Portable keying device and method

• US 9,137,009 B1
• Filed: 04/08/2008
• Issued: 09/15/2015
• Est. Priority Date: 05/14/2001
• Status: Active Grant

• Current Assignee: Hand Held Products Incorporated (Honeywell International Inc.)
• Original Assignee: Hand Held Products Incorporated (Honeywell International Inc.)
• Inventors: Gardiner, Robert C.
• Primary Examiner(s): TRAN, ELLEN C
• Application Number:
  US12/082,079
• Time in Patent Office: 2,716 Days
• Field of Search: 726/5, 726/9, 380/273
• US Class Current: 1/1
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB

Abstract

A portable encryption key installation system is disclosed that includes a portable keying device for installing a data communications encryption key in an electronic terminal. The portable keying device securely reprograms the encryption key in the electronic terminal without having to remove the terminal from its shipping container or ship the electronic terminal offsite. Furthermore, the portable keying device securely reprograms the encryption key in the electronic terminal without having to dismantle the terminal, deactivate any anti-tampering features, or re-bond the terminal.

Claims

1. An electronic terminal comprising:

at least two memories including a secure memory for storing at least one encryption key and a read-only memory for storing at least one authorization code;

a processor;

an RF transceiver;

a switch activated by the processor pursuant to pre-programmed time controls, said switch connecting said processor to a circuit for storing a new encryption key in said secure memory;

wherein the terminal is configured, responsive to successfully comparing a first authorization code received from a client via the RF transceiver to a second authorization code stored in the read-only memory, and validating the communication from the client, to receive said new encryption key via the RF transceiver from the client to store in the secure memory,

wherein the validating includes receiving the test encryption key via the RF transceiver and comparing the test encryption key received via the RF transceiver to the at least one encryption key stored in the secure memory and responsive to matching the test encryption key to the at least one encryption key, obtaining a new encryption key from the client via the RF transceiver, sending the new encryption key via the RF transceiver to the client, and receiving an indication of validation via the RF transceiver from the client.

2. The terminal of claim 1, wherein the terminal is selected from the group consisting of:

a keypad, a signature pad, a card reader, a bar code reader, and a point-of-sale transaction terminal.

3. The terminal of claim 1, wherein the terminal is in communication with a local area network.

4. The terminal of claim 1, wherein the secure memory is implemented using a separate memory device.

5. The terminal of claim 1, wherein the RF transceiver includes one or more proximity features selected from the group consisting of:

an RF signal power level, an RF signal angular directivity, and an RF signal polarity.

6. An electronic terminal according to claim 1, further comprising:

a diode connected between said transceiver and said circuit for storing said new encryption key;

a capacitor within said circuit for storing connected to said diode;

an output from said transceiver connected to said diode and charging said capacitor until the timing controls trigger said switch.

7. An electronic terminal according to claim 6, further comprising a voltage regulator determining if said capacitor provides an acceptable programming voltage to send to said memory.

8. An electronic terminal according to claim 6, wherein said transceiver output and said acceptable programming voltage are coordinated by said timing controls to prevent an unacceptable programming voltage from said memory.

17. The terminal of claim 1, further configured, responsive to successfully comparing a first authorization code received via the RF transceiver to a second authorization code stored in the secure memory, to transmit an acknowledgement message via the RF transceiver.

9. An electronic terminal comprising:

at least two memories including a secure memory for storing at least one encryption key and a read only memory for storing an authorization code;

a processor;

an RF transceiver; and

an imaging assembly for image scanning;

a programming voltage supply unit adapted to convert an RF signal received via the RF transceiver into a programming voltage to thereby enable the secure memory to store the at least one encryption key received via the RF transceiver responsive to receiving a first authorization code via the RF transceiver and matching the first authorization code to a second authorization code stored in the read only memory.

10. The terminal of claim 9, wherein the terminal is selected from the group consisting of:

a keypad, a signature pad, a card reader, a bar code reader, and a point-of-sale transaction terminal.

11. The terminal of claim 9, wherein the terminal is in communication with a local area network.

12. The terminal of claim 9, wherein the secure memory is implemented using a separate memory device.

13. The terminal of claim 9, wherein the RF transceiver includes one or more proximity features selected from the group consisting of:

an RF signal power level, an RF signal angular directivity, and an RF signal polarity.

14. The terminal of claim 9, wherein the programming voltage supply unit includes a diode rectifying the RF signal to output a DC signal.

15. The terminal of claim 9, wherein the terminal is configured to store the at least one encryption key received via the RF transceiver while not being connected to an external power supply.

16. The terminal of claim 9, wherein the terminal is devoid of an internal battery.

18. The terminal of claim 9, wherein the programming voltage supply unit further comprises at least one capacitor and a voltage regulator.

19. The terminal of claim 9, wherein the programming voltage supply unit further comprises a voltage regulator and a switch electrically coupled to the voltage regulator;

wherein the switch is controlled by the processor.

20. The terminal of claim 9, further comprising an operating voltage supply unit adapted to convert an RF signal received via the RF transceiver into an operating voltage.

21. An electronic terminal according to claim 9, further comprising:

a diode connected between said transceiver and said circuit for storing said new encryption key;

a capacitor within said circuit for storing connected to said diode; and

an output from said transceiver connected to said diode and charging said capacitor until the timing controls trigger said switch.

22. An electronic terminal according to claim 21, further comprising a voltage regulator determining if said capacitor provides an acceptable programming voltage to send to said memory.

23. An electronic terminal according to claim 22, wherein said transceiver output and said acceptable programming voltage are coordinated by said timing controls to prevent an unacceptable programming voltage from said memory.

24. An electronic terminal comprising:

at least one memory comprising a secure memory for storing at least one encryption key;

a processor;

an RF transceiver;

a switch activated by the processor pursuant to pre-programmed time controls, said switch providing a circuit for storing a new encryption key in said secure memory;

a programming voltage supply unit adapted to convert an RF signal received via the RF transceiver into a programming voltage to thereby enable the secure memory to store said new encryption key received via the RF transceiver.

25. An electronic terminal according to claim 24, further comprising a voltage regulator connected between said RF transceiver and said switch.

26. An electronic terminal according to claim 24, wherein said programming voltage supply unit further comprises at least one capacitor connected to a voltage regulator.

27. An electronic terminal comprising:

at least one memory comprising a secure memory for storing at least one encryption key and a read only memory for storing an authorization code;

a processor;

an RF transceiver;

a switch activated by the processor pursuant to pre-programmed time controls, said switch connecting said processor to a circuit for storing a new encryption key in said secure memory;

an operating voltage supply unit adapted to convert an RF signal received via the RF transceiver into an operating voltage to thereby enable the secure memory to store said new encryption key received via the RF transceiver.

28. An electronic terminal according to claim 27 further comprising a programming voltage supply unit adapted to convert an RF signal received via the RF transceiver into a programming voltage to thereby enable the secure memory to store said new encryption key received via the RF transceiver.

29. An electronic terminal according to claim 27, further comprising a voltage regulator connected between said RF transceiver and said switch.

30. An electronic terminal according to claim 27, wherein said programming voltage supply unit further comprises at least one capacitor connected to a voltage regulator.

31. An electronic terminal according to claim 27, wherein said voltage regulator determines if said capacitor provides an acceptable programming voltage to send to said memory.