# US 2018/0026795 A1 · Rfid secure authentication

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2018/0026795 A1
- Document ID: US20180026795A1
- Status: Published application
- Kind: A1
- Application number: 15/692,110
- Filed: 2017-08-31
- Published: 2018-01-25
- Earliest claimed: 2013-03-14
- Assignees: Covidien LP
- Applicants: Covidien LP
- Inventors: PETER F. KLAMMER; WILLIAM G. PATERSON
- Web page: https://patentgrep.com/patent/US20180026795A1

## CPC

- G06F 21/44: Program or device authentication
- G06F 21/82: Protecting input, output or interconnection devices
- G06K 19/0723: {the record carrier comprising an arrangement for non-contact communication, e.g. wireless communication circuits on transponder cards, non-contact smart cards or RFIDs}
- G07C 9/28: the pass enabling tracking or indicating presence
- H04L 9/0863: {involving passwords or one-time passwords (network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067)}
- H04L 9/3247: {involving digital signatures}
- H04L 63/06: {for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08)}
- H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)}
- H04W 12/04: Key management, e.g. using generic bootstrapping architecture [GBA]
- H04W 12/06: Authentication
- G06Q 10/08: Logistics, e.g. warehousing, loading or distribution; Inventory or stock management
- H04L 2209/80: Wireless
- Y04S 40/20: Information technology specific aspects, e.g. CAD, simulation, modelling, system security
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- G06K: GRAPHICAL DATA READING (image or video recognition or understanding G06V); PRESENTATION OF DATA; RECORD CARRIERS; HANDLING RECORD CARRIERS
- G07C: TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- Y04S: SYSTEMS INTEGRATING TECHNOLOGIES RELATED TO POWER NETWORK OPERATION, COMMUNICATION OR INFORMATION TECHNOLOGIES FOR IMPROVING THE ELECTRICAL POWER GENERATION, TRANSMISSION, DISTRIBUTION, MANAGEMENT OR USAGE, i.e. SMART GRIDS

## Abstract

Authentication systems and methods for a population of devices each associated with an RFID tag are described. For each device, a secret key is combined cryptographically with a publicly-readable unique identifier (UID) of an RFID tag to obtain a unique authorization signature. The RFID tag is prepared utilizing the unique authorization signature as memory-access and/or tag-operation password(s). The systems and methods may safeguard against attacks whereby compromise of a single tag will not compromise the entire population of devices and may reduce or eliminate the use of inappropriate surgical devices during a surgical procedure.

## Claims

### Claim at position 1

1-20. (canceled)

### Claim 21

A method of authenticating, the method comprising:
encrypting a secret key stored on a first device with a unique identification code of the first device to generate an original authentication signature at the first device;
storing the original authentication signature in a memory associated with the first device;
reading the unique identification code from the memory using a second device;
encrypting a copy of the secret key stored on the second device with the unique identification code of the first device to generate a second authentication signature at the second device;
comparing the second authentication signature to the original authentication signature; and
determining authenticity of the first device based on a comparison of the second authentication signature and the original authentication signature.

### Claim 22 (depends on 21)

The method according to claim 21, wherein the original authentication signature and the second authentication signature are generated by performing a hash function on the secret key stored in the memory or the copy of the secret key stored at the second device, respectively, and the unique identification code of the first device.

### Claim 23 (depends on 22)

The method according to claim 22, wherein the hash function is selected from the group consisting of an SHA-1 function, an SHA-1 HMAC function, an SHA-2 function, and an MD5 function.

### Claim 24 (depends on 21)

The method according to claim 21, wherein the original authentication signature and the second authentication signature are generated by:
concatenating the unique identification code of the first device and the secret key stored in the memory or the copy of the secret key stored at the second device to create a bitstring; and
performing a hash function on the bitstring.

### Claim 25 (depends on 24)

The method according to claim 24, wherein the hash function is selected from the group consisting of an SHA-1 function, an SHA-1 HMAC function, an SHA-2 function, and an MD5 function.

### Claim 26 (depends on 21)

The method according to claim 21, further comprising:
dividing the original authentication signature into a plurality of bitstrings; and
performing an XOR operation on a first bitstring of the plurality of bitstrings and on a second bitstring of the plurality of bitstrings to obtain an intermediate signature.

### Claim 27 (depends on 26)

The method according to claim 26, further comprising:
performing an XOR operation on the intermediate signature and on a third bitstring of the plurality of bitstrings.

### Claim 28 (depends on 21)

The method according to claim 21, wherein determining authenticity of the first device further includes performing at least one of a read function, a write function, or a read-write function on the memory by the second device.

### Claim 29

An apparatus, comprising:
a first memory storing a unique identifier and a password; and
a preparation unit including:
a communication module configured to communicate with the first memory;
a second memory configured to store a secret key;
a processor coupled to the second memory and the communication module, the processor configured to:
read the unique identifier from the first memory;
encrypt the secret key with the unique identifier to generate an authentication signature; and
store the authentication signature as the password in the first memory.

### Claim 30 (depends on 29)

The apparatus according to claim 29, wherein the processor is further configured to output a verification status in response to a match between a proffered password and the password stored in the first memory.

### Claim 31 (depends on 30)

The apparatus according to claim 30, wherein the first memory includes an RFID tag.

### Claim 32 (depends on 31)

The apparatus according to claim 31, wherein the processor is further configured to enable at least one of a read operation or a write operation on the first memory in response to a match between a proffered password and the password stored in the first memory.

### Claim 33 (depends on 32)

The apparatus according to claim 32, wherein the processor is further configured to initialize a data structure in response to a match between a proffered password and the password stored in the first memory.

### Claim 34 (depends on 33)

The apparatus according to claim 33, wherein the data structure is further configured to store one or more datum selected from the group consisting of a usage count, a manufacturing date, a manufacturer serial number, an expiration date, calibration data, usage data, certification data, and an operational limit parameter.

### Claim 35 (depends on 29)

The apparatus according to claim 29, wherein the processor is further configured to generate the authentication signature based on a cryptographic hash of the secret key and the unique identifier.

### Claim 36 (depends on 35)

The apparatus according to claim 35, wherein the cryptographic hash is selected from the group consisting of an MD5 hash, an SHA-1 hash, an SHA-1 HMAC function, and an SHA-2 hash.

### Claim 37

A system for authenticating a surgical instrument, the system comprising:
a surgical instrument including:
a first memory configured to store a unique identifier; and
a password module configured to store a password; and
an authentication unit, including:
a communication module configured to communicate with the first memory;
a second memory configured to store a secret key;
a processor coupled to the second memory and the communication module, the processor configured to:
read the unique identifier from the first memory;
encrypt the secret key with the unique identifier to generate an authentication signature;
transmit the authentication signature to the password module; and
receive a verification status from the password module in response to the authentication signature matching the password.

### Claim 38 (depends on 37)

The system according to claim 37, further comprising an electrosurgical generator operably coupled to the authentication unit.

### Claim 39 (depends on 38)

The system according to claim 38, wherein the electrosurgical generator is configured to enable an operational mode in response to the verification status.

### Claim 40 (depends on 39)

The system according to claim 39, wherein the first memory is further configured to store data and the authentication unit is configured to modify the data stored in the first memory.