Patents in suit

US 8,261,072 Method and system for secure external TPM password generation and use

3 defendants · 3 suits · updated October 6, 2026

Also cited as U.S. Patent No. 8,261,072 · US8261072B2 · US 8,261,072 B2 · 8261072 · the '072 patent

Crestone IP Management, LLC has filed 3 patent-infringement suits on US 8,261,072, "Method and system for secure external TPM password generation and use" since July 16, 2026, 2 of them in the E.D. Tex., against 3 distinct defendants including Apple Inc., HP Inc. and Samsung Electronics Co., Ltd.. The patent was granted September 4, 2012 on a priority date of March 24, 2006. Its abstract opens: "Aspects of the present invention include a method and system for generating a secure access code at a remote device in communication with a computer system having a secure storage device; conveying the secure access code to the system secure storage device;…" The examiner cited 3 references during prosecution.

Assignee
Crestone Ip Management LLC
Priority date
March 24, 2006
Granted
September 4, 2012
Expires
March 24, 2026
Status
Active
Claims
48 (2 independent)
Inventors
Kerry D. Maletsky, Nathanael J. Bohlmann
Full text
Google Patents

The suits

3 cases · E.D. Tex. (2) · W.D. Tex. (1)

Filed Defendant Plaintiff Court Docket
2026-07-16 Apple Inc. Crestone IP Management, LLC W.D. Tex. 1:26-cv-01976
2026-07-16 HP Inc. Crestone IP Management, LLC E.D. Tex. 2:26-cv-00586
2026-07-16 Samsung Electronics Co., Ltd. Crestone IP Management, LLC E.D. Tex. 2:26-cv-00584

Docket links open the public record on CourtListener. Filing dates are the complaint's.

Independent claims

What is actually asserted, verbatim.

Claim 1

1. A computer system comprising: one or more central processing units connected to one or more internal system busses; random access memory; read-only memory; at least one input/output adapter, which supports various I/O devices; a user interface adapter; a trusted platform module configured to perform operations comprising: receiving a secure access code from a remote device outside of the trusted platform module; receiving usage authorization information generated by a secure generator, the usage authorization information being attached to the secure access code; recognizing the secure access code; and using the secure access code as a parameter for various trusted platform module commands.

Claim 26

26. A non-transitory computer readable storage medium containing program instructions executed upon access by a trusted platform module to cause the trusted platform module to perform operations comprising: receiving a secure access code from a remote device outside of the trusted platform module; receiving usage authorization information generated by a secure generator, the usage authorization information being attached to the secure access code; recognizing the secure access code; using the secure access code as a parameter for various trusted platform module commands.

Art before the examiner

54 references of record, 3 cited by the examiner.

Everything listed here was before the Office and is what a challenge must go beyond. Art the examiner never saw is where an invalidity search starts.

Examiner-cited

  • US20050137889A1 — Remotely binding data to a user device (Wheeler David M.)
  • US20050138393A1 — Determining user security level using trusted hardware device (Challener David C.)
  • US20070006169A1 — Method and apparatus for binding TPM keys to execution entities (Alexander Iliev)
Applicant-cited and other (51)
  • US6061464A — Fingerprint-reading system with integrated heating resistors
  • WO2000065770A1 — High security biometric authentication using a public key/private key encryption pairs
  • US6202151B1 — System and method for authenticating electronic transactions using biometric certificates
  • US6219439B1 — Biometric authentication system
  • US6256737B1 — System, method and computer program product for allowing access to enterprise resources using biometric devices
  • US6289114B1 — Fingerprint-reading system
  • US20020016913A1 — Modifying message data and generating random number digital signature within computer chip
  • US20020046336A1 — Information processing apparatus, information processing method, and program providing medium
  • US20020056043A1 — Method and apparatus for securely transmitting and authenticating biometric data over a network
  • US20020104006A1 — Method and system for securing a computer network and personal identification device used therein for controlling access to network components
  • US20020186838A1 — System and method of user and data verification
  • US20030014372A1 — Trusted authentication digital signature (tads) system
  • WO2003007125A2 — Secure network and networked devices using biometrics
  • US20030023882A1 — Biometric characteristic security system
  • US6532298B1 — Portable authentication device and method using iris patterns
  • US20030051133A1 — Method and apparatus for identifying a voice caller
  • US20030056100A1 — Method and system for authenticating a digitized signature for execution of an electronic document
  • US20030070079A1 — Method and system for preboot user authentication
  • US6553494B1 — Method and apparatus for applying and verifying a biometric-based digital signature to an electronic document
  • US20030110372A1 — Information security system
  • US20030163710A1 — Random biometric authentication utilizing unique biometric signatures
  • US6697947B1 — Biometric based multi-party authentication
  • US6741729B2 — Fingerprint recognition system
  • US6766040B1 — System and method for capturing, enrolling and verifying a fingerprint
  • US20040193888A1 — Platform information for digital signatures
  • US6819219B1 — Method for biometric-based authentication in wireless communication for access control
  • TW200517976A — Electronic identification key and control method thereof
  • US20050138434A1 — Apparatus, system, and method for secure communications from a human interface device
  • US20050149547A1 — Method and apparatus for creation and maintenance of database structure
  • US20050229008A1 — Method and device for identifying user-selected equipment
  • US20050228993A1 — Method and apparatus for authenticating a user of an electronic system
  • US20050229007A1 — System and method for remote self-enrollment in biometric databases
  • US6957337B1 — Method and apparatus for secure authorization and identification using biometrics without privacy invasion
  • US20050244037A1 — Portable encrypted storage device with biometric identification and method for protecting the data therein
  • US20050246552A1 — Method and system for virtualization of trusted platform modules
  • US20050257073A1 — Method and system for bootstrapping a trusted server having redundant trusted platform modules
  • US6968060B1 — Method for verifying the use of public keys generated by an on-board system
  • US20050286746A1 — Biometric identification data protection
  • US20060000891A1 — System for biometric security using a smartcard
  • US6993659B2 — Independent biometric identification system
  • US20060046842A1 — Ticket redemption using encrypted biometric data
  • US7024562B1 — Method for carrying out secure digital signature and a system therefor
  • US20060080528A1 — Platform and method for establishing provable identities while maintaining privacy
  • US20060115128A1 — Person recognition method and device
  • US20060282680A1 — Method and apparatus for accessing digital data using biometric information
  • US20070050303A1 — Biometric identification device
  • US20070226496A1 — Method and system for secure external TPM password generation and use
  • US20070226514A1 — Secure biometric processing system and method of use
  • US20070226515A1 — Secure biometric processing system and method of use
  • WO2007112023A2 — Secure biometric processing system and method of use
  • US7310732B2 — Content distribution system authenticating a user based on an identification certificate identified in a secure container

Classification

  • G06F21/57primary — Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
  • G06F21/32 — User authentication using biometric data, e.g. fingerprints, iris scans or voiceprints
  • G06F21/46 — Structures or tools for the administration of authentication by designing passwords or checking the strength of passwords
  • G06F21/71 — Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
  • H04L9/0877 — Generation of secret information including derivation or calculation of cryptographic keys or passwords using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM]
  • H04L9/0897 — Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
  • H04L9/3226 — Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials using a predetermined code, e.g. password, passphrase or PIN
  • H04L9/3231 — Biological data, e.g. fingerprint, voice or retina
  • H04L9/3234 — Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token

Family

  • US8261072B2 — B2 (2012)
  • US20070226496A1 — A1 (2007)
  • US7849312B2 — B2 (2010)
  • US20070226787A1 — A1 (2007)

Abstract

Aspects of the present invention include a method and system for generating a secure access code at a remote device in communication with a computer system having a secure storage device; conveying the secure access code to the system secure storage device; receiving the secure access code at the system secure storage device with unique data characteristics associated with remote device; and, securely providing content to the remote device.

Also asserted by Crestone IP Management, LLC

  • US 10,771,012 — Hybrid RC/crystal oscillator (3 defendants)
  • US 7,599,231 — Adaptive regulator for idle state in a charge pump circuit of a memory device (3 defendants)
  • US 9,228,534 — Variable contour nacelle assembly for a gas turbine engine (3 defendants)
  • US 9,288,534 — Systems and methods for operating media devices (3 defendants)

Named in one of these suits? A prior-art search is commissioned once and serves every defendant who shares it. The examiner's own search record is free on the tools page, and your first preliminary search is free — one claim, back within 24 hours — so you know whether there is art the Office never saw before anyone pays for more. Flat fees: $2,500$899 for the independent claims, $5,000$1,500 for every asserted claim.

Order a free preliminary search → How much prior art does an IPR petition need?

This page is assembled from public records — federal court dockets and the patent's own file — and is updated as the case list changes. It states what the record shows and is not an opinion on the validity or infringement of any claim. Patent data via Google Patents; docket data via CourtListener.