Computing device configured with a table network

Patent metadata

Field	Value
Publication number	US-9594769-B2
Application number	US-201314438729-A
Country	US
Kind code	B2
Filing date	Dec 19, 2013
Priority date	Dec 21, 2012
Publication date	Mar 14, 2017
Grant date	Mar 14, 2017

Abstract

A computing device configured to compute a data function on a function-input value, the device comprising an electronic storage storing a first table network configured for the data function and a second table network configured to cooperate with the first table network for countering modifications made to the first table network, an electronic processor coupled to the storage and configured to obtain first table inputs for the first table network, the first table inputs including the function-input value, and to compute the data function by applying the first table network to the first table inputs to produce first table outputs, the first table outputs including a function-output value corresponding to the result of applying the data function to the function-input value.

First claim

The invention claimed is:

1. A computing device for processing a secure transaction over a computer network that produces an indication when a table network is modified, the secure transaction including computing a data function on a function-input value, the device comprising:
a non-transitory storage device storing a first table network configured for the data function; and
an electronic processor coupled to the electronic storage and configured to obtain a plurality of first table inputs for the first table network, the plurality of first table inputs including the function-input value, and to compute the data function by applying the first table network to the plurality of first table inputs to produce a plurality of first table outputs, the plurality of first table outputs including a function-output value, the function-output value corresponding to the results of applying the data function to the function-input value, wherein
the non-transitory storage device further storing a second table network configured to cooperate with the first table network for countering modifications made to the first table network, the electronic processor being configured to obtain a plurality of second table inputs for the second table network, the second table inputs including the plurality of first table outputs and the second table inputs sharing at least one input with the plurality of first table inputs, and to apply the second table network to the plurality of second table inputs, the second table network being configured to verify for at least a specific one of the plurality of first table outputs if an unmodified first table network could obtain the specific one of the plurality of first table outputs from the given at least one of the plurality of first table inputs,
the second table network is configured to produce second table outputs including a protected function output, the protected function output being equal to the function output indicating the verification is successful and the protected function output being unequal to the function output indicatinq the verification is unsuccessful for at least some values of the plurality of first table inputs.

2. The computing device as in claim 1 , wherein
the plurality of first table inputs include a state-input value and the plurality of first table outputs include a state-output value, wherein the state-output value equals the result of applying a state function to the state-input value, and
the second table network is configured so that the second table inputs shared with the plurality of first table inputs include the state-input value, the second table network is configured so that the protected function output is equal to the function output in case the result of applying the state function to the state-input value equals the state value included in the plurality of first table outputs inputted to the second table network.

3. The computing device as in claim 2 , wherein the second table network comprises a state table network and an alignment table network, the state table being configured for the state function, the processor being configured to apply the state table to the state-input to obtain a parallel state output value, the alignment table network being configured to receive as input at least the parallel state output value and the state-output value received from the first table network.

4. The computing device as in claim 3 in which an encoded variable, encoded from a function value and a state value, and a state variable are maintained in parallel.

5. The computing device as in claim 2 , wherein the second table network comprises a modified state table and an alignment table network, the state table being configured to receive as input the state-input value and to compute a modified state value, the modified state value being equal to the result of applying the state function to the state-input value followed by a further state function, the align table network is configured to take as input the state-output value and the modified state-output value and to verify that the further state function applied to the state-output value yields the modified state-output value.

6. The computing device as in any claim 1 , wherein
the first table network is configured to take as input an encoded input value, the encoded input value combining the function-input value together with a state-input value encrypted together into a single value, and
the first table network is configured to produce as output a first encoded output value, the first encoded output value combining the function-output value together with a state-output value encrypted together into a single value, wherein the state-output value equals the result of applying a state function to the state-input value,
the second table network is configured to take as input the first encoded output value of the first table network and at least one of the state-input value and the function-input value, the second table network being configured to produce as output a second encoded output value, the encoded output value containing the protected function output.

7. The computing device as in claim 6 wherein, the second table network is configured to produce as output a second encoded output value, the encoded output value combining the protected function output value together with a protected state-output value encrypted together into a single value, the protected state-output being equal to the result of applying a state permutation to the state-output value.

8. The computing device as in claim 6 , wherein
the second table network is configured to take as input the function-input value, the second table network is configured so that the protected function output is equal to the function output in case the result of applying the data function to the function-input value equals the function-output value encoded in the first encoded output value.

9. A computer-readable non-transitory medium having stored software for processing a secure transaction over a computer network that produces an indication when a table network is modified, the secure transaction including computing a data function on a function-input value, the method comprising acts of:
receiving at a first table network a plurality of first table inputs for the first table network, the plurality of first table inputs including the function-input value, and producing a plurality of first table outputs, the plurality of first table outputs including a function-output value, the function-output value corresponding to the result of applying the data function to the function-input value;
cooperating at a second table network with the first table network for countering modifications made to the first table network, the second table network receiving a plurality of second table inputs, the second table inputs including the plurality of first table outputs and the second table inputs sharing at least one input with the plurality of first table inputs, the second table network verifying for at least a specific one of the plurality of first table outputs if an unmodified first table network could obtain the specific one of the plurality of first table outputs from the given at least one of the plurality of first table inputs,
the second table network producing second table outputs including a protected function output, the protected function output being equal to the function output indicating the verification is successful and the protected function output being unequal to the function output indicatinq the verification is unsuccessful for at least some values of the plurality of first table inputs.

10. An electronic method for processing a secure transaction over a comput

Assignees

• Koninklijke Philips Nv

Inventors

• Tolhuizen Ludovicus Marinus Gerardus Maria
• Gorissen Paulus Mathias Hubertus Mechtildis Antonius
• Bruekers Alphons Antonius Maria Lambertus
• Deng Mina

Classifications

• H04L2209/043

  of tables, e.g. lookup, substitution or mapping · CPC title

• H04L9/004

  for fault attacks · CPC title

• H04L9/003

  for power analysis, e.g. differential power analysis [DPA] or simple power analysis [SPA] · CPC title

• H04L67/1097

  for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] · CPC title

• H04L2209/16

  Obfuscation or hiding, e.g. involving white box · CPC title