Daniel S Rd Bailey, 75Haverhill, MA

7069287, Jun 27, 2006

Sep 19, 2001

09/956755

Christof Paar - Cologne, DE
Adam D Woodbury - Billerica MA, US
Daniel V Bailey - Burlington MA, US

Worcester Polytechnic Institute - Worcester MA

G06F 7/00

708492, 380 28

A method for implementing an elliptic curve or discrete logarithm cryptosystem on inexpensive microprocessors is disclosed which provides for advantageous finite field computational performance on microprocessors having limited computational capabilities. The method can be employed with a variety of commercial and industrial imbedded microprocessor applications such as consumer smart cards, smart cards, wireless devices, personal digital assistants, and microprocessor controlled equipment. In one embodiment, a Galois Field (GF) implementation based on the finite field GF((2−17)) is disclosed for an Intel 8051 microcontroller, a popular commercial smart card microprocessor. The method is particularly suited for low end 8-bit and 16-bit processors either with or without a coprocessor. The method provides for fast and efficient finite field multiplication on any microprocessor or coprocessor device having intrinsic computational characteristics such that a modular reduction has a greater computational cost than double precision, long number additions or accumulations. The disclosed method offers unique computational efficiencies in requiring only infrequent subfield modular reduction and in employing an adaptation of Itoh and Tsujii's inversion algorithm for the group operation.

7686953, Mar 30, 2010

Dec 13, 2007

11/955497

Daniel M. Bailey - Hampton NH, US
Philippe Vernot - Saint Privat, FR
Sebastien Lefebvre - Saint Saturnin, FR

Bio-Rad Laboratories, Inc. - Hercules CA

B01D 15/08

2101982, 210656, 210232, 210241

The plunger used as the upper enclosure in a preparative chromatography column is suspended by one or more rods that are supported by a frame through coupling connections on the frame that can fix the position of the rod(s) relative to the frame, while the position of the rod(s) is controlled by a motorized drive system that is suspended above the column. The drive system is mounted either to the column lid or to a functional plate positioned a short distance above the column lid. These constructions allow the plunger to be raised and lowered so that the column and its parts can be exchanged, all without the need for a hoist or crane.

8312519, Nov 13, 2012

Sep 30, 2010

12/895130

Daniel V Bailey - Pepperell MA, US
John G. Brainard - Sudbury MA, US
William M. Duane - Westford MA, US
Michael J. O'Malley - Lowell MA, US
Robert S. Phipott - Andover MA, US

G06F 7/04
H04L 9/00

726 6, 726 5, 726 7, 726 9, 726 10, 726 20, 713184, 713185, 713156, 713168, 380255, 380259, 380262

A method, system, and apparatus for agile generation of one time passcodes (OTPs) in a security environment, the security environment having a token generator comprising a token generator algorithm and a validator, the method comprising generating a OTP at the token generator according to a variance technique; wherein the variance technique is selected from a set of variance techniques, receiving the OTP at a validator, determining, at the validator, the variance technique used by the token generator to generate the OTP, and determining whether to validate the OTP based on the OTP and variance technique.

8378786, Feb 19, 2013

Feb 5, 2007

11/671275

Daniel Vernon Bailey - Pepperell MA, US
Ari Juels - Brookline MA, US

EMC Corporation - Hopkinton MA

H04Q 5/22
G05B 19/00
H04K 1/00
H04L 9/00

340 101, 340 58, 340 1041, 380258, 380260

Enhanced security is provided in an RFID system comprising a plurality of RFID devices and at least one reader which communicates with one or more of the devices. In one aspect of the invention, a first command is transmitted from the reader to write a first data unit to a memory of given one of the RFID devices. A reply is received in the reader from the given RFID device indicating that a second data unit determined based on contents of the first data unit is available in the memory to be accessed by the reader. A second command is transmitted from the reader to the given RFID device to allow the reader to read the memory to thereby obtain the second data unit. The first and second data units comprise information exchanged as part of a cryptographic protocol carried out between the reader and the given RFID device. In an illustrative embodiment, the cryptographic protocol may comprise a challenge-response authentication protocol.

8433914, Apr 30, 2013

Jun 22, 2010

12/820829

Robert S. Philpott - Andover MA, US
Yong Qiao - Acton MA, US
Michael J. O'Malley - Lowell MA, US
Daniel V. Bailey - Pepperell MA, US

EMC Corporation - Hopkinton MA

H04L 9/32

713180, 713176

A transaction system combats malware and phishing-based MitM attacks on transaction processing systems by using digital signatures to integrity-protect the user-verified transaction data. With this system, a user submits a transaction from a client device (e. g. , desktop web browser) over a communications channel to a server device, such as a transaction server. Before accepting the transaction, the transaction server securely delivers all relevant transaction data to a second device (e. g. , the signing device), such as a smart phone, in the possession of the user. The signing device has its own distinct communication channel with the server device. The user verifies the data and the signing device creates a digital signature value for the transaction. The user submits the signature to the transaction server to confirm the transaction with the transaction server.

8452965, May 28, 2013

Jun 29, 2010

12/826466

Robert W. Griffin - Hollis NH, US
Daniel V. Bailey - Pepperell MA, US
Joshua A. Rosenthol - Centreville VA, US

EMC Corporation - Hopkinton MA

G06F 21/00

713172, 713159, 726 9, 726 20

A technique of protecting a datum within a set of sensitive data is presented. In this technique, the datum includes a first set of bits satisfying a first set of constraints, and a computer receives the set of sensitive data from an authorized client. The technique involves producing a token corresponding to the datum, the token including a second set of bits distinct from the first set of bits, the second set of bits satisfying a second set of constraints, the second set of constraints being a superset of the first set of constraints. The technique further involves storing the datum and the corresponding token. The technique further involves sending the token to the authorized client, the authorized client enabled to perform, using the second set of bits, a verification that the token satisfies the second set of constraints, the verification being performed apart from the database.

8458483, Jun 4, 2013

Jun 30, 2009

12/495447

Daniel Bailey - Pepperell MA, US
Marco Ciaffi - Sudbury MA, US
William Duane - Westford MA, US
Ari Juels - Brookline MA, US
John O'Brien - Boxborough MA, US

EMC Corporation - Hopkinton MA

G06F 21/00
G06F 12/14

713182, 713168, 713185, 713190, 713193, 340 101, 340 1033, 340 1034, 3405721

A technique of message-passing using shared memory of an RF tag involves storing a message in the shared memory while a security processor of the RF tag is in a sleep mode, the security processor being constructed and arranged to access the shared memory when the security processor is in a wakened mode. The technique further involves transitioning the security processor from the sleep mode to the wakened mode, and processing the message from the shared memory using the security processor after the security processor has transitioned from the sleep mode to the wakened mode. If the security processor is awakened only as needed (rather than remain in the wakened mode), lifetime of a battery which powers the security processor can be maximized.

8495372, Jul 23, 2013

Nov 13, 2007

11/939232

Daniel Vernon Bailey - Pepperell MA, US
John G. Brainard - Sudbury MA, US
Ari Juels - Brookline MA, US

EMC Corporation - Hopkinton MA

H04L 9/32
H04L 9/00

713171, 713172, 380277

In one aspect, a first processing device, which may be an authentication token, establishes a shared key through a pairing protocol carried out between the first processing device and a second processing device. The pairing protocol also involves communication between the second processing device and an authentication server. As part of the pairing protocol, the first processing device sends identifying information to the second processing device, and the second processing device utilizes the identifying information to obtain the shared key from the authentication server. The first processing device encrypts authentication information utilizing the shared key, and transmits the encrypted authentication information from the first processing device to the second processing device. The second processing device utilizes the shared key to decrypt the encrypted authentication information.