Tag, related method and system for identifying and/or authenticating objects

Patent metadata

Field	Value
Publication number	US-11275911-B2
Application number	US-202016775094-A
Country	US
Kind code	B2
Filing date	Jan 28, 2020
Priority date	Oct 26, 2015
Publication date	Mar 15, 2022
Grant date	Mar 15, 2022

Abstract

A tag adapted to be applied to an object is disclosed. The tag includes a wireless communication interface, a processor and a memory. A univocal code, a cipher key and a count value are store in the memory. The tag generates a dynamic code as a function of the cipher key and the count value. Next, the tag varies the count value according to a determined operation, and stores the varied count value in the memory. The tag transmits the univocal code and the dynamic code to a reader device. The tag may transmit the univocal code and the dynamic code in a URL.

First claim

The invention claimed is:

1. A device, comprising:
a wireless communication interface;
a memory; and
processing circuitry which, in operation:
generates a first dynamic code based on a key and a first value stored in the memory;
applies a determined operation to the first value to generate a modified first value and replaces the first value stored in the memory with the modified first value;
generates signals to cause the wireless communication interface to transmit the first dynamic code and a univocal code stored in the memory;
generates a second dynamic code based on the key and the modified first value stored in the memory;
applies the determined operation to the modified first value to generate a modified second value and replaces the modified first value stored in the memory with the modified second value; and
generates signals to cause the wireless communication interface to transmit the second dynamic code and the univocal code stored in the memory.

2. The device according to claim 1 wherein said memory stores a Fully Qualified Domain Name (FQDN), and said transmitting said univocal code and said first dynamic code comprises:
transmitting an Uniform Resource Locator (URL) to a reader device, said URL comprising said Fully Qualified Domain Name, said univocal code and said first dynamic code.

3. The device according to claim 1 wherein said processing circuitry, in operation, generates the first dynamic code using one or more of:
a symmetric encryption function;
an asymmetric encryption function; and
a hashing function.

4. The device according to claim 3 wherein the processing circuitry, in operation, generates said first dynamic code by:
generating a temporary code based on the univocal code and the first value using a cryptographic algorithm; and
selecting a subset of the characters of said temporary code as said dynamic code.

5. The device of claim 4 wherein the cryptographic algorithm comprises at least one of:
a Data Encryption Standard (DES) algorithm; and
an Advanced Encryption Standard (AES) algorithm.

6. The device according to claim 1 wherein said wireless communication interface comprises a Near Field Communication interface.

7. The device of claim 1 wherein the processing circuitry, in operation, generates the first dynamic code before generating the modified first value.

8. A method, comprising:
generating, using processing circuitry of a tag, a first dynamic code based on a first key and a first value stored in a memory of the tag;
applying a determined operation to the first value to generate a modified first value and replacing the first value stored in the memory with the modified first value;
transmitting, using a wireless communication interface of the tag, the first dynamic code and a univocal code stored in the memory of the tag; and
repeating, using the modified first value instead of the first value, the generating of a dynamic code, the applying of the determined operation and the replacing, and the transmitting.

9. The method of claim 8 wherein said memory stores a Fully Qualified Domain Name (FQDN), and said transmitting said univocal code and said first dynamic code comprises:
transmitting an Uniform Resource Locator (URL) to a reader device, said URL comprising said FQDN, said univocal code and said first dynamic code.

10. The method of claim 8 wherein generating the first dynamic code comprises applying one or more of:
a symmetric encryption function;
an asymmetric encryption function; and
a hashing function.

11. The method according to claim 10 wherein the generating said first dynamic code comprises:
generating a temporary code based on the univocal code and the first value using a cryptographic algorithm; and
selecting a subset of the characters of said temporary code as said dynamic code.

12. The method of claim 11 wherein the cryptographic algorithm comprises at least one of:
a Data Encryption Standard (DES) algorithm; and
an Advanced Encryption Standard (AES) algorithm.

13. The method of claim 8 wherein said wireless communication interface comprises a Near Field Communication interface.

14. The method of claim 8 , comprising:
receiving, at a server, a Uniform Resource Locator (URL) request including the transmitted first dynamic code and univocal code;
determining, by the server, whether a database contains said univocal code included in the received URL; and
in response to a determination that the database contains the univocal code included in the received URL:
retrieving a second key and a second value stored in the database and associated with said univocal code included in the received URL;
generating a second dynamic code as a function of said retrieved second key and the second value stored in said database;
comparing said first and said second dynamic codes; and
based on the comparison, selectively applying the determined operation to the second value to generate a modified second value and replacing the second value stored in the database with the modified second value.

15. The method according to claim 14 , comprising:
transmitting the URL by the tag to a reader device; and
transmitting the URL by the reader device to the server.

16. The method of claim 15 wherein said reader device is one of a smartphone and a tablet.

17. The method according to claim 14 , comprising:
in response to a determination that the database does not contain the univocal code included in the received URL, transmitting, by the server, a webpage containing an error message.

18. The method according to claim 14 , comprising:
when the comparison indicates said first and said second dynamic codes do not correspond, repeating the following operations until the comparison indicates said first and said second dynamic codes correspond or a threshold number of iterations has been reached:
applying the determined operation to the second value to generate a modified second value; and
generating a new second dynamic code as a function of said key and said modified second value.

19. The method according to claim 18 , comprising:
when the threshold number of iterations has been reached, transmitting, by the server, a webpage containing an error message.

20. A system, comprising:
an object;
a tag associated with the object, the tag including:
a wireless communication interface;
a memory; and
processing circuitry which, in operation:
generates a first dynamic code based on a key and a first value stored in the memory;
applies a determined operation to the first value to generate a modified first value and replaces the first value stored in the memory with the modified first value;
generates signals to cause the wireless communication interface to transmit the first dynamic code and a univocal code stored in the memory; and
repeats, using the modified first value instead of the first value, the generating of a dynamic code, the applying of the determined operation and the replacing, and the generating of signals.

21. The system according to claim 20 wherein the tag is embedded in the object.

22. The system of claim 20 , comprising:
a server, which, in operation, responds to a Uniform Resource Locator including the transmitted first dynamic code and the univocal code by authenticating the object based on the received URL.

23. The system of claim 20 , comprising:
a server, which, in operation, responds to receipt of a Uniform Resource Loc

Assignees

• St Microelectronics Srl

Inventors

• Cimino Carlo
• Alfarano Marco

Classifications

• H04L9/3234 Primary

  involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853) · CPC title

• G06K7/10366 Primary

  the interrogation device being adapted for miscellaneous applications · CPC title

• H04L2209/805

  Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor · CPC title

• H04L63/0442

  wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30) · CPC title

• H04L63/0435

  wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06) · CPC title