting head temperature; Ink temperature
• CPC Class Codes: B41J 2/04573 Timing; Delays
• CPC Class Codes: B41J 2/04586 controlling heads of a type not covered by groups B41J2/04575 - B41J2/04585, or of an undefined type
• CPC Class Codes: B41J 2202/20 Modules
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: H03K 5/1252 Suppression or limitation of noise or interference specially adapted for transmission systems H04B15/00, H04L25/08
• CPC Class Codes: H04N 1/405 Halftoning, i.e. converting the picture signal of a continuous-tone original into a corresponding signal showing only two levels
• CPC Class Codes: Y10S 707/99933 : Query processing, i.e. searching
• CPC Class Codes: Y10S 707/99939 : Privileged access
• CPC Class Codes: Y10T 29/49401 : Fluid pattern dispersing device making, e.g., ink jet

Abstract

A method of enabling selection of one or more pieces of secret information stored in a first entity, the first entity also storing at last one value indicative of at least one attribute for each of the one or more pieces of secret information, the method comprising the steps of: (a) receiving at the first entity a request from a second entity for one or more of the values for one or more of the pieces of secret information stored in the first entity; and (b) in response to the request, outputting the values to the second entity.

Claims

1. A method of enabling selection of one or more pieces of secret information stored in a first entity without revealing the one or more pieces of secret information, the one or more pieces of secret information being one or more secret keys for use with a corresponding encryption or decryption function, the first entity also storing an identity of each of the one or more secret keys which are each indicative of an access permission to the first entity associated with each of the one or more pieces of secret information, the method comprising the steps of:

(a) a second entity selecting one or more pieces of secret information by requesting, from the first entity, one or more of the access permissions and the associated one or more of the key identities for the selected one or more of the pieces of secret information stored in the first entity together with said encryption or decryption function; and

(b) in response to the selection request, the first entity outputting the access permissions and key identities to the second entity for use with said encryption or decryption function stored in the second entity without outputting the one or more pieces of secret information.

2. A method according to claim 1 wherein each of the pieces of secret information has an associated index and the request in step (a) includes one or more of the indexes to identify those pieces of secret information for which the values are requested.

3. A method according to claim 1 wherein the request in step (a) is a request for the values all of the pieces of secret information and the response in step (b) orders the values such that the second entity can determine which values are associated with which piece of secret information, and can use the order to generate an index for the secret information.

4. A method according to claim 2 or claim 3, further including the steps, in the first entity and following step (b), of:

(c) receiving a request from the second entity identifying a function and identifying the index of a piece of secret information to be used in performing the function; and

(d) performing the function using the identified piece of secret information.

5. A method according to claim 1, further including the steps, in the first entity and following step (b), of:

(c) receiving a request from the second entity identifying a function and a piece of secret information to be used in performing the function; and

(d) performing the function using at least the identified piece of secret information, the identified piece of secret information being identified in the request of step (c) on the basis of at least one of the values output in step (b).

6. A method according to claim 1, wherein the secret information is stored in one or more physical locations of the first entity, and wherein the values are not indicative of those physical locations.

7. A method according to claim 1, wherein the first entity is implemented in a first integrated circuit and the second entity is implemented in a second integrated circuit.

8. A method according to claim 7, wherein the first integrated circuit includes a memory for storing the pieces of secret information and the values.

9. A method according to claim 8, including a plurality of the first integrated circuits, wherein the physical location of a piece of the secret information having particular attributes is mutually different for at least some of the first integrated circuits.

10. A method according to claim 1, wherein the integrated circuit is programmed and configured to apply at least one of the encryption or decryption functions to data using the corresponding key as an operand.