Method and apparatus for information carrier authentication

A non-transitory information carrier, the information carrier comprising:

• an at least formerly writeable part comprising stored information, and
• a physical token arranged to supply a response upon receiving a challenge through interaction between the physical token and the challenge, the physical token being a physical unclonable function (PUF), the information carrier comprises in the at least formerly writeable part a signed authentication data generated according to a method of enabling an information carrier for a future authentication performed separately from said method of enabling, the method comprising acts of:
• applying a first challenge to the physical token resulting in a first response, the physical token supplying the first response upon receiving the first challenge,
• forming a first authentication data based on information derived from the first response data, signing the first authentication data for use in the subsequent authentication in which the physical token is challenged again using the first challenge to detect a response, and
• writing the signed authentication data in the at least formerly writeable part of the information carrier, thereby keeping the signed authentication data required for the future authentication local to the information carrier that comprises the at least formerly writeable part.

A non-transitory computer readable medium comprising program code stored on the computer readable medium for performing a method of enabling an information carrier for a future authentication performed separately from said method of enabling when said program code is executed on a computer, the method comprising acts of:

• applying a first challenge to a physical token resulting in a first response, the physical token supplying the first response upon receiving the first challenge, the physical token being a physical unclonable function (PUF),
• forming a first authentication data based on information derived from the first response data for use in the subsequent authentication in which the physical token is challenged again using the first challenge to detect a response,
• signing the first authentication data, and
• writing the signed authentication data in a writeable part of the information carrier, thereby keeping the signed authentication data required for the future authentication local to the information carrier that comprises the writeable part.

An apparatus for enabling a non-transitory information carrier for a future authentication performed separately from said method of enabling, the information carrier comprising a writeable part and a physical token, the physical token being arranged to supply a response upon receiving a challenge through interaction between the physical token and the challenge, the physical token being a physical unclonable function (PUF), the apparatus comprising a processor configured to:

• apply a first challenge to the physical token resulting in a first response, the physical token supplying the first response upon receiving the first challenge,
• form a first authentication data based on information derived from the first response data for use in the subsequent authentication in which the physical token is challenged again using the first challenge to detect a response,
• sign the first authentication data, and
• write the signed authentication data in the writeable part of the information carrier, thereby keeping the signed authentication data required for the future authentication local to the information carrier that comprises the writeable part.