Object identification uses prediction of data in distributed network

• US 7,110,858 B2
• Filed: 04/09/2001
• Issued: 09/19/2006
• Est. Priority Date: 04/09/2001
• Status: Expired due to Fees

• Current Assignee: Koninklijke Philips Electronics N.V. (Koninklijke Philips N.V.)
• Original Assignee: Koninklijke Philips Electronics N.V. (Koninklijke Philips N.V.)
• Inventors: Pisarsky, Vladimir R.
• Primary Examiner(s): PHAM, THOMAS K
• Application Number:
  US09/829,520
• Publication Number:
  US 20020147838A1
• Time in Patent Office: 1,989 Days
• Field of Search: 709/238, 709/239, 709/240, 370/351, 370/352, 370/395.31, 370/395.32, 726/4, 726/9, 713/160, 713/161, 713/166, 713168-172
• US Class Current: 700/238
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A measure of security is provided by determining authenticity of an object (e.g., credit card, cell phone, car keys, etc.) by letting the object predict at which nodes multiple specific data packets are going to be in a distributed network in the next time slot.

Claims

1. An authentication object, the authentication object for use in a transaction, the transaction being authenticated at least in part via an authentication network, and at least one data packet having an itinerary in the authentication network, the itinerary being pre-determined in the at least one data packet, the authentication object comprising a predictor, the predictor enabled to predict at least a part of the pre-determined itinerary of the at least one data packet in the authentication network.

2. The authentication abject of claim 1, wherein the predictor is implemented as logic circuitry that generates a prediction of one or both of (i) the node that the at least one data packet occupies and (ii) the next node that the at least one data packet will occupy.

3. The authentication object of claim 1, wherein the predictor is implemented as a look up table that contains, related to a time parameter, one or both of (i) the node that the at least one data packet occupies and (ii) the next node that the at least one data packet will occupy.

4. A method of determining authenticity of an authentication object, the authentication object being for use in a transaction, the transaction being authenticated at least in part via authentication network comprising plural nodes, and at least one data packet having an itinerary in the authentication network, the itinerary being pre-determined in the at least one data packet, the method comprising:

receiving from the authentication object a prediction of at least a part of the pre-determined itinerary of the at least one data packet in the authentication network; and

verifying the prediction.

5. The method of claim 4, wherein receiving a prediction comprises receiving a prediction as to one or both of (i) the node that the data packet occupies and (ii) the node that is the data packet'"'"'s next destination.

6. The method of claim 4, wherein verifying the prediction comprises comparing the prediction against at least a part of the actual itinerary of the at least one data packet.

7. The method of claim 4, wherein verifying the prediction comprises comparing the prediction against one or both of (i) the node that the at least one data packet occupies and (ii) the next node that the at least one data packet will occupy.

8. The method of claim 4, further comprising exercising the at least one data packet'"'"'s itinerary.

9. The method of claim 8, wherein exercising comprises having the at least one data packet occupy a pre-determined node of the authentication network at a particular time.

10. The method of claim 8, wherein exercising further comprises, after a transaction, having the at least one data packet occupy a pre-determined node of the authentication network for use in authenticating a subsequent transaction.

11. The method of claim 4, further comprising establishing an itinerary for the at least one data packet.

12. The method of claim 11, wherein establishing an itinerary for the at least one data packet comprises programming the at least one data packet.

13. The method of claim 11, wherein establishing an itinerary for the at least one data packet comprises calculating an itinerary, mapping the calculated itinerary onto one or more instructions and storing the one or more instructions in the at least one data packet.

14. The method of claim 4, further comprising receiving from the authentication object a prediction of at least a part of a pre-determined itinerary of a second data packet in an authentication network;

and verifying the prediction.

15. The method of claim 14, wherein receiving and verifying as to a second data packet comprises receiving and verifying responsive to the transaction.

16. The method of claim 14, wherein receiving and verifying as to a second data comprises receiving and verifying responsive to a transaction subsequent to the transaction.

17. The method of claim 14, wherein receiving and verifying as to a second data packet comprises receiving and verifying using a second authentication network.

18. The method of claim 4, further comprising, keeping a prediction valid for a selected time frame.

19. The method of claim 18, further comprising rejecting authentication based on receipt, within the selected time frame, of a second prediction as to the at least one data packet.

20. The method of claim 19, wherein rejecting authentication comprises requesting another prediction as to the at least one data packet'"'"'s itinerary.