Back to results
US 9,312,926 B2Granted
System and method for NFC peer-to-peer authentication and secure data transfer
AssigneeSchlage Lock Company LLC
InventorsJeffrey Scott Neafsey, Michael William Malone, Hamid Abouhashem
Life of this patent
Estimating the term…
Abstract
A reader device may generate a first identifier. The reader device may transmit the first identifier to a mobile device. The reader device may receive encrypted data and unencrypted data from the mobile device in which the encrypted data includes a second identifier. The reader device may evaluate whether the first identifier and the second identifier correspond to one another.
Claims20
A method, comprising:
- generating a first identifier with a reader device;
- transmitting the first identifier to a mobile device, wherein the first identifier is appended to a uniform resource identifier;
- receiving, with the mobile device, an encrypted package from a server that is identified by the uniform resource identifier;
- encrypting, with the mobile device, a credential extracted from the encrypted package received from the server, wherein the credential is encrypted by the mobile device with the first identifier and with a second identifier that is unique to the mobile device, wherein the credential is a unique diversified credential that is diversified using a DESFire EV1 method and includes a diversified master key based on the second identifier unique to the mobile device;
- receiving, with the reader device, the encrypted data and unencrypted data from the mobile device, wherein the encrypted data and the unencrypted data each include at least the second identifier that identifies the mobile device;
- and
- evaluating, with the reader device, whether the first identifier in the encrypted data corresponds to the first identifier transmitted to the mobile device and whether the second identifier in the unencrypted data corresponds to the second identifier in the encrypted data.
4 more elements
A method, comprising:
- receiving, with a smartphone, an encrypted package from a server;
- extracting, with the smartphone, a credential from the encrypted package, wherein the credential is a unique diversified credential that is diversified using a DESFire EV1 method and includes a diversified master key based on a unique identifier of the smartphone;
- storing the credential in a memory of the smartphone;
- receiving, with the smartphone, a first identifier from a reader device;
- generating, with the smartphone, a payload including the first identifier, the credential, and a second identifier that identifies the smartphone, wherein the second identifier corresponds to the unique identifier of the smartphone;
- encrypting the payload including the first identifier, the credential and the second identifier with the smartphone;
- and
- transmitting, with the smartphone, the encrypted payload and an unencrypted one of the second identifier to the reader device.
5 more elements
A system, comprising:
- a server configured with non-transitory computer executable instructions to generate a credential and generate an encrypted package that includes the credential;
- a reader device configured with non-transitory computer executable instructions to generate a session identifier and append the session identifier to a uniform resource identifier;
- and
- a mobile device configured with non-transitory computer executable instructions to receive the session identifier and the uniform resource identifier from the reader device to communicate with the server and to receive the encrypted package from the server, extract the credential from the package, store the credential in a memory of the smartphone that is not a secure element, generate an encrypted payload including the session identifier and the credential along with a unique device identifier for the mobile device, and transmit the encrypted payload to the reader device with an unencrypted one of the unique device identifier, wherein the credential is a unique diversified credential that is diversified using a DESFire EV1 method and includes a diversified master key based on the unique device identifier for the mobile device.
1 more element
Dependencies are inferred from the claim text.