System and method for remotely verifying physical security keys

Patent metadata

Field	Value
Publication number	US-12450369-B2
Application number	US-202318318746-A
Country	US
Kind code	B2
Filing date	May 17, 2023
Priority date	Jan 31, 2023
Publication date	Oct 21, 2025
Grant date	Oct 21, 2025

Abstract

A system for remotely verifying physical security keys and a method thereof are provided. The system includes a physical key, a control device, and a controlled platform. The control device is electrically connected to the physical key. The controlled platform is linked to the control device via digital transmission. The control device sends a verification application message to an application service program linked to the controlled platform through the digital transmission; according to the verification application message, the controlled platform responds to the control device via the digital transmission with a challenge value signing procedure to request a signature; according to the challenge value signature procedure, the control device performs a signature procedure on the physical key to complete verification. In this way, the physical key is remotely authenticated by the control device to achieve the purpose of improving information security.

First claim

What is claimed is:

1. A method for remotely verifying physical security keys, adapted to a physical key, a control device and a controlled platform linked to the control device, the method comprising:
the control device sending a verification application message to an application service program linked to the controlled platform through digital transmission;
according to the verification application message, the controlled platform responding to the control device via the digital transmission with a challenge value signing procedure to request a signature; and
according to the challenge value signature procedure, the control device performing a signature procedure on the physical key to complete verification;
wherein the step that according to the verification application message the controlled platform responding to the control device via the digital transmission with a challenge value signing procedure to request a signature further comprises:
the controlled device requesting a challenge value signature request signal to the registration and authentication database according to the verification application message;
the registration and authentication database responding to the controlled device with a challenge value and a public key index response signal according to the challenge value signature request signal;
the controlled device responding to the challenge value and the public key index response signal to the control device according to the verification application message; and
the control device initiating a challenge value signature on the physical key according to the challenge value and the public key index response signal.

2. The method according to claim 1 , wherein after the step that the control device initiating a challenge value signature on the physical key according to the challenge value and the public key index response signal, the method further comprises the physical key performing the signature according to the challenge value and the public key index response signal.

3. The method according to claim 1 , wherein the step that the control device initiating a challenge value signature on the physical key according to the challenge value and the public key index response signal further comprises:
determining whether the physical key establishes an electrical connection with the control device; and
when the electrical connection establishes, the physical key transmits the challenge value signature to the controlled platform through the control device.

4. The method according to claim 3 , wherein the step that according to the challenge value signature procedure, the control device performing a signature procedure on the physical key to complete verification further comprises:
the physical key responding the signature to the control device according to the signature;
the control device responding the signature to the controlled device according to the signature;
the controlled device responding the signature to the registration and authentication database according to the signature; and
the application service program of the registration and authentication database completing the verification according to the signature.

Assignees

• Insyde Software Corp

Inventors

• Chen I-Te
• Chiu Chuang-Yi

Classifications

• H04L9/321

  involving a third party or a trusted authority · CPC title

• H04L9/3247 Primary

  involving digital signatures · CPC title

• H04L9/0827

  involving distinctive intermediate devices or communication paths (network architectures or network communication protocols using different networks H04L63/18) · CPC title

• H04L9/3271 Primary

  using challenge-response · CPC title

• H04L2209/805

  Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor · CPC title