SECURE SMART POSTER

• US 20120207305A1
• Filed: 01/25/2012
• Published: 08/16/2012
• Est. Priority Date: 02/10/2011
• Status: Active Grant

• Current Assignee: NXP B.V. (NXP Semiconductors NV)
• Original Assignee: NXP B.V. (NXP Semiconductors NV)
• Inventors: Gallo, Francesco, Lesjak, Christian Michael
• Granted Patent: US 8,750,514 B2
• Time in Patent Office: Days
• US Class Current: 380/271
• CPC Class Codes: G06F 16/00 Information retrieval; Database structures therefor; File system structures therefor
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A smart poster system is provided, which includes a smart poster comprising an NFC device, a mobile device for communicating with the NFC device, and a server unit for providing content to the mobile device, wherein the NFC device is arranged to provide the mobile device with an address of the server unit, the address comprising a counter value, which counter value represents the number of executed read accesses to the NFC device. Also, a method for providing a secure communication channel between a mobile device and a server unit in a smart poster system is conceived, wherein the smart poster system comprises an NFC device for providing the mobile device with an address of the server unit, and wherein the NFC device, upon generating the address, incorporates a counter value into the address, the counter value representing the number of executed read accesses to the NFC device. Thereby, the authenticity of both the NFC device and the server unit is ensured.

Claims

1. A smart poster system comprising:

a smart poster comprising an NFC device,

a mobile device for communicating with the NFC device,

a server unit for providing content to the mobile device,

wherein the NFC device is arranged to provide the mobile device with an address of the server unit, the address comprising a counter value, which counter value represents the number of executed read accesses to the NFC device.

2. A smart poster system as claimed in claim 1,

wherein the address further comprises an identifier value of the NFC device.

3. A smart poster system as claimed in claim 2,

wherein the address further comprises a message authentication code calculated over the counter value and the identifier value of the NFC device.

4. A smart poster system as claimed in claim 1,

wherein the server unit is a remote server on the internet and the address is an internet address represented by a uniform resource locator.

5. A smart poster system as claimed in claim 1,

wherein the address is signed with a digital signature.

6. A smart poster system as claimed in claim 1,

wherein the NFC device is arranged to prevent further read access to its data if the counter value has reached a predetermined threshold.

7. A smart poster system as claimed in claim 1,

wherein the mobile device is arranged to verify the authenticity of the server unit by:

hashing an encrypted counter value received from the server unit,

comparing the hashed encrypted counter value received from the server unit with a hashed encrypted counter value received from the NFC device, and

if the encrypted counter value received from the server unit is equal to the encrypted counter value received by the NFC device, concluding that the server unit is authentic, and

otherwise, that the server unit is not authentic.

8. A method for providing a secure communication channel between a mobile device and a server unit in a smart poster system,

wherein the smart poster system comprises an NFC device for providing the mobile device with an address of the server unit, and

wherein the NFC device, upon generating the address, incorporates a counter value into the address, the counter value representing the number of executed read accesses to the NFC device.

9. A method as claimed in claim 8,

wherein the NFC device further incorporates an identifier value of the NFC device into the address.

10. A method as claimed in claim 9,

wherein the NFC device further incorporates a message authentication code (MAC) calculated over the counter value and the identifier value of the NFC device into the address.

11. A method as claimed in claim 8,

wherein the server unit is a remote server on the internet and the address is an internet address represented by a uniform resource locator.

12. A method as claimed in claim 8,

wherein the NFC device signs the address with a digital signature.

13. A method as claimed in claim 8,

wherein the NFC device prevents further read access to its data if the counter value has reached a predetermined threshold.

14. A method as claimed in claim 8,

wherein the mobile device verifies the authenticity of the server unit by:

hashing an encrypted counter value received from the server unit, comparing the hashed encrypted counter value received from the server unit with a hashed encrypted counter value received from the NFC device, and

if the encrypted counter value received from the server unit is equal to the encrypted counter value received by the NFC device, concluding that the server unit is authentic, and

otherwise, that the server unit is not authentic.