WO2020108813A1

WO2020108813A1 - Nfc communication system and nfc carrier unit

Info

Publication number: WO2020108813A1
Application number: PCT/EP2019/073009
Authority: WO
Inventors: Winrich Hoseit
Original assignee: Winrich Hoseit
Priority date: 2018-11-30
Filing date: 2019-08-28
Publication date: 2020-06-04
Also published as: EP3887983A1; DE202018005686U1

Abstract

The invention relates to an NFC communication system, having a carrier unit (1), in particular in the form of a chip card, wherein the carrier unit (1) contains an (NFC) induction coil (2) for picking up the transmitted energy of a reader (9), a controller (3), a capacitor for storing and delivering the energy picked up to the controller (3) for the purpose of bidirectional communication with the reader (9) and a memory (4) containing confidential information, in particular PINs, access codes, passwords, wherein the confidential information can be retrieved again or changed or erased only by using a reading or programming unit (9) explicitly coupled to it, in particular a smartphone having an IMEI address and/or the device-specific MAC address, by inputting or retrieving individual or multiple predefined items of information for the authentication, such as freely user-programmable and scalable alphanumeric codes, fingerprints, face recognition, voice recognition, and the like.

Description

NFC communication system and NFC carrier unit

This invention relates to an NFC communication system and an NFC carrier unit. The NFC carrier unit is used for the short-term but secure reading of several PINs (personal identification numbers) using only a single, self-assigned alphanumeric input sequence as a master PIN. Nowadays, access codes, i.e. PINs, are used for many applications

For example, online banking, bank cards, credit cards, customer access, computer access, smartphone access, application access, internet and

Allocate database access etc. The large number of such PINs, access codes, passwords, etc. are difficult to remember for many users due to their large number, especially if they are used less frequently.

The contractual partners of the users, with whom such a PIN is agreed, usually stipulate in your terms of use that these PINs (codes) should be locked in a safe place and kept safe from access by third parties, should not write them down separately or even on a piece of paper in your wallet, yes you run the risk of not being compensated for improperly caused damage if the PIN is not secured

conditionally.

A smart card with an integrated processor for encryption is known from WO2019 / 020824 A1. Part of a private key is stored in a memory of the card and can be used with a locally stored separate key for the digital signature of transactions in cryptocurrency. Thanks to the smart card with crypto processor, requests can be made to the card in order to receive the contained part of the private key with an access password. Cryptography operations run on the SmartCard. This can be used by any smart card reader, provided the second half of the key is available. Only half the key is stored on the smart card, and the memory can can be read by any smart card reader. The second half of the key is required for further use.

The invention is based on the object of improving the NFC communication system and an NFC carrier unit.

The object is now achieved by an NFC communication system and an NFC carrier unit in accordance with the independent claims.

The NFC communication system according to the invention has a carrier unit, in particular in the form of a chip card, the carrier unit having an NFC induction coil for receiving the transmission energy of a reading device

Controller, a capacitor for storing and delivering the absorbed energy to the controller for bidirectional communication with the reading device and a memory with confidential information, in particular PINs,

Contains access codes, passwords, the confidential information only via a reading or programming unit that is uniquely coupled to it, in particular a smartphone with an IMEI address and / or the device-specific MAC address, by entering or calling up one or more predefined authentication information items how freely programmable and scalable by the user

alphanumeric codes, fingerprints, face recognition, speech recognition, etc. can be retrieved or changed or deleted.

The NFC carrier unit according to the invention has an NFC induction coil for receiving the transmission energy of a reading device, a controller

Capacitor for storing and delivering the absorbed energy to the controller for bidirectional communication with the reader as well as a

Memory with confidential information, especially PINs, access codes,

Passwords, with the confidential information only via a reading or programming unit that is clearly linked to it, in particular a smartphone with an IMEI address and / or the device-specific MAC address, by entering or calling up one or more predefined authentication information, such as freely programmable and scalable alphanumeric codes,

Fingerprints, face recognition, speech recognition, etc. retrieved or can be changed or deleted. The NFC carrier unit is also referred to below as a card, pin-safe card.

The invention described here now allows all PINs, access codes and passwords to be collected in such a way that they cannot be read by third parties, but nevertheless in cooperation with e.g. a specific smartphone or another specific NFC readout system are available to the user on demand. The NFC carrier unit contains confidential information such as PINs, access codes, passwords, which can be called up individually according to scalable authorization queries, such as a master pin, a fingerprint, a recognized face or one

Speech sequence is possible.

The reading and programming unit is coupled to the carrier unit by entering a master PIN and then retrieves the confidential information located in the carrier unit and shows the information, if all

Authentication requirements of the carrier unit are met.

The reading and programming unit, in particular a smartphone or a computer, is coupled to the carrier unit by entering a master PIN, a fingerprint recognized as correct, a face recognized as correct, a speech content recognized as correct or the language itself or by entering this Features scaled individually or in any combination defined by the user, the reading and programming unit retrieving and displaying the confidential information located in the carrier unit.

An IMSI and / or MAC address or other device-specific

The identification number of the reading device, in particular the smartphone, or a combination thereof is / are compared via an app belonging to the reading device, so that the list of the readers only appears on the display of the reading device

Confidential PIN's appear when this reader issues the output

"Requests" and the PUK was entered in the reader before displaying. In the event of multiple incorrect authentication entries, the carrier unit blocks further access to the confidential information temporarily or completely and can only be reactivated against a higher-level PUK assigned by the user.

The NFC carrier unit can be designed in the form of a bank or credit card and can preferably also be used as an advertising medium. The NFC carrier unit can itself be a functional bank card or credit card, on which this way of reading out several PINs is coupled with an authorized one

Reader is possible.

The invention described here allows a large number of different PINs, access codes or passwords with only a single self-assigned number or letter code sequence but also in combination or only with one

Fingerprint as well as in a further combination with or only with one

Face recognition alone or any combination of these, selected shortly before using these PINs, access codes or

Access passwords, provided that authentication was previously carried out via the smartphone (camera, fingerprint, key code) coupled to this PIN safe or another paired reading device.

According to the invention, the carrier of this information and the comparison processes can themselves e.g. The size of a bank card can also be another device or a so-called "wearable" and can permanently do without its own power source.

The invention presented here preferably describes e.g. a (plastic) card in the form of a bank card in which an NFC chip with a programmable controller and memory is integrated.

Passive NFC chips are known from the prior art, which do not require their own power supply and consist of a microchip, a capacitor and an antenna, usually in the form of a metal coil. In addition, in the case of writable variants, there is currently a memory of up to four megabytes in size. In particular, this device or card memory is programmed for the first time via an interface to a smartphone or computer in such a way that, after completion of the first programming, it can only be used again via a self-assigned PUK, also in connection with the comparison of a finder print or

Facial comparison of the smartphone or the first time connected to the device or card paired for the first time, opened and

can be reprogrammed.

The first programming of the device described here (PIN safe card) requires in addition to the PUK input in particular e.g. also the IMSI as well as the MAC address of the smartphone or another device-specific identification number or combination of the computer system connected for the first time or the

connected and coupled computer systems (smartphone / computer) and a list of all PINs, access codes and passwords to which you want to establish secure access via your initially connected smartphone or other authenticated access device.

According to the invention, PIN or PINs are also understood here to mean other access codes and passwords and other combinations of these and other numerical or alphanumeric codes or combinations thereof.

According to the invention, a smartphone is selected as the NFC reading device, whose IMSI and / or MAC address or another device-specific identification number or combination thereof is compared using an app belonging to the reading device, so that, according to the invention, the list of confidential PINs is displayed on the smartphone only appear when this reader is output

"Requests" and the PUK was entered in the smartphone before displaying.

NFC systems - as they are used in most smartphones today, generate an electromagnetic (13.56 MHz) alternating field if the passive chip programmed according to the invention as described here is contained in the carrier unit (card) described here whose immediate vicinity holds. The antenna of the NFC unit in this invention takes the High-frequency energy from the NFC transmitter unit of the smartphone, buffers this energy in a capacitor, for example, and supplies the microchip in the card with current for comparison with the calling smartphone

and then transfer the data to the smartphone when the

Security questions have all been answered successfully.

This coil excitation by the NFC device in the smartphone is sufficient to transmit, read and exchange data such as the chip serial number (ID), system commands, text and small images.

According to the invention, however, the programming can also be carried out using another authorized NFC device, that is to say also the smartphone. The secured PINs can be supplemented by information that is then displayed together with the PIN, such as Master Card cash withdrawal: 40934 Volksbank-Online Banking: access code 0815 password 471 1 Commerzbank Cologne: 45672 1 & 1 web hosting: access code: w.muster@man.de password: gypsy etc.

The device described here can also be programmed, in particular, via a contact surface or plug connection.

According to the prior art, RFID solutions and NFC solutions are known which can carry out both reading and writing processes of data content and corresponding authorization checks before the data is output. In the expansion of such authorization tests, preference is given to one-offs

Device IDs in conjunction with a master code (PUK) and master PIN are used to read specially protected data content.

This invention has the advantage that very particularly sensitive and valuable data, such as in particular PINs, access codes and passwords of several other devices or applications in a device / card according to the invention described here, by reading out several test parameters connected in series (master PIN, MAC address of the Reader, IMSI of the chip of the mobile phone provider in the smartphone, fingerprint, face) in any one

Sequence can be combined, as dictated by the user's need for security. This invention also has the advantage that the display of sensitive data, although scalable with a high level of security that can be set by the user, is almost impossible to make visible to third parties, but the handling for the user is nevertheless made as simple as possible. The system described here consists of the following components, for example:

There are now a multitude of possibilities for designing and developing the invention. For this may be subordinate to protection claim 1

Protection claims are referred. A preferred embodiment is now explained in more detail by way of example with reference to the drawing and the associated description. The drawing shows:

1 is a schematic representation of the carrier of the confidential information (PIN, access code, password, etc.)

Fig. 2 is a schematic representation of the coupled programming and

Reading device for confidential information (smartphone) with the associated software (application) for managing the security levels and the data content to be protected.

The storage device 1 described here in the form of e.g. a plastic bank or credit card has components such as an (NFC) induction coil for receiving the transmission energy of the reading device 9, a capacitor for storing and delivering the absorbed energy to the controller 3 for bidirectional communication with the reading device 9 e.g. a smartphone, as well as a data memory 4 in which the data contents to be particularly protected, such as PINs, access codes and

Passwords and their names, for which they are used, are also stored in encrypted form.

Furthermore, the system consists of a reader 9, each with a unique device address (MAC address) and a unique IMSI identifier, which also has an (NFC) coil 2 for bidirectional communication. Furthermore, this reading device 9 contains, controlled and called via its own application, a keypad 6 for entering the master pin, or the master PUK, as well as a display 5 for displaying the data contents stored in encrypted form in the memory 4, which are only shown when all individually scalable test values match, in particular the authentication via the Keypad 6 entered master pin also in connection with the recognized as correct

Fingerprint, input via the fingerprint sensor 8 but also in connection with the face shape recognized as correct by the camera 7.

With the functions on which this invention is based, several other PINs, access codes and passwords are displayed on a coupled reading device (smartphone) with either only one master pin, the user being free to generate this master pin himself but also dependent on further test criteria can do like fingerprint and face recognition under

Under certain circumstances, even via voice recognition of keywords.

When using the PINSAFE card (1) for the first time, the PIN-SAFE app is installed on the reader (9) or smartphone. After installation, the PINSAFE card is placed under the smartphone. A self-selected master PIN is assigned in the coupling process. Now, for example, up to 50 confidential short data can be managed in the PINSAFE card's chip safe.

The PIN-SAFE app allows the security level to be increased even further:

- Face recognition

- fingerprint

- Voice recognition

can be used in any order in the future before displaying the confidential data.

Another PIN-SAFE card (1) can be created as a backup.

The combination of the user PIN with the worldwide unique ID of the device (IMEI: ^* # 06 #) and a random number generates a key that ensures maximum security. PIN-SAFE card (1) is an offline data storage device. The data is physically on the PIN-SAFE card. Only coupled with the IMEI one at a time

Smartphones (9) by entering a self-generated master pin, confidential short data is stored on only this one PIN-SAFE card or a backup card and is only shown on the display (5) of one smartphone (9) of a user and only if the PIN-SAFE card is held under the paired smartphone.

The PIN-SAFE card (1) fulfills the requirements as an NFC-OFFLINE data memory

Security requirements of the Federal Office for Security in the

Information technology (BSI guideline: TR-02102-1). The administration of the

Confidential and personal short data is carried out via the free PIN-SAFE-APP. An NFC-compatible smartphone (9) is required. A lOS solution for APPLE smartphones is possible. As long as APPLE does not yet allow the writing of NFC cards, the IOS PIN SAFE card will be delivered with a USB / BlueTooth writing device; reading the data is already possible.

The PIN-SAFE card (l) has a total memory of 868 bytes and, after being encoded with a net of 800 bytes, can store approx. 50 confidential secret numbers and passwords and their associated names (16 bytes on average each); This data is conveniently and clearly displayed and managed using the PINSAFE APP.

During processing, all data is visible for the duration that the PIN-SAFE-APP is active and is only available for a limited time in the volatile memory of the

Smartphones displayed how the PIN-SAFE-APP is opened. The data is stored exclusively and only encrypted on the PIN-SAFE card; the APP prompts you to connect the card.

The encryption takes place via a 3-factor AES256 coding. Illustrated this means: If all the inhabitants of the world, equipped with 1,000 computers each, which can analyze 1 million data per second, tried to decode the above coding, the next 4.5 billion years (assumed remaining life of the earth) would not enough to decode even half of this encryption. The PIN-SAFE card (1) has the format of a bank card and therefore fits perfectly into the wallet that usually also contains bank and credit cards. At the ATM or in front of the PC, the user only places the PIN-SAFE card under their paired smartphone (9) and after entering the PIN-SAFE-PIN they have created, all confidential short data only appear on the display of this one smartphone. A protective cover for the card is not required.

A back-up copy helps against the loss of the PIN-SAFE card (1); this copy can be kept open as it cannot be shared by third parties without the linked one

Smartphone (9) and can be read without the self-created and associated PIN.

If the user changes his smartphone, the PIN-SAFE card (1) can be transferred to the new smartphone (9) with the IMEI of the old smartphone (9) within a defined time window to the new IMEI of the new smartphone (9). This requires the PIN that you have assigned yourself.

If the smartphone (9) and wallet are lost at the same time, the last hurdle is still protecting the PIN SAFE PIN generated by the user from misuse.

Instead of entrusting the data to a piece of paper or a program memory that can be addressed ONLINE, the PIN-SAFE-OFFLINE memory protects not only because it is OFFLINE, but also because the data is only linked to the one that is linked by the user Smartphone (9) are visible in a short time window with the individual PIN. Reference symbol list

1 carrier unit (card) with confidential information (PIN, access code, password, etc.)

2 NFC coil

3 controller chip

4 memory (chip) with the confidential information

5 Display of the reading device (smartphone)

6 Input keyboard of the reading device (smartphone)

7 camera of the reading device (smartphone)

8 fingerprint readers

9 paired reader (smartphone)

Definitions:

PIN = personal identification number

PUK = personal unblocking key NFC = Near Field Communication

IMSI = International Mobile Subscriber Identity

MAC address = Media Access Controll address (Hardware ID) ID = identification code

RFID = Radio Frequency Identification

Claims

1 . NFC communication system, with a carrier unit (1), in particular in the form of a chip card, the carrier unit (1) having an (NFC) induction coil (2) for receiving the transmission energy of a reading device (9), a controller (3) , a capacitor for storing and delivering the absorbed energy to the controller (3) for bidirectional communication with the reading device (9) and a memory (4) containing confidential information, in particular PINs, access codes, passwords, the confidential information being only via a to it a clearly coupled reading or programming unit (9), in particular a

Smartphone with an IMEI address and / or the device-specific MAC address, by entering or calling up one or more pre-defined authentication information, such as freely programmable and scalable by the user

2. NFC communication system, with a carrier unit (1) according to claim 1, characterized in that it contains confidential information such as PINs,

Contains access codes, passwords, which can be called up individually according to scalable authorization queries, such as a master pin, a fingerprint, a recognized face or a speech sequence.

3. NFC communication system, with a reading and programming unit (9), in particular a smartphone and / or a computer, characterized in that the reading and programming unit (9) coupled to the carrier unit (1) by entering a master PIN retrieves and displays the confidential information located in the carrier unit (1), provided all authentication requirements of the carrier unit (1) are met.

4. NFC communication system, with a reading and programming unit (9)

(Smartphone / computer), characterized in that these are coupled to the carrier unit (1) by entering a master PIN, one recognized as correct

Fingerprint, of a face recognized as correct, of a speech content recognized as correct or of the language itself or these individually or in any one Combination of user-defined order scales, which retrieves and displays confidential information located in the carrier unit (1).

5. NFC communication system, with a reading and programming unit (9)

(Smartphone / computer), characterized in that an IMSI and / or MAC address or another device-specific identification number of the reading device (9), in particular the smartphone, or a combination thereof is compared via an app belonging to the reading device (9), so that the list of confidential PINs is only shown on the display of the reader if it is

Reader (9) "requests" the output and the PUK was entered in the reader (9) before displaying.

6. NFC carrier unit (1), the carrier unit (1) having an (NFC) induction coil (2) for receiving the transmission energy of a reading device (9), a controller (3), a capacitor for storing and delivering the absorbed energy to the Controller (3) for bidirectional communication with the reading device (9) and a memory (4) with confidential information, in particular PINs, access codes, passwords, the confidential information only via a reading or programming unit (9) clearly linked to it , especially a

7. NFC carrier unit (1) according to the preceding claim, characterized

characterized in that the carrier unit (1) with multiple incorrect

Authentication input temporarily or completely blocks further access to confidential information and can only be reactivated against a higher-level PUK assigned by the user.

8. NFC carrier unit (1) according to one of the preceding claims, characterized in that the NFC carrier unit (1) is designed in the form of a bank or credit card and can preferably also be used as an advertising medium.

9. NFC carrier unit (1) according to any one of the preceding claims, characterized in that it is itself a functional bank card or credit card, on which this type of reading out several PINs with an authorized coupled reading device (9) is possible.