Daniel K Bailey

US Patent:

8312519, Nov 13, 2012

Filed:

Sep 30, 2010

Appl. No.:

12/895130

Inventors:

Daniel V Bailey - Pepperell MA, US
John G. Brainard - Sudbury MA, US
William M. Duane - Westford MA, US
Michael J. O'Malley - Lowell MA, US
Robert S. Phipott - Andover MA, US

International Classification:

G06F 7/04
H04L 9/00

US Classification:

726 6, 726 5, 726 7, 726 9, 726 10, 726 20, 713184, 713185, 713156, 713168, 380255, 380259, 380262

Abstract:

A method, system, and apparatus for agile generation of one time passcodes (OTPs) in a security environment, the security environment having a token generator comprising a token generator algorithm and a validator, the method comprising generating a OTP at the token generator according to a variance technique; wherein the variance technique is selected from a set of variance techniques, receiving the OTP at a validator, determining, at the validator, the variance technique used by the token generator to generate the OTP, and determining whether to validate the OTP based on the OTP and variance technique.

US Patent:

8378786, Feb 19, 2013

Filed:

Feb 5, 2007

Appl. No.:

11/671275

Inventors:

Daniel Vernon Bailey - Pepperell MA, US
Ari Juels - Brookline MA, US

Assignee:

EMC Corporation - Hopkinton MA

International Classification:

H04Q 5/22
G05B 19/00
H04K 1/00
H04L 9/00

US Classification:

340 101, 340 58, 340 1041, 380258, 380260

Abstract:

Enhanced security is provided in an RFID system comprising a plurality of RFID devices and at least one reader which communicates with one or more of the devices. In one aspect of the invention, a first command is transmitted from the reader to write a first data unit to a memory of given one of the RFID devices. A reply is received in the reader from the given RFID device indicating that a second data unit determined based on contents of the first data unit is available in the memory to be accessed by the reader. A second command is transmitted from the reader to the given RFID device to allow the reader to read the memory to thereby obtain the second data unit. The first and second data units comprise information exchanged as part of a cryptographic protocol carried out between the reader and the given RFID device. In an illustrative embodiment, the cryptographic protocol may comprise a challenge-response authentication protocol.

US Patent:

8452965, May 28, 2013

Filed:

Jun 29, 2010

Appl. No.:

12/826466

Inventors:

Robert W. Griffin - Hollis NH, US
Daniel V. Bailey - Pepperell MA, US
Joshua A. Rosenthol - Centreville VA, US

Assignee:

EMC Corporation - Hopkinton MA

International Classification:

G06F 21/00

US Classification:

713172, 713159, 726 9, 726 20

Abstract:

A technique of protecting a datum within a set of sensitive data is presented. In this technique, the datum includes a first set of bits satisfying a first set of constraints, and a computer receives the set of sensitive data from an authorized client. The technique involves producing a token corresponding to the datum, the token including a second set of bits distinct from the first set of bits, the second set of bits satisfying a second set of constraints, the second set of constraints being a superset of the first set of constraints. The technique further involves storing the datum and the corresponding token. The technique further involves sending the token to the authorized client, the authorized client enabled to perform, using the second set of bits, a verification that the token satisfies the second set of constraints, the verification being performed apart from the database.

US Patent:

8458483, Jun 4, 2013

Filed:

Jun 30, 2009

Appl. No.:

12/495447

Inventors:

Daniel Bailey - Pepperell MA, US
Marco Ciaffi - Sudbury MA, US
William Duane - Westford MA, US
Ari Juels - Brookline MA, US
John O'Brien - Boxborough MA, US

Assignee:

EMC Corporation - Hopkinton MA

International Classification:

G06F 21/00
G06F 12/14

US Classification:

713182, 713168, 713185, 713190, 713193, 340 101, 340 1033, 340 1034, 3405721

Abstract:

A technique of message-passing using shared memory of an RF tag involves storing a message in the shared memory while a security processor of the RF tag is in a sleep mode, the security processor being constructed and arranged to access the shared memory when the security processor is in a wakened mode. The technique further involves transitioning the security processor from the sleep mode to the wakened mode, and processing the message from the shared memory using the security processor after the security processor has transitioned from the sleep mode to the wakened mode. If the security processor is awakened only as needed (rather than remain in the wakened mode), lifetime of a battery which powers the security processor can be maximized.

US Patent:

8495372, Jul 23, 2013

Filed:

Nov 13, 2007

Appl. No.:

11/939232

Inventors:

Daniel Vernon Bailey - Pepperell MA, US
John G. Brainard - Sudbury MA, US
Ari Juels - Brookline MA, US

Assignee:

EMC Corporation - Hopkinton MA

International Classification:

H04L 9/32
H04L 9/00

US Classification:

713171, 713172, 380277

Abstract:

In one aspect, a first processing device, which may be an authentication token, establishes a shared key through a pairing protocol carried out between the first processing device and a second processing device. The pairing protocol also involves communication between the second processing device and an authentication server. As part of the pairing protocol, the first processing device sends identifying information to the second processing device, and the second processing device utilizes the identifying information to obtain the shared key from the authentication server. The first processing device encrypts authentication information utilizing the shared key, and transmits the encrypted authentication information from the first processing device to the second processing device. The second processing device utilizes the shared key to decrypt the encrypted authentication information.

US Patent:

8601553, Dec 3, 2013

Filed:

Jun 29, 2010

Appl. No.:

12/826481

Inventors:

Robert W. Griffin - Hollis NH, US
Daniel V. Bailey - Pepperell MA, US
Joshua A. Rosenthol - Centreville VA, US

Assignee:

EMC Corporation - Hopkinton MA

International Classification:

G06F 7/04

US Classification:

726 5, 726 2, 726 3, 713150, 713168, 713170, 709227

Abstract:

A technique of imposing access control policies is presented. The technique comprises receiving a token which is associated with a datum by a tokenization server. The technique also includes generating an access control result based on at least a portion of the token. The technique further includes imposing a first access control policy which includes refraining from sending an access request to the tokenization server when the access control result has a first value and a second access control policy which includes sending an access request to the tokenization server, the access request being constructed and arranged to request access to the datum when the access control result has a second value which is different from the first value.

US Patent:

8607045, Dec 10, 2013

Filed:

Sep 11, 2006

Appl. No.:

11/530655

Inventors:

Daniel Vernon Bailey - Pepperell MA, US
John G. Brainard - Sudbury MA, US
Michael Szydlo - Brighton MA, US

Assignee:

EMC Corporation - Hopkinton MA

International Classification:

G06F 21/00

US Classification:

713168, 713169

Abstract:

In a system comprising a transient storage device (TSD) or other type of peripheral configured for communication with a host device, a first one-time password or other type of code is generated in the peripheral and transmitted to the host device. The first code is presented by the host device to an authentication server for authentication. The host device receives a second one-time password or other type of code from the authentication server and transmits it to the peripheral for authentication.

US Patent:

8618913, Dec 31, 2013

Filed:

Oct 19, 2010

Appl. No.:

12/907625

Inventors:

Daniel V. Bailey - Pepperell MA, US
John Brainard - Sudbury MA, US
Ari Juels - Brookline MA, US
Kevin D. Bowers - Melrose MA, US

Assignee:

EMC Corporation - Hopkinton MA

International Classification:

H04Q 5/22

US Classification:

340 101

Abstract:

An RFID enabled mobile device is configured to provide a secure release of RFID information. The RFID enabled mobile device, such as an RFID enabled cellular telephone, includes a set of sensors, such as a camera, one or more accelerometers, a wireless transceiver configured to send and receive data with an Internet device, and a global positioning system (GPS) receiver. The RFID enabled mobile device utilizes sensor attributes or information from one or more sensor of the set of sensors and, based upon the sensor attributes, controls the release of RFID information and/or other authentication data to an RFID interrogation system. In essence, the RFID enabled mobile device leverages from the conventional sensors typically incorporated as part of the mobile device and uses contextual data from its sensors and communication partners to make security decisions regarding the release of RFID information.