Method, apparatus, and system for providing and using a trusted tag

• US 9,681,302 B2
• Filed: 09/05/2013
• Issued: 06/13/2017
• Est. Priority Date: 09/10/2012
• Status: Active Grant

• Current Assignee: Assa Abloy AB
• Original Assignee: Assa Abloy AB
• Inventors: Robinton, Mark, Hulusi, Tam
• Primary Examiner(s): TAYLOR, NATHAN SCOTT
• Application Number:
  US14/426,180
• Publication Number:
  US 20150208245A1
• Time in Patent Office: 1,377 Days
• Field of Search: 455411
• CPC Class Codes: H04B 5/72 for local intradevice communication
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/43 using shared identity modules, e.g. SIM sharing
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A trusted authority, validation system and method are provided. The system and method may employ Near Field Communication (NFC) technologies to prepare and write signed validation signatures to tags as well as read and analyze validation signatures from tags. An NFC-enabled phone is also provided as a mechanism for facilitating the trusted authority and validation services described herein.

Claims

1. A method, comprising:

receiving data from a phone, the received data including user-entered data and at least one of tag data of a tag and metadata, wherein the user-entered data comprises at least one of a user-entered alphanumeric string, a still image, a motion video, and an audio segment;

causing the user-entered data to be stored into a memory of the tag, wherein the user-entered data is stored in an unencrypted format;

based on the received data, generating a validation signature for the tag;

and causing the validation signature to be written into the memory of the tag;

wherein the validation signature is written to the memory of the tag such that the validation signature for the tag is later usable to validate the user-entered data and enables a predetermined action to be performed with the at least one of tag data and the metadata.

2. The method of claim 1, wherein the received data includes the user-entered data as well as both of the tag data and the metadata and wherein the validation signature is written to an unsecure area of the memory.

3. The method of claim 1, wherein the received data includes the tag data and wherein the tag data comprises at least one of a tag Unique Identifier (UID), a site code, and a manufacturer code.

4. The method of claim 3, wherein the tag data is obtained from the tag via an NFC-enabled phone.

5. The method of claim 4, wherein the user-entered data is received the phone and wherein the phone writes the validation signature and the user-entered data into the memory of the tag as an NFC Data Encoding Format (NDEF) record using an NFC protocol.

6. The method of claim 1, wherein the received data includes the metadata and wherein the metadata corresponds to a timestamp related to when the validation signature is generated.

7. The method of claim 1, wherein the received data includes a tag Unique Identifier (UID) that is obtained from the tag by a phone, wherein the received data also includes the user-entered data that is received from a user at the phone, wherein the received data also includes the metadata that is generated in response to the phone obtaining the tag UID, and wherein the phone causes the validation signature to the written into the memory of the tag along with the user-entered data.

8. The method of claim 7, wherein a trusted authority generates the validation signature and transmits the validation signature to the phone for writing to the tag.

9. The method of claim 1, wherein the tag comprises an internal power source.

10. The method of claim 1, wherein the tag is an NFC tag.

11. A method, comprising:

at a first time;

receiving data from a phone, the received data including user-entered data that comprises at least one of a user-entered alphanumeric string, a still image, a motion video, and an audio segment, wherein the received data further includes at least one of;

(i) tag data and (ii) metadata;

based on the received data, generating a validation signature for the tag;

causing the user-entered data to be stored into a memory of the tag, wherein the user-entered data is stored the memory of the tag in an unencrypted format;

causing the validation signature to be written into the memory of the tag; and

at a second time, after the first time;

receiving a new validation signature and new tag data from memory of a new tag;

performing a validation analysis of the new tag by comparing the received new validation signature and the new tag data with known valid tag data and a corresponding validation signature; and

providing results of the validation analysis to at least one interested party.

12. The method of claim 11, wherein the at least one interested party corresponds to a user of a phone, wherein the phone was used to retrieve the validation signature and the tag data from the memory of the tag, and wherein the results of the validation analysis are provided to the user of the phone by at least one of audibly and visibly presenting an output via the phone.

13. The method of claim 12, further comprising:

based on the results of the validation analysis, causing the phone to perform at least one predetermined action.

14. The method of claim 13, wherein the at least one predetermined action comprises at least one of the following:

causing the phone to initiate a call to a predetermined number, causing the phone to generate a message to a predetermined number, causing the phone to generate a message to a predetermined email address, causing the phone to automatically connect with a web server associated with a predetermined Universal Resource Locator (URL), and causing the phone to display at least one image via its user interface.

15. The method of claim 12, wherein the phone performs the validation analysis.

16. The method of claim 12, wherein a trusted authority that is separated from the phone by a communication network performs the validation analysis.

17. A communication system, comprising:

a tag having memory and an interface;

a trusted authority configured to receive data from a phone that has read the tag, the received data including user-entered data and at least one of tag data and metadata, wherein the phone is configured to write the user-entered data to the memory of the tag in an unencrypted format, wherein the trusted authority is further configured to generate a validation signature for the tag based on the received data and then cause the validation signature to be written into the memory of the tag;

further comprising a signature validation module configured to receive the validation signature from the tag and perform a validation analysis of the tag by comparing the received validation signature with one or more entries in a database of valid validation signatures.

18. The system of claim 17, wherein the phone is configured to read data from the tag via inductive coupling.

19. The system of claim 17, wherein the user-entered data comprises at least one of a still image, a motion video, and an audio segment.