Electronic identification system and method with source authenticity

• US 20060075233A1
• Filed: 10/11/2005
• Published: 04/06/2006
• Est. Priority Date: 06/18/1998
• Status: Active Grant

• Current Assignee: Zebra Technologies Corporation
• Original Assignee: Supersensor Limited
• Inventors: Turner, Christopher Gordon Gervase, Kruger, Johan Dawid
• Granted Patent: US 7,228,433 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06K 7/0008 General problems related to the reading of electronic memory record carriers, independent of its reading method, e.g. power transfer
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

An RF electronic identification system (10) is disclosed and claimed. The system includes at least one transponder encoder (14.1) for writing data into a memory arrangement (52) of a selected transponder (1.1) of a plurality of transponders (1.1 to 1.n) adapted to receive data from the at least one encoder. The system further includes at least one verifier (16) for interrogating a selected transponder (1.1) and to read data stored in the transponder. The encoder includes a controller (42) for providing an identification code characteristic of the encoder to form part of the data to be written into the transponder. The verifier includes computing means (56) for extracting the identification code from the data read thereby and for comparing the code to authorized codes. An indicator (18) provides an indication whether the identification code corresponds to any of the authorized codes or not. A method of verifying the authenticity of a transponder is also disclosed and claimed.

Claims

1-32. -32. (canceled)

33. An electronic identification system including:

at least one transponder encoder for writing data to a transponder;

said encoder comprising means for providing an identification code characteristic of an entity externally of the transponder;

a plurality of transponders each adapted to receive data from the at least one encoder and to store the data received in a respective memory arrangement of the transponder;

at least one verifier for interrogating a selected transponder and to read data stored in the memory arrangement of the selected transponder via a radio frequency link;

wherein said encoder further comprises an encryption device for utilizing an algorithm and input data characteristic of the encoder to generate encrypted data to form at least part of the data written to the transponder;

the at least one verifier comprises computing means for extracting and deciphering the encrypted data from the data read thereby;

a comparator for comparing the deciphered data to authorized data and

an indicator for providing an indication of an outcome of the comparison.

34. A system as claimed in claim 33 wherein the encoder includes a memory arrangement wherein a plurality of identity codes characteristic of the encoder are stored;

and wherein the encoder comprises a controller for randomly selecting one of said plurality of identification codes for use as the input data by the encryption device.

35. A system as claimed in claim 34 further including a central computer for generating the plurality of identification codes, for downloading the identification codes into the memory arrangement of the encoder and into a memory arrangement of the at least one verifier.

36. A system as claimed in claim 34 wherein the algorithm comprises a first encryption algorithm and wherein the encryption device utilizes the selected identification code and the first encryption algorithm to generate the encrypted data.

37. A system as claimed in claim 36 wherein the controller of the encoder is programmed randomly to select the first encryption algorithm from a first set of encryption algorithms pre-stored in the memory arrangement of the encoder.

38. A system as claimed in claim 37 wherein each algorithm in the first set of encryption algorithms is associated with a respective algorithm address in the memory arrangement of the encoder.

39. A system as claimed in claim 36 wherein each encryption algorithm includes at least one term which is a function of at least one physical characteristic of the transponder into which the data is to be written.

40. A system as claimed in claim 39 wherein the physical characteristic is a frequency of a clock forming part of the transponder.

41. A system as claimed in claim 39 wherein each algorithm is of a general form wherein the selected identification code is equal to said at least one term plus a first remainder.

42. A system as claimed in claim 41 wherein the encrypted comprises the aforementioned remainder.

43. A system as claimed in claim 38 wherein the encrypted data further comprises encrypted address data relating to the respective algorithm address of the selected algorithm.

44. A system as claimed in claim 43 wherein the encryption device utilizes a second encryption algorithm and said data relating to the respective algorithm address to generate the encrypted address data.

45. A system as claimed in claim 44 wherein the second algorithm is of a general form wherein the respective algorithm address is equal to at least one term plus a second remainder.

46. A system as claimed in claim 45 wherein the encrypted address data comprises the aforementioned second remainder.

47. A system as claimed in claim 44 wherein the computing means of the verifier is configured to use the second encryption algorithm to decrypt the encrypted address data to yield address data.

48. A system as claimed in claim 47 wherein the computing means of the verifier is configured to utilize the address data to retrieve the selected first algorithm, to obtain input data and to use said input data and the first encryption algorithm to decrypt the encrypted data to yield decrypted data.

49. A system as claimed in claim 48 wherein the comparator forms part of the verifier and is configured to compare the decrypted data to the authorized identification codes which are stored in the memory arrangement of the verifier.

50. A method of verifying the authenticity of a transponder, the method including the steps of:

generating encrypted data utilizing an algorithm and input data characteristic of a transponder encoder;

writing the encrypted data and data relating to an identification code of an entity externally of the transponder into the transponder utilizing the transponder encoder;

reading the data written into the transponder with a verifier via a radio frequency link extending between the verifier and the transponder;

extracting from the data read, the encrypted data;

decipher the encrypted data;

comparing the deciphered data to authorized data and

providing an indication based on the comparison.

51. A method as claimed in claim 50 wherein the input data comprises an identification code characteristic of the encoder.

52. A method as claimed in claim 51 wherein the encoder has a plurality of identification codes characteristic thereof and wherein the method includes the step of randomly selecting one of these codes as said input data.

53. A method as claimed in claim 50 wherein the step of generating encrypted data comprises the step of utilizing a first encryption algorithm and the identification code to generate encrypted data relating to the identification code.

54. A method as claimed in claim 53 wherein the first encryption algorithm is selectable from a first set of encryption algorithms.

55. A method as claimed in claim 54 wherein the first encryption algorithm includes at least one term which is a function of at least one physical characteristic of the transponder into which the data is written.

56. A method as claimed in claim 55 wherein each algorithm of the first set of encryption algorithms is accessible by the encoder from a memory arrangement thereof utilizing a respective algorithm address.

57. A method as claimed in claim 56 wherein the step of generating encrypted data comprises the step of utilizing a second encryption algorithm and data relating to the respective algorithm address of the selected algorithm, to generate encrypted data relating to the respective algorithm address.

58. A method as claimed in claim 57 including the step of utilizing at the verifier decrypted data relating to the respective algorithm address to retrieve from a memory arrangement of the verifier the first encryption algorithm utilized during the first encryption process.

59. A method as claimed in claim 58 comprising the steps of providing to computing means in the verifier input data;

and utilizing said input data and the retrieved first encryption algorithm to decrypt the encrypted data relating to the identification code.

60. A method as claimed in claim 59 wherein the step of comparing comprises the step of comparing the decrypted data relating to the identification code to data relating to authorized identification codes stored in a memory arrangement of the verifier.

61. A method of programming data into a transponder, the method including the steps of:

electronically measuring a physical characteristic of the transponder and producing data relating thereto;

utilizing the produced data in an encryption algorithm to encrypt data to be written into the transponder; and

writing the encrypted data into a memory arrangement of the transponder.

62. A method as claimed in claim 61 wherein the physical characteristic is a clock frequency of circuitry of the transponder, and wherein the clock frequency is measured by receiving a response signal from the transponder and utilizing the received signal to measure the clock frequency.