Multi-Factor Security System With Portable Devices And Security Kernels

• US 20070283145A1
• Filed: 07/24/2007
• Published: 12/06/2007
• Est. Priority Date: 04/22/2004
• Status: Abandoned Application

• Current Assignee: Fortress GB Limited
• Original Assignee: Fortress GB Limited
• Inventors: Vago, Gabriel, Granot, Ran, Apple, Uzi, Hecht, Avi, Kanza, Torner, Gressel, Carmi
• Application Number:
  US11/578,929
• Publication Number:
  US 20070283145A1
• Time in Patent Office: Days
• US Class Current: 713/164
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/346 Cards serving only as information carrier of service
• CPC Class Codes: G06Q 20/40145 Biometric identity checks
• CPC Class Codes: G07C 9/23 by means of a password
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G11C 7/24 Memory cell safety or protection circuits, e.g. arrangements for preventing inadvertent reading or writing; Status cells; Test cells

Abstract

A system for multi-factor security involving multiple secure devices that distribute the secured functions of the system over the different devices, such that the loss or theft of any one of them does not compromise the overall security of the system. Moreover, a configuration of devices is also secure even if one of them has been attacked by malicious software agents, such as “keyboard sniffers”. A novel contactless smart card reader (200) is presented that incorporates a transceiver antenna (220) within a keypad (210) of a device used with contactless smart cards (100). When the card (100) is pressed against the device'"'"'s keypad (210), the transceiver (220) of the device establishes a session with the smart card (100). A variety of systems are presented, including those using mobile telephones, computer-interfaced card readers, personal digital appliances, and television set-top box remote controllers.

Claims

1-15. -15. (canceled)

16. A wireless cryptographic communication system comprising:

a pair of wireless communication devices each having cryptographic identification functionality, including;

a first wireless communication device having a smart-card-only mode of operation comprising only a smart card functionality, said smart-card-only mode of operation being operative upon receipt of an electromagnetic actuation signal, and

a second wireless communication device in electromagnetic communication with the first wireless communication device which radiates electromagnetic energy only in response to physical activation thereof by a user.

17. A system according to claim 16 wherein said first wireless communication device is a smart card.

18. A system according to claim 16 wherein said physical activation responsive to which the second wireless communication device radiates energy comprises a designated mechanical manipulation of the second wireless communication device by a user.

19. A system according to claim 16 wherein at least one of said wireless communication devices comprises one of the following:

a computer peripheral with a security kernel;

a mobile telephone;

a mass storage device;

a remote set-top box controller; and

a personal digital appliance.

20. A system according to claim 16 wherein said second wireless communication device comprises:

a keypad;

a surface bearing said keypad; and

an antenna, communicating with said first wireless communication device, disposed on said surface.

21. A system according to claim 16 wherein said second wireless communication device comprises a secured keypad.

22. A system according to claim 16 wherein said second wireless communication device comprises a non-volatile secured memory operative to store at least one system secret protected by an on-board security kernel.

23. A system according to claim 22 wherein said at least one system secret includes at least one of the following group:

a secret algorithm, a secret key, and a personal identifying data element.

24. A system according to claim 16 wherein said second wireless communication device comprises an internal tamper-resistant keypad connected to an on-board security kernel.

25. A system according to claim 16 wherein said second wireless communication device comprises a display for validated images which is controllable by an on-board security kernel.

26. A system according to claim 16 wherein said second wireless communication device comprises an enhanced security kernel module including at least one cryptographic device for identifying operators of said plurality of intellifiers.

27. A system according to claim 16 wherein said second wireless communication device comprises a secured biometric data validation algorithm and secured memory including an on-board security kernel serving the biometric data validation algorithm.

28. A system according to claim 16 wherein at least one of said wireless communication devices is tamper-resistant.

29. A wireless cryptographic communication method comprising:

providing a pair of wireless communication devices each having cryptographic identification functionality, including a first wireless communication device having a smart-card-only mode of operation comprising only a smart card functionality, said smart-card-only mode of operation becoming operative upon receipt of an electromagnetic actuation signal, and a second wireless communication device in electromagnetic communication with the first wireless communication device which first device radiates electromagnetic energy only in response to physical activation of the first device by a user.

30. A method according to claim 29 and also comprising physically activating said second wireless communication device.