Physics-based authentication

Patent metadata

Field	Value
Publication number	US-9465960-B2
Application number	US-201314097094-A
Country	US
Kind code	B2
Filing date	Dec 4, 2013
Priority date	Dec 4, 2013
Publication date	Oct 11, 2016
Grant date	Oct 11, 2016

Abstract

In some examples, a controller is configured to generate a key based on a physics-based output of a component. The controller may, for example, use the key to authenticate communication between at least two nodes, to encrypt data, or to decrypt data. In some examples, the component includes one or more subcomponents, each subcomponent including a cell filled with a gas, a light source configured to transmit a light through the gas cell, and a photodetector configured to sense light transmitted through the gas cell. The photodetector of each subcomponent is configured to generate an electrical signal that changes as a function of one or more properties of the light sourced by the light source, transmitted through the gas cell. The output of the component can is based on the signals generate by the one or more photodetectors.

First claim

What is claimed is:

1. A system comprising:
a component configured to generate an output, wherein the component comprises:
a first plurality of gas cells each filled with a gas;
a second plurality of gas cells;
at least one light source configured to emit a light that transmits through at least one gas cell of the first plurality of gas cells and at least one gas cell of the second plurality of gas cells; and
at least one photodetector configured to generate a signal indicative of a property of the light transmitted through the at least one gas cell of the first plurality of gas cells and the at least one gas cell of the second plurality of gas cells, the signal comprising a first portion indicative of a property of the light transmitted through the at least one gas cell of the first plurality of gas cells and a second portion indicative of a property of the light transmitted through the at least one gas cell of the second plurality of gas cells, wherein the output generated by the component is based on the signal generated by the at least one photodetector; and
a controller configured to:
select a subset of gas cells from the first plurality of gas cells, wherein the signal generated by the at least one photodetector is indicative of the property of the light transmitted through the selected subset of gas cells,
receive the output generated by the component based on the signal generated by the at least one photodetector indicative of the property of the light transmitted through the selected subset of gas cells,
normalize the first portion of the signal generated by the photodetector based on the second portion of the signal, and
generate a key based on the output.

2. A system comprising:
a component configured to generate an output, wherein the component comprises:
a plurality of gas cells each filled with a gas;
at least one light source configured to emit a light that transmits through at least one gas cell of the plurality of gas cells; and
at least one photodetector configured to generate a signal indicative of a property of the light transmitted through the at least one gas cell of the plurality of gas cells, wherein the output generated by the component is based on the signal generated by the at least one photodetector; and
a controller configured to:
select a subset of gas cells from the plurality of gas cells, wherein the signal generated by the at least one photodetector is indicative of the property of the light transmitted through the selected subset of gas cells,
receive the output generated by the component based on the signal generated by the at least one photodetector indicative of the property of the light transmitted through the selected subset of gas cells, and
generate a key based on the output,

wherein the at least one light source comprises a plurality of light sources and the at least one photodetector comprises a plurality of photodetectors, wherein the component comprises a plurality of subcomponents, each subcomponent comprising a gas cell of the plurality of cells, a light source of the plurality of light sources, and a photodetector of the plurality of photodetectors, wherein each subcomponent is configured to generate a suboutput based on the signal generated by the respective photodetector and indicative of a property of the light transmitted through the gas cell of the subcomponent, at least two subcomponents being configured to generate different suboutputs, and wherein the controller is configured to select the subset of gas cells by at least selecting at least two subcomponents of the plurality of subcomponents, the output generated by the component being based on the suboutputs of the at least two subcomponents.

3. The system of claim 1 , wherein at least two gas cells of the first plurality of gas cells are filled with different compositions of gas.

4. The system of claim 1 , wherein the controller is configured to at least one of encrypt or decrypt data with the key.

5. The system of claim 1 , wherein the key comprises a first authentication key, the system further comprising a memory that stores a second authentication key, wherein the controller is configured to determine whether the first and second authentication keys match, and authenticate hardware of the system in response to determining the first and second authentication keys match.

6. The system of claim 1 , further comprising a reflective surface positioned on an opposite side of the first plurality of cells from the at least one light source and the at least one photodetector, where the reflective surface is configured to reflect the light generated by the at least one light source.

7. The system of claim 1 , wherein each gas cell of the second plurality of gas cells corresponds to a respective gas cell of the first plurality of gas cells.

8. The system of claim 1 , wherein the gas comprises an alkali metal and a buffer gas.

9. The system of claim 1 , wherein the component comprises a first component comprising at least one first light source, and at least one first photodetector configured to generate a first signal, wherein the key comprises a first key, wherein the output comprises a first output, and wherein the controller comprises a first controller, the system comprising a first node comprising the first component and the first controller, the system further comprising:
a second node comprising a second component configured to generate a second output, the second component comprising:
a third plurality of gas cells each filled with a gas, wherein at least two cells of the third plurality of gas cells are filled with different compositions of gas;
at least one second light source configured to emit a light that transmits through at least one gas cell of the third plurality of gas cells; and
at least one second photodetector configured to generate a second signal indicative of a property of the light emitted by the at least one second light source and transmitted through the at least one gas cell of the third plurality of gas cells, wherein the second output generated by the second component is based on the second signal generated by the at least one second photodetector; and
a controller configured to generate a second key based on the second output,
wherein the first controller is configured to receive the second key, compare the first and second keys, and authenticate the second node in response to determining the first and second keys match.

10. A method comprising:
selecting, by a controller, a subset of gas cells from a first plurality of gas cells of a component, wherein the component comprises:
the first plurality of gas cells each filled with a gas, wherein at least two gas cells are filled with different compositions of gas;
a second plurality of gas cells;
at least one light source configured to emit a light that transmits through at least one gas cell of the first plurality of gas cells and at least one gas cell of the second plurality of gas cells; and
at least one photodetector configured to generate a signal indicative of a property of the light transmitted through the at least one gas cell of the first plurality of gas cells and the at least one gas cell of the second plurality of gas cells, the signal comprising a first portion indicative of a property of the light transmitted through the at least one gas cell of the first plurality of gas cells and a second portion indicative of a property of the light transmitted through the at least one gas cell of the second plurality of gas cells, wherein the output generated by the component is based on the signal generated by the at least one photodetector;

receiving, by the controller, the output generated by component;

Assignees

• Honeywell Int Inc

Inventors

• Tucker James L
• Heffner Kenneth H
• Kriz Jeffrey J
• Compton Robert

Classifications

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• G06F21/73 Primary

  by creating or determining hardware identification, e.g. serial numbers · CPC title