Smart card authentication system
AssigneeGenetec Inc.
InventorPierre RACZ
Life of this patent
Estimating the term…
Abstract
Systems and methods for key card authentication are provided. The system may involve multiple simple key card readers connected to a central, local device over a shared data bus. A key card reader may receive an identifier from the key card and transmit it to a local device. The local device may generate a challenge/response pair and send it to the key card reader. The key card reader challenges the key card and determines whether the key card's response matches the expected response. The system uses minimal bandwidth on the shared data bus network.
Claims20
A key card reader comprising:
- a. a card communications interface;
- b. a network communication interface;
- c. a memory;
- and
- d. a processor operatively connected to said memory, said processor configured to:
- i. receive from said card communications interface an identifier of a key card to be authenticated,
- ii. transmit the identifier to a computing device over said network communications interface;
- iii. receive, over the network communications interface, a challenge/expected response pair specific to the key card to be authenticated, and from that pair identify a challenge and an expected response;
- iv. transmit the challenge to the key card over said card communications interface;
- v. receive a response from the key card over said card communications interface;
- vi. determine whether the response matches the expected response;
- and
- vii. issuing a signal to grant access to a guarded asset on the basis of the response matching the expected response and of an entity associated with the key card being found to have access to the guarded asset.
A key card authentication system, the system comprising:
- a. at least one key card reader;
- and
- b. a computing device, comprising information for determining a public key of a key card based on an identifier of a key card;
- c. wherein the at least one key card reader are each configured to:
- i. receive an identifier of a key card to be authenticated;
- ii. transmit, via the network communications interface, the ID of the key card to be authenticated to the computing device;
- iii. receive, via the network communications interface, a challenge/expected response pair, and from that pair identify a challenge and an expected response;
- iv. transmit the challenge to the key card;
- v. receive a response from the key card;
- and
- vi. determine whether the response matches the expected response;
- d. wherein the computing device is configured to:
- i. receive, via the network communications interface, the identifier of the key card to be authenticated;
- ii. determine a public key of the key card to be authenticated based on the identifier of the key card to be authenticated;
- iii. generate a random sequence;
- iv. encrypt the random sequence using the public key of the key card to be authenticated to generate an encrypted random sequence;
- and
- v. transmit, via the network communications interface, a challenge/expected response pair to the key card reader comprising the encrypted random sequence and the random sequence.
A method of authenticating key cards, the method comprising:
- a. receiving, at a key card reader, an identifier of a key card presented to the key card reader for authentication;
- b. transmitting, from the key card reader, the identifier to a computing device;
- c. determining, at the computing device, the public key of the key card based on the identifier;
- d. generating, at the computing device, a random sequence;
- e. generating, at the computing device, a challenge/expected response pair, the challenge comprising the random sequence encrypted using the public key, and the expected response comprising the random sequence;
- f. transmitting, from the computing device, the challenge/expected response pair to the key card reader;
- g. transmitting, from the key card reader to the key card, the challenge;
- h. receiving, at the key card reader, a response from the key card;
- and
- i. determining whether the response matches the expected response.
A backend key card security device, comprising:
- a. a non-transitory computer readable memory containing at least an identifier, a public key, and access information of a plurality of security cards in a security network;
- b. a network interface connected with a plurality of security card readers for receiving and sending information therewith;
- and
- c. a processor, configured to:
- i. receive an identifier of a security card to be authenticated from a security card reader;
- ii. determine a public key associated with the identifier stored in the memory;
- iii. generate a random sequence, the random sequence forming an expected response;
- iv. encrypt the random sequence using the public key associated with the identifier, forming a challenge;
- and
- v. send a challenge/response pair, comprising the challenge and the expected response to the security card reader.
A key card reader comprising:
- a. a card communications interface;
- b. a data interface;
- c. a memory;
- and
- d. a processor operatively connected to said memory, said processor configured to:
- i. receive from said card communications interface an identifier of a key card to be authenticated,
- ii. transmit the identifier to a computing device over said data interface;
- iii. receive, from the data interface, a certificate corresponding to said card;
- iv. generate a challenge using said certificate;
- v. send said challenge to said key card over said data interface;
- vi. receive a response from said key card;
- vii. determine whether the response corresponds to an expected response;
- and
- viii. communicate with an access controller for access control authorization when the response corresponds to the expected response.
Dependencies are inferred from the claim text.