Contact-less tag with signature, and applications thereof

• US 20090161872A1
• Filed: 12/11/2008
• Published: 06/25/2009
• Est. Priority Date: 12/20/2007
• Status: Active Grant

• Current Assignee: BCE Incorporated
• Original Assignee: BCE Incorporated
• Inventors: Zlobec, Sanro, O'Brien, William G., Yeap, Tet Hin
• Granted Patent: US 8,103,872 B2
• Time in Patent Office: Days
• US Class Current: 380/271
• CPC Class Codes: G06F 21/43 wireless channels
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 9/445 Program loading or initiating bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57
• CPC Class Codes: G06Q 10/087 Inventory or stock management, e.g. order filling, procurement or balancing against orders
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/3825 Use of electronic signatures
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G06Q 20/385 using an alias or single-use codes
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G06Q 20/425 using two different networks, one for transaction and one for security confirmation
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2209/84 Vehicles
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04W 12/08 : Access security
• CPC Class Codes: H04W 12/10 : Integrity
• CPC Class Codes: H04W 12/47 : using near field communication [NFC] or radio frequency identification [RFID] modules

Abstract

A method, comprising: receiving an encrypted signature from a tag associated with an item; determining a dynamic parameter; obtaining a key based at least in part on the dynamic parameter; decrypting the signature with the key to obtain an identifier; and performing an action related to identification of the item, based on the identifier. Also, a system, comprising: a tag reader configured to receive an encrypted signature from a tag associated with an item; and a processing entity configured to (i) determine a dynamic parameter; (ii) obtain a key based at least in part on the dynamic parameter; (iii) decrypt the signature with the key to obtain an identifier; and (iv) perform an action related to identification of the item, based on the identifier.

Claims

1. A method, comprising:

receiving an encrypted signature from a tag associated with an item;

determining a dynamic parameter;

obtaining a key based at least in part on the dynamic parameter;

decrypting the signature with the key to obtain an identifier; and

performing an action related to identification of the item, based on the identifier.

2. The method defined in claim 1, wherein the dynamic parameter is a temporal feature.

3. The method defined in claim 2, wherein the temporal feature corresponds to an output of a clock module configured to emulate a clock module implemented by the tag.

4. The method defined in claim 1, wherein the dynamic parameter corresponds to an output of a geo-location module.

5. The method defined in claim 1, wherein the encrypted signature is accompanied by an index, wherein the dynamic parameter corresponds to said index.

6. The method defined in claim 1, wherein obtaining the key comprises using the dynamic parameter as the key.

7. The method defined in claim 1, wherein obtaining the key comprises consulting a table that associates data elements to respective keys in order to identify the key associated with the data element corresponding to said dynamic parameter.

8. The method defined in claim 1, wherein obtaining the key comprises using as the key an output of a pseudo-random number generator affected by the dynamic parameter.

9. The method defined in claim 1, wherein performing an action related to identification comprises storing in a storage medium an indication that the identifier has been encountered.

10. The method defined in claim 1, wherein performing an action related to identification comprises allowing or denying access to property based on a comparison of the identifier to a list of identifiers.

11. The method defined in claim 10, wherein said property comprises at least one of:

computing equipment, a computer network, a building, a portion of a building, an entrance, an exit and a vehicle.

12. The method defined in claim 1, wherein performing an action related to identification comprises allowing or denying a transaction based on a comparison of the identifier to a list of identifiers.

13. The method defined in claim 12, wherein said transaction comprises at least one of:

a financial transaction and a login to controlled online content.

14. The method defined in claim 1, further comprising validating the identifier based on the signature.

15. The method defined in claim 14, wherein validating comprises determining whether said signature has been previously received.

16. The method defined in claim 15, further comprising concluding that said validating is unsuccessful if said determining indicates that said signature has been previously received.

17. The method defined in claim 16, further comprising concluding that said validating is potentially successful if said determining indicates that said signature has not been previously received.

18. The method defined in claim 16, wherein said determining comprises consulting a database of previously received signatures.

19. A computer-readable medium comprising computer-readable program code which, when interpreted by a computing apparatus, causes the computing apparatus to execute a method, the computer-readable program code comprising:

first computer-readable program code for causing the computing apparatus to be attentive to receipt of an encrypted signature from a tag associated with an item;

second computer-readable program code for causing the computing apparatus to determine a dynamic parameter;

third computer-readable program code for causing the computing apparatus to obtain a key based at least in part on the dynamic parameter;

fourth computer-readable program code for causing the computing apparatus to decrypt the signature with the key to obtain an identifier; and

fifth computer-readable program code for causing the computing apparatus to perform an action related to identification of the item, based on the identifier.

20. A system, comprising:

a tag reader configured to receive an encrypted signature from a tag associated with an item; and

a processing entity configured to;

determine a dynamic parameter;

obtain a key based at least in part on the dynamic parameter;

decrypt the signature with the key to obtain an identifier; and

perform an action related to identification of the item, based on the identifier.

21. An apparatus, comprising:

means for receiving an encrypted signature from a tag associated with an item;

means for determining a dynamic parameter;

means for obtaining a key based at least in part on the dynamic parameter;

means for decrypting the signature with the key to obtain an identifier; and

means for performing an action related to identification of the item, based on the identifier.