Office Action 3: Notice of Allowance (2025-02-20)

CLAIMS:
Listing of Claims:

This listing of claims will replace all prior versions, and listings, of claims in the application.

1\. (Currently Amended) A PUF circuit comprising one or more imaging sensors, the PUF circuit comprising a processor configured to receive information about a subset of sensor pixels of an image sensor, the PUF circuit being configured to apply one or more challenges to the subset of sensor pixels under spatially uniform conditions, the PUF circuit comprising a receiver configured to receive output signal values from the subset of sensor pixels, in response to a challenge applied to said subset of sensor pixels, wherein the PUF circuit comprises a bidirectional data communication channel, and the PUF circuit is configured to:determine one or more statistical moments of a noise distribution of said output signal values;
further receive input data IN through said data communication channel from one or more external data sources using the data communication channel, said data IN relating to the external environment in which the PUF circuit is used;
determine a PUF response R \[\[to\]\] from said one or more statistical moments and said selected input data IN received from said one or more external data sources, said response being a digital signature, wherein the input Data IN are used to handle of the PUF circuit,
wherein the PUF circuit is further configured to communicate data OUT to one or more external entities using said data communication channel, the data OUT being related to internal information of the circuit.

2-3. Cancelled.

4\. (Previously Presented) The circuit of Claim 1, wherein the received data IN comprises information leading directly or indirectly to disabling of the PUF circuit.

5\. (Previously Presented) The circuit of Claim 1, wherein the received data IN, or parts thereof, serves as or contributes to a challenge of the PUF circuit, said circuit providing a response in response to said one or more challenges.

6\. (Previously Presented) The circuit of Claim 1, wherein the received data IN, or parts thereof, signs a challenge of the PUF circuit.

7\. (Currently Amended) The circuit of Claim \[\[2\]\] 1, wherein said at least one external entities comprise at least one computer or another PUF circuit.

8\. (Currently Amended) The circuit of Claim 1, wherein an applied challenge C is configured to modify and/or control\[\[s\]\] and/or influence\[\[s\]\] communicated data OUT.

9\. (Currently Amended) The circuit of Claim 1, wherein said communicated data OUT is configured to modify an applied challenge C.

10\. (Currently Amended) The circuit of Claim 1, wherein said data IN is configured to modify the response R, while or after the response R is produced.

11\. (Currently Amended) The circuit of Claim 1, wherein the response R is configured to retroact\[\[s\]\] on data IN.

12\. (Currently Amended) The circuit of Claim 1, wherein the response R is configured to modify the challenge C.

13\. (Currently Amended) A system comprising two or more PUF circuits according to Claim 1, the PUFs circuits comprising a first PUF circuit and a second PUF circuit, wherein the communicated data OUT of a first PUF circuit is taken as an input data IN by \[\[a\]\] the second PUF circuit.

14\. (Previously Presented) A system comprising two or more PUF circuits according to Claim 1, the PUFs circuits comprising a first PUF circuit and a second PUF circuit, wherein the response R of a first circuit is taken as an input data IN by a second circuit.

15\. (Previously Presented) A system comprising two or more PUF circuits according to Claim 1, the PUFs circuits comprising a first PUF circuit and a second PUF circuit, wherein communicated data OUT of a first circuit is taken as a challenge C by a second circuit.

16\. (Previously Presented) A system comprising two or more PUF circuits according to Claim 1, the PUFs circuits comprising a first PUF circuit and a second PUF circuit, wherein the response R of a first circuit is taken as a challenge C by a second circuit.

17\. (Currently Amended) A method for generating a digital signature, the method being implemented by a PUF circuit comprising one or more imaging sensors, the method comprising receiving information about a subset of sensor pixels of an imaging sensor, applying one or more challenges to the subset of sensor pixels under spatially uniform conditions, and receiving output signal values from the subset of sensor pixels, in response to a challenge applied to said subset of sensor pixels,wherein the PUF circuit comprises a bidirectional data communication channel, andwherein the method comprises:
determining one or more statistical properties of a noise distribution of said output signal values\[\[ \]\];
receiving input data IN from one or more external data sources, through said data communication channel, said data IN relating to the external environment in which the PUF circuit is used;
determining a PUF response R from said one or more statistical properties and selected input data IN received from said one or more external data sources, said response being a digital signature,
wherein the input Data IN are used to handle of the PUF circuit.

wherein the method comprises communicating data OUT to one or more external entities using said data communication channel, the data OUT being related to internal information of the circuit.

18\. Cancelled.

19\. (New) The circuit of claim 1, wherein the processor is configured to determine the statistical moment of order i of the temporal distribution of the output signal value of the each sensor pixel, the processor being further configured to determine one or more one or more outlier sensor pixels, the outliers sensor pixels being pixels whose ith order statistical moment has a difference with the mean value of the spatial distribution of the chosen moment over the subset superior in absolute value to a threshold, the ith order statistical moment of one sensor pixel being estimated on the temporal distribution associated to this sensor pixel, the processor being further configured to generate said identifier from the determined outliers' pixels.

20\. (New) The circuit of claim 1, wherein the processor is configured to:for each pixel of the subset of sensor pixels, determine the statistical moment of order i of the temporal distribution of the output signal value of each sensor pixel; and
determine one or more pathological sensor pixels, the pathological pixels being pixels whose sum of the distances of values to all the other pixels of the subset is greater than a threshold, the distance between two sensor pixels being determined by the difference of the ith statistical moment values of the two temporal distributions associated to the pixels obtained when challenging the subset of sensor pixels under uniform conditions,
the processor being further configured to generate said identifier from the determined pathological sensor pixels.

OFFICE ACTION:
DETAILED ACTION
Notice of Pre-AIA  or AIA  Status
The present application, filed on or after March 16, 2013, is being examined under the first inventor to file provisions of the AIA .
Continued Examination Under 37 CFR 1.114
A request for continued examination under 37 CFR 1.114, including the fee set forth in 37 CFR 1.17(e), was filed in this application after final rejection.  Since this application is eligible for continued examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1.17(e) has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on October 25, 2024 has been entered.
Response to Amendment
The amendment filed on September 23, 2024 has been entered.
Claims 1, 7-13, and 17 have been amended.
Claim 2-3 have been canceled.
Claims 19-20 have been added.
Response to Arguments
Applicant’s arguments filed on September 23, 2024 that the prior art of record fails to disclose the subject matter of the independent claims, as amended, are persuasive.
Allowable Subject Matter
Claims 1, 4-8, 10-17, and 19-20 are allowed. The following is the examiner’s statement of reasons for allowance:
In interpreting the currently amended claims, in light of the specification, the Examiner finds the claimed invention to be patentably distinct from the prior art of record.
1/ The closest prior art of Bauer et al. (Patent No. US 10,256,983) discloses: various technologies pertaining to authentication of integrated circuits by using external factors to affect or modify an output of a physically unclonable function (PUF) circuit. In an example, the output of the PUF circuit in response to a challenge signal can be sensitive to changes in environmental factors. In another example, the output of the PUF circuit can be sensitive to user-selectable configuration parameters of the PUF circuit. In yet another example, the output of the PUF circuit can be modified by additional circuitry external to the PUF circuit based upon one or more selectable or configurable inputs. A PUF-based device authentication system that uses external factors as authentication inputs to affect a challenge response of the device authentication system can enhance authentication capabilities by permitting multi-factor authentication (See Abstract).
2/ The closest prior art of Okura et al. (Pub. No. US 2021/0127080) discloses: a solid-state imaging device includes a pixel part, a reading part for reading a pixel signal from the pixel part and a response data generating part including a fuzzy extractor. The response data generating part generates response data including a unique key in association with at least one selected from among variation information of pixels and variation information of the reading part. The response data generating part generates, when regenerating a key, a unique key using helper data acquired in generation of an initial key, variation information acquired in the regeneration of the key, and reliability information determined based on the variation information acquired in the regeneration of the key (See Abstract).
3/ The closest prior art of Flikkema et al. (Pub. No. US 2020/0045033) discloses: a method and system that generates a giant ternary key as a combination of multiple authentication keys such as passwords, pin codes, physically unclonable function (PUF) challenges, or other binary data streams. The longest key is kept as the original binary stream. The following keys are first converted into a decimal data stream and used to insert ternary states inside the original binary stream with an edit distance algorithm. The giant ternary key can be stored in the memory for future authentication. For example, the giant ternary key can be generated, based at least on one or more PUFs embodied in a memory device, as a PUF challenge later used in a challenge response pair to authenticate the memory device. The method reduces the efficiency of sequential attacks because it eliminates partial authentications with a single factor; the entropy of a giant ternary key can be much higher than the entropy of separate binary keys combined (See Parag. [0020]).
The prior art references above, individually or in combination, do not disclose all the claimed limitations. For at least these reasons, claims 1, 4-8, 10-17, and 19-20 are allowed.
Examiner’s amendment
An examiner’s amendment to the record appears below. Should the changes and/or additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 1.312. To ensure consideration of such an amendment, it MUST be submitted no later than the payment of the issue fee.
Authorization for this examiner’s amendment was given by Applicant’s representative Katharine Domitrovich Registration No. 77,712.
The application is amended as follows:
1. (Currently amended) A PUF circuit comprising one or more imaging sensors, the PUF circuit comprising a processor configured to receive information about a subset of sensor pixels of an image sensor, the PUF circuit being configured to apply one or more challenges to the subset of sensor pixels under spatially uniform conditions, the PUF circuit comprising a receiver configured to receive output signal values from the subset of sensor pixels, in response to a challenge applied to said subset of sensor pixels, wherein the PUF circuit comprises a bidirectional data communication channel, and the PUF circuit is configured to:
determine one or more statistical moments of a noise distribution of said output signal values;
further receive input data IN through said data communication channel from one or more external data sources using the data communication channel, said data IN relating to an external environment in which the PUF circuit is used;
determine a PUF response R from said one or more statistical moments and said selected input data IN received from said one or more external data sources, said response being a digital signature, wherein the input Data IN are used to handle of the PUF circuit,
wherein the PUF circuit is further configured to communicate data OUT to one or more external entities using said data communication channel, the data OUT being related to internal information of the circuit; and wherein said communicated data OUT is configured to modify an applied challenge C.
2-3. Cancelled.
4. (Previously Presented) The circuit of Claim 1, wherein the received data IN comprises information leading directly or indirectly to disabling of the PUF circuit.
5. (Previously Presented) The circuit of Claim 1, wherein the received data IN, or parts thereof, serves as or contributes to a challenge of the PUF circuit, said circuit providing a response in response to said one or more challenges.
6. (Previously Presented) The circuit of Claim 1, wherein the received data IN, or parts thereof, signs a challenge of the PUF circuit.
7. (Previously Presented) The circuit of Claim 1, wherein said at least one external entities comprise at least one computer or another PUF circuit.
8. (Currently Amended) The circuit of Claim 1, wherein the applied challenge C is configured to modify and/or control and/or influence communicated data OUT.
9. Cancelled.
10. (Previously Presented) The circuit of Claim 1, wherein said data IN is configured to modify the response R, while or after the response R is produced.
11. (Previously Presented) The circuit of Claim 1, wherein the response R is configured to retroact on data IN.
12. (Previously Presented) The circuit of Claim 1, wherein the response R is configured to modify the challenge C.
13. (Currently Amended) A system comprising two or more PUF circuits according to Claim 1, the PUFs circuits comprising a first PUF circuit and a second PUF circuit, wherein the communicated data OUT of the first PUF circuit is taken as an input data IN by the second PUF circuit.
14. (Currently Amended) A system comprising two or more PUF circuits according to Claim 1, the PUFs circuits comprising a first PUF circuit and a second PUF circuit, wherein the response R of the first circuit is taken as an input data IN by the second circuit.
15. (Currently Amended) A system comprising two or more PUF circuits according to Claim 1, the PUFs circuits comprising a first PUF circuit and a second PUF circuit, wherein communicated data OUT of the first circuit is taken as a challenge C by the second circuit.
16. (Currently Amended) A system comprising two or more PUF circuits according to Claim 1, the PUFs circuits comprising a first PUF circuit and a second PUF circuit, wherein the response R of the first circuit is taken as a challenge C by the second circuit.
17. (Currently Amended) A method for generating a digital signature, the method being implemented by a PUF circuit comprising one or more imaging sensors, the method comprising receiving information about a subset of sensor pixels of an imaging sensor, applying one or more challenges to the subset of sensor pixels under spatially uniform conditions, and receiving output signal values from the subset of sensor pixels, in response to a challenge applied to said subset of sensor pixels, wherein the PUF circuit comprises a bidirectional data communication channel, and
wherein the method comprises:
determining one or more statistical properties of a noise distribution of said output signal values;
receiving input data IN from one or more external data sources, through said data communication channel, said data IN relating to an external environment in which the PUF circuit is used;
determining a PUF response R from said one or more statistical properties and selected input data IN received from said one or more external data sources, said response being a digital signature,
wherein the input Data IN are used to handle of the PUF circuit,
wherein the method comprises communicating data OUT to one or more external entities using said data communication channel, the data OUT being related to internal information of the circuit; and wherein said communicated data OUT is configured to modify an applied challenge C.
18. Cancelled.
19. (Currently Amended) The circuit of claim 1, wherein the processor is configured to determine the statistical moment of order i of a temporal distribution of the output signal value of the each sensor pixel, the processor being further configured to determine one or more an identifier from the determined outliers' pixels.
20. (Currently Amended) The circuit of claim 1, wherein the processor is configured to:
for each pixel of the subset of sensor pixels, determine the statistical moment of order i of a temporal distribution of the output signal value of each sensor pixel; and
determine one or more pathological sensor pixels, the pathological pixels being pixels whose sum of statistical moment values of the two temporal distributions associated to the pixels obtained when challenging the subset of sensor pixels under uniform conditions,
the processor being further configured to generate an identifier from the determined pathological sensor pixels.
Conclusion

APPLICANT REBUTTAL: REMARKS Claims 1-17 are pending, with claims 1 and 17 being independent. Claim 18 has been cancelled. Claims 1-17 stand rejected. Claim 17 stands objected. Claims 1, 7-13, and 17 are amended herein. Claims 2-3 are cancelled herein. Claims 19-20 are new. No new subject matter has been added. Claim Objections Claim 17 stands objected to because of the following informalities. In particular, the Office asserts that, "[i]n claim 17, line 8, 'the noise distribution' should read 'the a noise distribution."' Office Action, at 4. Applicant has amended claim 17 in the manner suggested by the Office. As such, withdrawal of the objection to claim 17 is respectfully requested. Claim Rejections - 35 U.S.C. § 102 Claims 1-17 stand rejected under 35 U.S.C. § 102(a)(1) as being anticipated by U.S. Publication No. 2018/0006830 (hereinafter "Cambou"). Office Action, at 4. In order for a reference to anticipate a claim, the reference must teach each and every feature of the claim. Here, Cambou does not teach each and every feature of the claims. Without conceding the propriety of the rejection, Applicant has amended claim 1. Amended independent claim 1 recites, "[a] PUF circuit comprising one or more imaging sensors, the PUF circuit comprising a processor configured to receive information about a subset of sensor pixels of an image sensor, the PUF circuit being configured to apply one or more challenges to the subset of sensor pixels under spatially uniform conditions, the PUF circuit comprising a receiver configured to receive output signal values from the subset of sensor pixels, in response to a challenge applied to said subset of sensor pixels, wherein the PUF circuit comprises a bidirectional data communication channel, and the PUF circuit is configured to: determine one or more statistical moments of a noise distribution of said output signal values; further receive input data IN through said data communication channel from one or more external data sources using the data communication channel, said data IN relating to the external environment in which the PUF circuit is used; determine a PUF response R from said one or more statistical moments and said selected input data IN received from said one or more external data sources, said response being a digital signature, wherein the input Data IN are used to handle of the PUF circuit, wherein the PUF circuit is further configured to communicate data OUT to one or more external entities using said data communication channel, the data OUT being related to internal information of the circuit." As shown above, independent claim 1 has been amended to recite that the sensors are imaging sensors and that the components of a sensor are pixels. Support for this amendment to claim 1 can be found in at least paragraph [0030] of Applicant's specification. Claim 1 has been further amended to recite that the uniform conditions are spatially uniform conditions. Support for this amendment to claim 1 can be found in at least paragraph [0037] of Applicant's specification. Claim 1 has been also amended to incorporate the feature according to which the data communication channel is a bidirectional communication channel. Support for this amendment to claim 1 can be found in at least paragraphs [0091] and [0099] of Applicant's specification. Claim 1 has been amended to recite that the input data IN are received "through said data communication channel" and to add the feature "said data IN relating to external environment in which the PUF circuit is used," support for which can be found in at least paragraph [0066] of Applicant's specification. Claim 1 has also been to incorporate the subject matter of now-cancelled claim 2. Cambou does not disclose these features of amended claim 1. Instead, Cambou describes a system for authenticating a sensor system based on the generation of PUF responses based on the extraction of calibration data stored in a calibration table, constructed in a calibration phase of a sensor, therefore prior to the use of the sensor. Cambou describes a system comprising: * a secure terminal that stores PUF challenge data, the PUF challenge data consisting of: instructions for PUF response generation, the instructions indicating the order or pattern according to which some or all of the bit stream of calibration data in the calibration table should be extracted when generating a PUFP response to authenticate the sensor system; and a set of PUFP challenges; e a sensor which measures detectable signals, which are physical signals or chemical signals (such as "acceleration, rotation, deviation to the magnetic north, electronic currents, motion, image, chemical and biochemical elements, blood composition, heart beat rate, temperature, pressure, mechanical stress, humidity" signals). * a calibration table that stores calibration data for the sensor; and * a physically unclonable function (PUF) generator connected to the calibration table. The PUF generator of Cambou, described in paragraphs [0027] to [0039] and Figure 6, receives PUF data comprising instructions and PUF challenges (previously generated from bit streams of the calibration data, paragraph [0038]), then extracts (at step 620) one or more PUF responses from the calibration data based on the received instructions, and sends them to a secure terminal. Therefore, the PUF responses correspond to bit stream of calibration data stored in the calibration table and extracted based on the instructions. The secure terminal receives the PUF responses and compares the PUF responses to the PUF challenges to determine is the CRPs (Challenge Response Pairs) matches, to authenticate the sensor system. Previously, a large number of Challenge (i.e., input) Response (i.e., output) Pairs (called CRPs) unique to each device were created for the authentication process. During the authentication cycles, the PUFs are queried with the PUF challenges. The authentication is granted when the rate of matching CRPs is statistically high enough (paragraph [0036]). The calibration data are collected during a preliminary calibration phase of the sensor (before the operation of the sensor). The calibration is performed because "due to manufacturing variations, two given individual sensors of the same type will generally have a different response even if the sensors were fabricated using the same process. In order to account for these differences, sensors are calibrated to ensure the off-the-shelf uniformity of sensor performance" as explained in paragraph [0022] of Cambou. To collect the calibration data to be stored in the calibration table, during the preliminary calibration phase (prior to the operation of the sensor in the system), Cambou proposes to use a first calibration method consisting of "performing a preliminary calibration of a sensor during manufacture of the sensor and storing associated calibration data in a calibration table" ([paragraph [22]). The calibration data thus generated will be subsequently applied to the output signals of the sensor (in operation mode) to correct the sensor output signals (to correct the manufacturing variations). Therefore, the PUF response is generated from calibration data collected during the manufacturing of the sensor, and not during the operation of the sensors. The calibration data therefore expresses the randomness of the manufacturing variations of the sensor. Cambou therefore exploits the randomness of the manufacturing variations to generate a PUF, and therefore exploits data generated during the manufacturing of the sensor and prior to the operation of the sensor. Cambou proposes, alternatively, to use two sensors of the same type, one calibrated and the other uncalibrated, and to compare the differences between the outputs of the calibrated sensor and of the uncalibrated sensor (e.g., using exclusive-OR logic circuitry) to generate data that can be used as the basis for a PUF. Cambou describes, to generate the calibration data in the preliminary calibration phase, a sensor needs to be calibrated with known input electrical (physical or chemical) signals that produce known (i.e., expected) output electrical signals. This requires collecting known out electrical signals and known input signals from an "ideal sensor" even prior to the calibration. The calibration process of Cambou then consists in determining a reset position (i.e., obtaining a zero as an output signal when no detectable signal parameter is sensed) and correcting deviations from the known expected output response. The calibration process may apply additional corrections such as adjusting temperature coefficients, biasing conditions, and cancelling background noise. The calibration table 108 stored in a non-volatile memory may contain calibration data that is applied to the analog signal at the ADC 104 in order to calibrate the analog signal. The calibration data stored in the calibration table are therefore obtained by comparing the sensor data, during the calibration phase, to the expected results associated with the known input signals (those obtained with an ideal sensor). Although Cambou refers to PUF generation using sensors, the approach of Cambou is based on the preliminary generation of calibration data collected for each sensor in a calibration table, in a calibration phase that precedes the operation of the sensor (production mode). Cambou does not exploit the specificities of imaging sensor and sensor pixels. Cambou does not generate either a PUF response using the statistical properties of a noise distribution of the output signal values generated by an imaging sensor during its operation. In fact, the approach of Cambou differs from the invention as claims in most aspects. The only common features between the invention as claimed and Cambou are the generation of a PUF response based on PUF challenges (but these are aspects common to all PUF circuit) and the use of sensors to generate the PUF responses. Except these general features, Cambou fails to disclose or suggest most of the features of amended claim 1. First, Cambou does not disclose "wherein the PUF circuit comprises a bidirectional data communication channel," as claimed. Cambou does not exploit a bidirectional communication channel, on top of PUF challenges, to generate a digital signature. Second, Cambou does not disclose "the PUF circuit is configured to apply one or more challenges to the subset of sensor pixels under spatially uniform conditions, the PUF circuit comprising a receiver configured to receive output signal values from the subset of sensor pixels, in response to a challenge applied to said subset of sensor pixels. Cambou describes collecting a signal output from each sensor in response to a known input, and not a challenge, in the preliminary phase of calibrating the sensor, to compare the obtained output to an expected output obtained with an ideal sensor (to the same input) and generate calibration data (correction data) to be stored in the calibration table. As such, the PUF challenges that are subsequently received by the PUF generator of Cambou are previously generated from bit streams of the calibration data (see paragraph [0038] of Cambou), and are not applied to the sensor, as a sensor input, but are used in the last authentication step to be compared to the generated PUF response, to determine CRP matches. Third, Cambou does not disclose a PUF circuit that is configured to "determine one or more statistical properties of a noise distribution of said output signal values." In particular, Cambou does not disclose or suggest the use of statistical properties of a noise distribution of the output signal values produced by the subset of sensor pixels of an imaging sensor in response to channel applied to the subset of sensor pixels. Fourth, Cambou does not disclose a PUF circuit that is configured to "receive input data IN through said data communication channel from one or more external data sources using the data communication channel, said data IN relating to the external environment in which the PUF circuit is used." More specifically, Cambou does not receive such data IN and use such data IN in the process of generating of PUF response that both exploits the previous statistical properties and the data IN, the data IN being of a nature different from the challenges. Fifth, Cambou does not disclose a PUF circuit that is configured to "determine a response R from said one or more statistical properties and said selected input data IN received from said one or more external data sources, said response being a digital signature, wherein the input Data IN are used to handle the PUF circuit." Cambou does not generate a digital signature, but instead performs authentication of the sensor system by comparing the PUF response to the PUF challenges. As such, Cambou does not disclose generating a digital signature from the response R obtained from the statistical properties and the data IN. Lastly, Cambou does not disclose a PUF circuit that is configured to "communicate data OUT to one or more external entities using said data communication channel, the data OUT being related to internal information of the circuit." In particular, Cambou fails to teach or suggest sending data out through a bidirectional communication channel used to also receive data IN. The claimed circuit provides a Synthetic PUF (designated in the specification by acronym "SPUF") by using a synthetic or composite assembly of sensors selected for the statistical properties of the distribution of their noise. The above noted features of claim 1 provide an improved PUF (synthetic PUF) that exploits a particular selection of available components (subset of sensor pixel in an imaging sensor), the statistical properties of the noise distribution of the output signals generated by the subset of sensor pixels selection, and a bidirectional channel connected to external data sources. This enables providing stabilized responses, reinforcing the PUF device unclonability, and improves controllability of PUF devices. Assuming that the skilled person, trying to solve such problems, had turned to Cambou tried to implement the teachings of Cambou, he would have at most been incited to focus on the calibration phase of the sensor, for example at the end of its manufacturing process or prior to the use of the sensor in operation mode, and exploit calibration data obtained in this phase (those which are used to correct the operation of the non-ideal sensor due to variations introduced in the manufacturing process) and generate a PUF response by extracting calibration data from the calibration table, in response to received instructions, and then compare the PUF response to a PUF challenge to authenticate the sensor system, thereby not arriving to the PUF circuit of amended claim 1, even with hindsight. As such, amended claim 1 is patentable and the rejection under Section 102 should be withdrawn. Because amended independent claim 17 recites features that are similar, albeit not identical, to the features recited in amended independent claim 1, Applicant submits that independent claim 17 is patentable for at least the same reasons as those submitted for independent claim 1. Because dependent claims 4-16 depend, either directly or indirectly from one of independent claims 1 and 17, they too are patentable for at least the same reasons as claims 1 and 17, as well as for the additional features they recite. Reconsideration and withdrawal of the § 102 rejection of these dependent claims is also respectfully requested. New Claims New claim 18 has been added, support for which can be found in at least paragraph [0041] of Applicant's specification. New claim 19 has been added, support for which can be found in at least paragraph [0053] of Applicant's specification. Because new claims 18 and 19 dependent from amended independent claim 1, Applicant submits that claims 18 and 19 are patentable for at least the same reasons as amended independent claim 1, as well as for the additional features they recite. CONCLUSION Applicant respectfully submits that the present application is in condition for allowance. Reconsideration of the application and an early Notice of Allowance are respectfully requested. In the event that the Examiner cannot allow the application for any reason, the Examiner is encouraged to contact Applicant's representative. Date: 9/23/2024 /K atharine V Tlomitrovich/ Katharine Y. Domitrovich Registration No. 77,712BakerHostetler 999 Third Avenue Suite 3900 Seattle, WA 98104 Telephone: 206.332.1380 Facsimile: 206.624.7317


CITED REFERENCE SUMMARIES: Ref US20180006830A1: Claims:
A system comprising: a secure terminal having a secure memory that stores PUF challenge data that includes instructions and a set of PUF challenges; and a sensor system comprising: a sensor operable to measure detectable signals; a calibration table that stores calibration data for the sensor; and a physically unclonable function (PUF) generator connected to the calibration table that receives the PUF challenge data from the secure terminal and that generates a set of PUF responses from the calibration data stored in the calibration table according to the instructions in the PUF challenge data.
a secure terminal having a secure memory that stores PUF challenge data that includes instructions and a set of PUF challenges; and
a sensor system comprising: a sensor operable to measure detectable signals; a calibration table that stores calibration data for the sensor; and a physically unclonable function (PUF) generator connected to the calibration table that receives the PUF challenge data from the secure terminal and that generates a set of PUF responses from the calibration data stored in the calibration table according to the instructions in the PUF challenge data.
a sensor operable to measure detectable signals;
a calibration table that stores calibration data for the sensor; and
a physically unclonable function (PUF) generator connected to the calibration table that receives the PUF challenge data from the secure terminal and that generates a set of PUF responses from the calibration data stored in the calibration table according to the instructions in the PUF challenge data.
The system of claim 1 , wherein the detectable signals are selected from the group consisting of physical signals and chemical signals.
The system of claim 1 , wherein the secure terminal includes comparator circuitry that compares the set of PUF responses to the set of PUF challenges to determine a rate at which the set of PUF responses and the set of PUF challenges match.
The system of claim 3 , wherein the comparator circuitry comprises exclusive-OR logic gates.
The system of claim 3 , wherein the secure terminal authenticates the sensor system when the secure terminal determines that the rate at which the set of PUF responses and the set of PUF challenges match is at or above a predetermined threshold.
The system of claim 3 , wherein the sensor system further comprises: a random access memory (RAM) cache comprising a plurality of RAM cells.
a random access memory (RAM) cache comprising a plurality of RAM cells.
The system of claim 6 , wherein the PUF generator generates an additional set of PUF responses based on a percentage of the plurality of RAM cells that are in an ON state after powering on the RAM cache.
The system of claim 7 , wherein the PUF challenge data includes an additional set of PUF challenges, and wherein the comparator circuitry compares the additional set of PUF responses to the additional set of PUF challenges to determine an additional rate at which the additional set of PUF responses and the additional set of PUF challenges match.
The system of claim 8 , wherein the secure terminal authenticates the sensor system when the secure terminal determines that the rate at which the set of PUF responses and the set of PUF challenges match is at or above a predetermined threshold and that the additional rate at which the additional set of PUF responses and the additional set of PUF challenges match is at or above the predetermined threshold.
A system comprising: a signal source that produces detectable signals; a secure terminal having a secure memory that stores physically unclonable function (PUF) challenge data; and a sensor system comprising: a calibration table that stores calibration data; a first sensor that converts the detectable signals into calibrated sensor data according to the calibration data; a second sensor that converts the detectable signals into uncalibrated sensor data; and a PUF generator that generates PUF responses by performing logical exclusive-or (XOR) operations on the calibrated sensor data and the uncalibrated sensor data, wherein the secure terminal compares the PUF responses to corresponding PUF challenges in the PUF challenge data to authenticate the sensor system.
a signal source that produces detectable signals;
a secure terminal having a secure memory that stores physically unclonable function (PUF) challenge data; and
a sensor system comprising: a calibration table that stores calibration data; a first sensor that converts the detectable signals into calibrated sensor data according to the calibration data; a second sensor that converts the detectable signals into uncalibrated sensor data; and a PUF generator that generates PUF responses by performing logical exclusive-or (XOR) operations on the calibrated sensor data and the uncalibrated sensor data, wherein the secure terminal compares the PUF responses to corresponding PUF challenges in the PUF challenge data to authenticate the sensor system.
a calibration table that stores calibration data;
a first sensor that converts the detectable signals into calibrated sensor data according to the calibration data;
a second sensor that converts the detectable signals into uncalibrated sensor data; and
a PUF generator that generates PUF responses by performing logical exclusive-or (XOR) operations on the calibrated sensor data and the uncalibrated sensor data, wherein the secure terminal compares the PUF responses to corresponding PUF challenges in the PUF challenge data to authenticate the sensor system.
The system of claim 10 , wherein the detectable signals are selected from the group consisting of physical signals and chemical signals.
The system of claim 10 , wherein the secure terminal includes a comparator, and wherein comparing the PUF responses to the corresponding PUF challenges is performed by the comparator to determine a rate at which the PUF responses and the corresponding PUF challenges match.
The system of claim 12 , wherein the comparator circuitry comprises exclusive-OR logic gates.
The system of claim 12 , wherein the secure terminal authenticates the sensor system when the secure terminal determines that the rate at which the PUF responses and the corresponding PUF challenges match is at or above a predetermined threshold.
A method for authenticating a sensor system comprising: with a secure terminal, issuing physically unclonable function (PUF) challenge data to the sensor system; with a PUF generator in the sensor system, generating PUF responses from calibration data in a calibration table in the sensor system; with the PUF generator, sending the PUF responses to the secure terminal; and with the secure terminal, comparing the PUF responses with corresponding PUF challenges in the PUF challenge data to determine a rate at which the PUF responses and the corresponding PUF challenges match.
with a secure terminal, issuing physically unclonable function (PUF) challenge data to the sensor system;
with a PUF generator in the sensor system, generating PUF responses from calibration data in a calibration table in the sensor system;
with the PUF generator, sending the PUF responses to the secure terminal; and
with the secure terminal, comparing the PUF responses with corresponding PUF challenges in the PUF challenge data to determine a rate at which the PUF responses and the corresponding PUF challenges match.
The method of claim 15 , further comprising: with the secure terminal, authenticating the sensor system when the rate at which the PUF responses and the corresponding PUF challenges match is at or above a predetermined threshold.
with the secure terminal, authenticating the sensor system when the rate at which the PUF responses and the corresponding PUF challenges match is at or above a predetermined threshold.
The method of claim 16 , wherein the PUF challenge data further comprises instructions, wherein the PUF responses are generated according to the instructions in the PUF challenge data.
The method of claim 16 , wherein the calibration data is for calibrating the output of a sensor in the sensor system.
The method of claim 16 , wherein comparing the PUF responses with the corresponding PUF challenges in the PUF challenge data to determine the rate at which the PUF responses and the corresponding PUF challenges match further comprises: with exclusive-OR (XOR) logic in comparator circuitry in the secure terminal, comparing the PUF responses with the corresponding PUF challenges in the PUF challenge data by performing XOR logic operations on the PUF responses and the corresponding PUF challenges to determine the rate at which the PUF responses and the corresponding PUF challenges match
with exclusive-OR (XOR) logic in comparator circuitry in the secure terminal, comparing the PUF responses with the corresponding PUF challenges in the PUF challenge data by performing XOR logic operations on the PUF responses and the corresponding PUF challenges to determine the rate at which the PUF responses and the corresponding PUF challenges match
The method of claim 15 , further comprising: with the PUF generator, generating additional PUF responses based on a percentage of random access memory (RAM) cells in a RAM cache that are in an ON state when the RAM cache is powered on; with the secure terminal, comparing the additional PUF responses with corresponding additional PUF challenges in the PUF challenge data to determine an additional rate at which the PUF responses and the corresponding PUF challenges match; and with the secure terminal, authenticating the sensor system when the rate at which the PUF responses and the corresponding PUF challenges match and the additional rate at which the PUF responses and the corresponding PUF challenges match are each at or above a predetermined threshold.
with the PUF generator, generating additional PUF responses based on a percentage of random access memory (RAM) cells in a RAM cache that are in an ON state when the RAM cache is powered on;
with the secure terminal, comparing the additional PUF responses with corresponding additional PUF challenges in the PUF challenge data to determine an additional rate at which the PUF responses and the corresponding PUF challenges match; and
with the secure terminal, authenticating the sensor system when the rate at which the PUF responses and the corresponding PUF challenges match and the additional rate at which the PUF responses and the corresponding PUF challenges match are each at or above a predetermined threshold.
Ref US10013543B2: Claims:
A multi-factor authentication device for binding metadata with hardware-intrinsic properties, the device comprising: a hardware root of trust constructed to generate a value characteristic to hardware-intrinsic properties of the hardware root of trust; and at least one processor connected to the hardware root of trust configured to: generate a binding value by combining device enrollment parameters associated with the device and first metadata associated with the device; communicate the binding value for input to the hardware root of trust and receive an output value from the hardware root of trust; and communicate, an authentication token for authentication, wherein the authentication token is generated as a function of the output value and incorporating second metadata.
a hardware root of trust constructed to generate a value characteristic to hardware-intrinsic properties of the hardware root of trust; and
at least one processor connected to the hardware root of trust configured to: generate a binding value by combining device enrollment parameters associated with the device and first metadata associated with the device; communicate the binding value for input to the hardware root of trust and receive an output value from the hardware root of trust; and communicate, an authentication token for authentication, wherein the authentication token is generated as a function of the output value and incorporating second metadata.
generate a binding value by combining device enrollment parameters associated with the device and first metadata associated with the device;
communicate the binding value for input to the hardware root of trust and receive an output value from the hardware root of trust; and
communicate, an authentication token for authentication, wherein the authentication token is generated as a function of the output value and incorporating second metadata.
The device of claim 1 , wherein the at least one processor is configured to create the authentication token and incorporate second metadata having at least some different metadata than the first metadata.
The device of claim 1 , wherein the at least one processor is further configured to perform a zero knowledge proof based on verifying a sensor or sensor output, in response to an authentication request from an external verifying entity.
The device of claim 1 , wherein the at least one processor is further configured to perform a zero knowledge proof based on the authentication token incorporating the second metadata.
The device of claim 1 , wherein the at least one processor is further configured to communicate the second metadata to a verifier configured to verify of an origin of the second metadata through the zero knowledge proof.
The device of claim 1 , wherein the hardware root of trust includes an SRAM physical unclonable function (PUF).
The device of claim 1 , wherein the at least one processor is further configured to access at least a portion of the first metadata or derive the at least a portion of the first metadata from a biometric sensor.
The device of claim 1 , wherein the at least one processor is further configured to access at least a portion of the second metadata or derive the at least a portion of the second metadata from one or more environmental sensors.
A computer implemented method for binding metadata with hardware-intrinsic properties, the method comprising: generating, by a hardware root of trust, a value characteristic to hardware-intrinsic properties of the hardware root of trust; generating, by at least one processor, a binding value from device enrollment parameters associated with an authentication device and first metadata associated with the authentication device; communicating, by the at least one processor, the binding value for input to the hardware root of trust; receiving, by the at least one processor, an output value from the hardware root of trust; and communicating , by the at least one processor, an authentication token for authentication, generated as a function of the output value and incorporating second metadata.
generating, by a hardware root of trust, a value characteristic to hardware-intrinsic properties of the hardware root of trust;
generating, by at least one processor, a binding value from device enrollment parameters associated with an authentication device and first metadata associated with the authentication device;
communicating, by the at least one processor, the binding value for input to the hardware root of trust;
receiving, by the at least one processor, an output value from the hardware root of trust; and
communicating , by the at least one processor, an authentication token for authentication, generated as a function of the output value and incorporating second metadata.
The method of claim 9 , further comprising an act of creating the authentication token as a function of the output value and incorporating second metadata having at least some different metadata than the first metadata.
The method of claim 9 , wherein the method further comprises performing a zero knowledge proof based on verifying a sensor or sensor output, in response to an authentication request from an external verifying entity.
The method of claim 9 , wherein the method further comprises performing a zero knowledge proof based on the authentication token incorporating the second metadata.
The method of claim 9 , wherein the method further comprises communicating the second metadata to a verifier, and proving an origin of the second metadata through the zero knowledge proof.
The method of claim 9 , wherein the method further comprises accessing the second metadata from one or more sensors connected to the multi-factor authentication device.
The method of claim 9 , wherein the method further comprises accessing at least a portion of the first metadata or derive the at least a portion of the first metadata from a biometric sensor.
The method of claim 9 , wherein the method further comprises accessing or deriving at least a portion of the second metadata from one or more environment sensors.
The method of claim 9 , wherein the hardware root of trust includes a physical unclonable function (‘PUF’) circuit, and the method further comprising generating, by the PUF, an output value that is characteristic to the PUF.
At least one non-transitory computer-readable storage medium containing processor-executable instructions that, when executed, perform a method for binding metadata with hardware-intrinsic properties, the method comprising: generating a value characteristic to hardware-intrinsic properties of a hardware root of trust; generating a binding value from device enrollment parameters associated with an authentication device and first metadata associated with the authentication device; communicating the binding value for input to the hardware root of trust; receiving an output value from the hardware root of trust; and communicate an authentication token for authentication, generated as a function of the output value and incorporating second metadata.
generating a value characteristic to hardware-intrinsic properties of a hardware root of trust;
generating a binding value from device enrollment parameters associated with an authentication device and first metadata associated with the authentication device;
communicating the binding value for input to the hardware root of trust;
receiving an output value from the hardware root of trust; and
communicate an authentication token for authentication, generated as a function of the output value and incorporating second metadata.
The computer-readable storage medium of claim 18 , wherein creating the authentication token as a function of the output value and incorporating second metadata includes incorporating second metadata having at least some different metadata than the first metadata.
The computer-readable storage medium of claim 18 , wherein the method further comprises performing a zero knowledge proof including the second metadata in response to an authentication request from an external verifying entity.
Ref US20120179952A1: Claims:
A system for generating an identifying response pattern comprising a memory used as a physically unclonable function comprising a plurality of re-writable memory locations each memory location having at least two possible logical states, and an input for receiving an activation signal so as to cause each of said memory locations to enter one of its possible logical states, the entered state being dependent on physical, at least partially random characteristics of said memory, and thereby generating a response pattern of logical states useful for identifying the system, the generation of the response pattern is sensitive to degradation after repeated applications of the activation signal, a memory-overwriting device configured for overwriting at least a first portion of the plurality of memory locations to obscure the response pattern in the memory, and an anti-degradation device configured to write to each respective location of a second portion of the plurality of memory locations an inverse of a logical state previously read from the respective location of the second portion.
a memory used as a physically unclonable function comprising a plurality of re-writable memory locations each memory location having at
[Truncated to input limit]