ID token having a protected microcontroller

Patent metadata

Field	Value
Publication number	US-10956618-B2
Application number	US-201615779987-A
Country	US
Kind code	B2
Filing date	Dec 13, 2016
Priority date	Dec 15, 2015
Publication date	Mar 23, 2021
Grant date	Mar 23, 2021

Abstract

An ID token includes a sensor, a communication interface, and a first microcontroller. The ID token includes a protected second microcontroller having at least one microcontroller communication interface, which is arranged in a holder of the ID token, wherein the microcontroller communication interface provides a data input and a data output. The first microcontroller is configured as a proxy for switching between the sensing of the measurement data by the sensor and forwarding of the sensed measurement data from the sensor to the first application of the protected second microcontroller by the microcontroller communication interface thereof on the one hand and forwarding of notifications for establishing a connection between the second application and the reading device and/or forwarding of APDUs by the connection between the second application and the reading device on the other hand.

First claim

The invention claimed is:

1. An identification (ID) token comprising
a sensor configured to sense measurement data,
a communication interface,
a first microcontroller, and
a protected second microcontroller having at least one microcontroller communication interface, which is arranged in a holder of the ID token, wherein the microcontroller communication interface is configured to provide a data input and a data output;
wherein the first microcontroller, for data exchange with the microcontroller communication interface of the protected second microcontroller, is connected to the sensor and to the communication interface of the ID token, and wherein the first microcontroller is configured to exchange data with a reading device via the communication interface of the ID token;
wherein the protected second microcontroller comprises a first and a second application;
wherein the first application is configured to compare the measurement data of the sensor with comparison data stored in a memory of the second microcontroller and forward the comparison result to the second application;
wherein the second application is configured to establish a connection to the reading device in the form of an encrypted end-to-end connection and outputs specified data by a read command of the reading device via the encrypted end-to-end connection, wherein encrypted Application Protocol Data Units (APDUs) are transmitted via the encrypted end-to-end connection;
wherein the first microcontroller is configured as a proxy for switching between (1) the sensing of the measurement data by the sensor and forwarding of the sensed measurement data from the sensor to the first application of the protected second microcontroller using the microcontroller communication interface of the second microcontroller and (2) forwarding of notifications for establishing a connection between the second application and the reading device or forwarding of APDUs using the communication interface of the ID token;
wherein the protected second microcontroller is further configured to provide a plurality of logical channels for data exchange via the microcontroller communication interface, wherein the communication via the encrypted end-to-end connection is performed over a first logical channel of the second microcontroller, and wherein the first microcontroller is further configured to:
receive and temporarily store an encrypted Application Protocol Data Unit (APDU), wherein the APDU is sent via the encrypted end-to-end connection from the reading device to the second application and contains unencrypted header data and encrypted user data, and analyze the header data;
send to the sensor a request to sense the measurement data, in response to the header data comprising a reference to measurement data sensed by the sensor;
receive, upon receipt of the request to sense the measurement data, the sensed measurement data from the sensor and forward the measurement data to the first application over a second logical channel of the second microcontroller, and
forward the temporarily stored encrypted APDU to the second application over the first logical channel.

2. The ID token according to claim 1 , wherein the at least one microcontroller communication interface of the protected second microcontroller is a contact-based communication interface.

3. The ID token according to claim 1 , wherein the protected second microcontroller comprises a single microcontroller communication interface.

4. The ID token according to claim 1 , wherein the first microcontroller is further configured to exchange data contactlessly with a reading device via the communication interface of the ID token.

5. The ID token according to claim 1 , wherein the first microcontroller is further configured to exchange data in a contact-based manner with the reading device via the communication interface of the ID token.

6. The ID token according to claim 1 , wherein the second application comprises the first application.

7. The ID token according to claim 1 , wherein the measurement data comprises one or more of the following: biometric features, a PIN, acceleration data, GPS coordinates and temperature data, or any combinations thereof.

8. The ID token according to claim 1 , wherein
the ID token comprises a plurality of different sensors configured to sense a plurality of different items of measurement data, and
the first microcontroller is connected to the plurality of different sensors for data exchange, wherein the first application is further configured to compare the measurement data of each sensor from the plurality of different sensors with comparison data stored in a memory of the second microcontroller and to forward comparison results generated from comparing the measurement data to the second application.

9. The ID token according to claim 1 , wherein the first microcontroller is further configured as a master and the protected second microcontroller is further configured as a slave.

10. The ID token according to claim 1 , wherein the second microcontroller is physically protected by one or more of the following elements: a clock frequency sensor, a temperature sensor, a voltage sensor, and a light sensor, or any combinations thereof.

11. The ID token according to claim 1 , wherein the second microcontroller is cryptographically protected by one or more of the following elements: a random number generator, a generator for cryptographic keys, a hash generator, an encryption and decryption module, a signature module, one or more certificates and one or more non-migratable or cryptographic keys, or any combinations thereof.

12. The ID token according to claim 1 , wherein the microcontroller communication interface of the protected second microcontroller is hard-wired to the first microcontroller.

13. The ID token according to claim 1 , wherein the protected second microcontroller is further configured as an exchangeable module and the holder of the ID token is configured as a plug-in connection for the exchangeable module.

14. The ID token according to claim 1 , wherein the ID token further includes an output device to which the first microcontroller is connected for data exchange.

15. A system which comprises:
an identification (ID) token; and
a reading device having a reading device communication interface configured for data exchange with a communication interface of the ID token;
wherein the ID token comprises:
a sensor configured to sense measurement data,
the communication interface,
a first microcontroller, and
a protected second microcontroller having at least one microcontroller communication interface, which is arranged in a holder of the ID token, wherein the microcontroller communication interface is configured to provide a data input and a data output;
wherein the first microcontroller, for data exchange with the microcontroller communication interface of the protected second microcontroller, is connected to the sensor and to the communication interface of the ID token, and wherein the first microcontroller is configured to exchange data with a reading device via the communication interface of the ID token;
wherein the protected second microcontroller comprises a first and a second application;
wherein the first application is configured to compare the measurement data of the sensor with comparison data stored in a memory of the second microcontroller and forward the comparison result to the second application;
wherein the second application is configured to establish a connection to the reading device in the form of an encrypted end-to-end connection and output

Assignees

• Bundesdruckerei Gmbh

Inventors

• Morgner Frank
• Kraus Micha
• Bastian Paul

Classifications

• G06K19/0716

  at least one of the integrated circuit chips comprising a sensor or an interface to a sensor · CPC title

• H04L63/083

  using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226) · CPC title

• G06F21/83

  input devices, e.g. keyboards, mice or controllers thereof · CPC title

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• G06F21/74 Primary

  operating in dual or compartmented mode, i.e. at least one secure mode · CPC title