METHOD AND APPARATUS OF STORAGE ANTI-PIRACY KEY ENCRYPTION (SAKE) DEVICE TO CONTROL DATA ACCESS FOR NETWORKS

• US 20080010689A1
• Filed: 09/20/2007
• Published: 01/10/2008
• Est. Priority Date: 07/31/2002
• Status: Active Grant

• Current Assignee: Trek 2000 International Limited (Trek Technology Singapore PTE Limited)
• Original Assignee: Trek 2000 International Limited (Trek Technology Singapore PTE Limited)
• Inventors: Poo, Teng, Lim, Lay, Tan, Henry, Ooi, Chin Shyan
• Granted Patent: US 7,600,130 B2
• Time in Patent Office: Days
• US Class Current: 726/028
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

An apparatus and method of modular manufacturing process for a transmitter, receiver and/or transceiver is disclosed. The modular process assembles an array of optoelectronic devices to an array header to form an optoelectronic array package. Once the optoelectronic array package is assembled, it is tested and verified the functionality and alignment between the optoelectronic devices and optical fibers. The optoelectronic array package is subsequently coupled to an optical lens array to form an array optical subassembly. After the array optical subassembly is tested, it is coupled to an optical fiber connector to form an optical module. The optical module is then tested to verify its functionality and alignment.

Claims

11. A method of anti-piracy for providing controlled disseminating information through computer networks, the method comprising:

coupling a SAKE to a host system;

obtaining user'"'"'s fingerprint from fingerprint sensor;

verifying user'"'"'s identity according to fingerprint data stored in a first memory unit of SAKE;

retrieving a public key associated with the user from the first memory unit of SAKE;

providing the public key to the information provider via the computer networks through the host system;

establishing a communication between SAKE and an information provider when a message of verified public key is received;

obtaining information from the information provider; and

storing the information in a second memory unit of SAKE.

1. A method for providing data access control over information networks comprising:

coupling a control device to a digital processing system;

obtaining user identification by executing a user authentication process;

retrieving initialization information from a first memory unit of the control device in response to an information provider when user'"'"'s identity is authenticated;

providing the initialization information to the information provider via the information network through the digital processing system;

establishing a communication between the control device and an information provider when an acknowledgement of user identity is received;

obtaining information from the information provider; and

storing the information in a second memory unit of the control device.

2. The method of claim 1, wherein the coupling a control device to a digital processing system further includes coupling a Universal Serial Bus (“

USB”

) protocol connector to a USB receptacle of the digital processing system to facilitate communication.

3. The method of claim 2, wherein the digital processing system further includes connecting to at least one of Internet, Intranet, wide area network (“

WAN”

) and local area network (“

LAN”

).

4. The method of claim 3, wherein the obtaining user identification by executing a user authentication process further includes:

activating a fingerprint detector to detect user'"'"'s fingerprint;

obtaining user'"'"'s fingerprint from the fingerprint detector;

retrieving fingerprint file from the first memory unit of the control device; and

authenticating user'"'"'s fingerprint in response to the fingerprint file.

5. The method of claim 4, wherein the obtaining user identification by executing a user authentication process further includes:

activating an iris detector to detect user'"'"'s iris;

obtaining user'"'"'s iris from the iris detector;

retrieving iris file from the first memory unit of the control device; and

authenticating user'"'"'s iris in response to the iris file.

6. The method of claim 1, wherein the providing the initialization information to the information provider further includes:

retrieving security code associated with the information provider;

sending the security code to the information provider;

retrieving a public key associated with the information provider; and

hashing the public key before the public key is sent to the information provider.

7. The method of claim 3, wherein the obtaining information from the information provider further includes:

sending an on-line transaction request to the information provider; and

receiving the information in response to the on-line transaction request.

8. The method of claim 3, wherein the obtaining information from the information provider further includes:

sending a request for accessing a restricted Internet site to the information provider; and

receiving the information in response to the request after the request is verified.

9. The method of claim 3, wherein the obtaining information from the information provider further includes:

sending a request of service or upgrades to the information provider; and

receiving the information in response to the request after the request is verified.

10. The method of claim 1, further comprising running navigation software to display the information stored in the second memory unit of the control device.

12. The method of claim 11, wherein the coupling a SAKE to a host system further includes coupling a Universal Serial Bus (“

USB”

) protocol connector to a USB receptacle of SAKE system to facilitate communication.

13. The method of claim 12, wherein the host system further includes connecting to at least one of Internet, Intranet, wide area network (“

WAN”

) and local area network (“

LAN”

).

14. The method of claim 11, wherein the providing the public key to the information provider via the computer networks through the host system further includes:

sending security code to the information provider; and

hashing the public key before the public key is sent.

15. The method of claim 11, wherein the providing the initialization information to the information provider further includes:

retrieving a public key associated with the information provider; and

hashing the public key before hashed public key is sent to the information provider.

16. The method of claim 11, wherein the obtaining information from the information provider further includes:

sending a request for accessing a restricted Internet site to the information provider; and

receiving the information in response to the request after the request is verified.

17. The method of claim 11, wherein the obtaining information from the information provider further includes:

sending a request of service or upgrades to the information provider; and

receiving the information in response to the request after the request is verified.

18. The method of claim 11, wherein the storing the information in a second memory unit of SAKE further includes encrypting the information in response to a private key before the information is stored in the first memory unit of SAKE.

19. The method of claim 11, further comprising:

retrieving the information from the second memory unit of SAKE;

decrypting the information; and

running navigation software to display the information.

20. The method of claim 1, further comprising:

loading tamper proof code into execution sequence when one of voltage, frequency and temperature detecting devices detects tampering; and

executing tamper proof code.

15-1. The method of claim 11, wherein the obtaining information from the information provider further includes:

sending an on-line transaction request to the information provider; and

receiving the information in response to the on-line transaction request.

21. An anti-piracy device for providing controlled disseminating information through Internet comprising:

a processor;

an internal memory unit, coupled to the processor, configured to store identification data;

a fingerprint sensor coupled to the processor and capable of reading user'"'"'s fingerprint;

a fingerprint verification unit, coupled to the fingerprint sensor, configured to authenticate user identity according to authentication data stored in the internal storage;

a flash memory unit coupled to the processor for storing large amounts of data;

a hashing algorithm unit coupled to the processor and configured to hash a public key for network access; and

a universal serial bus (“

USB”

) connector coupled to the processor for attaching to a system.

22. The anti-piracy device of claim 21, further comprising an encryption and decryption unit coupled to the processor and configured to encrypt the information received from the Internet in response to the private key before the information is stored in the flash memory unit.

23. The anti-piracy device of claim 21, further comprising an encryption and decryption unit coupled to the processor and configured to decrypt the information stored in the flash memory unit before the information is sent over the Internet.

24. The anti-piracy device of claim 21, further comprising a tamper proof unit coupled to the processor and configured to destroy data stored in the internal and flash memory units when one of voltage, frequency and temperature detecting devices detects tampering condition.

25. The anti-piracy device of claim 21, further comprising:

a fingerprint verification unit coupled to the processor and operable to authenticate user identity; and

a USB controller coupled to the processor and configured to control communication between the anti-piracy device and the system.

26. A method for accessing restricted information by a user, said method comprising the steps of:

coupling a portable storage device to a communication port of a client computer, said client computer communicatively coupled to a content server over a network, said content server storing restricted information, said portable storage device having a biometric detector disposed thereon and being capable of verifying user identity against a stored biometric template of an authorized user;

capturing biometric information of a requester using said biometric detector;

provided said portable data storage device authenticates said requester'"'"'s identity, transmitting a first notification from said portable storage device to said content server;

receiving a device authentication request from said content server and in response thereto transmitting a device authentication reply from said portable storage device to said content server, said device authentication reply for completing an authentication handshake between said content server and said portable storage device;

receiving a key request from said content server and in response thereto transmitting a first key representative of said requester from said portable storage device to said content server, said first key for allowing said content server to confirm said requester'"'"'s identity;

receiving said restricted information from said content server;

encrypting said restricted information using a second key representative of said requester'"'"'s identity; and

storing said restricted information into said portable storage device in encrypted form, wherein said stored encrypted information cannot be decrypted without using said second key.

27. The method as recited in claim 26, further comprising the step of erasing at least one of said first key, said second key, said biometric template and said stored encrypted data upon detecting at least one operation parameter falling beyond a predetermined normal operating range, wherein said at least one operation parameter includes voltage, frequency and temperature.

28. The method as recited in claim 26, further comprising the step of hashing said first key before transmitting same to said content server.

29. The method as recited in claim 28, wherein a secure hashing algorithm resides in a non-volatile solid-state memory in said portable storage device, said secure hashing algorithm being used to hash said first key.

30. The method as recited in claim 26, wherein said first key is a public key that uniquely identifies said requester to third parties.

31. The method as recited in claim 26, wherein said second key is a private key of said requester.

32. The method as recited in claim 26, wherein said biometric template comprises fingerprint information of said authorized user.

33. The method as recited in claim 26, wherein said communication port of said client computer is a USB port and said portable storage device comprises a USB plug.

34. The method as recited in claim 26, wherein said stored encrypted information resides in a non-volatile solid-state memory in said portable storage device.

35. The method as recited in claim 26, wherein said device authentication reply comprises multiple authentication sequences transmitted from said portable storage device to said content server.

36. The method as recited in claim 26, wherein said restricted information is transmitted from said content server to said portable storage device by streaming.

37. The method as recited in claim 26, wherein said restricted information comprises copyrighted materials.

38. The method as recited in claim 26, wherein said restricted information comprises confidential medical records.

39. The method as recited in claim 26, wherein said restricted information comprises proprietary business information.

40. The method as recited in claim 26, further comprising the step of completing an electronic payment transaction before said restricted information is received from said content server.