Methods and apparatus for providing a memory challenge and response

• US 20030154355A1
• Filed: 01/24/2003
• Published: 08/14/2003
• Est. Priority Date: 01/24/2002
• Status: Abandoned Application

• Current Assignee: XTec, Incorporated
• Original Assignee: XTec, Incorporated
• Inventors: Fernandez, Alberto J.
• Application Number:
  US10/350,953
• Publication Number:
  US 20030154355A1
• Time in Patent Office: Days
• US Class Current: 711/163
• CPC Class Codes: G06F 12/1466 Key-lock mechanism
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

Techniques are described for providing a memory challenge and response to allow access to a protected memory area of a semiconductor memory or to authenticate the data written therein. These techniques may be combined with known cryptographic approaches. Further data stored in the protected areas may include mediametric values to further enhance security.

Claims

1. A method for providing a memory challenge and response capacity to a semiconductor memory comprising the steps of:

storing an expected response value in an expected response area of memory; and

storing a challenge value in a challenge area of memory, said challenge value being used to generate the proper response used to allow access to a protected area of the semiconductor memory.

2. The method of claim 1 wherein there is a cryptographic relationship between the challenge value and the proper response.

3. The method of claim 1 wherein the protected area stores a mediametric authentication value.

4. The method of claim 1 further comprising the step of:

Storing a response value in a response area of memory, said response value calculated by a card reader applying cryptography to the challenge value.

5. The method of claim 1

wherein the expected response area in memory is connected to a cryptographic primitive,

wherein the storing expected response value step further comprises the step of transforming the expected response value by the cryptographic primitive.

6. An apparatus for providing a memory challenge and response capacity to a semiconductor memory comprising:

means for storing an expected value in an expected response area of memory; and

means for storing a challenge value in a challenge area of memory, said challenge value being used to generate the proper response used to allow access to a protected area of the semiconductor memory.

7. The apparatus of claim 6 wherein there is a cryptographic relationship between the challenge value and the proper response.

8. The apparatus of claim 6 wherein the protected area stores a mediametric authentication value.

9. The apparatus of claim 6 further comprising:

means for storing a response value in a response area of memory;

10. The apparatus of claim 6 further comprising:

means for storing a cryptographic primitive, the cryptographic primitive connecting to the expected response area of memory and transforming the expected response value when writing to the expected response area.

11. A method of authenticating data in a memory device comprising the steps of:

performing a challenge comprising data stored in an area of memory containing expected values; and

utilizing a response cryptographically related to the challenge.

12. The method of claim 11 comprising the step of:

storing payload data related to the challenge by a secret key whereby the presence of valid response data indicates that the originator has possession of the secret key.

13. The method of claim 11 further comprising the step of:

updating the response and challenge after each successful authentication.

14. A method of performing mediametric authentication of contactless devices such as inductively coupled devices comprising the steps of:

measuring the signal amplitudes, rates of change, and timing characteristics as well as other device and/or class of device specific parameters to create a profile of the device being evaluated; and

comparing the resulting profile to the previously known and trusted profile of the device or class of devices to determine authenticity.

15. A method of performing mediametric authentication of contactless devices such as inductively coupled devices comprising the steps of:

measuring communication characteristics of a contactless device, said characteristics uniquely identify the contactless device;

creating a profile from the measured characteristics;

storing the profile of the characteristics on the contactless device;

when presenting the contactless device for a transaction, reading the profile from the contactless device;

measuring the communication characteristics of the contactless device; and

comparing the read profile with the communication characteristics.

16. A method of claim 15 wherein the communication characteristics is a signal amplitude of a communication signal from the device, a rate of signal amplitude changes, or timing characteristics of communicating data.