Daniel T Bailey

US Patent:

7069287, Jun 27, 2006

Filed:

Sep 19, 2001

Appl. No.:

09/956755

Inventors:

Christof Paar - Cologne, DE
Adam D Woodbury - Billerica MA, US
Daniel V Bailey - Burlington MA, US

Assignee:

Worcester Polytechnic Institute - Worcester MA

International Classification:

G06F 7/00

US Classification:

708492, 380 28

Abstract:

A method for implementing an elliptic curve or discrete logarithm cryptosystem on inexpensive microprocessors is disclosed which provides for advantageous finite field computational performance on microprocessors having limited computational capabilities. The method can be employed with a variety of commercial and industrial imbedded microprocessor applications such as consumer smart cards, smart cards, wireless devices, personal digital assistants, and microprocessor controlled equipment. In one embodiment, a Galois Field (GF) implementation based on the finite field GF((2−17)) is disclosed for an Intel 8051 microcontroller, a popular commercial smart card microprocessor. The method is particularly suited for low end 8-bit and 16-bit processors either with or without a coprocessor. The method provides for fast and efficient finite field multiplication on any microprocessor or coprocessor device having intrinsic computational characteristics such that a modular reduction has a greater computational cost than double precision, long number additions or accumulations. The disclosed method offers unique computational efficiencies in requiring only infrequent subfield modular reduction and in employing an adaptation of Itoh and Tsujii's inversion algorithm for the group operation.

US Patent:

7920050, Apr 5, 2011

Filed:

Jul 29, 2005

Appl. No.:

11/193729

Inventors:

Ari Juels - Brookline MA, US
Daniel Vernon Bailey - Pepperell MA, US
Paul Syverson - Silver Spring MD, US

Assignee:

EMC Corporation - Hopkinton MA

International Classification:

H04Q 5/22

US Classification:

340 104, 340 101

Abstract:

A proxy device is disclosed for use in an RFID system comprising a plurality of RFID devices and at least one reader which communicates with the proxy device and one or more of the RFID devices. The proxy device acquires information characterizing at least a given one of the RFID devices, controls the given RFID device so as to at least partially prevent the given RFID device from being read by the reader, and communicates with the reader in a manner which simulates the given RFID device. This advantageously allows the proxy device to implement privacy policies of arbitrary sophistication on behalf of the given RFID device. The proxy device subsequently releases control of the given RFID device so as to permit the given RFID device to again be read by the reader.

US Patent:

8312519, Nov 13, 2012

Filed:

Sep 30, 2010

Appl. No.:

12/895130

Inventors:

Daniel V Bailey - Pepperell MA, US
John G. Brainard - Sudbury MA, US
William M. Duane - Westford MA, US
Michael J. O'Malley - Lowell MA, US
Robert S. Phipott - Andover MA, US

International Classification:

G06F 7/04
H04L 9/00

US Classification:

726 6, 726 5, 726 7, 726 9, 726 10, 726 20, 713184, 713185, 713156, 713168, 380255, 380259, 380262

Abstract:

A method, system, and apparatus for agile generation of one time passcodes (OTPs) in a security environment, the security environment having a token generator comprising a token generator algorithm and a validator, the method comprising generating a OTP at the token generator according to a variance technique; wherein the variance technique is selected from a set of variance techniques, receiving the OTP at a validator, determining, at the validator, the variance technique used by the token generator to generate the OTP, and determining whether to validate the OTP based on the OTP and variance technique.

US Patent:

8378786, Feb 19, 2013

Filed:

Feb 5, 2007

Appl. No.:

11/671275

Inventors:

Daniel Vernon Bailey - Pepperell MA, US
Ari Juels - Brookline MA, US

Assignee:

EMC Corporation - Hopkinton MA

International Classification:

H04Q 5/22
G05B 19/00
H04K 1/00
H04L 9/00

US Classification:

340 101, 340 58, 340 1041, 380258, 380260

Abstract:

Enhanced security is provided in an RFID system comprising a plurality of RFID devices and at least one reader which communicates with one or more of the devices. In one aspect of the invention, a first command is transmitted from the reader to write a first data unit to a memory of given one of the RFID devices. A reply is received in the reader from the given RFID device indicating that a second data unit determined based on contents of the first data unit is available in the memory to be accessed by the reader. A second command is transmitted from the reader to the given RFID device to allow the reader to read the memory to thereby obtain the second data unit. The first and second data units comprise information exchanged as part of a cryptographic protocol carried out between the reader and the given RFID device. In an illustrative embodiment, the cryptographic protocol may comprise a challenge-response authentication protocol.

US Patent:

8433914, Apr 30, 2013

Filed:

Jun 22, 2010

Appl. No.:

12/820829

Inventors:

Robert S. Philpott - Andover MA, US
Yong Qiao - Acton MA, US
Michael J. O'Malley - Lowell MA, US
Daniel V. Bailey - Pepperell MA, US

Assignee:

EMC Corporation - Hopkinton MA

International Classification:

H04L 9/32

US Classification:

713180, 713176

Abstract:

A transaction system combats malware and phishing-based MitM attacks on transaction processing systems by using digital signatures to integrity-protect the user-verified transaction data. With this system, a user submits a transaction from a client device (e. g. , desktop web browser) over a communications channel to a server device, such as a transaction server. Before accepting the transaction, the transaction server securely delivers all relevant transaction data to a second device (e. g. , the signing device), such as a smart phone, in the possession of the user. The signing device has its own distinct communication channel with the server device. The user verifies the data and the signing device creates a digital signature value for the transaction. The user submits the signature to the transaction server to confirm the transaction with the transaction server.

US Patent:

8458483, Jun 4, 2013

Filed:

Jun 30, 2009

Appl. No.:

12/495447

Inventors:

Daniel Bailey - Pepperell MA, US
Marco Ciaffi - Sudbury MA, US
William Duane - Westford MA, US
Ari Juels - Brookline MA, US
John O'Brien - Boxborough MA, US

Assignee:

EMC Corporation - Hopkinton MA

International Classification:

G06F 21/00
G06F 12/14

US Classification:

713182, 713168, 713185, 713190, 713193, 340 101, 340 1033, 340 1034, 3405721

Abstract:

A technique of message-passing using shared memory of an RF tag involves storing a message in the shared memory while a security processor of the RF tag is in a sleep mode, the security processor being constructed and arranged to access the shared memory when the security processor is in a wakened mode. The technique further involves transitioning the security processor from the sleep mode to the wakened mode, and processing the message from the shared memory using the security processor after the security processor has transitioned from the sleep mode to the wakened mode. If the security processor is awakened only as needed (rather than remain in the wakened mode), lifetime of a battery which powers the security processor can be maximized.

US Patent:

8495372, Jul 23, 2013

Filed:

Nov 13, 2007

Appl. No.:

11/939232

Inventors:

Daniel Vernon Bailey - Pepperell MA, US
John G. Brainard - Sudbury MA, US
Ari Juels - Brookline MA, US

Assignee:

EMC Corporation - Hopkinton MA

International Classification:

H04L 9/32
H04L 9/00

US Classification:

713171, 713172, 380277

Abstract:

In one aspect, a first processing device, which may be an authentication token, establishes a shared key through a pairing protocol carried out between the first processing device and a second processing device. The pairing protocol also involves communication between the second processing device and an authentication server. As part of the pairing protocol, the first processing device sends identifying information to the second processing device, and the second processing device utilizes the identifying information to obtain the shared key from the authentication server. The first processing device encrypts authentication information utilizing the shared key, and transmits the encrypted authentication information from the first processing device to the second processing device. The second processing device utilizes the shared key to decrypt the encrypted authentication information.

US Patent:

8499157, Jul 30, 2013

Filed:

Sep 29, 2010

Appl. No.:

12/893684

Inventors:

Ari Juels - Brookline MA, US
Daniel Bailey - Pepperell MA, US

Assignee:

EMC Corporation - Hopkinton MA

International Classification:

H04L 29/06

US Classification:

713171, 380262, 380273, 380277, 380278, 380 44

Abstract:

A first device (e. g. smartphone) manages a first key (e. g. password) required for a security operation with a second device (e. g. , WWW server) by calculating and storing a key seed using the first key and a second key shared with a third device (e. g. , wireless headset). Later (e. g. , upon losing communication with the third device), at least a portion of the first and second keys is/are erased to prevent the security operation. Subsequently (e. g. , when communication with third device is reestablished), the first key is regenerated by (1) receiving a key hint from the third device, (2) regenerating the second key using the key hint and a known message used to create the key hint, and (3) regenerating the first key using the key seed and the regenerated second key.