Method and system for state machine security device

摘要

A security device may be utilized to provide security measures to an electronic device that may incorporate the security device or be coupled to it. The security measures may comprise authentication (e.g., authentication of devices, users, or activities), and/or encryption measures (e.g., encrypting or decrypting exchanged data). A transaction or access via the security device may be authenticated by communicating an authentication request by the security device to an authentication server, which may generate, in response, a sequence of information requests that are sent to the security device. The security device may then generate, in response, a sequence of responses that are sent to the authentication server, with the sequence of responses comprising a sequence of reported values each of which are unique. The authentication server may then authenticate the security device based on comparing of the sequence of reported values with a sequence of expected values that identifies the security device.

主权项

1. A method for authorizing a transaction or an access via a security device, the method comprising:
receiving power at the security device from a bridge device; sending a request for authentication from the security device to an authentication server through the bridge device; receiving an information request at the security device from the authentication server through the bridge device; in response to the received information request, sending a response from the security device to the authentication server through the bridge device, the response comprising a set of one or more bits generated based on a current state in a plurality of states of an authentication state machine in the security device; repeating said receiving and said sending the response for each information request a plurality of times to traverse the authentication state machine until sending a response to a last information request in the sequence of information requests, wherein the sets of bits sent to the authentication server comprise a sequence of reported bits; authenticating the security device within an electronic device that is communicating with the bridge device by the authentication server based on comparing of the sequence of reported bits with a sequence of expected bits used by the authentication server in uniquely identifying the security device; and authorizing the transaction or the access performed through the electronic device.