Back to results
US 12,572,704 B2Granted
Smart card authentication system
OwnerPierre Raczinventor
Life of this patent
Estimating the term…
Abstract
Systems and methods for key card authentication are provided. The system may involve multiple simple key card readers connected to a central, local device over a shared data bus. A key card reader may receive an identifier from the key card and transmit it to a local device. The local device may generate a challenge/response pair and send it to the key card reader. The key card reader challenges the key card and determines whether the key card's response matches the expected response. The system uses minimal bandwidth on the shared data bus network.
Claims20
A key card reader comprising:
- a. a card communications interface;
- b. a network communication interface;
- c. a memory;
- and
- d. a processor operatively connected to said memory, said processor configured to:
- i. receive from said card communications interface an identifier of a key card to be authenticated;
- ii. transmit the identifier to a local device over said network communications interface;
- iii. receive, over the network communications interface, a challenge/expected response pair specific to the key card to be authenticated, and from that pair identify a challenge and an expected response;
- iv. transmit the challenge to the key card over said card communications interface;
- v. receive a response from the key card over said card communications interface;
- vi. determine whether the response corresponds to the expected response;
- and
- vii. sending a signal to an actuator to grant access to a guarded asset on the basis of the response being equal/equivalent/corresponding to the expected response and of an entity associated with the key card being found to have access to the guarded asset.
10 more elements
A key card authentication system, the system comprising:
- a. at least one key card reader;
- and
- b. a local device, comprising information for determining a public key of a key card based on an identifier of a key card;
- c. wherein the at least one key card reader are each configured to:
- i. receive an identifier of a key card to be authenticated;
- ii. transmit, via the network communications interface, the ID of the key card to be authenticated to a local device;
- iii. receive, via network communications interface, a challenge/expected response pair, and from that pair identify a challenge and an expected response;
- iv. transmit the challenge to the key card;
- v. receive a response from the key card;
- and
- vi. determine whether the response is equal to the expected response;
- d. wherein the local device is configured to:
- i. receive, via the network communications interface, the identifier of the key card to be authenticated;
- ii. determine a public key of the key card to be authenticated based on the ID of the key card to be authenticated;
- iii. generate a random sequence;
- iv. encrypt the random sequence, generating an encrypted random sequence, using the public key of the key card to be authenticated to generate a challenge;
- and
- v. transmit, via the network communications interface, a challenge/expected response pair to the key card reader, wherein the challenge is the encrypted random sequence and the expected response is the random sequence;
- e. wherein the identifier of a key card is significantly smaller in size than the public key of a key card.
16 more elements
A method of authenticating key cards, the method comprising:
- a. receiving, at a key card reader, an identifier of a key card presented to the key card reader for authentication;
- b. transmitting, from the key card reader, the identifier to a local device;
- c. determining, at the local device, the public key of the key card based on the identifier;
- d. generating, at the local device, a random sequence;
- e. generating, at the local device, a challenge/expected response pair, the challenge being the random sequence encrypted using the public key, and the expected response being the random sequence;
- f. transmitting, from the local device, the challenge/expected response pair to the key card reader;
- g. transmitting, from the key card reader to the key card, the challenge;
- h. receiving, at the key card reader, a response from the key card;
- and
- i. determining whether the response matches the expected response.
7 more elements
A backend key card security device, comprising:
- a. a memory containing at least identifier, public key, private key and access information of all security cards in a security network;
- b. a network interface connected for receiving and sending information from and to a number of security card readers;
- and
- c. a processor, configured to:
- i. receive an identifier of a security card to be authenticated from a security card reader;
- ii. determine a public key associated with the identifier stored in the memory;
- iii. generate a random sequence, the random sequence forming an expected response;
- iv. encrypt the random sequence using the public key associated with the identifier, forming a challenge, the challenge and expected response forming a challenge/response pair;
- and
- v. send the challenge/response pair, as one communication, to the security card reader.
7 more elements
A key card reader comprising:
- a. a card communications interface;
- b. a data interface;
- c. a memory;
- and
- d. a processor operatively connected to said memory, said processor configured to:
- i. receive from said card communications interface an identifier of a key card to be authenticated;
- ii. transmit the identifier to a local device over said data interface;
- iii. receive, from the data interface, a certificate corresponding to said card;
- iv. prepare a challenge using said certificate;
- v. send said challenge to said key card over said data interface;
- vi. receive a response from said key card;
- vii. determine whether the response corresponds to an expected response;
- and
- viii. communicate with an access controller for access control authorization when the response corresponds to the expected response.
11 more elements
Dependencies are inferred from the claim text.