Container security

• US 8,308,820 B2
• Filed: 03/16/2011
• Issued: 11/13/2012
• Est. Priority Date: 07/12/2006
• Status: Active Grant

• Current Assignee: TecSec, Incorporated
• Original Assignee: TecSec, Incorporated
• Inventors: Wack, C. Jay, Tsang, Wai Lin, Scheidt, Edward M
• Primary Examiner(s): SHAW, YIN CHEN
• Application Number:
  US13/049,580
• Publication Number:
  US 20120066511A1
• Time in Patent Office: 608 Days
• Field of Search: 726 34- 35, 713/189, 713/194, 713/176, 713/193, 340/5.6, 340/5.73, 340/5.81
• US Class Current: 726/35
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols

Abstract

A container security device includes a housing, electronic circuitry, and cabling. The electronic circuitry is disposed within the housing, and includes first and second microprocessor functions and an interface for accepting and providing data. The cabling is removably coupled to the housing, provides the only communicative coupling between the first microprocessor function and the second microprocessor function, and is adapted to be attached to a container latch so as to break the communicative coupling if the latch is opened. The housing includes a port for the electronic circuitry interface. A method of providing container security includes closing a container using a latch device and removably coupling the cabling to the housing so that the communicative coupling is broken if the latch is opened., providing the only communicative coupling between the first microprocessor function and the second microprocessor function.

Claims

1. A container security system, comprising:

a container security device, comprising;

a housing;

electronic circuitry; and

cabling;

wherein the electronic circuitry is disposed within the housing, and include first and second microprocessor functions and an interface for accepting and providing data;

wherein the cabling is removably coupled to the housing, provides the only communicative coupling between the first microprocessor function and the second microprocessor function, and is adapted to be attached to a container latch so as to break the communicative coupling if the latch is opened;

wherein the housing includes a port for the electronic circuitry interface;

wherein the electronic circuitry is adapted to receive an event credential, a cryptographic key, and initial plaintext data via the electronic circuitry interface;

wherein the electronic circuitry is adapted to store the event credential, the cryptographic key, and the initial plaintext data for access by the first microprocessor function such that the second microprocessor function does not have access to the event credential, the cryptographic key, and the initial plaintext data; and

wherein the first microprocessor function is adapted to encrypt the initial plaintext data using the cryptographic key according to the event credential to produce encrypted data;

the container security system further comprising at least one portable computing device that is adapted to decrypt the encrypted data using the cryptographic key according to the event credential, to provide unlock plaintext data.

2. The container security device of claim 1, further comprising the container latch:

3. The container security device of claim 1, wherein the second microprocessor function is adapted to receive an unlock signal via the electronic circuitry interface and to read the encrypted data via the cabling in response to the unlock signal.

4. The container security device of claim 3, wherein the electronic circuitry is adapted to store the encrypted data such that the encrypted data cannot be accessed by the second microprocessor function until the unlock signal is received, and to modify the encrypted data when an open circuit condition exits in the cabling.

5. The container security device of claim 4, wherein the second microprocessor function is adapted to provide the encrypted data via the electronic circuitry interface.

6. The container security system of claim 1, wherein the portable computing device is adapted to compare the initial plaintext data with the unlock plaintext data to provide a comparison result, and to generate a validation signal if the comparison result is favorable.

7. The container security system of claim 6, wherein the container security device is adapted to receive the validation signal and to decouple the cabling from the housing only if the comparison result is favorable.

8. The container security system of claim 6, Wherein the portable computing device includes visual indicia of the comparison result.

9. A method of providing container security, comprising:

closing a container using a latch device;

providing electronic circuitry disposed within a housing, wherein the electronic circuitry includes first and second microprocessor functions and an interface for accepting and providing data;

providing cabling that is removably coupled to the housing, provides the only communicative coupling between the first microprocessor function and the second microprocessor function, and is adapted to be attached to the latch device so as to break the communicative coupling if the latch is opened;

providing the electronic circuitry with an event credential, a cryptographic key, and initial plaintext data;

storing the event credential, the cryptographic key, and the initial plaintext data in the electronic circuitry for access by the first microprocessor function such that the second microprocessor function does not have access to the event credential, the cryptographic key, and the initial plaintext data;

encrypting, by the first microprocessor function, the initial plaintext data using the cryptographic key according to the event credential, to produce encrypted data; and

decrypting the encrypted data by at least one portable computing device using the cryptographic key according to the event credential, to provide unlock plaintext data.

10. The method of claim 9, further comprising providing an unlock signal to the second microprocessor function via the electronic circuitry interface and reading the encrypted data by second microprocessor function via the cabling in response to the unlock signal.

11. The method of claim 10, further comprising storing the encrypted data by the electronic circuitry such that the encrypted data cannot be accessed by the second microprocessor function until the unlock signal is received, and modifying the encrypted data when an open circuit condition exits in the cabling.

12. The Method of claim 11, further comprising providing the encrypted data by the second microprocessor function via the electionic circuitry interface.

13. The method of claim 9, further comprising comparing the initial plaintext data with the unlock plaintext data by the portable computing device to provide a comparison result, and generating a validation signal if the comparison result is favorable.

14. The method of claim 13, further comprising receiving the validation signal by the electronic circuitry and decoupling the cabling from the housing only if the comparison result is favorable.

15. The method of claim 13, further comprising providing visual indicia of the comparison result.