EP2425405A1

EP2425405A1 - Secure programming and management system for locks comprising contactless communication means that can be controlled by a portable nfc telephone

Info

Publication number: EP2425405A1
Application number: EP10727057A
Authority: EP
Inventors: Pascal Metivier
Original assignee: Metivier Pascal
Current assignee: Assa Abloy AB
Priority date: 2009-04-30
Filing date: 2010-04-28
Publication date: 2012-03-07
Also published as: WO2010125309A1; US20120114122A1; FR2945177A1

Abstract

The invention relates to a system comprising a lock (40) provided with NFC circuits, a mobile phone (32) also provided with NFC circuits, a remote lock management site (18), and a mobile network operator (20). For each lock, the management site generates a unique random algorithm, a unique identifier (PUID) and transport keys and transmits the identifier and the transport keys to a lock manufacturer (16). The mobile network operator receives a unique lock identifier (PUID) from the user and transmits same to the handling site which, in return, transmits the unique random algorithm, the cryptographic key, the transport key and the user key corresponding to the lock to the phone. The phone implements the initial programming of the lock, by loading the unique random algorithm, the cryptographic key and the user key onto the lock and, subsequently, the phone activates a secure cryptographic procedure.

Description

Secure programming and management system for locks comprising contactless communication means and controllable by an NFC mobile phone

The invention relates to locks controlled by means of a portable key-forming object cooperating with the lock by a non-galvanic mutual coupling of the NFC type (near-field communication). This portable object can be a card or a contactless badge, but it can also be a mobile phone equipped with an NFC chip and an NFC antenna, the SIM card of the phone being used as a security element.

The NFC technology consists in coupling the portable object and the lock by varying a magnetic field produced by a coil (so-called "induction method" technique). The lock comprises for this purpose an inductive circuit excited by an alternating signal which produces a variable magnetic field, detectable over a range of a few centimeters at most. The portable object in this space receives the energy of the field (which makes it possible in particular to remote power the portable object, generally devoid of own power source) and modulates an internal load. This modulation, encoded by various data from the portable object (identifier, encryption key, etc.) is detected in turn by the lock, establishing the bidirectional communication sought. There are various coding and encryption techniques to secure contactless communication between the portable object and the lock, and protect the lock against any risk of fraud.

These protection techniques implement algorithms and keys implemented in the lock and in the cards or badges intended to be used with the latter. When a mobile phone equipped with NFC communication means is used as a key, the risks can be increased, insofar as this phone is a trivial object, moreover connected to the public network of the mobile operator, and not an object specific, individualized as in the case of the card or badge. The object of the invention is to propose a technique for programming and managing contactless locks of the NFC type, which has a level of increased security, particularly adapted to the use of a mobile phone with NFC circuits as the key to control this lock. The principle of the invention is to provide a unique algorithm generated randomly for each lock at the time of manufacture thereof, and kept by a secure, non-public site. During the initial programming of the lock, this algorithm can be downloaded by a mobile phone from this secure site, after checking all the conditions required to authenticate the user and the lock. In addition to this unique algorithm, the phone will be able to download from the secure site other security elements such as cryptographic keys, identifiers, etc. that can be used to ensure, when programming the lock, the integration of all the security elements providing the security. maximum level of protection sought.

0

An exemplary implementation of the invention is given with reference to FIG.

The principle of secure management of the invention is based on the division between two groups of entities 10, 12 that can communicate with each other only in a restricted and secure manner as is symbolized by the screen 14.

Group 10 gathers specific secure entities, including the lock manufacturer 16 and a site 18 specific to the lock manager.

Group 12, on the other hand, includes a number of non-user-specific entities, including a mobile network operator 20. This operator includes a service provider module (block 22) which communicates a number of non-user-specific entities. part (interface 24) with the secure site 18 and secondly (interface 26) with a user 28 via an ordinary communication means 30 such as web, WAP, "hotline", etc. The telephone 32 of the user 28 is, in turn, interfaced with the service provider 22 of the mobile network operator via a trusted service provider (TSM) 34, able to ensure efficiently and safely the various data downloading procedures between the remote management site 18 and the mobile phone 32 via the service provider 22 of the mobile network operator. Indeed, in the case of a card or a badge, an important part of the security is ensured by the physical delivery of this object to the legitimate user, in the same way as the delivery of a set of keys . On the other hand, if the portable object is a mobile phone, it is an unmarked object, which is not a priori associated with a given lock. It includes a SIM card that identifies the user, and an IMEI identifier that uniquely identifies the phone, but initially the lock does not know these identifiers and will not recognize them when a phone is approached the lock. It is therefore necessary, once the lock is placed, to carry out a so-called "programming" operation consisting in teaching the latter to identify a telephone that is presented to it as being that of the authorized user, and then to switch to a mode where only this phone can control the lock (this operation can of course be repeated for other phones, if you want to empower several people).

The course of the various steps of the process according to the invention will now be described.

The secure management site 18 contains a cryptographic engine capable of generating for each lock to manufacture a unique, random algorithm, as well as a unique identifier and transport keys. The unique random algorithm adds to the conventional cryptographic mechanism, and adds an extra level of security to existing cryptographic techniques. The unique identifier, designated PUID (Public Unique IDentifier) is a non-modifiable identifier allowing to recognize the lock between all in a unique and definitive way.

When the manufacturer 16 manufactures a lock, it receives from the management site 18, via a secure encrypted communication, the corresponding PUID identifier and the associated transport keys (this information can possibly be generally acquired in the form of batches) . It will be noted that the unique algorithm is not transmitted to the manufacturer 16 by the management site 18, which stores it internally, knowing however which identifier PUID it corresponds to. The manufacturer 16 then programs each lock 36 with its unique identifier and its corresponding transport key. I! program also cards called "emergency cards" 38 with the same key transport. These cards will make it possible to maneuver the lock during its installation, by involving only simplified algorithms based on the temporary transport key, this until the definitive programming where this key will be neutralized and replaced by a definitive cryptographic key. The locks can then be shipped in order to be installed by the user 28 at their final location 40. Once this has been done, the lock must be "programmed" to implement the algorithms, the elements of the lock. advanced cryptography and the definitive keys to obtain the high degree of security sought.

This programming can be carried out by means of a portable telephone 32 provided with NFC circuits, which can be coupled by bidirectional NFC communication with the lock 40, as shown schematically by the wireless link 42.

To proceed with the programming, the user must identify himself and register with the management site 18, which he contacts by any appropriate means via the interface 26 of the mobile network operator. The user provides the operator 22 with the unique identifier PUID of the lock 40, which information is transmitted to the management site 18 by the secure interface 24. The manager site 18 recognizes the identifier PUID in its database and sends in return to the mobile network operator, via the secure interface 24: the unique algorithm of the lock, the cryptographic keys corresponding to this lock, and the corresponding transport key. The site also verifies that the telephone 32 used is a telephone equipped with NFC functionalities.

The exchanges between the telephone and the managing site, as well as between the telephone and the lock, can be managed by means of a specific application of the "applet" type (applet) previously downloaded by the telephone. This applet, once loaded and activated, will automatically implement the various steps necessary for the exchange of data with the management site 18 and the programming of the lock 40, in a perfectly secure manner. Once all the required data loaded into the phone 32, it is sufficient for the user to simply present the phone in front of the lock 40 to be programmed so as to establish the bidirectional coupling 42 by NFC. The phone first clears the lock by disabling the transport key, thus rendering inoperative the emergency cards delivered with the lock. It then loads into the lock the necessary elements to implement the security procedures, including the unique random algorithm, the final cryptographic key and the user key. The secure cryptographic procedure can then be activated, and the programming phase is completed.

Advantageously, it is also proposed to the user, after the latter has accepted the final cryptographic key and loaded it and the user key in his phone, to duplicate these keys on one of the emergency cards 34.

To do this, it is sufficient for the user to take one of the emergency cards in the lock package and apply it against his phone so as to couple these two elements NFC. The applet of the phone can then read the contents of the card, recognize in it the transport key (loaded at the time of manufacture of the lock) and check that this key corresponds to that transmitted by the manager 18 at the same time. time as the definitive cryptographic key. If this is the case, the applet disables the transport key and replaces it with the cryptographic key and a copy of the user key.

Claims

1. A system comprising:

- At least one lock (40) provided with NFC transmit / receive electronic circuits and electrical circuits for controlling mechanical locking / unlocking members;

a mobile telephone (32) provided with circuits enabling it to operate in NFC mode;

a remote site (18) lock manager;

a separate site (16) of a lock manufacturer; and

a mobile network operator (20) interface with the management site (18), with the mobile telephone (32) and with a user (28), characterized by:

in that the managerial site is able to generate, for each lock, a unique random algorithm, a unique identifier (PUID) and a transport key, and to transmit to the separate site (16) of the lock manufacturer, for each lock manufactured , said unique identifier and said transport key;

in that the lock manufacturer is able to program each lock with its unique identifier and its corresponding transport key;

- in that the mobile network operator (20) communicates with the management site via a secure interface (24), and with the mobile phone (32) via a trusted service provider (34);

in that the mobile network operator is able to receive from the user a unique identifier (PUID) of a lock and to transmit it to the management site for prior recognition;

in that the management site is able to transmit back to the telephone, via said secure interface (24) of the mobile network operator and via said trusted service provider (34): the unique random algorithm, a key cryptographic, the transport key and a user key that correspond to this lock; and

- And in that the telephone comprises means for operating an initial programming of the lock by loading in the lock of the unique random algorithm, the cryptographic key and the user key, and by activation of a secure cryptographic procedure.

The system of claim 1, further comprising:

at least one emergency card (38) initially programmed by the lock manufacturer with said transport key, and

means for duplicating said cryptographic key and said user key on the emergency card, after acceptance by the user of this cryptographic key and loading it and the user key in the telephone.

3. The system of claim 2, wherein the means for duplicating the cryptographic key and the user key on the emergency card comprise means for: reading the contents of this emergency card; recognize in it the transport key loaded at the time of manufacture of the lock; verify that this key corresponds to that transmitted by the manager site (18) at the same time as the final cryptographic key; and if so, disable the transport key and replace it with the cryptographic key and the user key.