Method of mutual authentication between a radio tag and a reader
AssigneeOrange
InventorsMatthew Robshaw, Loïc Ferreira
Life of this patent
Estimating the term…
Abstract
A method of mutual authentication between a radio tag and a radio reader. The method includes: authentication of the tag by the reader, implemented on a first communication channel, during which a first authentication coupon and a first authentication response are transmitted from the tag to the reader; toggling from the first communication channel to a second communication channel, different from the first channel, on which there is implemented a phase of authentication of the reader by the tag; and dispatching from the reader to the tag of a second authentication coupon and of a second authentication response which are intended to authenticate the reader. The second authentication coupon is transmitted on the first communication channel.
Claims19
A method comprising:
- mutual authentication between a radio tag and a radio reader, comprising the following acts, implemented by the radio tag:
- dispatching to the radio reader a first authentication coupon,
- receiving, from the reader, a second authentication coupon, said second coupon being received after the dispatching of the first authentication coupon,
- dispatching a first authentication response, the first authentication response being computed on the basis of a first challenge, computed on the basis of the second authentication coupon,
- receiving, from the reader, a second authentication response, the second authentication response being computed by the reader on the basis of a second challenge, computed on the basis of the first authentication response.
A method comprising:
- mutual authentication between a reader and a radio tag, comprising the following acts, implemented by the reader:
- receiving, from the tag, a first authentication coupon,
- dispatching to the tag, a second authentication coupon, said second coupon being dispatched after the receipt of the first authentication coupon,
- receiving, from the tag, a first authentication response, the first authentication response being computed by the tag on the basis of a first challenge, obtained on the basis of the second authentication coupon,
- dispatching to the tag a second authentication response, the second authentication response being computed on the basis of a second challenge, obtained on the basis of the first authentication response.
A radio reader designed to authenticate itself with at least one radio tag and to authenticate the tag, and comprising:
- reception means for receiving a first authentication coupon and a first authentication response
- first dispatching means for dispatching a second authentication coupon,
- second dispatching means for dispatching a second authentication response, the second authentication response being computed on the basis of a second challenge, obtained on the basis of the first authentication response, and
- verification means for verifying that the first authentication coupon is equal to a value computed on the basis of the first authentication response.
A radio tag suitable for authenticating a radio reader and for authenticating itself with the reader, and comprising:
- dispatching means for dispatching a first authentication coupon and a first authentication response, the first authentication response being computed on the basis of a first challenge, obtained on the basis of a second authentication coupon received from the reader,
- first reception means for receiving the second authentication coupon,
- second reception means for receiving a second authentication response, and
- verification means for verifying that the second authentication token is equal to a value computed on the basis of the second authentication response.
A non-transitory computer-readable data medium comprising a computer program stored thereon and comprising instructions for implementing a method of mutual authentication of a radio tag and of a reader which is executed by the reader, when the program is executed by a processor, the method comprising:
- receiving, from the tag, a first authentication coupon,
- dispatching to the tag, a second authentication coupon, said second coupon being dispatched after the receipt of the first authentication coupon,
- receiving, from the tag, a first authentication response, the first authentication response being computed by the tag on the basis of a first challenge, obtained on the basis of the second authentication coupon,
- dispatching to the tag a second authentication response, the second authentication response being computed on the basis of a second challenge, obtained on the basis of the first authentication response.
Dependencies are inferred from the claim text.