Cryptographically-verifiable attestation label

• US 9,628,270 B2
• Filed: 09/09/2014
• Issued: 04/18/2017
• Est. Priority Date: 09/09/2014
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Kouladjie, Kambiz
• Primary Examiner(s): Paliwal, Yogesh
• Application Number:
  US14/481,787
• Publication Number:
  US 20160072626A1
• Time in Patent Office: 952 Days
• Field of Search: 713189
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/36 by graphic or iconic representation
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 2212/1052 Security improvement
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061

Abstract

A label includes a first readable object encoding a trust anchor. The trust anchor is encrypted with a cryptographic key. The attestation label further includes a second readable object encoding attestation service information and encoding an identification code. The identification code is encrypted using the trust anchor. The attestation label further includes a non-encoded representation of the identification code.

Claims

1. An attestation label, comprising:

a first readable object encoding a trust anchor encrypted with a cryptographic key, the first readable object printed on the attestation label by a secure printer;

a second readable object encoding attestation service information and an identification code encrypted using the trust anchor, the second readable object printed on the attestation label by a non-secure printer; and

a non-encoded representation of the identification code.

2. The attestation label of claim 1, wherein the first readable object is a visually-readable object and the second readable object is a visually-readable object.

3. The attestation label of claim 1, wherein the identification code is encrypted using the trust anchor in combination with the identification code.

4. The attestation label of claim 1, wherein the identification code is encrypted using the trust anchor in combination with a cryptographic salt.

5. The attestation label of claim 1, wherein the attestation service information includes an address of an attestation service computing device, and wherein the attestation service computing device is configured to verify whether the attestation label is authentic.

6. The attestation label of claim 5, wherein the trust anchor is selected from a set of available trust anchors, and wherein if any trust anchor of the set of available trust anchors becomes compromised, the attestation service is configured to indicate that attestation labels including the trust anchor are compromised.

7. The attestation label of claim 1, wherein the first readable object is a first matrix barcode having a first color, and wherein the second readable object is a second matrix barcode having a second color different from the first color.

8. A device, comprising:

a housing including;

a first portion, and

a second portion coupled to the first portion to form a seam; and

an attestation label affixed across the seam, the attestation label including;

a first visually-readable object encoding a trust anchor encrypted with a cryptographic key, the first readable object printed on the attestation label by a secure printer;

a second readable object encoding attestation service information and an identification code encrypted using the trust anchor, the second readable object printed on the attestation label by a non-secure printer; and

a non-encoded representation of the identification code.

9. The device of claim 8, wherein the identification code is encrypted using the trust anchor in combination with the identification code.

10. The device of claim 8, wherein the attestation service information includes an address of an attestation service computing device, and wherein the attestation service computing device is configured to verify whether the visually-readable identification code is authentic.

11. The device of claim 8, wherein the attestation service computing device is configured to determine an eligibility status of the device.

12. The device of claim 11, wherein the trust anchor is selected from a set of available trust anchors, and wherein if any trust anchor of the set of available trust anchors becomes compromised, the attestation service computing device is configured to indicate that devices having attestation labels including the trust anchor are compromised.

13. The device of claim 8, wherein the attestation service computing device is configured to provide a plurality of attributes of the device based on the visually-readable identification code.

14. The device of claim 8, wherein the first visually-readable object is a first matrix barcode having a first color and the second visually-readable object is a second matrix barcode having a second color different from the first color.