Transponder system for transmitting key-encrypted information and associated keys

• US 9,830,481 B2
• Filed: 06/14/2006
• Issued: 11/28/2017
• Est. Priority Date: 06/14/2005
• Status: Active Grant

• Current Assignee: NXP B.V. (NXP Semiconductors NV)
• Original Assignee: NXP B.V. (NXP Semiconductors NV)
• Inventors: Tuyls, Pim, Schrijen, Geert Jan, Maubach, Stefan, Skoric, Boris, Tombeur, Antoon Marie Henrie
• Primary Examiner(s): Holder, Bradley
• Assistant Examiner(s): JACKSON, JENISE E
• Application Number:
  US11/917,041
• Publication Number:
  US 20080199011A1
• Time in Patent Office: 4,185 Days
• Field of Search: 380278, 726 9, 713159, 713193-194, 342 51
• CPC Class Codes: G06K 19/0723 the record carrier comprising an arrangement for non-contact communication, e.g. wireless communication circuits on transponder cards, non-contact smart cards or RFIDs
• CPC Class Codes: G06K 19/14 the marking being sensed by radiation
• CPC Class Codes: G06K 7/0008 General problems related to the reading of electronic memory record carriers, independent of its reading method, e.g. power transfer

Abstract

A transponder (1) comprises at least one memory (MEM1, MEM2) for storing encrypted information (E_k(EPC, PI)) that has been encrypted by use of a key (k) and for storing the key (k) associated with the encrypted information (E_k(EPC, PI)). The transponder (1) is adapted to send the key (k) slower response than the encrypted information (E_k(EPC, PI)) in response to queries of a reading device (2), which is preferably done by delaying the transmission of the key (k) or by limiting the response rate at which the key (k) is transmitted. In particular the invention is related to RFID systems.

Claims

1. A radio frequency identification (RFID) transponder comprising:

at least one memory that is configured to store both encrypted information that has been encrypted by use of a key and the key necessary to decrypt the stored encrypted information; and

a transmitter that is configured to separately transmit, in response to queries of a reading device, the stored key by a slowly readable route and the stored encrypted information by a first fast readable route, wherein the slowly readable route and the first fast readable route are different routes, with data transmitted over the slowly readable route having a lower transmission speed than data transmitted over the first fast readable route, and send unencrypted information via a second fast readable route, separate from the first fast readable route for the stored encrypted information, with data transmitted over the slowly readable route having a lower transmission speed than data transmitted over the second fast readable route, with all transmitted data, the stored key, the stored encryption information, and the unencrypted information transmitted from the transponder to the reading device;

a random number generator that is configured to generate random numbers; and

an encryptor that is configured to compute randomized encrypted information utilizing the generated random numbers, wherein with every encryption of a message M using key K, a random string R is generated, and the encryption is a function F using K and R to encrypt M.

2. The transponder as claimed in claim 1, further comprising:

a key delayer that is configured to pass the stored key in a time-delayed manner to the transmitter.

3. The transponder as claimed in claim 1, further comprising:

a response rate limiter that is configured to limit a response rate at which the stored key is passed to the transmitter.

4. The transponder as claimed in claim 1, wherein a blockable memory is configured to store unencrypted information.

5. The transponder as claimed in claim 1, further comprising:

a comparator that is configured to compare a message received from the reading device with the stored key, and, if the message corresponds to the stored key, initiate the encrypted information to be read out from the at least one memory.

6. The transponder as claimed in claim 1, further comprising:

a random number generator that is configured to generate a random number;

a challenge generator that is configured to generate and send to the reading device a challenge that includes the generated random number; and

a message analyzer that is configured to analyze whether a message received from the reading device is derived from the generated random number previously sent with the challenge and from the stored key, and if so, initiate the stored encrypted information to be read out from the at least one memory.

7. The transponder as claimed in claim 2, wherein the key delayer is configured to insert delay between every bit of information.

8. The transponder as claimed in claim 3, wherein the response rate limiter is configured to throttle a bit rate of data transmission from the at least one memory to the transmitter.

9. The transponder as claimed in claim 1, wherein a random variable is different each time a message is encrypted by the key.

10. The transponder as claimed in claim 4, wherein the blockable memory is configured to be switched to a de-blocked state.

11. The transponder as claimed in claim 1, wherein the slowly readable route comprises both a key delayer and a response rate limiter.

12. An encryption method in a radio frequency identification (RFID) transponder comprising at least one memory, a transmitter, a random number generator, and an encryptor, the encryption method comprising:

storing, with the at least one memory, both encrypted information that has been encrypted by use of a key and the key necessary to decrypt the stored encrypted information;

transmitting, with the transmitter, in response to queries of a reading device, the stored key by a slowly readable route and the stored encrypted information by a first fast readable route, wherein the slowly readable route and the first fast readable route are different routes, with data transmitted over the slowly readable route having a lower transmission speed than data transmitted over the first fast readable route;

transmitting, with the transmitter, unencrypted information via a second fast readable route, separate from the first fast readable route for the stored encrypted information, with data transmitted over the slowly readable route having a lower transmission speed than data transmitted over the second fast readable route, with all transmitted data, the stored key, the stored encryption information, and the unencrypted information transmitted from the transponder to the reading device;

generating, with the random number generator, random numbers; and

computing, with the encryptor, randomized encrypted information utilizing the generated random numbers, wherein with every encryption of a message M using key K, a random string R is generated, and the encryption is a function F using K and R to encrypt M.

13. A non-transitory medium, which, when instructions embodied upon the non-transitory medium are executed by a processor causes the processor to perform encryption, the non-transitory medium comprising:

instructions for storing, with a memory, both encrypted information that has been encrypted by use of a key and the key necessary to decrypt the stored encrypted information;

instructions for transmitting, with a transmitter, in response to queries of a reading device, the stored key by a slowly readable route and the stored encrypted information by a first fast readable route, wherein the slowly readable route and the first fast readable route are different routes, with data transmitted over the slowly readable route having a lower transmission speed than data transmitted over the first fast readable route;

instructions for transmitting, with the transmitter, unencrypted information via a second fast readable route, separate from the first fast readable route for the stored encrypted information, with data transmitted over the slowly readable route having a lower transmission speed than data transmitted over the second fast readable route, with all transmitted data, the stored key, the stored encryption information, and the unencrypted information transmitted from the transponder to the reading device;

instructions for generating, with a random number generator, random numbers; and

instructions for computing, with an encryptor, randomized encrypted information utilizing the generated random numbers, wherein with every encryption of a message M using key K, a random string R is generated, and the encryption is a function F using K and R to encrypt M.