Tag, related method and system for identifying and/or authenticating objects

Patent metadata

Field	Value
Publication number	US-10586085-B2
Application number	US-201615199547-A
Country	US
Kind code	B2
Filing date	Jun 30, 2016
Priority date	Oct 26, 2015
Publication date	Mar 10, 2020
Grant date	Mar 10, 2020

Abstract

A tag adapted to be applied to an object is disclosed. The tag includes a wireless communication interface, a processor and a memory. A univocal code, a cipher key and a count value are store in the memory. The tag generates a dynamic code as a function of the cipher key and the count value. Next, the tag varies the count value according to a determined operation, and stores the varied count value in the memory. The tag transmits the univocal code and the dynamic code to a reader device. The tag may transmit the univocal code and the dynamic code in a URL.

First claim

The invention claimed is:

1. A device, comprising:
a wireless communication interface;
a memory; and
processing circuitry which, in operation:
generates a first dynamic code based on a key and a first value stored in the memory;
applies a determined operation to the first value to generate a modified first value and replaces the first value stored in the memory with the modified first value; and
generates signals to cause the wireless communication interface to transmit the first dynamic code and a univocal code stored in the memory wherein the processing circuitry, in operation, generates said first dynamic code by:

generating a temporary code by encrypting said univocal code and said first value with said key using a cryptographic algorithm; and
selecting a subset of the characters of said temporary code as said dynamic code.

2. The device according to claim 1 wherein said memory stores a Fully Qualified Domain Name (FQDN), and said transmitting said univocal code and said dynamic code comprises:
transmitting an Uniform Resource Locator (URL) to a reader device, said URL comprising said Fully Qualified Domain Name, said univocal code and said first dynamic code.

3. The device according to claim 1 wherein said processing circuitry, in operation, generates the first dynamic code using one or more of:
a symmetric encryption function;
an asymmetric encryption function; and
a hashing function.

4. The device of claim 1 wherein the cryptographic algorithm comprises at least one of:
a Data Encryption Standard (DES) algorithm; and
an Advanced Encryption Standard (AES) algorithm.

5. The device according to claim 1 wherein said wireless communication interface comprises a Near Field Communication interface.

6. The device of claim 1 wherein the processing circuitry, in operation, generates the first dynamic code before generating the modified first value.

7. A method, comprising:
generating, using processing circuitry of a tag, a first dynamic code based on a first key and a first value stored in a memory of the tag;
applying a determined operation to the first value to generate a modified first value and replacing the first value stored in the memory with the modified first value; and
transmitting, using a wireless communication interface of the tag, the first dynamic code and a univocal code stored in the memory of the tag, wherein the generating said first dynamic code comprises:
generating a temporary code by encrypting said univocal code and said first value with said first key using a cryptographic algorithm; and
selecting a subset of the characters of said temporary code as said dynamic code.

8. The method of claim 7 wherein said memory stores a Fully Qualified Domain Name (FQDN), and said transmitting said univocal code and said dynamic code comprises:
transmitting an Uniform Resource Locator (URL) to a reader device, said URL comprising said FQDN, said univocal code and said first dynamic code.

9. The method of claim 7 wherein generating the first dynamic code comprises applying one or more of:
a symmetric encryption function;
an asymmetric encryption function; and
a hashing function.

10. The method of claim 7 wherein the cryptographic algorithm comprises at least one of:
a Data Encryption Standard (DES) algorithm; and
an Advanced Encryption Standard (AES) algorithm.

11. The method of claim 7 wherein said wireless communication interface comprises a Near Field Communication interface.

12. The method of claim 7 , comprising:
receiving, at a server, a Uniform Resource Locator (URL) request including the transmitted first dynamic code and univocal code;
determining, by the server, whether a database contains said univocal code included in the received URL; and
in response to a determination that the database contains the univocal code included in the received URL:
retrieving a second key and a second value stored in the database and associated with said univocal code included in the received URL;
generating a second dynamic code as a function of said retrieved second key and second value stored in said database;
comparing said first and said second dynamic codes; and
based on the comparison, selectively applying the determined operation to the second value to generate a modified second value and replacing the second value stored in the database with the modified second value.

13. The method according to claim 12 , comprising:
transmitting the URL by the tag to a reader device; and
transmitting the URL by the reader device to the server.

14. The method of claim 13 wherein said reader device is one of a smartphone and a tablet.

15. The method according to claim 12 , comprising:
in response to a determination that the database does not contain the univocal code included in the received URL, transmitting, by the server, a webpage containing an error message.

16. The method according to claim 12 , comprising:
when the comparison indicates said first and said second dynamic codes do not correspond, repeating the following operations until the comparison indicates said first and said second dynamic codes correspond or a threshold number of iterations has been reached:
applying the determined operation to the second value to generate a modified second value; and
generating a new second dynamic code as a function of said key and said modified second value.

17. The method according to claim 16 , comprising:
when the threshold number of iterations has been reached, transmitting, by the server, a webpage containing an error message.

18. A system, comprising:
an object;
a tag associated with the object, the tag including:
a wireless communication interface;
a memory; and
processing circuitry which, in operation:
generates a first dynamic code based on a key and a first value stored in the memory;
applies a determined operation to the first value to generate a modified first value and replaces the first value stored in the memory with the modified first value; and
generates signals to cause the wireless communication interface to transmit the first dynamic code and a univocal code stored in the memory, wherein the processing circuitry, in operation, generates said first dynamic code by:

generating a temporary code by encrypting said univocal code and said first value with said key using a cryptographic algorithm; and
selecting a subset of the characters of said temporary code as said dynamic code.

19. The system according to claim 18 wherein the tag is embedded in the object.

20. The system of claim 18 , comprising:
a server, which, in operation, responds to a Uniform Resource Locator including the transmitted first dynamic code and the univocal code by authenticating the object based on the received URL.

21. The system of claim 18 , comprising:
a server, which, in operation, responds to receipt of a Uniform Resource Locator (URL) request including the transmitted first dynamic code and univocal code by:
determining whether a database contains said univocal code included in the received URL; and
in response to a determination that the database contains the univocal code included in the received URL:
retrieving a second key and a second value stored in the database and associated with said univocal code included in the received URL;
generating a second dynamic code as a function of said retrieved second key and second value stored in said database;
comparing said first and said second dynamic codes; and

Assignees

• St Microelectronics Srl

Inventors

• Cimino Carlo
• Alfarano Marco

Classifications

• H04L2209/805

  Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor · CPC title

• H04L9/3234 Primary

  involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853) · CPC title

• G06K7/10366 Primary

  the interrogation device being adapted for miscellaneous applications · CPC title

• H04L9/0631

  Substitution permutation network [SPN], i.e. cipher composed of a number of stages or rounds each involving linear and nonlinear transformations, e.g. AES algorithms · CPC title

• G06K7/10297

  arrangements for handling protocols designed for non-contact record carriers such as RFIDs NFCs, e.g. ISO/IEC 14443 and 18092 (cryptographic protocols H04L9/00; network security protocols H04L63/00; real-time communication protocols in data switching networks H04L65/00; network protocols for data switching network services H04L67/00) · CPC title