Secure element arrays in internet-of-things systems

Patent metadata

Field	Value
Publication number	US-12495041-B2
Application number	US-202318355858-A
Country	US
Kind code	B2
Filing date	Jul 20, 2023
Priority date	Nov 13, 2020
Publication date	Dec 9, 2025
Grant date	Dec 9, 2025

Abstract

Systems and methods for providing secure execution of functions for edge devices include a plurality of edge devices, a controller, and an array of secure elements. The edge devices are each configured to obtain data for an application of the system. The controller is connected to communicate with the edge devices to receive the data from each of the edge devices. The array of secure elements is connected to the controller, and each secure element executes functions using the data received from the edge devices. The controller associates an identified secure element of the array of secure elements with a respective edge device to execute the functions for data received from the respective edge device, and the controller is connected to communicate a result of the executed functions to the respective edge device.

First claim

What is claimed is:

1 . A method for transmitting data using a collision-resistant full-duplex communication protocol over a half-duplex connection, the method comprising:
ending a data reception mode for a first device transmitting the data; transmitting, by the first device, a data frame over the half-duplex connection for receipt by a second device; monitoring, by the first device, for an acknowledgement from the second device, the acknowledgement comprising a cyclic redundancy check value; determining that the data frame needs to be retransmitted; identifying a device role of the first device; and retransmitting the data frame at a time according to the identification of the device role.

2 . The method of claim 1 , wherein the half-duplex connection is an RS-485 connection.

3 . The method of claim 2 , wherein the first device is a controller of a physical access control system, and wherein the second device is a reader of the physical access control system.

4 . The method of claim 1 , wherein the data frame comprises an options field, a payload field, and a cyclic redundancy check field, and wherein determining that the data frame needs to be retransmitted comprises:
receiving the acknowledgment from the second device; comparing the acknowledgment to the cyclic redundancy check field of the data frame; and determining that the data frame needs to be retransmitted if the acknowledgement does not match the cyclic redundancy check field.

5 . The method of claim 1 , wherein determining that the data frame needs to be retransmitted comprises failing to receive, by the first device, the acknowledgement from the second device within a specified time period.

6 . A non-transitory computer readable medium comprising executable program code, that when executed by one or more processors, causes the one or more processors to:
end a data reception mode of a first device; transmit a data frame from the first device over a half-duplex connection for receipt by a second device; monitor for an acknowledgement from the second device, the acknowledgement comprising a cyclic redundancy check value; determine that the data frame needs to be retransmitted; identify a device role of the first device; and retransmit the data frame at a time according to the identification of the device role.

7 . The non-transitory computer readable medium of claim 6 , wherein the data frame comprises an options field, a payload field, and a cyclic redundancy check field, and wherein determining that the data frame needs to be retransmitted comprises:
receiving the acknowledgment from the second device; comparing the acknowledgment to the cyclic redundancy check field of the data frame; and determining that the data frame needs to be retransmitted if the acknowledgement does not match the cyclic redundancy check field.

8 . The non-transitory computer readable medium of claim 6 , wherein determining that the data frame needs to be retransmitted comprises failing to receive the acknowledgement from the second device within a specified time period from the second device.

9 . The non-transitory computer readable medium of claim 6 , wherein the half-duplex connection is an RS-485 connection.

10 . The non-transitory computer readable medium of claim 6 , wherein the first device is a controller of a physical access control system, and wherein the second device is a reader of the physical access control system.

Assignees

• Assa Abloy Ab

Inventors

• Sachdeva Kapil
• Prevost Sylvain Jacques
• Mukha Matvey

Classifications

• H04W12/009

  specially adapted for networks, e.g. wireless sensor networks, ad-hoc networks, RFID networks or cloud networks · CPC title

• G06F21/57

  Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities · CPC title

• H04L9/3263

  involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title

• H04L9/3234

  involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853) · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title