Data processing systems and methods

• US 8,051,293 B2
• Filed: 05/05/2008
• Issued: 11/01/2011
• Est. Priority Date: 03/03/2005
• Status: Active Grant

• Current Assignee: Digimarc Corporation
• Original Assignee: Digimarc Corporation
• Inventors: Calhoon, Sean, Carr, J. Scott, Rodriguez, Tony F.
• Primary Examiner(s): Tran; Vincent
• Application Number:
  US12/115,341
• Publication Number:
  US 20090144534A1
• Time in Patent Office: 1,275 Days
• Field of Search: 713/2, 713/176, 463/29
• US Class Current: 713/176
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: H04L 2209/608 Watermarking
• CPC Class Codes: H04L 9/0662 with particular pseudorandom sequence generator
• CPC Class Codes: H04L 9/3278 using physically unclonable functions [PUF]

Abstract

Various improvements to data processing systems involve enhancements to BIOS functionality, use of identifiers associated with specific instances of hardware, and data hiding techniques—sometimes alone, sometimes in combination. Many of these improvements can be applied to increase the security of computer systems, and networks of which they form part.

Claims

1. A device comprising:

a processor configured to employ BIOS code, wherein the BIOS code is configured to perform a power-on self-test sequence of operations, collect hardware configuration information, and provide the hardware configuration information in connection with initiating an operating system; and

a non-volatile memory configured to store at least a portion of the BIOS code, wherein the BIOS code includes code to perform one or more functions of;

watermark decoding, watermark encoding and content fingerprinting, wherein the BIOS code is configured to allow the one or more functions to be invoked by a process that runs after an operating system has been initiated.

2. The device of claim 1, wherein the BIOS code is configured to decode digitally watermarked information from stored host data.

3. The device of claim 2, wherein the information decoded from the digital watermark allows the BIOS code to perform a cryptographic operation.

4. The device of claim 1, wherein the BIOS code is configured to decode the digitally watermarked information during an initial phase of system operation, prior to loading of the operating system.

5. The device of claim 4, wherein the stored host data comprises image data stored on a data storage disk.

6. The device of claim 4, wherein the processor is further configured to compare the decoded digitally watermarked information with reference information to determine whether there is correspondence in an expected manner.

7. The device of claim 4, wherein the processor is further configured to remove the digital watermark information from the host data and replace the digital watermark information with new digital watermark information.

8. The device of claim 4, wherein certain instructions or data employed during the initial phase of operation are hidden using steganographic techniques.

9. The device of claim 8, wherein certain data used to check the integrity or authenticity of a component is encoded as a digital watermark in other data.

10. A method comprising:

executing BIOS code to perform a power-on self-test series of operations in a system, wherein the system comprises a semiconductor device;

initiating operating system software;

determining an essentially unique identifier associated with the semiconductor device before initiation of the operating system software, and after an initial boot phase of operation, wherein data related to the identifier is made available to application software executing on the computer system, wherein the semiconductor device comprises a memory in which at least a portion of the BIOS code is stored; and

generating a session identifier by reference to the data, wherein the session identifier is different each time the computer system is booted.

11. The method of claim 10, wherein the session identifier is a function of data that changes with time.

12. The method of claim 10, further comprising seeding a pseudo random number generator with the session identifier.

13. The method of claim 12, further comprising using data produced by the pseudo random number generator in connection with a cryptographic operation.

14. A method comprising:

digitally watermarking an audio or visual content object with data; and

determining from a semiconductor device an identifier associated therewith, the identifier being essentially unique because of random process variations inherent in fabrication of the semiconductor device, and wherein the watermark is determined, at least in part, by reference to the identifier.

15. The method of claim 14, further comprising digitally watermarking the captured image data with the watermark payload that is determined by reference to the identifier.

16. A method employing a computer system with a semiconductor device, the method comprising:

executing BIOS code to perform a power-on self-test series of operations during a boot phase of computer system operation;

initiating operating system software;

determining an essentially unique identifier associated with the semiconductor device, the identifier being essentially unique because of random process variations inherent in fabrication of the semiconductor device; and

making data related to the identifier available to a computer system process that follows the initiation of the operating system software.

17. The method of claim 16, wherein the semiconductor device comprises a memory in which at least a portion of the BIOS code is stored.

18. The method of claim 16, further comprising generating a session identifier by reference to the data, the session identifier being different each time the computer system is booted.

19. The method of claim 18, wherein the session identifier is a function of data that changes with time.

20. The method of claim 18, further comprising seeding a pseudo random number generator with the session identifier.

21. The method of claim 20, further comprising using data produced by the pseudo random number generator in connection with a cryptographic operation.

22. A method employing a computer system with a semiconductor device, the method comprising:

executing BIOS code to perform a self-test power-on series of operations during a boot phase of computer system operation;

initiating operating system software;

determining an essentially unique identifier associated with the semiconductor device;

generating a session identifier by reference to data related to the identifier, the session identifier being different each time the computer system is booted; and

providing the session identifier to a software application or the operating system software.