Patent ID: 9118643
Filing Date: 2015-08-25
Classification: G06F,G06Q,G07F,H04L

Abstract:
1. A method for authenticating at least one token, included in an RFID tag, using a challenge-response protocol and protecting integrity of data in the at least one token, using a symmetrical key, comprising: generating a challenge by a verifying entity; transmitting the challenge to the at least one token at a first time; determining a response by the at least one token based on the challenge and a secret key assigned to the at least one token; deriving, by the at least one token, a symmetrical key from the response, using a key derivation function; determining, by the at least one token, a data integrity checksum from the data and the symmetrical key; checking, by the verifying entity, whether the data integrity checksum is received from the at least one token within a first checking time window and the response is received from the at least one token within a second checking time window; and authenticating, at the verifying entity, the at least one token and verifying data integrity based on the data integrity checksum, the response, and whether the data integrity checksum is received in the first checking time window and the response is received in the second checking time window; wherein the first checking time window begins at a first predetermined offset later than the first time and has a first predetermined duration; and wherein the second checking time window begins at a second predetermined offset later than an end of the first checking time window and has a second predetermined duration.