Providing position data by means of a distance-bounding protocol

Patent metadata

Field	Value
Publication number	US-9648453-B2
Application number	US-201414762273-A
Country	US
Kind code	B2
Filing date	Jan 23, 2014
Priority date	Jan 25, 2013
Publication date	May 9, 2017
Grant date	May 9, 2017

Abstract

A method is proposed for providing position data for a chip card having portions for receiving or detecting position data of a localization unit by the localization unit, wherein the localization unit is spatially separate from the chip card; transmitting the position data from the localization unit to the chip card via a contactless interface with use of a cryptographic protocol; executing a distance-bounding protocol between the chip card and the localization unit, wherein the distance-bounding protocol then concludes successfully precisely when the spatial distance between the chip card and localization unit does not exceed a predefined maximum distance; and executing a chip card function with successful conclusion of the distance-bounding protocol, wherein the chip card function uses the transmitted position data as position data specifying the current position of the chip card.

First claim

What is claimed is:

1. A method for providing position data for a chip card having portions for:
receiving or detecting position data of a localisation unit by the localisation unit, wherein the localisation unit is spatially separate from the chip card;
transmitting the position data from the localisation unit to the chip card via a contactless interface with use of a cryptographic protocol;
executing a distance-bounding protocol between the chip card and the localisation unit, wherein the distance-bounding protocol then concludes successfully precisely when the spatial distance between the chip card and localisation unit does not exceed a predefined maximum distance; and
executing a chip card function with successful conclusion of the distance-bounding protocol, wherein the chip card function uses the transmitted position data as position data specifying the current position of the chip card.

2. The method according to claim 1 , further comprising the authentication of the localisation unit to the chip card by confirmation during the course of the execution of the distance-bounding protocol that the localisation unit is located within the spatial maximum distance.

3. The method according to claim 1 , wherein the maximum distance is predefined by the distance-bounding protocol.

4. The method according to claim 1 , wherein the distance-bounding protocol is based on a challenge-response protocol.

5. The method according to claim 1 , wherein the execution of the distance-bounding protocol provides the use of at least one first and one second cryptographic key, wherein the at least first cryptographic key is securely stored in a first protected memory medium of the chip card, wherein the at least second cryptographic key is stored on a second protected memory medium of the localisation unit.

6. The method according to claim 1 , wherein the position data comprises:
a plurality of location identifiers, which in their totality identify a location at which the chip card and/or the localisation unit is/are located; or
a location identifier, which identifies a location at which the chip card and/or the localisation unit is/are located.

7. The method according to claim 6 , wherein each location identifier of the plurality of location identifiers constitutes a network identifier, wherein each network identifier identifies a data communication network, in the transmission region of which the chip card and/or the localisation unit is/are allocated, which detects/detect this position data.

8. The method according to claim 1 , wherein the implementation of the chip card function comprises portions for:
releasing the protected memory medium of the chip card to enable the readout of protected data by the localisation unit or by another data-processing system; and/or
recording the position data to record a movement path of the chip card; and/or
carrying out an electronic transaction; and/or
carrying out an electronic ticket purchase or an automatic levying of a toll on the basis of the position data; and/or
releasing a blocked hardware function of a hardware, which is operationally connected to the chip card.

9. The method according to claim 8 , wherein the blocked hardware function intended for release is implemented in:
an unlocking mechanism of a firearm;
a trigger mechanism of an explosion device;
a mechanism for mixing liquids and/or substances; or
another sort of movement of the hardware or one of its components.

10. A chip card, comprising:
a memory medium for the protected storage of at least one cryptographic key;
a contactless interface that receives position data from a localisation unit, wherein the use of a cryptographic protocol is received with use of the at least one cryptographic key;
a distance-bounding module, which is designed to execute a distance-bounding protocol to a localisation unit, wherein the distance-bounding protocol is then concluded successfully precisely when the spatial distance from the localisation unit does not exceed a predefined maximum distance; and
a chip card function, which can be executed only in the event of a successful conclusion of the distance-bounding protocol, wherein the chip card function uses the transmitted position data as position data specifying the current position of the chip card.

11. The chip card according to claim 10 , further comprising an authentication module, which is configured to authenticate the localisation unit by the chip card, wherein the transmitted position data indicating the current position of the chip card is used only in the event of a successful authentication of the localisation unit.

12. A system containing a localisation unit, wherein the localisation unit comprises:
a localisation module, which is configured to receive or determine position data of the localisation unit;
a storage medium for the protected storage of at least one cryptographic key;
an interface for the contactless transmission of the position data to a chip card, wherein the data is transmitted with use of a cryptographic protocol with use of the at least one cryptographic key; and
a distance-bounding module, which is configured to execute a distance-bounding protocol between the localisation unit and the chip card, wherein the distance-bounding protocol then concludes successfully precisely when the spatial distance between the chip card and the localisation unit does not exceed a predefined maximum distance.

13. The system according to claim 12 , wherein the localisation unit also comprises an authentication module, which is configured to authenticate the localisation unit to the chip card.

14. The system according to claim 12 , further comprising the chip card, wherein the chip card comprises:
a memory medium for the protected storage of at least one cryptographic key;
a contactless interface that receives position data from a localization unit, wherein the use of a cryptographic protocol is received with use of the at least one cryptographic key;
a distance-bounding module, which is designed to execute a distance-bounding protocol to a localization unit, wherein the distance-bounding protocol is then concluded successfully precisely when the spatial distance from the localization unit does not exceed a predefined maximum distance; and
a chip card function, which can be executed only in the event of a successful conclusion of the distance-bounding protocol, wherein the chip card function uses the transmitted position data as position data specifying the current position of the chip card.

15. The system according to claim 12 ,
wherein the chip card is a SIM card or a chip card of a security document; and/or
wherein the localisation unit identifies the position data by GPS, LPS, WLAN, ultrasound, or radio or Bluetooth technology; and/or
wherein the distance-bounding protocol is based on ultrasound or electromagnetic radiation.

Assignees

• Bundesdruckerei Gmbh

Inventors

• Morgner Frank

Classifications

• G06Q20/3224 Primary

  Transactions dependent on location of M-devices · CPC title

• G06Q20/341

  Active cards, i.e. cards including their own processing means, e.g. including an IC or chip · CPC title

• H04W12/06

  Authentication · CPC title

• H04L9/0872

  using geo-location information, e.g. location data, time, relative position or proximity to other entities · CPC title

• H04W64/00

  Locating users or terminals {or network equipment} for network management purposes, e.g. mobility management · CPC title