Secure wiegand communications

• US 8,923,513 B2
• Filed: 11/29/2012
• Issued: 12/30/2014
• Est. Priority Date: 08/11/2008
• Status: Active Grant

• Current Assignee: Assa Abloy AB
• Original Assignee: Assa Abloy AB
• Inventors: Guthery, Scott B., Robinton, Mark, Davis, Michael Lawrence, Andresky, David
• Primary Examiner(s): Dinh, Minh
• Application Number:
  US13/689,108
• Publication Number:
  US 20130117814A1
• Time in Patent Office: 761 Days
• Field of Search: None
• US Class Current: 380/260
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/0637 Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]
• CPC Class Codes: H04L 9/0662 with particular pseudorandom sequence generator
• CPC Class Codes: H04L 9/12 Transmitting and receiving encryption devices synchronised or initially set up in a particular manner
• CPC Class Codes: H04L 9/16 the keys or algorithms being changed during operation
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

The present invention is directed toward secure access systems. Specifically, a method, system, and device are described that employ a synchronized pseudo-random number generator to secure communications between endpoints involved in a communication. If synchronization is lost between two devices, the two devices can regain synchronization by switching to use of a different pseudo-random number generator that is used for resynchronization instead of communications.

Claims

1. A method, comprising:

enabling first and second communication devices with first and second PRNGs, respectively, wherein the first and second PRNGs are synchronized and used to secure communications between the first and second communication devices;

determining that synchronization between the first and second PRNGs has been lost; and

invoking third and fourth PRNGs at the first and second communication devices respectively, wherein the third and fourth PRNGs are used to resynchronize the first and second PRNGs, wherein the first and second communication devices execute their respective PRNGs in firmware and/or with a microprocessor executing instructions stored in non-transitory computer-readable memory.

2. The method of claim 1, wherein the first and second PRNGs are fast PRNGs and the third and fourth PRNGs are slow PRNGs.

3. The method of claim 1, wherein determining that synchronization has been lost comprises determining that power has been lost at one or more of the first and second PRNGs.

4. The method of claim 1, wherein the first and second communication devices utilize a unidirectional communication protocol to facilitate communications between the first and second communication devices.

5. A system, comprising:

first and second communication devices configured to communicate with first and second PRNGs, respectively, wherein the first and second PRNGs are synchronized and used to secure communications between the first and second communication devices, the first and second communication devices being further configured to invoke third and fourth PRNGs, respectively, to resynchronize the first and second PRNGs when synchronization between the first and second PRNGs has been lost.

6. The system of claim 5, wherein the first and second PRNGs are fast PRNGs and the third and fourth PRNGs are slow PRNGs.

7. The system of claim 5, wherein at least one of the first and second communication device are configured to determine synchronization has been lost by determining that power has been lost at one or more of the first and second PRNGs.

8. The system of claim 5, wherein the first and second communication devices utilize a unidirectional communication protocol to facilitate communications between the first and second communication devices.

9. A first communication device comprising:

firmware comprising and configured to execute a first PRNG, the first PRNG, when executed by the firmware, enabling the first communication device to securely communicate with a second communication device that has a second PRNG synchronized with the first PRNG, the first communication device further comprising a third PRNG in the firmware that is configured to be invoked by the firmware to resynchronize the first PRNG with the second PRNG when the first and second PRNGs become unsynchronized.

10. The communication device of claim 9, wherein the first and second PRNGs are fast PRNGs and the third PRNG is a slow PRNG.

11. The communication device of claim 9, wherein the third PRNG is invoked by the first communication device in response to determining that power has been lost at one or more of the first and second PRNGs.

12. The communication device of claim 9, further comprising a Wiegand interface.

13. An access control reader, comprising:

a non-transitory computer-readable medium comprising instructions that are executable by a processor, the instructions including a first PRNG, the first PRNG, when executed, enabling the reader to securely communicate with a remote communication device that has a second PRNG synchronized with the first PRNG, the instructions further including a third PRNG that is configured to be invoked to resynchronize the first PRNG with the second PRNG when the first and second PRNGs become unsynchronized; and

a processor that executes the instructions stored in the non-transitory computer-readable medium.

14. The reader of claim 13, wherein the first and second PRNGs are fast PRNGs and the third PRNG is a slow PRNG.

15. The reader of claim 13, wherein the third PRNG is invoked by the first communication device in response to determining that power has been lost at one or more of the first and second PRNGs.

16. The reader of claim 13, further comprising a Wiegand interface.