Abstract: The present invention relates to a method and a device (104) for authenticating a plurality of physical tokens (101, 102, 103). A basic idea of the invention is to supply a sequence of interconnected devices (108, 109, 110), each device comprising a physical token (101, 102, 103), with a challenge of the respective physical token created during enrollment of said respective physical token, wherein the sequence of interconnected devices is arranged such that a data set supplied to the sequence is cryptographically processed with a response of a token comprised in a device and passed on to a token comprised in a subsequent device which further cryptographically processes the processed data set with its response until a response of a final physical token has been used to further cryptographically process the data set.

Abstract: This invention relates to physical uncloneable function (PUF) devices for determining authenticity of an item, systems for determining authenticity of a physical item, and methods for determining authenticity of an item. A PUF pattern of the PUF device is damaged when using the item for the first time.

Abstract: The present invention relates to a system (600) and method for sharing multiple session keys between low-power devices (701) and more advanced devices (702). A polynomial algorithm with a certain number of parameters is used. A large number of parameters are fixed for the low-power devices (701) and a small number of parameters are fixed for the more powerful devices (702).

Abstract: An optical arrangement of at least a coherent light source (1), a strongly scattering object (5) (the PUF), and a pixe-lated photo-detector (6), wherein the pixels are comparable in size with the bright and dark patches of the speckle pattern produced by coherent radiation traversing the scattering object (5). Quantitively, the pixel size should be roughly ?/NA, where ? is the wave-length, and (i) NA=a/z for free-space geometry, with a being the beam radius and z being the distance between the exit surface of the PUF (5) and the pixelated detector (6), or (ii) NA is the numerical aperture of a lens (7) in an imaging geometry. In a preferred embodiment of the invention, there are tentative requirements that the pixels should be at least smaller than ?max?NA and preferably larger than ?max?/NA, where (in an exemplary embodiment) ?max=5 and ?min=0.05, say.

Abstract: In a device for providing challenge-response pairs a radiation detection element, a challenge-modifying element and preferably also a light source are arranged on the same side of an imaginary plane, which separates said radiation-detecting element from a radiation scattering element. Hence, generation of a speckle pattern having a desired minimum speckle size is facilitated and a more easily assembled device is provided.

Abstract: The present invention relates to a device (100, 200, 300) and a method for creating challenge-response pairs. A basic idea of the present invention is to create a challenge in the form of light emitted onto a light scattering element (103, 203), which light will be scattered in the light scattering element and detected as a response to the challenge by light detecting elements (105, 205). The light scattering element comprises a transmissive material which contains randomly distributed light scattering particles (104, 204), which scatter incident light such that a random speckle pattern is created and spread over the light detecting elements. This random pattern is detected by the light detecting elements, and is known as the response to the challenge (i.e. the light) that was supplied to the light scattering element. Hence, a challenge-response pair is created.

Abstract: The present invention relates to a method of enabling authentication of an information carrier (105), the information carrier (105) comprising a writeable part (155) and a physical token (125) arranged to supply a response upon receiving a challenge, the method comprising the following steps; applying a first challenge (165) to the physical token (125) resulting in a first response (170), and detecting the first response (170) of the physical token (125) resulting in a detected first response data (175), the method being characterized in that it further comprises the following steps; forming a first authentication data (180) based on information derived from the detected first response data (175), signing the first authentication data (180), and writing the signed authentication data (185) in the writeable part (155) of the information carrier (105).

Abstract: A security device comprising means for authenticating an entity using biometric data, characterized by means for alternatively authenticating the entity using a security code such as a personal identification number. Also a system configured to grant an authorization upon a successful authorization by the security device, in which the authorization granted after the authentication using the security code is restricted in scope compared to the authorization granted after the authentication using the biometric data.

Abstract: This invention relates to methods and devices for verifying the identity of a person based on a sequence of feature components extracted from a biometric sample. Thereafter, the feature components are quantized and assigned a data bit sequence in such a way that adjacent quantization intervals have a Hamming distance of 1. The data bit sequences are concatenated into a bit string, and said bit string is combined with a helper data set by using an exclusive disjunction (XOR) operation into a codeword. Finally, the codeword is decoded into a secret V and a secret S is matched with the secret V.

Abstract: A method and a system for embedding a watermark in a media signal x are disclosed. The method comprises providing an at least partially encrypted media signal cx of said media signal x, wherein encryption is performed using a first encryption key k1; providing an at least partially encrypted watermark signal cw, wherein encryption is performed using a second encryption key k2; combining the at least partially encrypted media signal cx and the at least partially encrypted watermark signal cw in a combiner to obtain an encrypted combined media signal cy; and obtaining a decrypted watermarked media signal y by decrypting said encrypted combined media signal cy using a third decryption key k3. The present invention provides a framework for secure watermark embedding within untrusted devices.

Abstract: A transponder (1) comprises at least one memory (MEM1, MEM2) for storing encrypted information (E_k(EPC, PI)) that has been encrypted by use of a key (k) and for storing the key (k) associated with the encrypted information (E_k(EPC, PI)). The transponder (1) is adapted to send the key (k) slower response than the encrypted information (E_k(EPC, PI)) in response to queries of a reading device (2), which is preferably done by delaying the transmission of the key (k) or by limiting the response rate at which the key (k) is transmitted. In particular the invention is related to RFID systems.

Abstract: The invention relates to an identification system, wherein the identifier is a body comprising an inhomogeneous material, which body is identified by subjecting it to mechanical vibrations, in particular acoustic vibrations, observing how the propagation of this mechanical vibrations is affected by inhomogeneities present in the body, and recognizing the body on the basis of a previous observation. Such an identifier body can be associated with an information carrier, allowing for the authentication of the information carrier, and for a conditional access or a copy protection scheme which can be relied upon. The acoustic identification according to the invention can be seen as an alternative to the optical identification of a body, which is known in the art, which alternative, compared to the optical identification, is characterized by higher robustness, various simplifications in the identification system and lower costs of implementation. The invention can also be applied for the generation of keys.

Abstract: The invention relates to a system comprising an information carrier 11 having an optical identifier 12, and an apparatus 10, wherein the apparatus prior to accessing the information carrier verifies if the optical behavior of the optical identifier is consistent with authentication information 17 present in the information carrier. The authentication is performed by challenging the optical identifier with a least one light beam 14, detecting a resulting speckle pattern 16 on a detector 15 as a corresponding response, and comparing it with the authentication information 17. Access to the information carrier can be made conditional to a successful authentication, in particular by encrypting user-information 20 present in the information carrier, and thereby providing a strong copy protection scheme. The invention can be applied for example to optical disks or smart cards. The invention further relates to the information carrier, the apparatus, a method for the authentication and a computer program.

Abstract: This invention relates to the use 100 of a challenge-response pair 104, 108 for calibrating a device 101 for authenticating 200 a physical token (102) 102.

Abstract: A method and device for providing a secure sensor chip (1) for recording digital information regarding at least one physical parameter, wherein the recording later can be verified with respect to its authenticity, whether the at least one physical parameter was indeed recorded by the specified chip (1) or not, wherein this is accomplished by providing the sensor chip (1) with a Controlled Physical Random Function (CPUF) in the form of a coating (5) and wherein both the sensor chip (1) and a micro controller (2) controlling all digital inputs (3) and outputs (4) of the sensor chip are both embedded in the CPUF coating (5).

Abstract: The invention proposes a method to provide privacy for users or a user from a group of users with respect to authorizations they are granted, where such authorizations are expressed using digital authorization certificates, and with respect to domain certificates in case of groups of users. The idea is to conceal the user identity in the certificates, while the certificate itself remains in the clear. In this way, certificates can be widely and openly available, e.g. in a public network, without a random observer being able to link a user to an authorization or to identify a user within a domain. Privacy is also provided towards the certificate verifier by means of zero-knowledge protocols, which are carried out between the user and the verifier in order for the verifier to check a user's entitlement to a certificate. Privacy is further provided towards the certificate issuer as well, by means of a mechanism that allows the anonymous (buying or) issuing of certificates from the issuer.

Abstract: The invention relates to a deflection unit for cathode ray tubes in which the energy for deflection is reduced. This is done by providing a magnetic material between frame coils and line coils of the deflection unit. In an advantageous embodiment of the invention, first void spaces as well as second void spaces between the frame coils and a yoke ring and/or third void spaces between wire strands of the frame coils are filled. A deflection energy reduction of up to 30% can be obtained.

Abstract: A picture display device comprising a cathode ray tube (1) with an elongated display screen (8) and a deflection system (9) is described. The deflection power is reduced by two means. The deflection system (9) is arranged to scan the lines in the direction of the short axis (22) of the display screen (8), and the cone portion (3) of the cathode ray tube (1) has an elongated cross-section (54) whose aspect ratio is larger than or equal to the aspect ratio of the display screen (8), thereby enabling the deflection system (9), and in particular the line deflection subsystem (12), to be positioned closer to the electron beam envelope (51), which reduces magnetic losses.

Abstract: The present invention relates to a yoke ring for use in a deflection unit in a cathode ray tube (CRT). The yoke ring having a neck and a flared side, and being defined by an inner and an outer contour. According to the invention, the inner contour is periodically deformed in the radial direction, the contour having at least two local minima and maxima. This deformation influences the magnetic field generated by the coils in the CRT, leading to improved front-of-screen performance. In particular, astigmatism, coma and raster errors are reduced.

Abstract: The present invention relates to a yoke ring for use in a deflection unit in a cathode ray tube (CRT), said yoke ring having a neck and a flared side, and being defined by an inner and an outer contour. According to the invention, the inner contour is periodically deformed in the radial direction, the contour having at least two local minima and maxima. This deformation influences the magnetic field generated by the coils in the CRT, leading to improved FOS performance. In particular, astigmatism, coma and raster errors are reduced.