Scalable method for access control

• US 20080012685A1
• Filed: 07/05/2007
• Published: 01/17/2008
• Est. Priority Date: 07/05/2006
• Status: Abandoned Application

• Current Assignee: Atmel Corporation (Microchip Technology Incorporated)
• Original Assignee: Atmel Corporation (Microchip Technology Incorporated)
• Inventors: Friedrich, Ulrich, Pangels, Michael
• Application Number:
  US11/822,308
• Publication Number:
  US 20080012685A1
• Time in Patent Office: Days
• US Class Current: 340/5.25
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/35765 Access rights to memory zones
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A method for specifying access authorization to at least one memory area of a transponder is provided, in which the memory area is assigned access control information, whereby the access control information comprises at least one configurable master access control information, and write access to the memory area is released at least by a first configuration of the master access control information and write access to the memory area is blocked by a second configuration of the master access control information, whereby in the method the access control information is stored further in the transponder, the access control information is assigned at least one first settable sub-access control information, and the information is scaled by the assignment of the first sub-access control information to the master access control information, so that access authorization specified by the configuration of the master access control information is adapted to at least one additional requirement. The invention relates further to scalable transponders and an RFID system comprising a scalable transponder.

Claims

1. A method for specifying access authorization to at least one memory area of a transponder, particularly a passive and/or backscatter-based transponder, the method comprising:

assigning the memory area access control information, the access control information comprising at least one configurable master access control information and write access to the memory area is released at least by a first configuration of the master access control information and write access to the memory area is blocked by a second configuration of the master access control information;

storing the access control information in the transponder;

assigning the master access control information least one first settable sub-access control information;

scaling the master access control information by the assignment of the first sub-access control information so that access authorization specified by the configuration of the master access control information is adapted to at least one additional requirement.

2. The method according to claim 1, wherein access authorization for read access to the memory area is specified by the first sub-access control information.

3. The method according to claim 1, wherein the first sub-access control information is overloaded at least in part, wherein a configuration of the sub-access control information is assigned at least two options for access control and wherein the access authorization is specified at least depending on the master access control information, the first sub-access control information, and a selection parameter.

4. The method according to claim 1, wherein the first sub-access control information comprises at least one sub-bit, preferably at least two sub-bits, by which four bit patterns are formed.

5. The method according to claim 1, wherein the first sub-access control information is scaled by at least one lower-ranking second sub-access control information.

6. The method according to claim 5, wherein the memory area is divided into at least two memory blocks, and wherein access authorization to the memory blocks is specified individually by the second sub-access control information.

7. A transponder, particularly passive and/or backscatter-based transponder, for an RFID system, comprising:

at least one transponder; and

at least one reader unit, with at least one memory area,

wherein the memory area is assigned access control information to specify access authorization to the memory area,

wherein the access control information comprises at least one configurable master access control information,

wherein write access to the memory area is released at least by a first configuration of the master access control information and write access to the memory area is blocked by a second configuration of the master access control information,

wherein the access control information comprises at least one first sub-access control information, and

wherein the master access control information is scaled by the first sub-access control information, so that access authorization specified by the configuration of the master access control information is adapted to at least one additional requirement.

16. An RFID system comprising at least one reader unit and at least one transponder according to claim 7.

17. The RFID system according to claim 16, wherein the first sub-access control information is overloaded at least in part, wherein access authorization is specified at least depending on the master access control information, the sub-access control information, and a selection parameter, and wherein at least one selection parameter is stored in a cross reference list.

18. The RFID system according to claim 16, wherein at least one configuration bit, which can be read out by the reader unit, is stored in the transponder, and wherein the configuration bit indicates at least one scaling effect, a scaling intensity, and/or a selection parameter.

8. A method for specifying access authorization to at least one memory area of a passive and/or backscatter-based transponder, the method comprising:

assigning the memory area access control information, the access control information comprising at least one configurable master access control information, the master access control information comprising two bits, write access to the memory area being released by a first configuration of a first bit of the master access control information, and write access to the memory area being blocked by a second configuration of the first bit of the master access control information, and permanence of the access control information is specified by the second bit of the master access control information;

storing the access control information in the transponder;

assigning the access control information at least one settable sub-access control information; and

dividing the memory area into at least two memory blocks, wherein access authorization to the memory blocks is specified individually by the sub-access control information.

9. The method according to claim 8, wherein the sub-access control information comprises at least one sub-bit, preferably at least two sub-bits, particularly four sub-bits, by which 16 bit patterns are formed.

10. The method according to claim 8, wherein access authorization for read access to the memory area is specified further by sub-access control information.

11. The method according to claim 8, wherein the sub-access control information specifies access authorization for read and/or write access to the memory area depending on at least one password.

12. The method according to claim 8, wherein the sub-access control information is overloaded at least in part, wherein a configuration of the sub-access control information is assigned at least two options for access control, and wherein the access authorization is specified at least depending on the master access control information, the sub-access control information, and a selection parameter.

13. The method according to claim 8, wherein the access control information is stored at least in part in a shadow memory area, the shadow memory area being divided into sub-memory areas parallel to the memory blocks.

14. The method according to claim 8, wherein the subdivision into memory blocks and/or into sub-memory areas is carried out dynamically during an initialization.

15. A transponder, particularly a passive and/or backscatter-based transponder, for an RFID system, comprising:

at least one transponder; and

at least one reader unit having at least one memory area, the memory area being assigned access control information to specify access authorization to the memory area, and the access control information comprising at least one configurable master access control information,

wherein the master access control information comprises two bits,

wherein write access to the memory area is released at least by a first configuration of a first bit of the master access control information and write access to the memory area is blocked by a second configuration of the first bit of the master access control information,

wherein permanence of the access control information is specified by the second bit of the master access control information,

wherein the access control information comprises at least one first sub-master access control information, and

wherein the memory area is divided into at least two memory blocks, access authorization to the memory blocks being specified individually by the sub-access control information.