Systems and Methods for Zero-Power Security

• US 20100085160A1
• Filed: 08/14/2009
• Published: 04/08/2010
• Est. Priority Date: 10/03/2008
• Status: Abandoned Application

• Current Assignee: University Of Massachusetts
• Original Assignee: University Of Massachusetts
• Inventors: Fu, Kevin Edward
• Application Number:
  US12/541,751
• Publication Number:
  US 20100085160A1
• Time in Patent Office: Days
• US Class Current: 340/10.100
• CPC Class Codes: A61N 1/37223 Circuits for electromagnetic coupling
• CPC Class Codes: A61N 1/37276 characterised by means for reducing power consumption during telemetry
• CPC Class Codes: G08C 2201/10 Power supply of remote control devices
• CPC Class Codes: G08C 2201/61 Password, biometric
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 2209/88 Medical equipments
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

The present invention provides systems and methods for utilizing zero-power, energy-harvesting computational modules to provide secure and reprogrammable wireless communications with vulnerable devices comprising integrated circuits (ICs), including active implantable medical devices, electronic lock and key systems, credit cards, access cards, identification cards and passports. The zero-power, energy-harvesting computational modules are powered by radio signals received from an interrogator, and requests from the interrogator are authenticated using an encrypted challenge-response mechanism. Communications between the interrogator and the vulnerable device are enabled if the interrogator requests have been authenticated, thus preventing unauthorized requests from reaching the vulnerable device.

Claims

1. A system comprising:

a device comprising at least one integrated circuit, wherein the device is vulnerable to unauthenticated access;

an antenna, and;

a zero-power, energy-harvesting reprogrammable computational module configured to communicate with the antenna to receive radio frequency signals and to communicate with the device,

wherein the computational module is powered by a corresponding radio frequency signal and authenticates the source of the corresponding radio frequency signal using a secure challenge-response cryptographic function.

2. The system of claim 1 further comprising an interrogator configured to transmit the corresponding radio frequency signal.

3. The system of claim 1, where the device further comprises a battery.

4. The system of claim 1, where the antenna is integrated with the computational module.

5. The system of claim 1, where the device comprises non-volatile memory.

6. The system of claim 1, where the device comprises a microcontroller having a data bus and non-volatile memory.

7. The system of claim 1 further comprising:

a UHF transmitter or transceiver in communication with the device; and

a UHF antenna in communication with the UHF transmitter or transceiver.

8. The system of claim 1, where the computational module comprises a microcontroller.

9. The system of claim 1, where the computational module is hard-wired to the vulnerable device.

10. The system of claim 1, where the computational module communicates wirelessly with the device.

11. The system of claim 2, where the computational module and the interrogator communicate using a RFID protocol.

12. The system of claim 11, where the RFID protocol is an Electronic Product Code (EPC) Class 1 Generation 1 protocol, EPC Class 1 Generation 2 protocol, ISO/IEC 7816, ISO/IEC 14443 or ISO/IEC 18092.

13. The system of claim 1, where the radio frequency signal is an ultra high frequency (UHF) signal.

14. The system of claim 1, where the radio frequency signal is a high frequency (HF) signal.

15. The system of claim 1, where the radio frequency signal is a low frequency (LF) signal.

16. The system of claim 1, where the radio frequency signal is a medical implant communications service (MICS) signal.

17. The system of claim 1, where the device is an implantable medical device.

18. The system of claim 1, where the system is incorporated in an automobile key.

19. The system of claim 1, where the system is incorporated in a key fob.

20. The system of claim 1, where the system is incorporated in a building access card or a room access card.

21. The system of claim 1, where the system is incorporated in a contactless smart card.

22. The system of claim 1, where the system is incorporated in a travel document, a driver'"'"'s license, a personal identity verification card, a medical identity card or an employee identity card.

23. The system of claim 1, where the source of the corresponding radio frequency signal is authenticated using a cryptographic function.

24. The system of claim 23, where the cryptographic function is a symmetric cryptographic function.

25. The system of claim 23, where the cryptographic function is an asymmetric cryptographic function.

26. The system of claim 1, further comprising the step of sending a unique identifier to the source of the corresponding radio frequency signal.

27. The system of claim 26, further comprising the step of sending a nonce to the source of the corresponding radio frequency signal.

28. The system of claim 27, further comprising the step of computing a key value using the unique identifier and the nonce.

29. The system of claim 26, further comprising the step of computing a key value using the unique identifier.

30. The system of claim 29, further comprising the step of comparing the computed key value to a key value received from the source of the corresponding radio frequency signal.

31. The system of claim 29, where the key value is computed using a cryptographic function.

32. The system of claim 29, where the key value is computed using an Advanced Encryption Standard (AES) algorithm.

33. The system of claim 1, further comprising sending an authentication status to the source of the corresponding radio frequency signal.

44. The method of claim 32, where the RFID protocol is an Electronic Product Code (EPC) Class 1 Generation 1 protocol, EPC Class 1 Generation 2 protocol, ISO/IEC 7816, ISO/IEC 14443 or ISO/IEC 18092.

34. A method of secure radio frequency communication with a vulnerable device, comprising the steps of:

providing a system comprising a device comprising at least one integrated circuit, wherein the device is vulnerable to unauthenticated access;

an antenna, and;

a zero-power, energy-harvesting reprogrammable computational module configured to communicate with the antenna to receive radio frequency signals and to communicate with the device, wherein the computational module is powered by a corresponding radio frequency signal and authenticates the source of the corresponding radio frequency signal using a cryptographic function;

using the system to receive a corresponding radio frequency signal from an interrogator

storing the energy in the received corresponding radio frequency signal;

authenticating the interrogator using an encrypted challenge-response authentication mechanism between the zero-power, energy-harvesting reprogrammable computational module and the interrogator; and

enabling communication between the interrogator and the device if the interrogator is authenticated.

35. The method of claim 34, where the device further comprises a battery.

36. The method of claim 34, where the antenna is integrated with the computational module.

37. The method of claim 34, where the device comprises non-volatile memory.

38. The method of claim 34, where the device comprises a microcontroller having a data bus and non-volatile memory.

39. The method of claim 34 further comprising:

a UHF transmitter or transceiver in communication with the device; and

a UHF antenna in communication with the UHF transmitter or transceiver.

40. The method of claim 34, where the computational module comprises a microcontroller.

41. The method of claim 34, where the computational module is hard-wired to the enabled device.

42. The method of claim 34, where the computational module communicates wirelessly with the device.

43. The method of claim 34, where the computational module and the interrogator communicate using a RFID protocol.

45. The method of claim 34, where the radio frequency signal is an ultra high frequency (UHF) signal.

46. The method of claim 34, where the radio frequency signal is a high frequency (HF) signal.

47. The method of claim 34, where the radio frequency signal is a low frequency (LF) signal.

48. The method of claim 34, where the radio frequency signal is a medical implant communications service (MICS) signal.

49. The method of claim 34, where the device is an implantable medical device.

50. The method of claim 34, where the system is incorporated in an automobile key.

51. The method of claim 34, where the system is incorporated in a key fob.

52. The method of claim 34, where the system is incorporated in a building access card or a room access card.

53. The method of claim 34, where the system is incorporated in a contactless smart card.

54. The method of claim 34, where the system is incorporated in a travel document, a driver'"'"'s license, a personal identity verification card, a medical identity card or an employee identity card.

63. The method of claim 51, where the cryptographic function is a symmetric cryptographic function.

64. The method of claim 51, where the cryptographic function is an asymmetric cryptographic function.

55. A method for communicating with an implantable medical device (IMD) comprising the steps of:

receiving a radio frequency (RF) signal from an interrogator, where the RF signal comprises a command for the IMD;

harvesting energy from the RF signal; and

sending the command to the IMD.

56. The method of claim 55, further comprising the step of determining if there is sufficient harvested energy before sending the command to the IMD.

57. The method of claim 55, further comprising storing energy harvested from the RF signal.

58. The method of claim 55, further comprising receiving a reply from the IMD.

59. The method of claim 55, further comprising sending a response to the interrogator.

60. The method of claim 57, further comprising performing a computation before sending the response to the interrogator.

61. A method for securely communicating with an implantable medical device (IMD) comprising the steps of:

receiving an RF signal comprising an authentication request from an interrogator;

authenticating the interrogator using energy harvested from the RF signal; and

permitting access to the IMD if the interrogator is authenticated.

62. The method of claim 61, where the interrogator is authenticated using a cryptographic function.

65. The method of claim 61, further comprising the step of sending a unique identifier to the interrogator.

66. The method of claim 65, further comprising the step of sending a nonce to the interrogator.

67. The method of claim 66, further comprising the step of computing a key value using the unique identifier and the nonce.

68. The method of claim 65, further comprising the step of computing a key value using the unique identifier.

69. The method of claim 68, further comprising the step of comparing the computed key value to a key value received from the interrogator.

70. The method of claim 68, where the key value is computed using a cryptographic function.

71. The method of claim 68, where the key value is computed using an Advanced Encryption Standard (AES) algorithm.

72. The method of claim 61, further comprising sending an authentication status to the interrogator.

73. The method of claim 61, further comprising receiving a command for the IMD.

74. A system comprising:

an electronic lock comprising an interrogator;

a zero-power, energy-harvesting computational module configured to communicate with the electronic lock; and

where the interrogator wirelessly transmits a radio frequency (RF) signal to the computational module, where the computational module is powered by the incoming RF signal.