Container security

• US 8,083,808 B2
• Filed: 07/12/2007
• Issued: 12/27/2011
• Est. Priority Date: 07/12/2006
• Status: Active Grant

• Current Assignee: TecSec, Incorporated
• Original Assignee: TecSec, Incorporated
• Inventors: Scheidt, Edward M., Wack, C. Jay, Tsang, Wai Lin
• Primary Examiner(s): SHAW, YIN CHEN
• Application Number:
  US11/777,119
• Publication Number:
  US 20080052538A1
• Time in Patent Office: 1,629 Days
• Field of Search: 726 34- 35, 713/176, 713/189, 713/194, 340 56- 581
• US Class Current: 726/35
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols

Abstract

A container security device includes a housing, electronic circuitry, and cabling. The electronic circuitry is disposed within the housing, and includes first and second microprocessor functions and an interface for accepting and providing data. The cabling is removably coupled to the housing, provides the only communicative coupling between the first microprocessor function and the second microprocessor function, and is adapted to be attached to a container latch so as to break the communicative coupling if the latch is opened. The housing includes a port for the electronic circuitry interface. A method of providing container security includes closing a container using a latch device and removably coupling the cabling to the housing so that the communicative coupling is broken if the latch is opened, providing the only communicative coupling between the first microprocessor function and the second microprocessor function.

Claims

1. A container security system, comprising:

a container security device comprising;

a housing;

electronic circuitry; and

cabling;

wherein the electronic circuitry is disposed within the housing, and includes first and second microprocessor functions and an interface for accepting and providing data;

wherein the cabling is removably coupled to the housing, provides an only communicative coupling between the first microprocessor function and the second microprocessor function, and is adapted to be attached to a container latch so as to break the communicative coupling if the latch is opened;

wherein the housing includes a port for the electronic circuitry interface;

wherein the electronic circuitry is adapted to receive an event credential, cryptographic key, and initial plaintext data via the electronic circuitry interface;

wherein the electronic circuitry is adapted to store the event credential, the cryptographic key, and the initial plaintext data for access by the first microprocessor function such that the second microprocessor function does not have access to the event credential, the cryptographic key, and the initial plaintext data;

wherein the first microprocessor function is adapted to encrypt the initial plaintext data using the cryptographic key according to the event credential to produce encrypted data;

wherein the second microprocessor function is adapted to receive an unlock signal via the electronic circuitry interface and to read the encrypted data via the cabling in response to the unlock signal;

wherein the electronic circuitry is adapted to store the encrypted data such that the encrypted data cannot be accessed by the second microprocessor function until the unlock signal is received, and to modify the encrypted data when an open circuit condition exists in the cabling; and

wherein the second microprocessor function is adapted to provide the encrypted data via the electronic circuitry interface; and

the container security system further comprising at least one portable computing device that is adapted to provide the event credential, the cryptographic key, and the initial plaintext data to the container security device via the electronic circuitry interface and to receive the encrypted data from the second microprocessor function via the electronic circuitry interface;

wherein the at least one portable computing device is adapted to decrypt the encrypted data using the cryptographic key according to the event credentials, to provide unlock plaintext data adapted to decouple the cabling.

2. The container security system of claim 1, further comprising the container latch.

3. The container security system of claim 1, wherein the portable computing device is adapted to compare the initial plaintext data with the unlock plaintext data to provide a comparison result, and to generate a validation signal if the comparison result is favorable.

4. The container security system of claim 3, wherein the container security device is adapted to receive the validation signal and to decouple the cabling from the housing only if the comparison result is favorable.

5. The container security system of claim 3, wherein the portable computing device includes visual indicia of the comparison result.

6. A method of providing container security, comprising:

closing a container using a latch device;

providing electronic circuitry disposed within a housing, wherein the electronic circuitry includes first and second microprocessor functions and an interface for accepting and providing data;

providing cabling that is removably coupled to the housing, provides an only communicative coupling between the first microprocessor function and the second microprocessor function, and is adapted to be attached to the latch device so as to break the communicative coupling if the latch device is opened;

providing the electronic circuitry with an event credential, a cryptographic key, and initial plaintext data;

storing the event credential, the cryptographic key, and the initial plaintext data in the electronic circuitry for access by the the first microprocessor function such that the second microprocessor function does not have access to the event credential, the cryptographic key, and the initial plaintext data;

encrypting, by the first microprocessor function, the initial plaintext data using the cryptographic key according to the event credential, to produce encrypted data;

providing an unlock signal to the second microprocessor function via the electronic circuitry interface and reading the encrypted data by the second microprocessor function via the cabling in response to the unlock signal;

storing the encrypted data by the electronic circuitry such that the encrypted data cannot be accessed by the second microprocessor function until the unlock signal is received, and modifying the encrypted data when an open circuit condition exits in the cabling;

providing the encrypted data, by the second microprocessor function via the electronic circuitry interface;

providing the event credential, the cryptographic key, and the initial plaintext data to the container security device by at least one portable computing device via the electronic circuitry interface and receiving the encrypted data from the second microprocessor function via the electronic circuitry interface; and

decrypting the encrypted data by the at least one portable computing device using the cryptographic key according to the event credentials, to provide unlock plaintext data adapted to decouple the cabling.

7. The method of claim 6, further comprising comparing the initial plaintext data with the unlock plaintext data by the portable computing device to provide a comparison result, and generating a validation signal if the comparison result is favorable.

8. The method of claim 7, further comprising receiving the validation signal by the electronic circuitry and decoupling the cabling from the housing only if the comparison result is favorable.

9. The method of claim 7, further comprising providing visual indicia of the comparison result.