Subsystem authenticity and integrity verification (SAIV)

• US 8,347,092 B2
• Filed: 04/05/2010
• Issued: 01/01/2013
• Est. Priority Date: 04/05/2010
• Status: Active Grant

• Current Assignee: Tenet 3, LLC
• Original Assignee: Jeff Hughes, Kelce Wilson
• Inventors: Hughes, Jeff, Wilson, Kelce
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): ALMEIDA, DEVIN E
• Application Number:
  US12/754,592
• Publication Number:
  US 20110246769A1
• Time in Patent Office: 1,002 Days
• Field of Search: 713/168, 380/46
• US Class Current: 713/168
• CPC Class Codes: G06F 21/81 by operating on the power supply, e.g. enabling or disabling power-on, sleep or resume operations
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04L 9/3278 using physically unclonable functions [PUF]

Abstract

Systems and methods are disclosed for enhancing anti-terrorism public safety measures, by more securely determining whether explosives or other contraband have been inserted into notebook computer batteries or other large, replaceable subsystems of electronic devices. Because notebook computers typically require large, heavy batteries, they present attractive containers for smugglers and terrorists attempting to bring explosives onto an airplane. The disclosed security testing system provides more reliable results than many current tests, and does not require that the device under test be powered on. The systems and methods disclosed use out-of-band authentication for added security.

Claims

1. A computer implemented method for determining authenticity and integrity of a subsystem of a notebook computer, the method comprising:

communicating, from a security station, with a security token within a replaceable subsystem of the notebook computer to perform a challenge/response operation with the security token using a first secret stored in the security token, without powering on the notebook computer, thereby receiving a first response, formed using the first secret, from the security token, the notebook computer being separate from the security station;

communicating, from the security station, with a remote secret store in an authenticated communication session over a public computer network to perform a challenge/response operation with the remote secret store using a second secret stored in the remote secret store, thereby receiving a second response, formed using the second secret, from the remote secret store, the remote secret store being separate from the notebook computer and the security station;

comparing the first response with the second response for correspondence; and

responsive to the comparison, generating a failure alarm if the comparison indicates no correspondence between the first secret and the second secret, and generating a pass indication if the comparison indicates correspondence between the first secret and the second secret.

2. The method of claim 1 further comprising:

verifying authenticity of a port connector that is coupled to the security token.

3. The method of claim 1 further comprising:

selecting the remote secret store from among a plurality of remote secret stores.

4. The method of claim 1 further comprising:

communicating a security token ID from the security station to the remote secret store.

5. The method of claim 1 further comprising:

communicating, from the security station, with the security token to perform a challenge/response operation with the security token using a third secret stored in the security token, without powering on the notebook computer; and

comparing the responses from the security token using the third secret and the remote secret store using the second secret, wherein the pass indication is generated even if the comparison indicates no correspondence between the third secret and the second secret.