Device and System for Authenticating and Securing Transactions Using RF Communication

• US 20070007358A1
• Filed: 07/06/2006
• Published: 01/11/2007
• Est. Priority Date: 07/06/2005
• Status: Abandoned Application

• Current Assignee: NXP B.V. (NXP Semiconductors NV)
• Original Assignee: NXP B.V. (NXP Semiconductors NV)
• Inventors: White, Charles
• Application Number:
  US11/456,037
• Publication Number:
  US 20070007358A1
• Time in Patent Office: Days
• US Class Current: 235/492
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/12 Card verification
• CPC Class Codes: G07F 7/122 Online card verification
• CPC Class Codes: G07G 1/0036 Checkout procedures
• CPC Class Codes: G07G 1/0054 with control of supplementary check-parameters, e.g. weight or number of articles
• CPC Class Codes: G07G 1/009 the reader being an RFID reader
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/47 using near field communication [NFC] or radio frequency identification [RFID] modules

Abstract

A system is provided for authenticating and securing product transactions. An integrated circuit is attached to a target, such as an optical disc or electronic device. The integrated circuit has an RF transceiver that is capable of establishing communication with an associated reading device. The integrated circuit also has a hidden memory, which can not be read externally, and a user memory. The hidden memory stores an authentication message, while the user memory stores readable authentication information. The hidden authentication message and the authentication information are related through a cryptographic process. However, even though the integrated circuit benefits from the cryptographic security, the integrated circuit only operates relatively simple logic operations. In this way, a highly secure transaction is enabled without requiring significant processing power or time at the integrated circuit. When the integrated circuit is placed near the reader, the reader reads the authentication information, and with the cooperation of a network operation center, uses the authentication information to derive an activation code. The reader passes the activation code to the integrated circuit, which compares the activation code to its hidden activation message. If they have a proper relationship, the communication has been authenticated, and the integrated circuit proceeds to perform an action.

Claims

1. An embedded system, comprising;

an RF transponder;

an embedded processor; and

,

a memory;

the memory further comprising;

a hidden memory for storing a plaintext token; and

,

a user memory for storing an encrypted token.

2. The embedded system according to claim 1, wherein the RF transponder is a transceiver operating at an RFID frequency.

3. The embedded processor system according to claim 1, wherein the RF transponder is a transceiver operating at a UHF RFID frequency in the range of about 890 MHz to about 950 MHz.

4. The embedded processor system according to claim 1, wherein the RF transponder is a transceiver operating at a RFID frequency in the range of about 2400 MHz to about 2483 MHz.

5. The embedded processor system according to claim 1, wherein the RF transponder is a transceiver operating at a HF frequency in the range of about 13.56 MHz.

6. The embedded processor system according to claim 1, wherein the RF transponder is a transceiver operating at a Near Field Communication (NFC) frequency.

7. The embedded processor system according to claim 1, wherein the embedded processor system is formed as a tag.

8. The embedded processor system according to claim 1, wherein the embedded processor system is formed as a removable tag.

9. The embedded processor system according to claim 1, wherein the embedded processor system is integrated with target circuitry.

10. The embedded processor system according to claim 1, wherein the hidden memory is a flash memory.

11. The embedded processor system according to claim 1, wherein the hidden memory is a PROM.

12. The embedded processor system according to claim 1, further including attachment means for mechanically coupling the embedded processor system with a target.

13. The embedded processor system according to claim 1, wherein the target is an optical disc.

14. The embedded processor system according to claim 1, wherein the target is a DVD, HD DVD, Blu-Ray DVD, CD, or gaming disc.

15. The embedded processor system according to claim 1, wherein the target is an electronic device.

16. The embedded processor system according to claim 1, wherein the target is a hologram, credit card, drivers license, identification card, security pass, ticket, or coupon.

17. The embedded system of claim 1, wherein the hidden memory is a write once memory.

18. An embedded system, comprising;

an RF transponder;

an embedded processor; and

,

a memory;

the memory further comprising;

a hidden memory for storing an authentication code; and

,

a user memory for storing a public key.

19. The embedded system of claim 18, wherein the hidden memory is a write once memory.

20. An embedded system, comprising;

an RF transponder;

an embedded processor; and

,

a memory;

the memory further comprising;

a hidden memory for storing an authentication message; and

,

a user memory for storing authentication information.

21. The system of claim 20, wherein the hidden memory is a write once memory.

22. The system of claim 20, wherein the authentication information is selected from a group consisting of;

an encrypted representation of the authentication message;

a public key;

an identifier for a public/private key pair;

an identifier for a manufacturer; and

,

an identifier for an embedded system.