Self-authenticating chips

• US 10,135,814 B2
• Filed: 12/16/2016
• Issued: 11/20/2018
• Est. Priority Date: 04/09/2014
• Status: Active Grant

• Current Assignee: Cardex Systems Inc.
• Original Assignee: Cardex Systems Inc.
• Inventors: Van Kerrebroeck, Dennis Bernard, Horn, Craig Michael, Van Kerrebroeck, Bernard Marie-Andre
• Primary Examiner(s): Hailu, Teshome
• Application Number:
  US15/382,154
• Publication Number:
  US 20170104751A1
• Time in Patent Office: 704 Days
• Field of Search: 726 9
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/77 in smart cards
• CPC Class Codes: G06Q 20/32 using wireless devices
• CPC Class Codes: G06Q 20/3229 Use of the SIM of a M-device as secure element
• CPC Class Codes: G06Q 20/357 Cards having a plurality of specified features
• CPC Class Codes: G07F 7/0826 Embedded security module
• CPC Class Codes: G07F 7/0833 Card having specific functional components
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A self-authenticating chip includes first and second memory regions storing, respectively, first and second authentication codes. The second memory region is adapted to be unreadable and unmodifiable by the chip or a chip reader. The chip also includes a comparator for providing an indicator of whether given input matches the second authentication code. The chip also includes an authentication circuit that is operable to read the first authentication code from the first memory region, present the first authentication code to the comparator, and in response to receiving an indicator from the comparator indicating that the first and second authentication codes match, unlock at least one of (i) a communication interface of the chip to allow data to be transmitted therethrough to a chip reader and (ii) a third memory region of the chip to allow data to be read therefrom.

Claims

1. A self-authenticating integrated circuit chip comprising:

one or more memory circuits on the integrated circuit, the one or more memory circuits providing a first memory region storing a first authentication code;

a second memory region storing a second authentication code;

a comparator circuit on the integrated circuit interconnected to at least said second memory region for providing an indicator of whether a given input to said comparator circuit matches said second authentication code stored in said second memory region;

wherein said second authentication code within said second memory region cannot be extracted or modified by said integrated circuit or a chip reader and may only be accessed by said comparator to compare the given input to said comparator to said second authentication code; and

an authentication circuit on the integrated circuit interconnected to said comparator and at least one of said one or more memory circuits wherein said authentication circuit is operable to;

read said first authentication code from said first memory region;

present said first authentication code to said comparator; and

in response to receiving an indicator from said comparator indicating that said first authentication code matches said second authentication code

unlock a communication interface of said chip to allow data to be transmitted therethrough to a chip reader or unlock a third memory region of the integrated circuit.

2. The chip of claim 1, wherein said communication interface comprises a radio-frequency transmitter.

3. The chip of claim 1, wherein said chip is operable, to transmit data to a chip reader by way of said communication interface after said communication interface is unlocked.

4. The chip of claim 3, wherein said transmitted data is transmitted in encrypted form.

5. The chip of claim 3, wherein said transmitted data comprises at least one of a unique identifier of said integrated circuit chip, a unique user identifier, a unique account identifier, a unique mobile service subscriber identifier, a unique transaction identifier, an electronic ticket identifier, a voucher code, or a network authentication code.

6. The chip of claim 5, wherein said unique account identifier comprises a credit card number or a debit card number.

7. The chip of claim 5, wherein said network authentication code comprises a timestamp or a transaction identifier.

8. The chip of claim 5, wherein said authentication circuit is further operable to update said network authentication code at pre-defined time intervals.

9. The chip of claim 1, wherein said self-authenticating integrated circuit chip forms part of a document.

10. The chip of claim 9, wherein said document is a passport or a travel visa.

11. The chip of claim 1, wherein said self-authenticating integrated circuit chip forms part of a mobile phone, a tablet, a computer, a set-top box, a television, a Smart TV, a modem, a network switch, or a network router.

12. A method of operating a self-authenticating card, said self-authenticating card comprising:

a card body;

a first chip mounted to said card body and having a first memory region storing a first authentication code, and a communication interface for communicating with a chip reader;

a second chip substantially sealed within said card body and having a second memory region storing a second authentication code;

at least one of said first and second chips providing an authentication circuit interconnected with said first memory region and said second memory region;

wherein said second authentication code be read cannot be modified by said first or second chip or a chip reader and may only be accessed by said authentication circuit to compare said first authentication code to said second authentication code;

said method comprising;

reading said first authentication code from said first memory region;

reading said second authentication code from said second memory region;

authenticating said card by comparing said first authentication code with said second authentication code; and

upon said authenticating;

unlocking said communication interface to allow data to be transmitted therethrough or unlocking a third memory region to allow data to be read therefrom.

13. The method of claim 12, wherein said self-authenticating card is for gaining access to at least one of a public transportation service, a particular vehicle, and a particular location.

14. The method of claim 12, wherein said self-authenticating card further comprises a magnetic stripe storing a network authentication code.

15. The method of claim 12, wherein said self-authenticating card is a SIM card.

16. The method of claim 15, wherein said SIM card is a GSM SIM card, USIM card, a CSIM card, a R-UIM card, a Universal Integrated Circuit Card, a high-capacity SIM card, or a MegaSIM card.

17. The method of claim 16, further comprising upon said unlocking, transmitting a message to another SIM card by way of said communication interface.

18. The method of claim 16, further comprising upon said unlocking, transmitting payment data to a point-of-sale terminal by way of said communication interface.