Contact-less tag with signature, and applications thereof

• US 20090160615A1
• Filed: 12/11/2008
• Published: 06/25/2009
• Est. Priority Date: 12/20/2007
• Status: Abandoned Application

• Current Assignee: BCE Incorporated
• Original Assignee: BCE Incorporated
• Inventors: O'Brien, William G., Yeap, Tet Hin
• Application Number:
  US12/314,456
• Publication Number:
  US 20090160615A1
• Time in Patent Office: Days
• US Class Current: 340/10.100
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 9/445 Program loading or initiating bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57
• CPC Class Codes: G06Q 10/087 Inventory or stock management, e.g. order filling, procurement or balancing against orders
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04W 12/08 : Access security
• CPC Class Codes: H04W 12/10 : Integrity
• CPC Class Codes: H04W 12/47 : using near field communication [NFC] or radio frequency identification [RFID] modules

Abstract

A method which comprises generating a first signature by encoding an identifier with a first additional data set at a first time instant; responding to a first read request from a tag reader by releasing the first signature; generating a second signature by encoding the identifier with a second additional data set at a second time instant, the second additional data set being different from the first additional data set; and responding to a second read request by releasing the second signature. Also, a method which comprises obtaining a signature from a contactlessly readable tag; decrypting the signature with a key to obtain a candidate identifier and a scrambling code associated with the signature; and validating the candidate identifier based on at least one of the scrambling code and the signature.

Claims

1. A method, comprising:

generating a first signature by encoding an identifier with a first additional data set at a first time instant;

responding to a first read request from a tag reader by releasing the first signature;

generating a second signature by encoding the identifier with a second additional data set at a second time instant, the second additional data set being different from the first additional data set; and

responding to a second read request by releasing the second signature.

2. The method defined in claim 1, wherein the additional data set includes a key and a first scrambling code, and wherein encoding the identifier with the additional data set comprises augmenting the identifier with the first scrambling code and using the key to encrypt the result of the augmenting.

3. The method defined in claim 2, further comprising:

when responding to the first or second read request, accompanying the first or second signature, respectively, with an index associated with said key.

4. The method defined in claim 2, wherein the first scrambling code is received from the tag reader.

5. The method defined in claim 2, wherein the second additional data set includes said key and a second scrambling code, and wherein encoding the identifier with the second additional data set comprises augmenting the identifier with the second scrambling code and using the key to encrypt the result of the second augmenting.

6. The method defined in claim 5, wherein the second scrambling code differs from the first scrambling code by a pre-determined increment.

7. The method defined in claim 5, wherein the first and second scrambling codes are representative of the first and second time instants, respectively.

8. The method defined in claim 5, wherein the second scrambling code differs from the first scrambling code by a number of read requests to which a response has been issued between the first and second read requests.

9. The method defined in claim 5, wherein the second scrambling code differs from the first scrambling code in a first number of digits, wherein the second signature differs from the first signature in a second number of digits, the second number of digits being greater than the first number of digits.

10. The method defined in claim 5, wherein the first and second scrambling codes are representative of respective geographic locations.

11. The method defined in claim 5, wherein the first and second scrambling codes are representative of an output of a pseudo-random number generator at different chronological positions.

12. The method defined in claim 5, wherein the second scrambling code is received from the tag reader.

13. The method defined in claim 1, wherein the additional data set includes a key, and wherein encoding the identifier with the additional data set comprises using the key to encrypt the identifier.

14. The method defined in claim 13, the key being a first key, wherein the second additional data set includes a second key different from the first key, and wherein encoding the identifier with the second additional data set comprises using the second key to encrypt the identifier.

15. The method defined in claim 14, further comprising:

when responding to the first read request, accompanying the first signature with an index associated with the first key; and

when responding to the second read request, accompanying the second signature with an index associated with the second key.

16. The method defined in claim 14, wherein the first and second keys are representative of an output of a pseudo-random number generator at different chronological positions.

17. The method defined in claim 1, wherein generating the second signature is triggered by having responded to the first read request.

18. The method defined in claim 1, wherein generating the second signature is triggered by receipt of the second read request.

19. The method defined in claim 1, wherein generating the second signature is triggered by having responded to a pre-determined number of read requests since the first read request.

20. The method defined in claim 1, wherein generating the second signature is triggered by a pre-determined amount of time having elapsed since generating the first signature.

21. The method defined in claim 1, further comprising maintaining a clock function to keep time, wherein generating the second signature is triggered by a temporal event detected by the clock function.

22. The method defined in claim 1, wherein generating the second signature occurs upon receipt of a trigger from the tag reader.

23. Apparatus, comprising:

means for generating a first signature by encoding an identifier with an additional data set at a first time instant;

means for responding to a first read request from a tag reader by releasing the first signature;

means for generating a second signature by encoding the identifier with a second additional data set at a second time instant, the second additional data set being different from the first additional data set; and

means for responding to a second read request from a tag reader by releasing the second signature.

24. A computer-readable medium comprising computer-readable program code which, when interpreted by a computing apparatus, causes the computing apparatus to execute a method, the computer-readable program code comprising:

first computer-readable program code for causing the computing apparatus to generate a first signature by encoding an identifier with an additional data set at a first time instant;

second computer-readable program code for causing the computing apparatus to respond to a first read request from a tag reader by releasing the first signature;

third computer-readable program code for causing the computing apparatus to generate a second signature by encoding the identifier with a second additional data set at a second time instant, the second additional data set being different from the first additional data set; and

fourth computer-readable program code for causing the computing apparatus to respond to a second read request from a tag reader by releasing the second signature.

25. A device for use in contact-less communication with a reader, comprising:

a memory configured to store a first signature generated by encoding an identifier with a first additional data set at a first time instant; and

a controller configured to generate a new signature by encoding the identifier with a second additional data set at a second time instant, the second additional data set being different from the first additional data set;

the controller further configured to cause the new signature to be stored in the memory after the second time instant.

26. The device defined in claim 25, wherein the first additional data set includes a key and a first scrambling code, and wherein the second additional data set includes the key and a second scrambling code.

27. The device defined in claim 26, the controller being aware of the first and second time instants by implementing a clock function, wherein the first and second scrambling codes are representative of the first and second time instants, respectively.

28. The device defined in claim 26, wherein the controller is further configured to receive the second scrambling code from the reader.

29. The device defined in claim 26, wherein the controller is further configured to receive an index from the reader and to generate the second scrambling code from the index.

30. The device defined in claim 26, wherein the controller is further configured to determine the second scrambling code.

31. The device defined in claim 26, wherein the second scrambling code differs from the first scrambling code by a pre-determined increment.

32. The device defined in claim 26, wherein the second scrambling code differs from the first scrambling code in a first number of digits, wherein the new signature differs from the first signature in a second number of digits, the second number of digits being greater than the first number of digits.

33. The device defined in claim 26, wherein the first and second scrambling codes are representative of respective geographic locations of the device.

34. The device defined in claim 26, wherein the first and second scrambling codes are representative of an output of a pseudo-random number generator at different chronological positions.

35. The device defined in claim 26, wherein encoding the identifier with the first additional data set comprises augmenting the identifier with the first scrambling code and using the key to encrypt the result of the augmenting.

36. The device defined in claim 35, wherein encoding the identifier with the second additional data set comprises augmenting the identifier with the second scrambling code and using the key to encrypt the result of the second augmenting.

37. The device defined in claim 25, wherein the first additional data set includes a key, and wherein encoding the identifier with the first additional data set comprises using the key to encrypt the identifier.

38. The device defined in claim 37, the key being a first key, wherein the second additional data set includes a second key, and wherein encoding the identifier with the second additional data set comprises using the second key to encrypt the identifier.

39. The device defined in claim 38, wherein the first and second keys are representative of an output of a pseudo-random number generator at different chronological positions.

40. The device defined in claim 25, wherein the new signature replaces the first signature when the new signature is stored in the memory.

41. The device defined in claim 25, the controller being further configured to release the new signature in response to a read request received from the reader after the second time instant.

42. The device defined in claim 41, wherein the controller is further configured to accompany the new signature with an index associated with the second key.

43. The device defined in claim 41, wherein the controller is caused to generate the new signature upon receipt of the read request.

44. The device defined in claim 41, wherein the controller is caused to generate the new signature when the read request is the Nth in a series of read requests, where N is an integer.

45. The device defined in claim 41, the controller being further configured to release the first signature in response to a read request received from the reader at a time instant between the first and second time instants.

46. The device defined in claim 41, the memory being further configured to store an index associated with the key, the controller being further configured to release the index when releasing the first signature or the new signature.

47. The device defined in claim 45, the memory being further configured to store an index associated with the key, the controller being further configured to release the index when releasing the first signature or the new signature.

48. The device defined in claim 25, wherein the controller is caused to generate the new signature by receipt of a trigger from the reader.

49. The device defined in claim 25, wherein the controller is caused to generate the new signature when a pre-determined amount of time has elapsed since generation of the first signature.

50. The device defined in claim 25, further comprising a clock module, wherein the controller is caused to generate the new signature upon detection of a temporal event by the clock module.

51. A device for use in contact-less communication with a reader, comprising:

a memory configured to store a signature that encodes a pre-determined identifier;

a transceiver configured to contactlessly receive read requests from the reader and to contactlessly transmit responses thereto;

a controller configured to respond to read requests received via the transceiver by releasing via the transceiver a current version of the signature stored in the memory, wherein the version of the signature stored in the memory varies over at least two time instants while continuing to encode the pre-determined identifier; and

a power source for powering at least the controller.

52. The device defined in claim 51, wherein the controller implements a clock function to keep time, wherein variations in the signature are related to variations in the time kept by the clock function.

53. The device defined in claim 51, the power source being dormant until a burst of energy from the reader is detected.

54. The device defined in claim 51, further comprising an externally controllable switch that can be toggled between a first state and a second state, in the first state the switch establishing an electrical connection between the power source and the controller, in the second state the switch breaking the electrical connection between the power source and the controller.

55. The device defined in claim 54, wherein the switch is biased in the second state and is configured to be placed in the first state upon activation by a user.

56. The device defined in claim 55, wherein activation by the user comprises the user applying physical contact to a portion of a surface of the device.

57. The device defined in claim 55, wherein the controller is configured to generate a new version of the signature when the switch is placed in the first state.

58. The device defined in claim 57, wherein the controller is configured to generate said new version of the signature by encoding the pre-determined identifier with an output of a pseudo-random number generator.

59. The device defined in claim 57, wherein the controller is configured to generate said new version of the signature by encoding the pre-determined identifier with an output of a clock function.

60. The device defined in claim 57, wherein the controller is configured to generate said new version of the signature by encoding the pre-determined identifier with an output of a counter.

61. The device defined in claim 57, wherein when the switch is placed in the second state after having been placed in the first state, and then is returned to the first state, the controller is configured to generate a further new version of the signature.

62. The device defined in claim 61, wherein the controller is configured to generate said further new version of the signature by encoding the pre-determined identifier with an output by a pseudo-random number generator.

63. The device defined in claim 61, wherein the controller is configured to generate said further new version of the signature by encoding the pre-determined identifier with an output of a clock function.

64. The device defined in claim 61, wherein the controller is configured to generate said further new version of the signature by encoding the pre-determined identifier with an output of a counter.

65. The device defined in claim 51, affixed to an item, wherein the pre-determined identifier corresponds to information about the item.

66. The device defined in claim 51, affixed to an item, wherein the pre-determined identifier corresponds to information about a user expected to be associated with the item.

67. The device defined in claim 51, implemented in a mobile communication device.