Method, system and device for generating, storing, using, and validating NFC tags and data

Patent metadata

Field	Value
Publication number	US-10652233-B2
Application number	US-201715819799-A
Country	US
Kind code	B2
Filing date	Nov 21, 2017
Priority date	Mar 15, 2013
Publication date	May 12, 2020
Grant date	May 12, 2020

Abstract

A smart tag and methods of interacting with and authenticating interactions with the same are provided. The smart tag is enabled to generate a Tag Authentication Cryptogram (TAC) and include the TAC in response to a read request. Accordingly, each response generated by the smart tag will include a different TAC. It follows that interactions between the smart tag and a reading device can be authenticated as unique interactions if the TAC is validated as a unique and correct TAC.

First claim

What is claimed is:

1. A method, comprising:
in response to at least one of: (i) receiving a read request at a smart tag from a reading device and (ii) determining that a reading device is within a read range of the smart tag, generating, at the smart tag, a data object that includes tag data, a Tag Unique Identifier (TAGID), and a Tag Authentication Cryptogram (TAC), wherein the TAGID represents the smart tag at an authentication service, and wherein the TAC is generated by the smart tag with a cryptographic key and a changeable data part; and
transmitting the data object from the smart tag to the reading device via a proximity-based Radio Frequency (RF) protocol, wherein the data object is transmitted to the reading device with one or more delimiters separating the tag data, the TAGID, and the TAC.

2. The method of claim 1 , wherein the changeable data part comprises a pseudo randomly-generated number.

3. The method of claim 1 , wherein the changeable data part comprises a counter that increments after every use.

4. The method of claim 1 , wherein the cryptographic key and changeable data part are stored in a secure element of the smart tag.

5. The method of claim 1 , further comprising:
signing the data object prior to transmitting the data object to the reading device.

6. The method of claim 1 , wherein the data object is transmitted to the reading device as an NFC Data Exchange Format (NDEF) message.

7. The method of claim 1 , wherein the tag data comprises at least one of a phone number and email address.

8. The method of claim 1 , wherein the tag data, the TAGID, and the TAC are incorporated into a single Universal Resource Locator (URL).

9. The method of claim 1 , wherein the proximity-based RF protocol comprises at least one of a Near-Field Communications (NFC) protocol and Bluetooth.

10. The method of claim 1 , wherein the smart tag is further configured to automatically generate a TAC in response to detecting a reading device within the read range of the smart tag regardless of whether or not the reading device has requested information from the smart tag.

11. A method, comprising:
in response to at least one of: (i) receiving a read request at a smart tag from a reading device and (ii) determining that a reading device is within a read range of the smart tag, generating, at the smart tag, a data object that includes tag data, a Tag Unique Identifier (TAGID), and a Tag Authentication Cryptogram (TAC), wherein the TAGID represents the smart tag at an authentication service, and wherein the TAC is generated by the smart tag without the TAGID using a cryptographic key and a changeable data part; and
transmitting the data object from the smart tag to the reading device via a proximity-based Radio Frequency (RF) protocol, wherein the data object is transmitted to the reading device with one or more delimiters separating the tag data, the TAGID, and the TAC.

12. The method of claim 11 , wherein the changeable data part comprises a pseudo randomly-generated number.

13. The method of claim 11 , wherein the changeable data part comprises a counter that increments after every use.

14. The method of claim 11 , wherein the cryptographic key and changeable data part are stored in a secure element of the smart tag.

15. The method of claim 11 , wherein the data object is transmitted to the reading device as an NFC Data Exchange Format (NDEF) message.

16. The method of claim 11 , wherein the tag data comprises at least one of a phone number and email address.

17. The method of claim 11 , wherein the tag data, the TAGID, and the TAC are incorporated into a single Universal Resource Locator (URL).

18. The method of claim 11 , wherein the proximity-based RF protocol comprises at least one of a Near-Field Communications (NFC) protocol and Bluetooth.

19. A method, comprising:
in response to at least one of: (i) receiving a read request at a smart tag from a reading device and (ii) determining that a reading device is within a read range of the smart tag, generating, at the smart tag, a data object that includes tag data, a Tag Unique Identifier (TAGID), and a Tag Authentication Cryptogram (TAC), wherein the TAGID represents the smart tag at an authentication service, and wherein the TAC is generated by the smart tag with a cryptographic key and a changeable data part; and
transmitting the data object from the smart tag to the reading device via a proximity-based Radio Frequency (RF) protocol;
wherein the data object is transmitted to the reading device with one or more delimiters separating the tag data, the TAGID, and the TAC; and
wherein the data object does not include the changeable data part.

20. The method of claim 19 , wherein the tag data, the TAGID, and the TAC are incorporated into a single Universal Resource Locator (URL), and wherein the proximity-based RF protocol comprises at least one of a Near-Field Communications (NFC) protocol and Bluetooth.

Assignees

• Assa Abloy Ab

Inventors

• Hoyer Philip
• Lovelock Julian Eric
• Robinton Mark

Classifications

• H04L2209/805

  Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor · CPC title

• H04W12/10

  Integrity · CPC title

• H04W12/08

  Access security · CPC title

• H04L63/12

  Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32) · CPC title

• H04L63/0492

  by using a location-limited connection, e.g. near-field communication or limited proximity of entities · CPC title