Electronic identification system and method with source authenticity

• US 20040196980A1
• Filed: 04/20/2004
• Published: 10/07/2004
• Est. Priority Date: 06/18/1998
• Status: Active Grant

• Current Assignee: Zebra Technologies Corporation
• Original Assignee: Supersensor Limited
• Inventors: Turner, Christopher Gordon Gervase, Kruger, Johan Dawid
• Granted Patent: US 6,954,533 B2
• Time in Patent Office: Days
• US Class Current: 380/270
• CPC Class Codes: G06K 7/0008 General problems related to the reading of electronic memory record carriers, independent of its reading method, e.g. power transfer
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

An RF electronic identification system (10) is disclosed and claimed. The system includes at least one transponder encoder (14.1) for writing data into a memory arrangement (52) of a selected transponder (1.1) of a plurality of transponders (1.1 to 1.n) adapted to receive data from the at least one encoder. The system further includes at least one verifier (16) for interrogating a selected transponder (1.1) and to read data stored in the transponder. The encoder includes a controller (42) for providing an identification code characteristic of the encoder to form part of the data to be written into the transponder. The verifier includes computing means (56) for extracting the identification code from the data read thereby and for comparing the code to authorized codes. An indicator (18) provides an indication whether the identification code corresponds to any of the authorized codes or not. A method of verifying the authenticity of a transponder is also disclosed and claimed.

Claims

1. An electronic identification system including:

at least one transponder encoder for writing data into a memory arrangement of a transponder;

a plurality of transponders adapted to receive data from the at least one encoder;

at least one verifier for interrogating a selected transponder and to read data stored in the transponder;

said encoder including means for providing an identification code characteristic of an entity externally of the transponder, to form part of the data to be written into the transponder;

the verifier including computing means for extracting the identification code from the data read thereby and for comparing the code to an authorized code; and

indicator means for giving an indication whether the extracted identification code corresponds to the authorized code.

2. A system as claimed in claim 1 wherein the identification code is characteristic of the encoder;

wherein the encoder includes a memory arrangement wherein a plurality of identity codes characteristic of the encoder are stored; and

wherein the means for providing an identification code includes a controller for randomly selecting one of said plurality of identification codes.

3. A system as claimed in claim 2 further including a central computer for generating the plurality of identification codes, for downloading the identification codes into the memory arrangement of the encoder and into a memory arrangement of the at least one verifier, to constitute corresponding authorized codes.

4. A system as claimed in claim 2 wherein the controller of the encoder includes encryption means utilizing a first encryption algorithm and the selected identification code in a first encryption process to provide encrypted data relating to the identification code, to form part of the data to be written into the transponder.

5. A system as claimed in claim 4 wherein the controller of the encoder is programmed randomly to select the first encryption algorithm from a first set of encryption algorithms pre-stored in the memory arrangement of the encoder.

6. A system as claimed in claim 5 wherein each algorithm is associated with a respective algorithm address in the memory arrangement of the encoder.

7. A system as claimed in claim 6 wherein each algorithm includes a function of at least one physical characteristic of the transponder into which the data is to be written.

8. A system as claimed in claim 7 wherein the physical characteristic is a frequency of a clock forming part of the transponder.

9. A system as claimed in claim 7 wherein the algorithm is of a general form wherein the identification code is equal to at least one function of the physical characteristic of the transponder plus a first remainder.

10. A system as claimed in claim 9 wherein the data relating to the identification code and which forms part of the data to be written into the transponder includes the aforementioned remainder.

11. A system as claimed in claim 6 wherein data relating to the algorithm address of the selected algorithm is also included in the data to be written into the memory arrangement of the transponder.

12. A system as claimed in claim 11 wherein the controller of the encoder utilizes a second algorithm and said data relating to the address in a second encryption process, to yield encrypted data relating to the algorithm address, to be written into the transponder.

13. A system as claimed in claim 12 wherein the second algorithm is of a general form wherein the algorithm address is equal to at least one function of an independent variable plus a second remainder.

14. A system as claimed in claim 13 wherein the encrypted data relating to the algorithm address and which forms part of the data to be written into the transponder includes the aforementioned second remainder.

15. A system as claimed in claim 12 wherein the verifier includes computing means adapted to use the second algorithm to decrypt the encrypted data relating to the address of the first algorithm.

16. A system as claimed in claim 15 wherein the computing means is programmed to retrieve the first algorithm, to input data relating to the physical characteristics of the transponder and to use said data and the first algorithm to decrypt the data relating to the identification code, to yield an output code.

17. A system as claimed in claim 16 wherein the computing means of the verifier includes a comparator for comparing the output code to the authorized identification codes which are stored in the memory arrangement of the verifier.

18. A system as claimed in claim 17 wherein the indicating means of the verifier includes a display.

19. A method of verifying the authenticity of a transponder, the method including the steps of:

writing data into the transponder by an authorized transponder encoder;

including in the data, data relating to an identification code of an entity externally of the transponder;

reading the data written into the transponder with a verifier;

extracting from the data read, the data relating to the identification code;

comparing the extracted data to data relating to an authorized identification code for the entity; and

providing an indication whether the extracted data matches the data relating to the authorized identification code.

20. A method as claimed in claim 19 wherein the identification code is characteristic of the encoder.

21. A method as claimed in claim 20 wherein the encoder has a plurality of identification codes characteristic thereof and wherein the method includes the step of randomly selecting one of these codes for inclusion in the data to be written into the transponder.

22. A method as claimed in claim 19 wherein a first encryption algorithm and the identification code are used in a first encryption process to yield encrypted data relating to the identification code, to be written into the transponder.

23. A method as claimed in claim 22 wherein the first encryption algorithm is selectable from a first set of encryption algorithms.

24. A method as claimed in claim 22 wherein the first encryption algorithm includes at least one function of at least one physical characteristic of the transponder into which the data is to be written.

25. A method as claimed in claim 23 wherein each algorithm of the first set of encryption algorithms is accessible by the encoder from a memory arrangement thereof utilizing a respective algorithm address.

26. A method as claimed in claim 25 including the further step of including data relating to the algorithm address of the selected algorithm in the data to be written into the transponder.

27. A method as claimed in claim 26 wherein a second encryption algorithm and data relating to the address of the selected algorithm are utilized in a second encryption process, to yield encrypted data relating to the algorithm address for inclusion in the data to be written into the transponder.

28. A method as claimed in claim 27 including the step of utilizing at the verifier the data relating to the algorithm address to retrieve from a memory arrangement of the verifier the first algorithm utilized during the first encryption process.

29. A method as claimed in claim 28 including the steps of providing computing means in the verifier with data relating to the physical characteristics of the transponder;

and utilizing said data and the retrieved first algorithm to decrypt the encrypted data relating to the identification code.

30. A method as claimed in claim 29 including the step of comparing the decrypted data relating to the identification code to the data relating to authorized identification codes stored in a memory arrangement of the verifier.

31. A method of programming data into a transponder, the method including the steps of:

electronically measuring a physical characteristic of the transponder and producing data relating thereto;

utilizing the produced data in an encryption algorithm to encrypt data to be written into the transponder; and

writing the encrypted data into a memory arrangement of the transponder.

32. A method as claimed in claim 31 wherein the physical characteristic is a clock frequency of circuitry of the transponder, and wherein the clock frequency is measured by receiving a response signal from the transponder and utilizing the received signal to measure the clock frequency.