Cryptographic communication with mobile devices
AssigneeSecureALL Corporation
InventorMichael Wurm
Life of this patent
Estimating the term…
Loading patent…
AssigneeSecureALL Corporation
InventorMichael Wurm
Estimating the term…
A mobile device (110), e.g. a token, holds a current key and one or more previous (expired) keys in memory (130). If the token needs to communicate with another device (144), e.g. with a reader, and the reader does not have the current key but has a previous key, the token encrypts the current key with the previous key and sends the ciphertext to the reader, which decrypts the current key. The token use different cryptographic material for communication with respective different facilities. Rather than requesting the reader to identify the facility, the token assumes that the facility is the same as in the most recent successful authentication. If the authentication fails, only then the token requests the reader to identify the facility. Authentication time and electric power are saved if the facility is the same. Other embodiments are also provided.
A method comprising a first apparatus performing communication operations to communicate with a second apparatus to establish a communication key which is a shared key for communication between the first apparatus and the second apparatus, the first apparatus being a mobile apparatus, wherein a shared key can be generated as being associated with any one of a set of keys available at the mobile apparatus, (wherein the shared key and its associated key may or may not be equal to each other), the set of keys including a current key and one or more previous keys, all said keys being secret keys, said communication operations comprising:
A mobile apparatus operable to perform as a first apparatus in a method comprising:
A method comprising a second apparatus performing operations for establishing a communication key which is a shared key for communication between a first apparatus and the second apparatus, the first apparatus being a mobile apparatus, wherein a shared key can be generated as being associated with any one of a plurality of keys available at the mobile apparatus, (wherein the shared key and its associated key may or may not be equal to each other), the plurality of keys including a current key and one or more previous keys, all said keys being secret keys, wherein the operations for establishing the communication key comprise:
A second apparatus operable to perform a method comprising:
A method comprising a second apparatus performing operations for establishing a communication key which is a shared key for communication between a first apparatus and the second apparatus, the first apparatus being a mobile apparatus, wherein a shared key can be generated as being associated with any one of a plurality of keys available at the mobile apparatus, (wherein the shared key and its associated key may or may not be equal to each other), the plurality of keys including a current key and one or more previous keys, all said keys being secret keys, wherein the operations for establishing the communication key comprise:
A second apparatus operable to perform a method comprising:
A method comprising a first apparatus conducting communication with a second apparatus which is one of a plurality of apparatuses each of which belongs to at least one facility, the communication comprising cryptographic communication, the first apparatus being a mobile apparatus, wherein the mobile apparatus stores a plurality of sets of cryptographic data which are associated with respective facilities, each facility comprising one or more of the apparatuses of the plurality of apparatuses, different sets being associated with different facilities, each set being for use in cryptographic communication with the associated facility, wherein each set and its associated facility are associated with one or more possible error conditions at least one of which is an indication that the mobile apparatus may be communicating with a facility different from the associated facility,
A mobile apparatus operable to perform as a first apparatus in a method comprising:
Dependencies are inferred from the claim text.