Method of authenticating a device

Patent metadata

Field	Value
Publication number	US-9544154-B2
Application number	US-201314372799-A
Country	US
Kind code	B2
Filing date	Jan 21, 2013
Priority date	Feb 8, 2012
Publication date	Jan 10, 2017
Grant date	Jan 10, 2017

Abstract

The invention is a method for authenticating a device which comprises a chip and a body carrying the chip. The body comprises a graphical security feature. The method comprises the steps of:
running a first physical unclonable function for generating a first response representative of the chip, extracting a first reference from the graphical security feature, authenticating the device by checking that said first response and first reference are linked by a preset mathematical function.

The extracting step and the authenticating step are carried out by a machine distinct from the device.

First claim

The invention claimed is:

1. A method for authenticating a device, said device comprising a chip and a body carrying the chip, wherein the body comprises a graphical security feature said method comprising the following steps:
running a first physical unclonable function for generating a first response representative of said chip,
extracting a first reference from the graphical security feature, and
authenticating the device by checking that said first response and first reference are linked by a first preset mathematical function, said extracting step and authenticating step being carried out by a machine distinct from the device.

2. A method according to claim 1 , wherein the method comprises the further steps:
reading a second reference from the chip, and
running a second physical unclonable function for generating a second response representative of said graphical security feature,
and wherein the authenticating step is performed by checking that said second response and second reference are linked by a second preset mathematical function.

3. A method according to claim 1 , wherein the graphical security feature comprises at least one element selected from the group consisting of Optical Variable Ink, Microtext, relief printing, rainbow printing, UV printing, Holographic overlay, Diffractive Optically Variable Image Device, changeable laser image and multiple laser images.

4. A method according to claim 1 , wherein the method comprises the further step of updating an indicator in the chip if the authenticating step is unsuccessful.

5. A device comprising:
a chip and a body carrying the chip, said device being configured to run a first physical unclonable function able to generate a first response representative of said chip,
wherein the body comprises a graphical security feature,
and wherein said graphical security feature comprises a first reference that has been computed by applying said first response to a first mathematical function, said first reference comprising data that, in combination with said first response, enables the device to be authenticated.

6. A device according to claim 5 , wherein the graphical security feature comprises at least one element selected from the group consisting of Optical Variable Ink, Microtext, relief printing, rainbow printing, UV printing, Holographic overlay, Diffractive Optically Variable Image Device, changeable laser image and multiple laser images.

7. A system comprising:
a machine, and
a device, said device comprising a chip and a body carrying the chip, said device being configured to run a first physical unclonable function to generate a first response representative of said chip,
wherein the body comprises a graphical security feature,
wherein said graphical security feature comprises a first reference that is computed by applying said first response to a first mathematical function, said first reference enabling the authentication of the device in combination with said first response,
wherein said machine is configured to extract said first reference from the graphical security feature,
and wherein said machine is further configured to authenticate the device by checking that said first response and first reference are linked by said first preset mathematical function, the machine being distinct from the device.

8. A system according to claim 7 , wherein the machine comprises a computing apparatus configured to read a second reference from the chip to run a second physical unclonable function for generating a second response representative of said graphical security feature, and to authenticate the device by checking that said second response and second reference are linked by a second preset mathematical function.

9. A system according to claim 7 , wherein the machine comprises a computing apparatus configured to update an indicator in the chip if the authentication of the device fails.

10. A method for personalizing a device, said device comprising a chip and a body carrying the chip, said method comprising the following steps:
running a first physical unclonable function for generating a first response representative of said chip,
computing a first reference by applying said first response to a first mathematical function and
writing a graphical security feature which comprises said first reference on the body.

11. A method according to claim 10 , wherein the method comprises the further steps:
running a second physical unclonable function for generating a second response representative of said graphical security feature,
computing a second reference by applying said second response to a second mathematical function and
writing said second reference into the chip.

Assignees

• Gemalto Sa

Inventors

• Proust Philippe
• Barral Claude

Classifications

• G06K19/073 Primary

  Special arrangements for circuits, e.g. for protecting identification code in memory (protection against unauthorised use of computer memory G06F12/14) · CPC title

• G06K2009/0059

  Physics · mapped topic

• G06K9/00577

  Physics · mapped topic

• H04L2209/122

  Hardware reduction or efficient architectures · CPC title

• H04L9/3278 Primary

  using physically unclonable functions [PUF] · CPC title