Method and apparatus for transmitting information

• US 9,979,745 B2
• Filed: 08/25/2014
• Issued: 05/22/2018
• Est. Priority Date: 08/26/2013
• Status: Active Grant

• Current Assignee: Giesecke + Devrient Mobile Security GmBH (Giesecke & Devrient GmbH)
• Original Assignee: Giesecke + Devrient Mobile Security GmBH (Giesecke & Devrient GmbH)
• Inventors: Dahmouni, Youssef
• Primary Examiner(s): Homayounmehr, Farid
• Assistant Examiner(s): Harris, Christopher C
• Application Number:
  US14/913,753
• Publication Number:
  US 20160205131A1
• Time in Patent Office: 1,366 Days
• CPC Class Codes: G06Q 20/352 Contactless payments by cards
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/067 using one-time keys cryptographic mechanisms or cryptographic arrangements for generation of one-time passwords H04L9/0863
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/1408 by monitoring network traffic monitoring network traffic per se H04L43/00
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A method for transmitting information from a first security module to a second security module involves a system comprising the first and the second security modules. An anti-collision phase comprises a sequence of anti-collision queries, and a communication phase follows the anti-collision phase. The first security module transmits the information to be transmitted to the second security module in the anti-collision phase by sending responses of the first security module to the sequence of anti-collision queries, with the information to be transmitted being encoded in the responses of the first security module. The second security module decodes the information to be transmitted from the sequence of the received anti-collision queries. Furthermore, the invention discloses a first and a second security module, in particular for transmitting information.

Claims

1. A method in a system comprising a first and a second security module, with an anti-collision phase comprising a sequence of anti-collision queries, and a communication phase following the anti-collision phase;

wherein the first security module transmits information to be transmitted to the second security module in the anti-collision phase by sending responses of the first security module to the sequence of anti-collision queries, with the information to be transmitted being encoded in the responses of the first security module; and

the second security module decodes the information to be transmitted from the sequence of the received anti-collision queries,

wherein upon a first anti-collision query of the sequence of the anti-collision queries the response of the first security module is a first response, the first security module evaluates the first anti-collision query and, in accordance with the result of the evaluation, for encoding the information to be transmitted in the first response;

(a1) the information is encoded with a first identification number of the first security module into a first transmission number, and

(b1) the first transmission number is integrated into the first response.

2. The method according to claim 1, wherein the information to be transmitted is transmitted from the first security module to the second security module via the anti-collision protocol.

3. The method according to claim 1, wherein the second security module stores security information including authentication data after reception of the transmitted information.

4. The method according to claim 1, wherein the information to be transmitted is a release code that, when verified, releases one or more functions within the system.

5. The method according to claim 4, wherein the release code releases the second security module for the communication phase.

6. The method according to claim 1, wherein the first and/or second security module checks whether a further security module is present in the environment thereof.

7. The method according to claim 1, wherein the responses of the first security module are configured dynamically and the first security module deterministically influences contents of the sequence of the anti-collision queries via each of the responses.

8. The method according to claim 1, wherein the first security module receives from the sequence of anti-collision queries a further anti-collision query, evaluates it and, in accordance with the result of the evaluation, in a further response

c1. the information to be transmitted is encoded with the first identification number of the first security module into a further transmission number, and

d1. the further transmission number is integrated in the further response.

9. The method according to claim 1, wherein the second security module sends a response upon each anti-collision query of the sequence of anti-collision queries, with the regular response comprising a second identification number of the second security module, and

the first and further responses of the first security module effectuate with the regular response of the second security module a collision at a collision location n and each anti-collision query has a collision information item.

10. The method according to claim 9, wherein the first security module, for forming each further transmission number, adapts said further transmission number to the collision location n of the preceding transmission number and/or negates it at the collision location n of the preceding transmission number.

11. The method according to claim 10, wherein the second security module decodes the information to be transmitted from the bit length of the information, the bit length and the content of the second identification number and a negation of the nth bit location of the second identification number.

12. The method according to claim 1, wherein the information to be transmitted masks parts of the first identification number.

13. The method according to claim 1, wherein the second security module determines a part of the information to be transmitted from each of the sequence of anti-collision queries and forms the information to be transmitted after the end of the sequence of anti-collision queries.

14. A first security module for transmitting information to be transmitted to a second security module, comprising a memory unit, a sending/receiving unit and a processing unit, with the processing unit being configured for analyzing a query and creating a response, and the query being a query within the context of an anti-collision phase, wherein the response is configured so as to influence anti-collision behavior of the communication device, with the information being contained encoded in the response,

wherein upon a first anti-collision query of a sequence of anti-collision queries the response of the first security module is a first response, the first security module evaluates a first anti-collision query and, in accordance with the result of the evaluation, for encoding the information to be transmitted in the response;

(a1) the information is encoded with a first identification number of the first security module into a first transmission number, and

(b1) the first transmission number is integrated into the response.

15. The first security module according to claim 14, wherein the information to be transmitted is transmitted to the second security module via the anti-collision protocol.

16. The first security module according to claim 15, wherein the first security module is configured for performing a method in a system comprising a first and a second security module, with an anti-collision phase comprising a sequence of anti-collision queries, and a communication phase following the anti-collision phase;

wherein the first security module transmits information to be transmitted to the second security module in the anti-collision phase by sending responses of the first security module to the sequence of anti-collision queries, with the information to be transmitted being encoded in the responses of the first security module; and

the second security module decodes the information to be transmitted from the sequence of the received anti-collision queries.

17. The first security module according to claim 14, wherein the second security module sends a response upon each anti-collision query of the sequence of anti-collision queries, with the regular response comprising a second identification number of the second security module, and

the first and further responses of the first security module effectuate with the regular response of the second security module a collision at a collision location n and each anti-collision query has a collision information item.