Secure transaction systems and methods
AssigneeIntertrust Technologies Corporation
InventorsDavid P. Maher, Pierre Chavanne, Yutaka Nagao, Michael Manente
Life of this patent
Estimating the term…
Abstract
Systems and methods are described that use tag authentication and presence verification techniques in connection with a variety of transactions. In certain embodiments, an authentication device may verify the authenticity of a secure tag by determining whether the secure tag stores secret information provisioned by a trusted authority. In some embodiments, such an authentication process may be performed without exposing the secret information to the authentication device, thereby maintaining integrity of the secure tag. In other embodiments, insecure tags and/or tags that do not include secret information are used.
Claims12
A method performed by a trusted system comprising a processor and a non-transitory computer-readable storage medium storing instructions that, when executed, cause the system to perform the method, the method comprising:
- receiving, at an interface of the trusted system from an authentication device, a first challenge response generated by a secure tag, the first challenge response comprising a unique identifier associated with the secure tag;
- retrieving secret information stored by the trusted system based on the unique identifier included in the first challenge response;
- generating, based on challenge information and the retrieved secret information, a second challenge response;
- comparing the first challenge response with the second challenge response;
- determining that the first challenge response and the second challenge response match;
- determining that the challenge information was generated within a particular time period;
- retrieving, via the interface of the trusted system from a remote system separate from the trusted system, based on determining that the first challenge response and the second challenge response match and that the challenge information was generated within the particular time period and using the unique identifier included in the first challenge response, product information associated with the unique identifier from a product information database managed by the remote system;
- and
- sending, via the interface of the trusted system to the authentication device, a response authenticating the secure tag that comprises the product information retrieved by the trusted system.
Dependencies are inferred from the claim text.