Using promiscuous and non-promiscuous data to verify card and reader identity

• US 8,322,608 B2
• Filed: 08/14/2006
• Issued: 12/04/2012
• Est. Priority Date: 08/15/2005
• Status: Active Grant

• Current Assignee: Assa Abloy AB
• Original Assignee: Assa Abloy AB
• Inventors: Davis, Michael L., Hulusi, Tam
• Primary Examiner(s): Haupt, Kristy A
• Application Number:
  US11/464,280
• Publication Number:
  US 20070034691A1
• Time in Patent Office: 2,304 Days
• Field of Search: 235/379, 235/380, 235/492, 340/10.1, 340/10.4, 340/10.41, 340/10.5
• US Class Current: 235/382
• CPC Class Codes: G06Q 20/3278 RFID or NFC payments by means of M-devices
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G07C 2009/00555 comprising means to detect or avoid relay attacks
• CPC Class Codes: G07C 2209/63 Comprising locating means for detecting the position of the data carrier, i.e. within the vehicle or within a certain distance from the vehicle
• CPC Class Codes: G07C 9/20 involving the use of a pass
• CPC Class Codes: G07C 9/27 with central registration
• CPC Class Codes: G07C 9/28 the pass enabling tracking or indicating presence
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234

Abstract

A system and method for authenticating radio frequency identification (RFID) devices and validating readers of the RFID devices are disclosed. Embodiments of the invention use RFID devices adapted for storing data in a form of data segments selectively associated with promiscuous and non-promiscuous regions of their memories and monitor algorithmic, computational, communicational, or tampered errors of the readers.

Claims

1. An access control system, comprising:

(a) one or more radio frequency identification (RFID) devices, each RFID device including a memory comprising promiscuous and non-promiscuous regions,

(i) said promiscuous region including data comprising at least one of manufacturer data, configuration data and general non-secure data;

(ii) said non-promiscuous region including at least one of manufacturer data, configuration data, shared-secret data and holder data;

(b) one or more radio frequency (RF) interrogators (readers), said readers transmitting an RF signal to create an active RF zone around said readers; and

wherein, when an RFID device is positioned in an active zone of a reader, data stored in the promiscuous region is first transmitted from the RFID device to the reader in response to the RFID device being excited by the RF signal transmitted by the reader and in the absence of receiving a request for data command from the reader, data from the non-promiscuous region is randomly selected by the reader and selectively transmitted to the reader only upon a challenge initiated by the reader for data from a random non-promiscuous memory location, wherein the challenge comprises a series of challenges each of which identify a different randomly selected memory segment in the non-promiscuous region.

2. The access control system of claim 1, wherein the reader decodes and validates the transmitted promiscuous data prior to randomly selecting and requesting transmission of non-promiscuous data.

3. The access control system of claim 2, wherein the reader requests particular but randomly selected non-promiscuous data from the RFID device via a challenge only in the event that general promiscuous data is received from the promiscuous region.

4. The access control system of claim 3, wherein the reader further transmits data to a host computer system only upon the reader receiving said particular non-promiscuous data.

5. The access control system of claim 3, wherein at least one of a host computer system and the reader invalidates the RFID device when said particular non-promiscuous data is not received from the RFID device.

6. The access control system of claim 1, wherein the RFID device stores credential data for a first facility in the promiscuous region, said first facility having a first host computer system, and stores credential data for a second facility in the non-promiscuous region, said second facility having a second host computer system.

7. The access control system of claim 6, wherein the first and second host computer systems are the same.

8. The access control system of claim 1, wherein said non-promiscuous region is separated into a public section that includes data that is transmitted to said reader upon a request initiated by said reader and a private section that includes data that is transmitted to said reader only upon a request initiated by said reader that includes a valid password.

14. The method of claim 8, further comprising storing credential data for a first facility in said promiscuous region, said first facility having a first host computer system, and storing credential data for a second facility in said non-promiscuous region, said second facility having a second host computer system.

9. A method for validating components in an access control system, comprising:

(a) providing a population of radio frequency identification (RFID) devices, said RFID devices including a memory comprising promiscuous and non-promiscuous regions, and at least one radio frequency (RF) interrogator (reader), wherein said promiscuous region includes data that is common across two or more RFID devices in the population of RFID devices and the data comprises at least one of manufacturer data, configuration data and general non-secure data and said non-promiscuous region includes data comprising at least one of configuration data, shared-secret data and holder data;

(b) said at least one reader transmitting an RF signal to create an active RF zone around said at least one reader;

(c) positioning at least one RFID device into said active zone;

(d) in response to positioning said at least one RFID device into said active zone and in the absence of a challenge for data, detecting, by said reader, data stored in said promiscuous region of said at least one RFID device;

(e) determining contents of said detected data correspond to at least one of said manufacturer data, configuration data, and general non-secure data;

(f) requesting, via a first challenge initiated by the reader, a first portion of random data from the non-promiscuous region of the RFID device, wherein the first portion of random data is selectively requested of the RFID device by the reader; and

(g) requesting, via a second challenge initiated by the reader, a second portion of random data from the non-promiscuous region of the RFID device, wherein the second portion of random data is selectively requested of the RFID device by the reader.

10. The method of claim 9, further comprising selectively and sequentially transmitting additional challenges relating to said random data stored on said non-promiscuous region of said at least one RFID device and receiving data responses from said at least one RFID device in response to transmitting said additional challenges.

11. The method of claim 10, further comprising decoding and validating said detected data stored in said promiscuous region by said reader prior to said reader transmitting said challenges.

12. The method of claim 11, further comprising requesting particular but randomly selected non-promiscuous data from said at least one RFID device in the event that generic promiscuous data is received.

13. The method of claim 12, further comprising transmitting data from said reader to a host computer upon receiving said particular non-promiscuous data.

15. A radio frequency identification (RFID) device, comprising:

an antenna for communicating with a radio frequency (RF) enabled interrogator;

a memory comprising;

a promiscuous region comprising general non-secure data; and

a non-promiscuous region comprising at least one of manufacturer data, configuration data, shared-secret data, and holder data; and

wherein data from the promiscuous region is promiscuously transmitted by the RFID device to the reader when the RFID device is disposed in an active zone of the reader and in the absence of the reader sending a request for data command to the RFID device, and wherein data from said non-promiscuous region is randomly accessible and selectively transmitted to an RF enabled device only upon a request initiated by said RF enabled device, wherein the request initiated by the RF enabled device comprises a series of requests each of which identifies a different segment of the non-promiscuous region randomly selected to be challenged by the RF enabled device.

16. The RFID device of claim 15, wherein data from said promiscuous region is transmitted prior to data from said non-promiscuous region.

17. The RFID device of claim 16, wherein said RFID device comprises a proximity card.

18. The RFID device of claim 15, wherein a maximum block code identifier defines the amount of promiscuous data transmitted from the promiscuous region.

19. The RFID device of claim 15, wherein said non-promiscuous region comprises public data that is transmitted upon receipt of a request and private data that is transmitted upon receipt of a request and a password and upon validation of said password.

20. The RFID device of claim 15, wherein said memory further comprises credential data and wherein said credential data is used by said RFID device to determine access rights of said RFID device.

21. The RFID device of claim 20, wherein said RFID device transmits a confirmation of validation signal to an RF enabled device in response to the RFID device determining that said access rights of said RFID device for an asset are granted.

22. The RFID device of claim 20, wherein said RFID device transmits a non-confirmation of validation signal to an RF enabled device in response to the RFID device determining that said access rights of said RFID device for an asset are not granted.

23. The RFID device of claim 15, wherein a content of the data stored in the non-promiscuous region is stored in a cryptographic format.

24. The RFID device of claim 23, wherein an encryption key for said cryptographic format is encoded in a content of at least one data segment associated with the non-promiscuous region.

25. The RFID device of claim 15, wherein a number of data segments selectively associated with said promiscuous region are encoded with said general non-secure data.

26. The RFID device of claim 15, wherein data stored in at least one of said promiscuous and non-promiscuous region is stored in a read-only portion of said memory.

27. The RFID device of claim 15, wherein data stored in at least one of said promiscuous and non-promiscuous region is stored in a read/write portion of said memory.

28. The RFID device of claim 15, wherein said RFID device comprises at least one of an access card, an ID card, a cellular phone, a Personal Digital Assistant (PDA) and an RF tag.

29. The RFID device of claim 15, wherein said RFID device comprises a smart card.

30. The RFID device of claim 15, wherein the general non-secure data is common between the RFID device and at least one other RFID device.