System, method and computer program product for detecting tampering in a product

Patent metadata

Field	Value
Publication number	US-9798294-B2
Application number	US-201213727385-A
Country	US
Kind code	B2
Filing date	Dec 26, 2012
Priority date	Sep 18, 2012
Publication date	Oct 24, 2017
Grant date	Oct 24, 2017

Abstract

A system for detecting tampering in a product having a tamper-detector seal, including a secure element configured to store a digital signature and a data associated with the digital signature, transmit the digital signature and the data associated with the digital signature in response to a request, detect tampering of the tamper-detector seal, and modify the data associated with the digital signature if tampering is detected. The system further includes a seal validation device configured to receive a public key associated with the product, request the digital signature and the data associated with the digital signature from the secure element, and validate the digital signature utilizing the data associated with the digital signature and the public key associated with the product.

First claim

What is claimed:

1. A device for detecting tampering with a product having a seal, comprising:
a data storage module that stores a digital signature associated with the product and stores a set of data used to generate the digital signature, and wherein the set of data includes identification data for the product;
a sensor configured to sense a change in air pressure inside a product container, wherein a change in air pressure inside the product container indicates that the product container is being opened; and
a tamper detection module, coupled to the data storage module and the sensor, configured to detect tampering with the product container in response to the change in air pressure and to modify the digital signature when the tampering is detected.

2. The device of claim 1 , wherein the tamper-detection module is further configured to modify the set of data used to generate the digital signature when tampering is detected.

3. The device of claim 1 , wherein the set of data used to generate the digital signature includes a one-time password.

4. The device of claim 1 , further comprising a communications module configured to communicate with an external authentication device.

5. The device of claim 1 , wherein the digital signature includes a set of bits and wherein the tamper detection module is configured to modify the value of a bit in the digital signature when tampering is detected.

6. The device of claim 1 , wherein the set of data used to generate the digital signature includes a set of bits and wherein the tamper detection module is configured to modify the value of a bit in the set of data when tampering is detected.

7. A system for detecting tampering with a product having a seal and a secure element, the system comprising:
a public cryptographic key associated with the product;
a communications module configured to wirelessly communicate with the secure element and retrieve, from the secure element, a digital signature that identifies the product, the digital signature generated from a set of data, the set of data including identification data from the product;
a data storage module that stores the digital signature and the set of data;
a sensor configured to sense a change in air pressure inside a product container, wherein a change in air pressure inside the product container indicates that the product container is being opened;
a tamper detection module, coupled to the data storage module and the sensor, configured to detect tampering with the product container in response to the change in air pressure and to modify the digital signature when the tampering is detected; and
a processor coupled to the data storage module, configured to:
obtain the set of data used to generate the digital signature; and
authenticate the digital signature using the public cryptographic key associated with the product and the set of data used to generate the digital signature.

8. The system of claim 7 , wherein the communications module is further configured to obtain the public key associated with the product from an external database.

9. The system of claim 7 , wherein the processor is configured to authenticate the digital signature by:
decrypting the digital signature using the public key to generate a decrypted hash value;
hashing the set of data to generate a validation hash value; and
comparing the decrypted hash value to the validation hash value.

10. The system of claim 7 , wherein the processor is further configured to provide an indication to a user of the device whether authentication of the product was successful.

11. A method, in an authentication device, for validating the authenticity of a product having a seal and a secure element comprising:
receiving a digital signature associated with the product from the secure element;
obtaining a set of data used to generate the digital signature;
storing the set of data and the digital signature in a data storage module, the set of data including identification data from the product;
sensing for a change in air pressure inside a product container, where in the change in air pressure indicates that the product container is being opened;
detecting if the product container is opened, and in response, modifying the digital signature;
decrypting, by a processor in the authentication device, the received digital signature using a public cryptographic key to generate a decrypted hash value;
hashing, by the processor in the authentication device, the set of data to generate a validation hash;
comparing the decrypted hash value to the validation hash value; and
indicating that authentication was successful and the product container has not been opened, when the decrypted hash value matches the validation hash.

12. The method of claim 11 , wherein obtaining the set of data comprises:
obtaining the set of data from the secure element.

13. The method of claim 11 , wherein obtaining the set of data comprises:
obtaining the set of data from a bar code coupled to the product.

14. The method of claim 11 , wherein the received digital signature is encrypted using a private key associated with the product.

15. The method of claim 11 , further comprising:
retrieving the public cryptographic key from an external database.

Assignees

• Nxp Bv

Inventors

• Markel Shlomo
• Mendel Jacob

Classifications

• G09F3/0292

  tamper indicating labels · CPC title

• G09F3/0376

  using a special technique to detect tampering, e.g. by ultrasonic or optical means · CPC title

• G09F3/0335

  using RFID tags · CPC title

• G06F21/86 Primary

  Secure or tamper-resistant housings · CPC title

• G06F21/87

  by means of encapsulation, e.g. for integrated circuits · CPC title