← Back to Patent Explorer
US9276739B2 Active / In Force US ⏱️ 0.7 years remaining

Method and apparatus for encrypting/decrypting data

Assignee: Koninklijke Philips NV
•
Filing: 2007-06-29
•
Granted: 2016-03-01
•
Expires: 2027-06-29
📄 Original PDF 🌐 Google Patents 🔄 Sync Now

Abstract

Abstract A method of encrypting data using a first key and multiple encryption keys at least in part based on the first key. The method includes encoding the data into a redundant representation by distributing the information content of the data among a number of groups, each group being associated with a respective encryption key of the multiple encryption keys, each encryption key being associated with at least one group, the redundant representation allowing recovery of the data in the absence of the groups associated with the at least one of the multiple encryption keys, and encrypting each group by the respective associated encryption key.

Inventors

  • 👤 Mehmet Utku Celik
  • 👤 Boris Skoric
  • 👤 Pim Theo Tuyls

Bibliographic Details

Application Number —
Jurisdiction US
Data Source google_patents
Last Synchronized 2026-10-27 11:45
CPC Classifications
H; H04; H04L; H04L9/00; H04L9/08; H04L9/0816; H04L9/085; H04L63/00; H04L63/04; H04L63/0428; H04L63/0478; H04L9/0861; H04L2209/00; H04L2209/60

Claims Analysis

Total Claims: 33
Claim 1
Independent Claim 163 words
A method of encrypting data comprising: communicating, by at least one processor, with a biometric device configured to collect a noisy source of data; obtaining, by the at least one processor, a noisy source of key information based at least partially on the noisy source of data; generating, by the at least one processor, a first key based at least partially on the noisy source of key information; distributing, by the at least one processor, unique segments of the noisy source of key information across multiple encryption keys such that at least one of the multiple encryption keys include a segment that is not present in other encryption keys of the multiple encryption keys; encoding, by the at least one processor, the data by distributing the data redundantly among a number of groups, each group being associated with a respective encryption key of the multiple encryption keys; and encrypting, by the at least one processor, each group by the respective associated encryption key.
Claim 2
Independent Claim 163 words
A method of encrypting data comprising: communicating, by at least one processor, with a biometric device configured to collect a noisy source of data; obtaining, by the at least one processor, a noisy source of key information based at least partially on the noisy source of data; generating, by the at least one processor, a first key based at least partially on the noisy source of key information; distributing, by the at least one processor, unique segments of the noisy source of key information across multiple encryption keys such that at least one of the multiple encryption keys include a segment that is not present in other encryption keys of the multiple encryption keys; encoding, by the at least one processor, the data by distributing the data redundantly among a number of groups, each group being associated with a respective encryption key of the multiple encryption keys; and encrypting, by the at least one processor, each group by the respective associated encryption key.
Claim 3
Dependent Claim 28 words
The method of claim 1 , wherein the groups are configured to allow recovery of the data when an encryption key and decryption key pair do not correspond.
Claim 4
Dependent Claim 25 words
The method of claim 1 , wherein the multiple encryption keys comprise at least three encryption keys and the data is distributed across three groups.
Claim 5
Dependent Claim 18 words
The method of claim 1 , wherein key information used to form the respective encryption keys is disjunctive.
Claim 6
Dependent Claim 15 words
The method of claim 1 , wherein the noisy source of data comprises biometric information.
Claim 7
Dependent Claim 28 words
The method of claim 1 , wherein key information used to form a respective one of the multiple encryption keys comprises: noisy identity information, and noise-free identity information.
Claim 8
Dependent Claim 37 words
The method of claim 1 , wherein key information used to form each respective encryption key comprises: noisy information, and a descriptor identifying a relationship of the noisy information with one or more sources of key information.
Claim 9
Dependent Claim 60 words
The method of claim 1 , wherein the encoding further comprises at least one of: applying, by the at least one processor, a secret sharing scheme wherein the shares are distributed among groups, and incorporating, by the at least one processor, an error-detecting code in a respective group, the error-detecting code covering at least the data comprised in the group.
Claim 10
Dependent Claim 24 words
The method of claim 1 , wherein the encoding further comprises incorporating, by the at least one processor, an error-correcting code in the groups.
Claim 11
Dependent Claim 39 words
The method of claim 9 , wherein each group comprises multiple symbols, each multiple symbol of each group being part of a codeword of the error-correcting code, and every codeword comprising at most one symbol of the respective group.
Claim 12
Independent Claim 220 words
A method of decrypting encrypted data comprising: communicating, by at least one processor, with a biometric device configured to collect a noisy source of data; obtaining, by the at least one processor, a noisy source of key information based at least partially on the noisy source of data; generating, by the at least one processor, a first key and a second key for forming an estimate of an encryption/decryption key pair, wherein the second key comprises data from the noisy source of key information; decrypting, by the at least one processor, the encrypted data using multiple decryption keys in which each of the multiple decryption keys contain a unique segment of the noisy source of key information such that at least one of the multiple decryption keys includes a segment of the noisy source of key information that is not present in other decryption keys of the multiple decryption keys; decrypting, by the at least one processor, at least one or more encrypted groups using a respective decryption key of the multiple decryption keys that is associated with the encryption key used to encrypt the group; and decoding, by the at least one processor, the data from the at least one or more decrypted groups by extracting content related to the data from at least one or more decrypted groups.
Claim 13
Independent Claim 220 words
A method of decrypting encrypted data comprising: communicating, by at least one processor, with a biometric device configured to collect a noisy source of data; obtaining, by the at least one processor, a noisy source of key information based at least partially on the noisy source of data; generating, by the at least one processor, a first key and a second key for forming an estimate of an encryption/decryption key pair, wherein the second key comprises data from the noisy source of key information; decrypting, by the at least one processor, the encrypted data using multiple decryption keys in which each of the multiple decryption keys contain a unique segment of the noisy source of key information such that at least one of the multiple decryption keys includes a segment of the noisy source of key information that is not present in other decryption keys of the multiple decryption keys; decrypting, by the at least one processor, at least one or more encrypted groups using a respective decryption key of the multiple decryption keys that is associated with the encryption key used to encrypt the group; and decoding, by the at least one processor, the data from the at least one or more decrypted groups by extracting content related to the data from at least one or more decrypted groups.
Claim 14
Dependent Claim 54 words
The method of claim 11 , wherein decoding the data comprises at least one of: using, by the at least one processor, a secret sharing scheme on shares comprised in multiple decrypted groups, and validating, by the at least one processor, a respective group by verifying an error-detecting code incorporated in the decrypted group.
Claim 15
Dependent Claim 51 words
The method of claim 11 , wherein decoding the data comprises: error-correcting, by the at least one processor, at least one or more decrypted groups using an error-correcting code, and extracting, by the at least one processor, content related to the data in the at least one or more decrypted groups.
Claim 16
Independent Claim 148 words
An apparatus for encrypting data comprising: a biometric device configured to collect a noisy source of data; a memory; at least one processor coupled to the memory and the biometric device, the at least one processor being configured to: communicate with the biometric device; obtain a noisy source of key information based at least partially on the noisy source of data; generate a first key based at least partially on the noisy source of key information; distribute unique segments of the noisy source of key information across multiple encryption keys such that at least one of the multiple encryption keys include a segment that is not present in other encryption keys of the multiple encryption keys; distribute data redundantly among a number of groups, each group being associated with a respective encryption key of the multiple encryption keys; and encrypt each group using the respective associated encryption key.
Claim 17
Independent Claim 148 words
An apparatus for encrypting data comprising: a biometric device configured to collect a noisy source of data; a memory; at least one processor coupled to the memory and the biometric device, the at least one processor being configured to: communicate with the biometric device; obtain a noisy source of key information based at least partially on the noisy source of data; generate a first key based at least partially on the noisy source of key information; distribute unique segments of the noisy source of key information across multiple encryption keys such that at least one of the multiple encryption keys include a segment that is not present in other encryption keys of the multiple encryption keys; distribute data redundantly among a number of groups, each group being associated with a respective encryption key of the multiple encryption keys; and encrypt each group using the respective associated encryption key.
Claim 18
Independent Claim 202 words
An apparatus for decrypting encrypted data comprising: a biometric device configured to collect a noisy source of data; a memory; at least one processor coupled to the memory and the biometric device, the at least one processor configured to: communicate with the biometric device; obtain a noisy source of key information based at least partially on the noisy source of data; generate a first key and a second key forming an estimate of an encryption/decryption key pair, wherein the second key comprises data from the noisy source of key information; decrypt the encrypted data using multiple decryption keys in which each of the multiple decryption keys contain a unique segment of the noisy source of key information such that at least one of the multiple decryption keys includes a segment of the noisy source of key information that is not present in other decryption keys of the multiple decryption keys; decrypt at least one or more encrypted groups with the respective decryption key associated with the encryption key used to encrypt the group; and decode original data from the at least one or more decrypted groups by extracting content related to the original data from at least one or more decrypted groups.
Claim 19
Independent Claim 202 words
An apparatus for decrypting encrypted data comprising: a biometric device configured to collect a noisy source of data; a memory; at least one processor coupled to the memory and the biometric device, the at least one processor configured to: communicate with the biometric device; obtain a noisy source of key information based at least partially on the noisy source of data; generate a first key and a second key forming an estimate of an encryption/decryption key pair, wherein the second key comprises data from the noisy source of key information; decrypt the encrypted data using multiple decryption keys in which each of the multiple decryption keys contain a unique segment of the noisy source of key information such that at least one of the multiple decryption keys includes a segment of the noisy source of key information that is not present in other decryption keys of the multiple decryption keys; decrypt at least one or more encrypted groups with the respective decryption key associated with the encryption key used to encrypt the group; and decode original data from the at least one or more decrypted groups by extracting content related to the original data from at least one or more decrypted groups.
Claim 20
Dependent Claim 144 words
A non-transitory computer-readable medium storing a computer program, the computer program comprising instructions which, when executed, cause at least one processor to: communicate with a biometric device configured to collect a noisy source of data; obtain a noisy source of key information based at least partially on the noisy source of data; generate a first key based at least partially on the noisy source of key information; distribute unique segments of the noisy source of key information across multiple encryption keys such that at least one of the multiple encryption keys include a segment that is not present in other encryption keys of the multiple encryption keys; encode the data by distributing the data redundantly among a number of groups, each group being associated with a respective encryption key of the multiple encryption keys; and encrypt each group by the respective associated encryption key.
Claim 21
Dependent Claim 144 words
A non-transitory computer-readable medium storing a computer program, the computer program comprising instructions which, when executed, cause at least one processor to: communicate with a biometric device configured to collect a noisy source of data; obtain a noisy source of key information based at least partially on the noisy source of data; generate a first key based at least partially on the noisy source of key information; distribute unique segments of the noisy source of key information across multiple encryption keys such that at least one of the multiple encryption keys include a segment that is not present in other encryption keys of the multiple encryption keys; encode the data by distributing the data redundantly among a number of groups, each group being associated with a respective encryption key of the multiple encryption keys; and encrypt each group by the respective associated encryption key.
Claim 22
Independent Claim 160 words
An apparatus for encrypting data comprising: a biometric device configured to collect a noisy source of data; a memory; at least one processor coupled to the memory and the biometric device, the at least one processor being configured to: communicate with the biometric device to generate a noisy feature vector based on the noisy source of data, the noisy feature vector representing an estimate of at least one physical feature of a user; generate multiple encryption keys such that each encryption key is based at least partially on a unique segment of the noisy feature vector; distribute data among a number of groups such that each group comprises at least a partially redundant representation of the data, the groups allowing recovery of the data, if decryption of some of the groups is unsuccessful, each group being associated with an encryption key of the multiple encryption keys; and encrypt each group using an associated encryption key of the multiple encryption keys.
Claim 23
Independent Claim 160 words
An apparatus for encrypting data comprising: a biometric device configured to collect a noisy source of data; a memory; at least one processor coupled to the memory and the biometric device, the at least one processor being configured to: communicate with the biometric device to generate a noisy feature vector based on the noisy source of data, the noisy feature vector representing an estimate of at least one physical feature of a user; generate multiple encryption keys such that each encryption key is based at least partially on a unique segment of the noisy feature vector; distribute data among a number of groups such that each group comprises at least a partially redundant representation of the data, the groups allowing recovery of the data, if decryption of some of the groups is unsuccessful, each group being associated with an encryption key of the multiple encryption keys; and encrypt each group using an associated encryption key of the multiple encryption keys.
Claim 24
Dependent Claim 25 words
The apparatus for encrypting data of claim 17 , wherein each encryption key is further based on a unique segment of noise free identity information.
Claim 25
Dependent Claim 54 words
The apparatus for encrypting data of claim 17 , wherein decryption of a given group is unsuccessful when there is a difference between the noisy feature vector used to generate the encryption key for encrypting the given group and the noisy feature vector used to generate a decryption key for decrypting the given group.
Claim 26
Dependent Claim 25 words
The apparatus for encrypting data of claim 17 , wherein recovery of the data is allowed when decryption of at most three groups is unsuccessful.
Claim 27
Dependent Claim 20 words
The apparatus for encrypting data of claim 17 , wherein each group of data further comprises an error detecting code.
Claim 28
Independent Claim 172 words
An apparatus for decrypting data comprising: a biometric device to collect a noisy source of data; a memory; at least one processor coupled to the memory and the biometric device, the at least one processor being configured to: communicate with the biometric device to generate a noisy feature vector based on the noisy source of data, the noisy feature vector representing an estimate of at least one physical feature of a user; generate multiple decryption keys such that each decryption key is based at least partially on a unique segment of the noisy feature vector; decrypt a number of groups of data using at least one of the multiple decryption keys, each group of data comprising at least a partially redundant portion of original data such that recovery of the original data is possible, if decryption of some of the groups is unsuccessful; and recover the original data by extracting information from at least one encrypted group of data that is successfully decrypted with at least one of the multiple decryption keys.
Claim 29
Independent Claim 172 words
An apparatus for decrypting data comprising: a biometric device to collect a noisy source of data; a memory; at least one processor coupled to the memory and the biometric device, the at least one processor being configured to: communicate with the biometric device to generate a noisy feature vector based on the noisy source of data, the noisy feature vector representing an estimate of at least one physical feature of a user; generate multiple decryption keys such that each decryption key is based at least partially on a unique segment of the noisy feature vector; decrypt a number of groups of data using at least one of the multiple decryption keys, each group of data comprising at least a partially redundant portion of original data such that recovery of the original data is possible, if decryption of some of the groups is unsuccessful; and recover the original data by extracting information from at least one encrypted group of data that is successfully decrypted with at least one of the multiple decryption keys.
Claim 30
Dependent Claim 25 words
The apparatus for decrypting data of claim 22 , wherein each decryption key is further based on a unique segment of noise free identity information.
Claim 31
Dependent Claim 54 words
The apparatus for decrypting data of claim 22 , wherein decryption of a given group is unsuccessful when there is a difference between the noisy feature vector used to generate an encryption key for encrypting the given group and the noisy feature vector used to generate the decryption key for decrypting the given group.
Claim 32
Dependent Claim 25 words
The apparatus for decrypting data of claim 22 , wherein recovery of the data is allowed when decryption of at most three groups is unsuccessful.
Claim 33
Dependent Claim 20 words
The apparatus for decrypting data of claim 22 , wherein each group of data further comprises an error detecting code.

USPTO Annuity & Maintenance Windows

Annuity Stage Window Opens Payment Deadline Surcharge Period Until Estimated Fee Status
3.5 Years (Year 4) 2019-03-01 2019-08-31 2020-03-01 $2000.00 Window Closed / Lapsed
7.5 Years (Year 8) 2023-03-01 2023-08-31 2024-03-01 $3760.00 Window Closed / Lapsed
11.5 Years (Year 12) 2027-03-01 2027-08-31 2028-03-01 $7700.00 Pending Window

Assigned Categories & Tags

No categories assigned to this patent yet.

Assign Category Tag