Mechanisms for controlling tag personalization

Patent metadata

Field	Value
Publication number	US-9703968-B2
Application number	US-201414306078-A
Country	US
Kind code	B2
Filing date	Jun 16, 2014
Priority date	Jun 16, 2014
Publication date	Jul 11, 2017
Grant date	Jul 11, 2017

Abstract

A tag and a method of writing data to memory of a tag are provided. The tag includes memory that stores data elements as well as an access control list that maps access keys to the data elements. An authentication protocol is employed by the tag to determine whether a data element received from a writing device will be written to the memory.

First claim

What is claimed is:

1. A tag, comprising:
computer-readable memory including:
an access control applet having the ability to store one or more data elements;
one or more access keys;
an access control list providing a mapping of the one or more access keys to the one or more data elements, wherein the access control applet implements an authentication protocol in response to receiving a write command initiated by a writing device, the authentication protocol including confirming that the writing device which initiated the write command is in possession of the one or more access keys prior to allowing the writing device to write a data element to the memory, wherein a first data element is written to a first memory location having write permissions controlled by a first access key in the one or more access keys, wherein a second data element is written to a second memory location having write permissions controlled by a second access key in the one or more access keys, and wherein the second data element is written to the second memory location with a reference pointer to the first data element even though the first and second data elements were written to memory locations having write permissions controlled by different access keys.

2. The tag of claim 1 , wherein the second data element references the first data element by concatenating the first data element and the second data element to create a combined data element that is stored and referenced by the second access key.

3. The tag of claim 1 , wherein the first access key is maintained exclusively by a manufacturer of the tag and wherein the second access key is shared with a personalization entity.

4. The tag of claim 1 , wherein the first data element is written to the first memory location by a first entity and wherein the second data element is written to the second memory location by a second entity that is different from the first entity.

5. The tag of claim 1 , wherein the one or more access keys are also used to create an encrypted communication channel between the writing device and the tag when writing the data element to the memory.

6. The tag of claim 1 , wherein the data element written to the memory comprises a Near-Field Communications (NFC) Data Exchange Format (NDEF) record.

7. The tag of claim 1 , wherein the access control applet determines that the writing device is in possession of the one or more access keys by cryptographically proving that the writing device is in possession of the one or more access keys.

8. The tag of claim 1 , wherein the access control applet determines that the writing device is in possession of the one or more access keys by receiving the one or more access keys from the writing device.

9. The tag of claim 1 , wherein the computer-readable memory further includes a data applet that is separate and distinct from the access control applet and that is used to provide the one or more data elements to a reading device by obtaining the one or more data elements from the access control applet and then providing the one or more data elements to the reading device.

10. The tag of claim 9 , wherein the data applet is configured to perform at least one of a computational operation and a cryptographic operation on the one or more data elements.

11. The tag of claim 1 , wherein communications between the tag and the writing device are performed using at least one of a Near-Field Communications (NFC) protocol, an Ultra-High Frequency (UHF) protocol, a High Frequency (HF) protocol, and a Bluetooth protocol.

12. The tag of claim 1 , wherein read permissions for the one or more data elements are not secured with the one or more access keys.

13. A tag, comprising:
computer-readable memory including:
an access control applet having the ability to store one or more data elements;
one or more access keys;
an access control list providing a mapping of the one or more access keys to the one or more data elements, wherein the access control applet implements an authentication protocol in response to receiving a write command from a writing device, the authentication protocol including confirming that the writing device is in possession of the one or more access keys prior to allowing the writing device to write a data element to the memory, wherein the computer-readable memory further includes a data applet that is used to provide the one or more data elements to a reading device by obtaining the one or more data elements from the access control applet and then providing the one or more data elements to the reading device, wherein the data applet comprises a data buffer that temporarily stores copies of the one or more data elements in response to receiving a read request from the reading device and then provides the reading device with the copies of the one or more data elements, wherein the one or more data elements comprise at least two data elements and wherein the data applet concatenates the at least two data elements in a patterned template specified by at least one of the one or more data elements.

14. A method of writing data to memory of a tag, the method comprising:
receiving, at the tag, a first write command initiated by a first writing device;
receiving, at the tag, a nonce signed by a first key;
prior to executing the first write command at the tag, authenticating the first writing device by determining that the signed nonce is valid by regenerating the signature with a stored version of the first key, wherein the stored restored version of the first key is stored in an access control applet maintained in the memory of the tag;
upon authenticating the first writing device, completing the first write command by writing a first data element to the memory;
receiving, at the tag, a second write command initiated by a second writing device;
receiving, at the tag, a nonce signed by a second key;
prior to executing the second write command at the tag, authenticating the second writing device by determining that the signed nonce is valid by regenerating the signature with the stored version of the first key; and
upon authenticating the second writing device, completing the second write command by writing a second data element to the memory, wherein the second data element references the first data element by at least one of: (1) concatenating the first data element with the second data element and (2) storing a reference pointer to the first data element.

15. The method of claim 14 , wherein the first writing device is different from the second writing device, wherein the first data element is written to a first memory location, wherein the second data element is written to a second memory location, and wherein the first and second memory locations are write-protected by the first and second access keys, respectively.

16. The method of claim 14 , further comprising:
receiving, at the tag, a read command from a reading device, the read command identifying a data applet as a selected data applet from which at least one of the first and second data elements are to be read from the tag;
in response to receiving the read command, copying at least one of the first and second data elements to a data buffer maintained in the selected data applet; and
providing at least one of the first and second data elements to the reading device from the data buffer.

17. The method of claim 16 , wherein the first and second data elements are concatenated in a patterned template specified by one of the first and second data element.

18. The method of claim 16 , wherein the selecte

Assignees

• Assa Abloy Ab

Inventors

• Hoyer Philip
• Robinton Mark
• Novak Petr

Classifications

• G06F2221/2141

  Access rights, e.g. capability lists, access control lists, access tables, access matrices · CPC title

• G06F21/60

  Protecting data · CPC title

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• G06F2221/2153

  Using hardware token as a secondary aspect · CPC title

• G06F2221/2129

  Authenticate client device independently of the user · CPC title