Method and apparatus for secure information distribution

• US 9,015,075 B2
• Filed: 09/29/2006
• Issued: 04/21/2015
• Est. Priority Date: 09/29/2006
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Oracle America, Inc. (Oracle Corporation)
• Inventors: Hughes, James P., Tow, Robert F.
• Primary Examiner(s): Hewitt, II, Calvin L
• Assistant Examiner(s): HALE, TIM B
• Application Number:
  US11/541,045
• Publication Number:
  US 20080091605A1
• Time in Patent Office: 3,126 Days
• Field of Search: None
• US Class Current: 705/50
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06Q 20/30 characterised by the use of specific devices or networks
• CPC Class Codes: G06Q 2220/10 Usage protection of distributed data files
• CPC Class Codes: G06Q 30/0185 Product, service or business identity fraud

Abstract

A system and method for secure generation and distribution of digital encryption keys is disclosed. The system may also be used to protect and distribute other types of secure information, including digital, audio, video, or analog data, or physical objects. The system may include a tamper-respondent secure token device, which may be configured to destroy or disable access to the secure information contained therein in response to attempts to physically or electronically breach the device. Outputs may be provided in a secure manner through various interfaces without using electricity (wires) or electromagnetic radiation. Inputs may be provided in a secure manner, including through the use of a gesture-based input interface. Destruction or disablement of the device and/or its secure contents may be provided upon detection of tamper attempts or upon input of a self-destruct command. Proof of the destruction or disablement of the device or its contents may be provided.

Claims

1. An apparatus, comprising:

a processor means;

a memory coupled to the processor, wherein the memory stores secure digital data;

a gesture-based input interface coupled to the processor means and configured to receive one or more commands, wherein to receive a command, the gesture-based input interface is configured to detect one or more physical gestures;

an output interface coupled to the processor means;

wherein the gesture-based input interface is configured to receive one or more commands, via one or more physical gestures, requesting access to the secure digital data stored in the memory;

wherein the processor means is configured to validate commands, received via the gesture-based input interface, requesting access to secure digital data stored in the memory; and

wherein the output interface is configured to provide secure digital data stored in the memory in response to a processor means validated command received via the gesture-based input interface requesting access to the secure digital data stored in the memory;

a mechanism configured to detect tampering with the apparatus or detect a self-destruct command, wherein the mechanism is further configured to permanently disable access to the secure digital data in the memory in response to the detection of tampering with the apparatus or in response to the detection of the self-destruct command; and

a proof-of-destruction component;

wherein the mechanism is further configured to prevent removal of the proof-of-destruction component until after access to the secure digital data in the memory has been permanently disabled.

2. The apparatus of claim 1, wherein to detect one or more physical gestures applied to the apparatus, the gesture-based input interface detects movement of the apparatus using one or more accelerometers or gyroscopic sensors.

3. The apparatus of claim 1, wherein to detect the one or more physical gestures, the gesture-based input interface detects a change in a position of the apparatus.

4. The apparatus of claim 1, wherein to detect the one or more physical gestures, the gesture-based input interface detects a change in a direction or acceleration of movement of the apparatus.

5. The apparatus of claim 1, wherein the event other than a valid command received by the gesture based input interface is the processor is configured to determine that a command requesting access to secure digital data stored in the memory is not valid, and in response the processor mechanism disables access to the secure digital data stored in the memory.

6. The apparatus of claim 5, wherein to disable access to the secure digital data, the processor mechanism executes one or more of:

erasing or modifying secure digital data stored in the memory, disabling output of secure digital data stored in the memory, damaging or destroying the memory containing secure digital data, or damaging or destroying the apparatus.

7. The apparatus of claim 1, further comprising a tamper-respondent surface enclosure completely enclosing the apparatus, wherein the tamper-respondent surface enclosure is configured to detect attempts to breach the enclosure, and wherein in response to detecting an attempt to breach the tamper-respondent surface enclosure access to secure digital data stored in the memory is disabled.

8. The apparatus of claim 1,

wherein the gesture-based input interface is configured to receive one or more commands to disable access to secure digital data stored in the memory;

wherein the processor validates commands received via the gesture-based input interface to disable access to secure digital data stored in the memory; and

wherein, in response to the processor validating a command received via the gesture-based input interface to disable access to secure digital data stored in the memory, the processor mechanism disables access to the secure digital data stored in the memory.

9. The apparatus of claim 1,

wherein the gesture-based input interface is configured to receive commands to load secure digital data into the memory;

wherein the processor validates commands received via the gesture-based input interface to load secure digital data; and

wherein, in response to validating a command received via the gesture-based input interface to load secure digital data, the processor programs the secure digital data into the memory.

10. The apparatus of claim 9, wherein to program the secure digital data, the processor modifies secure digital data previously programmed in the memory.

11. The apparatus of claim 1, wherein to provide the secure digital data, the output interface transmits an audio signal, a radio frequency signal, or a light frequency signal representing the secure digital data.

12. The apparatus of claim 1,

wherein the gesture-based input interface is configured to receive a valid command to permanently disable access to secure digital data stored in the memory, and in response to receiving the valid command the processor mechanism initiates a self-destruct sequence to destroy the apparatus or a component thereof;

and

wherein destruction of the apparatus or component causes access to the secure digital data to be permanently disabled.