WO2006089280A2 - Device and method for selectively controlling the utility of an integrated circuit device - Google Patents
Device and method for selectively controlling the utility of an integrated circuit device Download PDFInfo
- Publication number
- WO2006089280A2 WO2006089280A2 PCT/US2006/006065 US2006006065W WO2006089280A2 WO 2006089280 A2 WO2006089280 A2 WO 2006089280A2 US 2006006065 W US2006006065 W US 2006006065W WO 2006089280 A2 WO2006089280 A2 WO 2006089280A2
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- integrated circuit
- state
- switch
- advanced integrated
- power
- Prior art date
Links
Classifications
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07C—TIME OR ATTENDANCE REGISTERS; REGISTERING OR INDICATING THE WORKING OF MACHINES; GENERATING RANDOM NUMBERS; VOTING OR LOTTERY APPARATUS; ARRANGEMENTS, SYSTEMS OR APPARATUS FOR CHECKING NOT PROVIDED FOR ELSEWHERE
- G07C9/00—Individual registration on entry or exit
- G07C9/20—Individual registration on entry or exit involving the use of a pass
- G07C9/28—Individual registration on entry or exit involving the use of a pass the pass enabling tracking or indicating presence
Definitions
- the present invention relates to a target that is enabled to have its utility controlled using RF communication, hi a particular example, the invention uses radio frequency (RF) devices and processes to set the level of utility available for advanced integrated circuit devices such as processors, MCM's (multi-chip module), or SIPs (system in a package) and the subsystems and finished goods into which they are incorporated
- RF radio frequency
- RFID has been slow to be adopted, due to the relatively high cost of RFID tags themselves, and to limitations in reading the RFID tags.
- the RFID tags must be in a position to receive and transmit low-level RF signals. This not only limits where on a product package an RFDD label may be placed, but also causes errors when a product is placed in a position where the label is shielded from the RF reader.
- Theft is also serious and growing problem in the distribution of products, hi one example, electronic devices continue to shrink in size, while increasing their utility. As these electronic devices become smaller and more capable, they also become easier and more attractive to steal.
- Devices such as digital cameras, DVD players, MP3 players, and game devices are popular targets of theft, not only in the retail store by consumers, but also by others in the distribution chain.
- retail store employees, shippers, warehousers, and even employees of the manufacturer often steal products, and even boxes of products, for their own use or to sell.
- Other types of products are also subject to theft, such as DVDs, CDs, game discs, game cartridges, and other types of media. These types of products are also in high demand, and being relatively small and valuable, are easy and attractive to steal.
- microprocessors and other advanced integrated circuit devices are easy targets for theft. These advanced integrated circuit devices are small, expensive, and are easily sold in a "black” market, or readily incorporated into a thief s system or product. These advanced integrated circuit devices may consist of a single integrated circuit in a package, such as for some microprocessors, microcontrollers, or memory devices, or may have multiple integrated circuits in a single package. In this later construction, often referred to as a multi-chip module (MCM), several integrated circuits cooperate to provide advanced functionality. For example, an MCM may have a processor, modulators, amplifiers, and support circuitry for a complete wireless radio system.
- MCM multi-chip module
- This radio MCM may fit in a single package that connects into a target device through pins or a ball-grid array.
- the advanced integrated circuit may also be constructed for surface mount, and therefore may be provided in a reel of parts for automatic attachment to a target device.
- Another type of advanced integrated circuit device is the System in a Package, or SIP.
- SIP System in a Package
- An SIP is similar to an MCM in that it has multiple integrated circuit devices in a single package, but the level of integration among the integrated circuits may be higher. As the processors, MCM 's and SIP's advance, they have become smaller, making them even easier targets for theft. [0006] It is particularly difficult to implement an anti-theft circuit or scheme with these advanced integrated circuit devices.
- these advanced integrated circuits may be sold boxed separately, and in this state will have no power for activating an anti-theft circuit.
- manufacturers often manufacture a product in several difference models, with each model having a different set of features. Although this is desirable from the consumer's standpoint, it complicates the manufacturing, shipping, inventorying, shelving, and retailing processes.
- This problem exists in the configuration of electronic products, computers, gaming systems, DVDs, CDs, game cartridges, for example.
- a DVD movie disc may be available in a family version, a theater version, and an "uncut" version.
- Each has a different age restriction, and will appeal to different and significant markets. Accordingly, three different versions must be manufacture, shipped, inventoried, shelved, and managed. A similar problem exists with feature sets for games, computers, and other products.
- the present invention provides a radio frequency controller device that enables the utility of a target to be controlled using an RF communication.
- the radio frequency controller device has a switch that is set to a defined state responsive to the RF communication. More particularly, conditional logic circuitry uses the RF communication to determine if the target's utility should be changed, and sets the state of the switch accordingly.
- the radio frequency controller device also has a target interface that allows the target to determine the state of the switch, and based on the state of the switch, a different utility will be available for the target.
- the radio frequency controller device also has an antenna for the RF communication, as well as a demodulator/modulator circuit.
- the radio frequency controller device When used to control the utility of an electrical or electronic device, the radio frequency controller device has a low-power circuit portion that is used to set the state of the switch responsive to the RF communication, and also has a full power circuit portion that communicates with the target. In this way, the state of the switch may be set when the target is in a power-off condition, and the target is able to determine the state of the switch when the target is activated.
- the radio frequency controller device has an internal module inside the target, and an external module outside the target.
- the external module has the antenna, so the antenna is able to robustly provided RF communication.
- the external module may electrically and mechanically connect to the target through a connector, such as a custom connector, power connector, audio connector, or video connector.
- the connector may not sufficiently pass RF signals, so the RF signal is demodulated to a lower frequency using circuitry on the external module.
- some standard connectors are likely to connect to target operating circuitry, so an isolation circuit may be useful to properly route signals between the external module and the internal module.
- the isolation circuit may also be useful to protect radio frequency controller device circuits from effects of the target circuit, as well as protect the target circuits from effects of the radio frequency controller device.
- the radio frequency controller device may be constructed, for example, as an integrated circuit DIP package, a surface mount package, silicon die, or as a printed circuit.
- the disclosed radio frequency controller device enables an RF device to selectively change the utility of a target.
- the radio frequency controller device may be readily incorporated into targets such as electrical or electronic devices, so enables adaptable manufacturing process, flexible distribution accounting, and a denial- of-benefit security system. Since the radio frequency controller device may be constructed as commonly used surface mount or DIP packages, the radio frequency controller device may be economically installed in many electronic, electrical, and media devices.
- the radio frequency controller device may be constructed as a single package, or may be constructed as- an internal module connected to an external module, which allows for the flexible positioning of device components. In this way, components that need RF communication capability may be placed in areas with improved RF reception. By separating the antenna or other RF-sensitive components from other logic circuitry, more robust detection is enabled. Also, the increased placement flexibility enables an RF control capability for a wider range of products, and allows for a more aesthetically appealing arrangement of components. For example, the externally visible portions of the radio frequency controller device may be made smaller and less intrusive, with the memory and logic portions placed in an out-of-sight location.,
- Fig. 1 is a block diagram of a radio frequency activation device with controlled utility.
- Fig. 2 is a block diagram of a radio frequency activation device with controlled utility.
- Fig. 3 is a block diagram of a prior art RFID chip.
- Fig. 4 is a block diagram of a process for activating a target.
- Fig. 5 is a block diagram of an RFA device.
- Fig. 6 is a block diagram of an RFA device.
- FIGs. 6a-6e are block diagrams of an RF controlled advanced IC device.
- Figs. 6f is a block diagram of a controlled advanced IC device.
- Fig. 7 is a block diagram of an RFA device
- Fig. 8 is an illustration of an electronic device with controlled utility having an external antenna member.
- Fig. 9 is a diagram of an electronic device with controlled utility having an external antenna member.
- Fig. 10 is a diagram of an electronic device with controlled utility having an external antenna member
- Fig. 11 is a block diagram of a target activated using an RFA internal device.
- FIGs. 11a and 1 Ib are block diagrams of an RF controlled advanced IC device.
- Fig. l ie is a flowchart of a method for using an RF controlled advanced IC device.
- Fig. 12 is a block diagram of a target activated using an RFA internal device.
- Fig. 13 is a block diagram of a target activated using an RFA internal device..
- Fig. 14 is a block diagram of a target activated using an RFA internal device.
- Fig. 15 is a block diagram of a target activated using an RFA internal device.
- Fig. 16 is a block diagram of a target activated using an RFA internal device.
- Fig. 17 is a circuit diagram of a target having controlled utility.
- Fig. 18 is a circuit diagram of a target having controlled utility.
- Fig. 19 is a circuit diagram of a target having controlled utility.
- Fig. 20 is a circuit diagram of a target having controlled utility.
- Fig. 21 is a circuit diagram of a target having controlled utility.
- Fig. 22 is a circuit diagram of a target having controlled utility.
- Fig. 23 is a block diagram of a radio frequency activation device with controlled activation.
- Fig. 24 is a block diagram of a radio frequency activation device with controlled activation.
- Fig. 25 is a block diagram of a radio frequency identification device.
- Fig. 26 is a block diagram of a radio frequency identification device. DETAILED DESCRIPTION
- Target device 10 includes a radio frequency activation (RFA) device 14 within the housing 12 of the target.
- the RFA device is used for controlling the utility of the target 10.
- the RFA device 14 is provided in a package convenient for large- scale production.
- the RFA device may be in the form of an integrated circuit package, or in the form of a surface mount device. Either way, the RFA device may be easily designed into a target's circuitry or logic, and may be readily installed on a printed circuit board or other substrate. In this way, the RFA device may be included with a target device in a cost effective manner. It will be appreciated that the RFA device may be provided in other manufacture-friendly forms.
- Target 10 may be an electronic device such as a computer, TV, appliance, MP3 player, camera, game counsel, or toy.
- the target may be a tangible media, such as an optical disc, DVD, CD, or game cartridge.
- the RFA device 14 has been incorporated into the target in a way that allows the RFA device 14 to control the utility of the target.
- the RFA device 14 has a switch 31 that couples to some utility 16 of the target.
- the switch is coupled to the utility 16 through the target interface, which may be a logic line, a power line, a control line, a multi-line interface, or a memory location.
- the target interface may be selected according to the physical form of the RFA device.
- the target interface will include an IC pin coupled to a trace in the target's printed circuit board.
- the target interface will include a pad contact to the printed circuit board or other substrate.
- the switch 31 is set by the RFA device according to received data, and is used to control the utility available for the target or for use of the target. More particularly, the switch 31 has multiple states, with each state being associated with an available state of utility for the target, hi a specific application, the switch may be switched between two available states of utility.
- the RFA device acts as an interface between two distinct systems. First, the RFA device has a low-power RF circuit that is configured to receive data from a low-power RF source, and using power received from the RP source, determine if the target is authorized to have its utility changed. If so, the RPA device, using its low-power circuit, sets the switch to the authorized state.
- the second system is the full power circuit of the target electronic device.
- This full power target utility circuit may include, for example, microprocessors, power supplies, memory systems, and other electric and electronic components.
- the target utility circuit couples to the switch in a way that allows the target utility circuit to act according to the state of the switch. For example, each time the target is activated, the target utility circuit tests the state of the switch, and depending of the switch's state, presents a particular level of utility. Stated more succinctly: the state of the switch is set using a low power circuit, which sets the utility available to the full power circuit. In a typical case, the RPA device will also be powered from the full power circuit. In other cases, the RPA device may remain passive when the target is operating.
- the target 10 When the target 10 enters the distribution chain, the target 10 is set to have one utility.
- this utility could be a severely comprised utility, where the target has no useful function available.
- the utility may be set to a demonstration utility that allows limited demonstration functionality. It will be appreciated that the available utility may be set according the requirements of the specific distribution chain.
- the activation device or another reader At some point in the distribution chain, for example, when the target is transferred to a consumer, it may be desirable to change the available utility.
- the activation device or another reader is able to read an identifier value or other identification from the target.
- the activation device uses the identifier to generate or retrieve an authorization key.
- the activation device transmits the authorization key to the RPA device 14.
- the activation device reads the ID 29 from the RFA device 14, and transmits the authorization key to the RPA device 14 using an RF (radio frequency) communication.
- RF radio frequency
- the communication may use infrared (IR) communication in one or both directions.
- the target may make physical contact with the activation device for effecting the communications.
- the RFA device 14 uses the received authorization key to set the switch 31 to another state.
- the target utility 16 is able to function according to the new state set in switch 31.
- the target has a different utility than when the switch was in the first state, which is typically a fully-functioning state.
- the RFA device 14 has logic 25 coupled to the switch 31 that uses the authorization key to effect a change the switch 31.
- the RFA device 14 has a restricted access key 27 that was defined and stored with the RFA device 14 during the manufacturing process for the target 10. This restricted access key may not be externally read, altered, or destroyed, but may be read or otherwise used by the RFA logic 25. This restricted access key 27 may be compared or otherwise used with the received authorization key to determine if the RFA device 14 is enabled to change states of the switch 31.
- target 10 is illustrated to be an MP3 player.
- an RFA device is installed in the MP3 player.
- the RFA device may be, for example, an RFA integrated circuit DIP device, a surface mount device, or other circuit module.
- the RFA device is applied to a circuit board of the player in a way that the RFA switch 31 is able to control a utility function 16 of the player.
- the RFA device may connect to the power source of the player's operational circuitry so that the player will not function until the switch is changed.
- the RFA device couples to the decoder processor in the player, and restricts the ability of the player to properly play music files until the switch is in a proper position.
- the RFA device may couple to the processor, and restrict the options available in the user interface until the switch is in the proper position. In this way, the player may have a limited demonstration interface until the full user interface is enabled by changing the switch.
- a restricted access key is also stored in the RFA device, and the switch 31 is set to a state so that the MP3 player's utility is compromised. [0051] The MP3 player is thereby manufactured and ready for sale as a compromised MP3 player that will not properly power-on or function.
- the compromised MP3 player would be nearly useless to a consumer, and therefore would be less likely to be a target of theft.
- the manufacturer has also stored an accessible identification 29 in the RFA device, hi some cases, the identification may be pre-stored in the RPA device, and in others, the manufacturer will assign the E) during the manufacturing process.
- the accessible identifier may be a stored value that is accessible through, for example, an RFID reader system.
- the compromised MP3 player may be shipped through the distribution chain and to the retailer with a substantially reduced threat of theft.
- the retailer may display and make the MP3 player available for customer handling in a retail environment with reduce risk of theft. In this way, reduced security measures may be taken at the retail level, such as using locked cases or sophisticated packaging, since the consumer would obtain no benefit by stealing a nonworking, compromised MP3 player.
- the consumer may take the MP3 player to the point-of-sale terminal and have it passed proximally to an activation device.
- its accessible ID 29 is read by the activation device by retrieving the stored accessible ID using a wireless or EM (electromagnetic) communication.
- the communication may be an RF (radio frequency) communication.
- the communication from the point-of-sale device to the RFA device 14 is though antenna 18.
- antenna 18 is able to both receive and transmit data to the point of sale terminal.
- the point-of-sale terminal may have a network connection to an operation center, and sends the accessible ID value to the operation center.
- the operation center which has a database of RFA device identifications associated with their restricted access keys, retrieves the particular authorization key for the RFA device in the MP3 player that is at the point-of-sale device.
- additional confirmation actions may be taking place. For example, a clerk may be accepting payment from the consumer, or may be checking a consumer's identification or age. These other confirmation criteria may then be used to confirm that the point-of-sale terminal is ready to restore the utility of the MP3 player.
- the activation device determines restoration is appropriate, the activation device transmits the authorization key to the RFA device using a wireless communication.
- the RFA device 14 receives the authorization key, and using its logic 25, compares the authorization key to its pre-stored restricted access key 27. If the keys match, then the RFA device 14 uses its low-power source to change the state of the switch 31. In the new state, the target utility 16 is fully available to consumer.
- the consumer purchases the MP3 player from an online retailer, and the MP3 player is shipped or mailed to the consumer.
- the utility for the MP3 player may be restored.
- the online retailer has an activation device in their warehouse or shipping department, and a retail employee restores the utility to the MP3 player as part of the shipping process.
- the MP3 player is shipped with compromised utility, and the shipper has an activation device that they use to restore utility prior or at the time of delivery.
- the driver of the delivery track may restore utility as the consumer accepts the MP3 player, thereby removing risk of theft during the entire shipping process.
- the consumer has a home activation device, and the consumer uses the activation device to restore utility to the MP3 player.
- the MP3 player is in a compromised utility from the manufacturer all the way to the consumer's location, and it is the consumer, after the commercial transaction is complete, that finally restores utility to the MP3 player.
- the RFA device may have additional circuitry for confirming that the utility has been restored. For example, the state of the switch may be measured, or another test or measurement may be taken. According to whether or not the switch was set successful, a different value may be placed in a confirmation memory.
- the confirmation memory may be read by an activation device to confirm to the consumer and to the network operations center that activation was successful. By confirming successful activation, the retailer may have a higher degree of confidence of consumer satisfaction, and may accurately and timely report and authorize payment to the supplier of the MP3 player.
- RFA device 14 is constructed to receive an authorization key via a demodulator/modulator 23.
- Demodulator/modulator 23 may be a wireless communication circuit, such as a radio frequency or electro-magnetic receiver.
- the RFA device 14 has logic 25 which is configured to receive the authorization code and make a determination if the switch 31 should have its state changed.
- the logic 25 may include logic structures as well as dynamic or non-volatile memory.
- logic 25 uses a target key 27 in making the determination of whether or not the switch can change to another state.
- target key 27 has been stored during the manufacturing process in a manner that is not readable using external devices.
- target key 27 may be placed in a nonvolatile, non erasable and non alterable memory of the RFA device during manufacture.
- This target key may be the same value as the authorization key, so the logic simply performs a comparison between the restricted access target key 27 and the received authorization key to determine if the switch 31 of the RF device may be changed. It will be understood that other logical processes may be used in making this determination.
- the logic 25 determines the switch 31 may be changed, the logic causes the switch 31 to change states.
- the switch 31 is a change effecting device.
- the change effecting device may be, for example, an electronic switch, an electrical switch, a fuse, a conditional break in a trace, a logical state, or may be a set of values defined in a memory location, hi another example, the change effecting device is an electrically switchable optical material such as electrochromic material.
- the change effecting device may change state upon the application of an activation power , or may use logical process to set or change values stored in memory.
- the activation power 21 may be, for example, a separate battery which powers the logic 25, the demodulator/modulator 23, and the switch 31.
- the activation power 21 may be a converter for converting a received radio frequency or electromagnetic energy into available power.
- the activation power may be wholly or partially obtained from a source external to the target. It will be appreciated that other electronic components may be necessary to implement such a converter.
- activation power may be provided by the operational power for the full device.
- RFA device 14 may have a confirmation circuit or memory with logic 25 which changes state according to the actual or probable state of the switch 31. In some cases, the actual state of the switch may be detected, or the actual state of the switch may be measured.
- the actual states may not be conveniently measured or detected, so some aspect of the change process may be measured or detected instead.
- the confirmation logic may directly detect the state of the switch 31, or may have measured the electrical processes used in making the change. For example, the current passing through a fuse may be measured, and thereby confirm that a sufficient amount of electricity has passed through the fuse to cause it to break.
- logic 25 may confirm that logical processes were properly performed for setting the switch.
- logic 25 may directly connect to the utility means 16 itself, to confirm that the switch changed. Once logic 25 receives confirmation that the switch changed, that confirmation signal may be communicated to an activator device using a transmitter, or may be read responsive to a request from the activator. The RFA device 14 may therefore provide feedback to the activation and distribution control system to confirm that utility has been changed. This information may then be used to generate reports or to initiate payment to parties within the distribution chain.
- target 50 for a distribution control system is illustrated.
- Target 50 is similar to target 10 described with reference to figure 1 and therefore will not be discussed in detail.
- target 50 has a RFA device 51 installed during manufacture, which includes a demodulator/modulator 58 for receiving an authorization code from an external activation device.
- the demodulator/modulator 58 cooperates with logic 67 to switch the state of the switch 72 between a first state and a second state. Responsive to this change in state, target utility 76 provides a different level of utility for target 50.
- the RFA device 51 may have a power source 56 for powering the communication, logic, and switch. In another example, an operational power source 78 in the target may be used to power certain portions of the RFA device.
- the RFA device may also have a restricted access target key 68, and an accessible target ID 69.
- the demodulator/modulator 58 may be used to send the target ID value 69 to an activation device.
- the RFA device 51 has the primary components of the target stored in a housing 65 of the target. In one example, housing 65 is a case or other enclosure. Since housing 65 or other aspects of the target may restrict wireless communication to components within the housing 65, certain circuits and processes for RFA device 51 are on an external antenna member 52, while an internal RFA portion 67 is inside the housing 65.
- the antenna member 52 has the activation power 56, (which may be in the form of a battery or RF/EM converter), demodulator/modulator 58, and an antenna 54.
- the circuitry needing clear access to wireless communications is positioned external to the target housing.
- Other circuitry for changing utility of the target may be positioned in the internal portion 67. It will be appreciated that other circuitry may be moved from the internal portion 67 to the antenna member 52.
- the target key and logic may be moved externally in some cases.
- activation power 56 includes a battery, that battery may be positioned either within the housing 52 or on the antenna member 52.
- the antenna member 52 may be mounted or adhered to the target housing 52, or may be positioned remote from the target and coupled to the target housing 52 through a wired connection.
- the antenna member 52 may couple to the target housing 52 through a connector 61 available on the target's case 63.
- the target case 63 may have power input ports, on which the antenna member 52 may temporarily mounted. In such a case, the target 50 would be activated with the antenna member 52 coupled to the power plug of the case 63, and after processing at the activation terminal, the antenna member 52 would be removed from the power plug, and the power plug inserted into a wall outlet to place the electronic device in its operable state. It will be appreciated that other available connectors may be used.
- an existing audio, video, or data connector may be used.
- a standard connector 61 it may be desirable to provide an isolation circuit to protect the RFA circuits from loading effects of the target circuits.
- the target circuits may load the signals at the RFA IC and prevent proper operation. In some cases, the target could actually damage the RFA IC, for instance when a DC or AC connector is used.
- the isolation circuit may also protect target circuits from possible detrimental effects of signals passed into the target from antenna member 52. By arranging the antenna member 52 external to the target, more robust communication with the activation device may be maintained, as well as more efficient and. effective power conversion when converting power from an available RF or EM source.
- the target activation system described with reference to figures 1 and 2 uses a Radio Frequency Activation (RFA) device for selectively activating the target.
- the RFA device comprises in part a "switch" through which the RFA device is communicatively coupled (data and/or power) to a target.
- the switch is any mechanism that can be set so that it affects the target's utility (e.g. that prevents the target from functioning properly) and later switched to 'activate' the target (e.g. to restore or enable the target's utility). In certain cases the switch may also serve to de-activate, or disable, the operation of a target based on commands or criteria.
- the switch may serve to control access to media, data, information, instructions/commands etc. (collectively referred to herein as "content") stored in the target.
- the switch may be logical (e.g. a memory bit) and it may include additional elements/components such as a fuse or electromechanical actuator.
- RFA devices may comprise different types of "switches” including, but not limited to, logical/data, electronic, electrical, electro-optic ("optical switch or shutter”) and electro-mechanical: any mechanism that responds to an electrical stimulus and effects a change in the target.
- An RFA device may also comprise an optical switch consisting in part of an ultraviolet, visible or infrared light output.
- switches may be switched only one time, only a limited number of times, or an unlimited number of times. Further, they may be reversible.
- the change effected in the target may be temporally offset from the initiation of the RFA switch.
- an RFA device coupled to an AC powered drill may be 'activated' at the retail check-stand (e.g. a switching relay coupled to the RFA device and the drill's power supply is enabled), but the effect of the switch (the drill powers-up) is realized only when the drill is plugged into AC power.
- the functions of the RFA device including the switch may be combined in different ways and distributed among one or more components / locations in, or coupled, to a target.
- a typical known passive RFID tag 175 is shown in figure 3. It consists of an antenna, an impedance matching network, power storage, a modulator / demodulator, memory and logic.
- the antenna is usually configured on a Mylar® or Kapton® substrate 177 and is connected to a silicon based RFID chip portion 179 through an impedance matching network.
- the chip receives energy from the antenna through the matching network and stores it within the chip to power the memory and logic functions.
- a modulator / demodulator allows digital data to be transmitted to, or received from the tag.
- the memory block typically contains a serial number in a read-only area of memory. Additional memory storage is often provided for storing other data such as product or manufacturing information, distribution, service, or interrogation history, etc. Different types of tags may provide OTP (One Time Programming) or unlimited programming via EEPROM technology.
- OTP One Time Programming
- EEPROM Electrically erasable programmable read-only memory
- the RFA device is communicatively coupled to the target (typically via electrical contacts) and it may transmit/receive data, power, or commands with the target.
- the RFA device also contains logic and typically data, instructions, or commands for conditionally switching the switch based on input received from a device external to the device (e.g. an' RF activation device).
- An RFA device for example, may allow the manufacturer, RFA device manufacturer or a third party to store a hidden or "private key" into write-once memory in addition to the public key and other information. This private key may be randomly generated or it may be based on an algorithm.
- the RFA device may contain a separate blank area of memory to store a key received from an external source (e.g.
- logic in the RFA device compares the received key to the previously stored private key. If they match (or some other conditional state is realized), the logic will switch the switch (e.g. set a memory bit or blow a fuse), hi such a configuration the stored private key would be inaccessible to an RFDD reader or any external device.
- the key, commands, and instructions that define the logical comparison process are typically stored in write-once memory, or permanently configured in hardware or firmware.
- the logic in the RFA device may be supplemented or combined with additional instructions or commands received from outside the RFA device.
- the logic effectuated may be conditional upon which private key, or combination of private keys, that match the received key.
- the logic consists of instructions or commands embedded in the RFA device, which are sufficient to initiate action upon the realization of a conditional state. In many embodiments the logic is entirely contained within the RFA device.
- the private key (or private keys) stored within the RFA device may enable cryptographic methods to be used to protect data, instructions or commands transmitted to, and received by, the RFA device or the target to which it is coupled.
- the RFA device may include an encryption or decryption algorithm.
- An example of an RFA enabled encryption process 200 would work as follows: the target manufacturer 201 stores a public key (the ID), a private key and an encryption key in an RFA device coupled to a target 202.
- the public key is readable by an activation terminal 205 external to the RPA activation device (e.g. an RPID activator linked to a central Network Operations Center (NOC) as illustrated in Figure 4.
- NOC Network Operations Center
- the private key and the encryption key are stored in write-once memory and cannot be read or otherwise ascertained from the RPA device by an external device.
- the manufacturer 201 encrypts the private key using the encryption key and transmits the encrypted private key paired to the public ID to the NOC 206.
- the NOC uses the public ID to lookup the associated encrypted private key.
- the NOC then transmits the encrypted private key to the RFA device coupled to the target.
- the RFA device then uses its stored encryption key and stored algorithm to decrypt the private key.
- the decrypted private key can then be used for comparison to the private key stored in write-once memory in the RPA device.
- the decryption and comparison process occurs entirely within the RFA device. This approach reduces the risk of a clear-text private key being illicitly obtained from the NOC or during the communication from the target manufacturer to the NOC or from the NOC to the RFA device.
- Asymmetric encryption schemes using algorithms such as that utilized in the RSA Public Key Encryption scheme and described in the U.S. patent for the RSA algorithm (# 4,405,829, "Cryptographic Communications System And Method" and now in the public domain, may also be applied using combinations of public and private keys (including those used as encryption keys), and algorithms embedded within the RFA device.
- Other encryption schemes may involve an encryption key provided by a 3rd party.
- a manufacturer may store a retailer specific encryption key in the RFA device coupled to its target and use it, independently or in conjunction with other keys, to encrypt the private key.
- the algorithm in the RPA device needs the 3rd party key (e.g. input at the check-stand independent of the NOC).
- a 3rd party key may be stored by the RPA device manufacturer and be unknown to the target manufacturer. The 3rd party encryption key may then be sent to NOC or via an alternative path to the reader and on to the RFA device.
- Encryption systems such as those described above can be used to secure the conditional logic process effectuated within the RPA device (e.g. to prevent unauthorized switching of the embedded switch). They may also be used to secure the transmission to, and usage within, an RFA device of data, instructions or commands. Further, such encryption systems can be used to enable different parties independently or in combination to effectuate control over the conditional logic and the dependent outcome (switching the RFA Switch).
- the RFA device and some RFDD tags such as EPC generation 2.0 devices, which can utilize passwords for the purpose of controlling access to information (data) stored in the memory of the RFID tags.
- passwords control the ability to read the information stored in the memory, and also the ability to write new information, or change existing information that is already stored. In these cases, the only thing being accessed or changed is the data itself. Even the password can be changed by writing a new password to the location in memory where the password is stored. Further, these password schemes only affect the ability to read and write data via the RF communication path to the external RFID reader, and do not interact with the target or the target's utility.
- the RFA device works in a fundamentally different way.
- the private key(s) is stored in memory within the RFA device at the time of programming by the manufacturer of the target device, the manufacturer of the RFA device or a 3rd party. These private key(s) are typically stored in write-once memory and cannot be read back by the RF reader (or any device external to the RFA device) nor preferably can they be changed in the future by any means. Once a private key(s) is programmed into an RFA device, prior knowledge of it is required to supply the correct key(s) that meet the conditions necessary for the RFA switch to be switched.
- one of the private keys may configure the logic within the RFA device to combine the secondary private keys stored in memory to result in an computed key that can be compared to the received key sent to the RFA device from the external reader at the time of activation. If the computed key matches the received key then the RFA device enables an output (and optionally an input that affects the target's utility.
- This output is a typically via a physical connection (e.g. an electrical contact or pin) that can logically function in a number of different ways (e.g. a state change or a defined data sequence) depending upon RFA device logic configuration information supplied to the RFA device by the target.
- This logical data sequence can be a function of the primary key, and other configurable logical means within the RFA device.
- the logical sequence uses an externally generated data stream, such as a data stream provide to the RFA device from the target circuitry, such as from a microprocessor.
- the logical configuration information can be sent to the RFA device via a number of techniques such as a serial link to the enable pin of the RFA device, or by a pair of dedicated mode pins on the RFA device.
- the configuration means is primarily controlled by the target, but could also be a function of commands stored within the RFA device or sent to the RFA device from the reader after completion of the activation comparison process.
- One preferred method of reactivating a target is to send a command to the RFA device that causes the output line (pin) to be deactivated. If the target is to be reactivated, it may be desirable to generate a computed key that is used for comparing a received key that is different from the previously received key (for matching to the computed private key) and to effectuate the conditional logic.
- An example of a way to securely affect such a system is to use a counter within the RFA device that keeps track of the number of times that the RFA device has been deactivated.
- the RFA device internally generates a new computed key automatically through its logic by using the primary key and the state of the deactivation counter. This process can be taken further by logically combining the secondary keys in a different sequence.
- the private keys are not changed.
- the sequence is known to the manufacturer (or the party that originally stored the key in the RFA device), and is tied to the public key (e.g. ID, serial number) of the RFA device.
- the reader has access to the deactivate counter state, and sends that data along with the RFA device's public key back to the NOC in order to receive the correct (sequential) key. The reader cannot change the key and/or key sequence directly by writing data to the RFA device.
- the RFA device itself changes the key or key sequence by using the mode configuration information in addition to its own internal logic.
- One is to limit the number of false key submissions, and particularly the number of false key submissions over a period of time.
- Logic and programmable memory within the RPA device could automatically shut down, temporarily or permanently, the internal authorization process after a specified number of false comparisons.
- Another solution would be for the logic, using an internal clock, to limit the rate at which the RFA devices receives or processes digital keys or compares them to the private keys.
- the speed of the RFA device e.g. clock speed
- a denial-of-benefit security system depends on everyone involved with the product including would-be thieves, employees and consumers to be aware that the target's utility is compromised and it must be activated before its value is restored.
- a successful denial-of-benefit security system therefore depends on a means for generating awareness of the target's participation in the security scheme in addition to the mechanism internal to the target that alters its utility (the switch).
- One cost effective solution is to couple an RFA device with a visible "symbol", mark, icon or message on the outside of the target or its associated package that identifies the target as a participant in the system. Further, the symbol can be positioned on a target's package relative to the RFA device's antenna (which is coupled to the target within) to facilitate placement of an external reader.
- the RFA device may employ means for determining the status of the switch or target (e.g. did the RFA switch, switch, as intended; is the target active, what features were enabled or disabled), and communicating such information to an external device such as an RFID reader coupled to a point-of-sale system.
- the means may include logic or circuitry to measure or test elements of the RFA device or the target to which it is coupled. For example, when a 'successful' comparison is made of a received key and a private key, a value can be written to a memory that is externally accessible to an external device.
- the electrical properties e.g.
- resistance, capacitance etc. of circuitry or materials in elements of the RFA switch in the target can be measured, when the target is powered, and the results output to an external device.
- An example of communicating the state of the RPA device would be to set an indicator state for a directly coupled element such as an LED.
- Another example would be the removable antenna element of an RFA device (described herein) combined with an electro-chromic film that changes appearance depending on the state of the RFA device (e.g. red prior to activation, green after).
- the information can be used locally or transmitted to a remote location like the NOC or to the manufacturer or a 3rd party.
- the information can be used to execute dependent actions such as retry an activation if the initial attempt failed.
- the information can also be used to determine the state of a target (active or inactive) or whether it's been activated before.
- the information can also be used aggregated (e.g. at the NOC) to identify, diagnose and report problems. It may also be used to identify unauthorized attempts to breach the system.
- the status of an RFA device can also be used as a dependent variable for a variety of transaction systems.
- a customer cannot be charged until the target is activated.
- a target cannot be activated until the customer is charged, has evidenced an ability to pay (e.g. a test to see if a credit card or customer account is valid), or payment is made.
- the status of an RFA device can also be used in conjunction with other security schemes. For example, in a retail store, a product that had not been successfully activated at the check- stand could be detected by an RF sensing system located at the exit doors and an alarm triggered.
- FIG. 5 illustrates one configuration of an RFA device 225.
- the switch 227 consists of a memory bit that can be switched “True”, setting a logic state at the "Output", that can be read by the microprocessor in the target and affect its utility.
- the output switch line 227 (associated with the output bit) could be used to pull down the reset line of the microprocessor, microcontroller, or any other logic line of the target circuitry, that would cause the target to not function when turned on. Only if the codes matched, would the line be allowed to go "true” by the RFA device, and the target to function normally.
- the device 235 has an advanced integrated circuit 238 within package enclosure 237.
- the package enclosure is typical packaging for holding electronic integrated circuits, and has pins or a ball grid for coupling to a printed circuit board or other substrate of a target device.
- the advanced integrated circuit may be a microprocessor, a processor, or may comprise multiple connected integrated circuit devices or other electronic components.
- the advanced integrated circuit may include a processor, a radio, amplifiers, and associated circuitry for constructing a wireless transmitter and receiver.
- the advanced integrated circuit is a microprocessor for use in general purpose computing devices.
- an advanced integrated circuit device is required to conform to pre-existing pin or grid layouts, as well as specific geometric limitations. Accordingly, the pinout characteristics for the package enclosure 237 may be arranged according to the pinout expected for the regular implementation of the advanced integrated circuit. For example, an Intel Pentium processor has an expected pinout which has been widely adopted by makers of computing devices. If the advanced circuit device 238 is the operational circuitry for such a Pentium device, then the pinouts for the package enclosure 237 will be according to the defined pin structure for a Pentium processor. Ih this way, the antitheft advantages of the device 235 may be adopted without any required design change to the end target device.
- the advanced integrated circuit device 238 may have a power input port, ground input port, and a reset port. As illustrated, the power and ground ports may be connected to associated pins on the package 237 for powering and grounding the advanced integrated circuit device. Other pins would couple to data and communication lines according to the specific advanced device used. Many advanced integrated circuit devices have a reset or other enable/disable line for controlling the operation of the advanced integrated circuit device.
- the reset port may have two states: a first state that allows the advanced integrated circuit device's operational circuitry to operate normally, and a second state that causes the device's operational circuitry to reset or otherwise disrupt or compromise operation. In a similar way, other enable or disable ports may be provided.
- the reset port for the advanced integrated circuit 238 is connected to an output line for the RF device 239.
- the RF device 239 is thereby able to set the state of the reset port, and determine whether the operational circuitry is able to function.
- the RF device 239 is also powered by an external power connection, and is also grounded to an external grounding connection. Accordingly, when power is applied to the pin on package 237, the advanced integrated circuit device 238 and the RF device 239 are powered, and the reset port of the advanced integrated circuit device 238 is set to an operational state or a compromised state.
- the RF device 239 has an internal switch that determines the state of the output line, and accordingly sets the state at the reset port.
- This internal switch is set according to a received RF signal. More particularly, the RF device 239 may receive an RF signal on its antenna structure. Typically, this RF signal is received when there is no power applied to the package pins, and the advanced integrated circuit is in a power-off condition.
- the antenna structure includes a connection to an unassigned pin on the package 237.
- the antenna may be internal to the package 237, or may be positioned on the package 237, or may have an externally connected antenna.
- the RF signal may require a matching circuit to be properly received by the RF device 239.
- the RF device 239 also has a low-power circuit for setting the state of the internal switch.
- the switch of the RF device 239 is set according to data received in an RF communication, which is used to control the state of the switch.
- the RF device 239 holds a restricted access key in an unalterable and unreadable memory.
- An RF signal is received on the antenna, with the RF signal having a received authorization key.
- the RF device 239 compares the received authorization key to the internally stored restricted access key, and determines if the switch may be set to its other state. If authorized, the RF device 239 uses a low-power circuit to change the state of the switch, and thereby change the state of the output line.
- the low-power circuit derives its power from the RF energy received at the antenna.
- the low-power power source may be provided by an internal or external battery.
- device 235 is a microprocessor complying with an industry or commercial standard.
- the RF device 239 is manufactured with its internal switch set to a closed or "0" state. In this configuration, the switch acts to couple the output line to ground. Accordingly, if the pins for package 237 are connected to power and ground, the output line for the RF device 239 will continuously hold the reset port of the advanced integrated circuit device 238 to a low state. Typically, an advanced integrated circuit device resets upon a low state on its reset pin, so the advanced integrated circuit 238 will not operate when the switch for the RF device 239 is closed.
- the advanced integrated circuit device is manufactured and transported through the distribution chain in a state that renders it unusable, and is therefore less likely to be stolen.
- the compromised microprocessor may be shipped through the distribution chain and to a retailer with a substantially reduced threat of theft.
- the retailer may display and make the microprocessor available for customer handling in a retail environment with reduced risk of theft. In this way reduced security measures may be taken at the retail level, such as using locked cases or sophisticated packaging, since the consumer or employee would obtain no benefit by stealing a nonworking, compromised microprocessor.
- the consumer may take the processor to a point of sale terminal and have it passed proximately to an activation device.
- the microprocessor As the microprocessor is passed by the activation device, it has an accessible ID read from the RF device 239.
- the point-of-sale terminal may cooperate with a network and network operations center to retrieve an authorization key for the particular microprocessor present at the point-of-sale terminal.
- the point-of-sale device or scanner uses its activation device to transmit the authorization key to the RF device 239 through the antenna.
- the RF device 239 receives the authorization key, and using its internal logic or comparison circuitry, compares the authorization key to its pre-stored restricted access key. If the keys match, then the RF device 239 uses its low power source, which may be derived from the received RF energy, to switch the internal switch to an open (1) state. In one example, the change to the open state is made permanent. In another example, the change may be more temporary in nature. Also, it will be appreciated that an externally perceptible identification may also be switched, so that a consumer or clerk may visually confirm that the microprocessor has been activated. This visual indictor may be an electro-chromic material, for example. It will also be understood that the point of sale terminal or the network may also receive a confirmation from the RF device 239 that the microprocessor has been properly activated.
- the package enclosure may be placed in its operating environment and powered.
- the device 235 When the device 235 is powered, power will be applied to the advanced integrated circuit 238 as well as the RF device 239.
- the switch internal to the RF device 239 is now open, so the output of the RF device 239 floats or is set to a "on" (1) condition. Since the reset port is now at a "1" state, the operational circuitry does not continually reset. In this way, the microprocessor operational circuitry 238 is allowed to operate at its full operational capability.
- the RF device 239 may be positioned inside packaging 237 along with the advanced integrated circuit 238.
- the RF device 239 may be positioned between the advanced circuit 238 and the pinout connection area. This area is particularly convenient for wire bonding from the pins to the RF device 239, as well as for providing wire bond or connection between the RF device 239 and the advanced circuit 238. However, sometimes there may not be enough space between the pinouts and the advanced circuit device to allow for this RF device placement. In such a case, as shown in figure 6c, the RF device 239 may be attached to the top of the advanced circuit 238. The RF device 239 may be adhered with an adhesive, for example, and wire bonded to circuitry within the advanced integrated circuit, as well as to the pins of the enclosure.
- the RF device 239 may be attached to the packaging 237 itself, as shown in figure 6d.
- an alternative to wire bonding may be used to connect the RF device 239 to the advanced circuit 238 and to its package pins.
- figure 6e shows an arrangement where the packaging 237 does not have enough space to support the RF device 239.
- the RF device 239 is provided in a different package than the advanced circuit device 238, and is coupled to the advanced circuit device in a socket arrangement.
- the RF device 239 acts to simply pass through most connections from the advanced circuit device packaging, but couples to power and ground connections, and provides a switch in the enable or reset line.
- the RF device 239 may act as a receiving socket for a standard microprocessor or other advanced circuit device.
- the low power circuitry may be desirable to allow the low power circuitry to set the state of the switch while the advanced integrated circuit has its operational power applied.
- a computer system may be placed in a power-on condition for test and configuration, and while the circuit is being tested, the switch may be set to selectively enable or disable functionality.
- the activation device is part of the system test equipment.
- a device may have persistent operational power, or may be constructed in a way that makes it undesirable to temporarily disable the operational power.
- the low power circuitry is arranged to allow an activation device to set the state of the switch while operational power is on. It will be appreciated that known isolation circuitry may be needed between the operational power and low power sub-systems.
- Figure 6f shows another example of a controlled advanced integrated circuit device.
- Controlled device 235 a is similar to device 235 discussed with reference to figure 6a, so will not be discussed in detail.
- Device 635 a has an advanced integrated circuit device 238a, which may have operational circuitry for implementing a microprocessor, memory, or other function.
- the device 238a may be a single integrated circuit device, or may be arranged as a multi-chip module or system in a package.
- the controlled device 235a has an internal device 239a that has a switch that may be set to multiple states, and the utility of the operational circuitry is set responsive to the state of the switch. As more fully described above, the state of the switch is set by a low-power circuit.
- Device 235 a has a connection port that enables an electrical connection to be made from outside device 235a to the internal device 239a. In this way, a power or communication signal may be established with the internal device 239a.
- the port may connect to an assigned or unassigned pin, or may be a separate port on the package. This connection may be used to test or configure the advanced integrated circuit during manufacturing, testing, or servicing.
- the internal device may still operate as described with reference to figure 6a. More particularly, the internal device may have a stored restricted access key, and if a proper authorization key or code is received from the connection port, a low power circuit may operate to change the state of the switch.
- the low power circuit may be powered by connection to one of the package's pins, or may have a separate power port. In another example, the power is provided from the connection port, and the authorization code is modulated onto the power signal. It will be appreciated that many options exist for connecting and communicating to the low-power circuit and switch.
- the internal device 239a may only receive communications from the connection port, or may optionally include an antenna for receiving RP communications and signals. In this way, the connection port may be used in some parts of the distribution chain, such as during manufacturing and for service or repair, and the RP connection may be used at other parts of the distribution chain, for example, during consumer point-of-sale transactions.
- the antenna may be internal to the package, part of the package, part of an assigned or unassigned pin-out, or may be externally connected to the package. If external, the antenna may be removable or disposable.
- the connection port is used to access and set the switch during manufacturing and testing, and an external antenna is used to activate the advanced integrated circuit at a point of sale transaction. After activation, the consumer or clerk removes and disposes of the antenna. Then, if the device 235a needs service at a later time, service personnel would access the switch using the connection port.
- FIG. 6 many commercial products have either a metal shield, or a metal case, which will not allow efficient RF coupling from the reader to an internally installed internal RFA device.
- the internal RFA device 236 could be mounted on the printed circuit board 232 (PCB) of the target and some type of connector 233 would connect the two. This leads to the configuration generally shown in Figure 6.
- the construction shown in Figure 6 allows the RF antenna 234 to couple through the metal enclosure 231 of the target via the PCB mounted connector 233.
- the internal RFA device would also be placed on the PCB 232 of the target.
- the connector it is desirable for the connector to pass RF signals at one of the 3 primary frequency bands in use today for RFID tags: 13.56 MHz, 900 MHz, or 2.4 GHz, but may require additional circuitry to adequately pass RF signals. In the alternative, a higher quality connector capable of more readily passing RF signals may be used. It is desirable to use an inexpensive connector such as a zero insertion force flat flexible cable (ZIF FFC) or a smart card connector for this interconnect. It may also be desirable for the matching network to be on the antenna side of the connector. This implementation allows the antenna to be disconnected from the target after it has been activated.
- ZIF FFC zero insertion force flat flexible cable
- FIG. 7 Another similar configuration 240 is to integrate the RFA device into a custom connector 242 so that only a single device needs to be installed on the PCB 244 of the target, as shown in Figure 7.
- the connector allows the antenna to be placed outside of the target's enclosure.
- a target device 250 has an antenna 252 attached to the target's connector.
- the antenna is electrically coupled to an internal RFA device, which enables efficient RF communication and power conversion.
- the antenna member 252 would be removable after activation.
- the antenna 252 may have a mating adaptor that causes the antenna 252 to be oriented in a particular direction.
- the antenna may be oriented perpendicular to the enclosure so that the RF energy can couple to it in a more effective way.
- a stiff substrate may be used for the antenna so that it will be self supporting and can maintain a particular orientation such as that shown in Figure 8. It is important to note the ability to orient the antenna so that it does not lie up against the metal enclosure. This prevents the metal enclosure from loading the antenna and changing its impedance, and ultimately it's coupling efficiency to the reader.
- the antenna will couple better with a reader located in front of, or behind the target. If the connector and antenna is rotated 90 degrees, then the antenna would couple the best from the top or the bottom of the target.
- the connector can be located almost anywhere on the target's PCB. It is desirable to mount it near a corner of the target if possible to minimize RF coupling issues.
- the antenna may be configured as part of the target's packaging or shipping container.
- Electronic device 250 is an electronic device having a case for enclosing and protecting the utility means and other operational circuitry and devices.
- the case is metallic, and therefore restricts wireless communication to components and circuitry within the target. In this way wireless communication to devices and components inside the target would require an unduly strong RF or EM signal to robustly and effectively communicate.
- an antenna member 252 is installed external to the case, and electrically coupled to an internal RFA device within the housing. In this way, the antenna 252 may be readily accessible for wireless communication with an activating device, while still maintaining the switch for the RFA device within the target housing.
- a connector is positioned on the housing.
- This connector may be a connector specifically designed for antenna 252, or may be an existing connector for the target.
- the target is an audio device, the target is likely to have several existing audio connectors.
- target 250 may be powered through an AC or DC external power connector.
- the connector may be a power plug or adapter input. It will be appreciated that other types of connectors, such as Ethernet data ports, serial data ports, USB connections, and other standard audio, video, and data connector types may be used. [0091] hi use, antenna 252 is attached to connector during the manufacture or the shipping process.
- an activating device cooperates with the antenna 252 to send and receive information and power to and from the RFA internal device, which is inside the target enclosure, hi particular, the antenna may receive a request for an identification value and transmit an identification value to the internal RFA device.
- the activation device after performing its authorization routines, may then send an authorization key through the antenna 445 into the internal RFA device.
- the internal RFA device has logic coupled to the antenna through the connector which determines that it may change its switch to another state. After the state of utility has been changed, the internal RFA device may report the verification of the change through the antenna 252 back to the activation device.
- a consumer will transport the electronic device 250 to another location, and place the electronic device in an operable state. The consumer may remove the antenna member 252 and dispose of it.
- antenna member 252 is integrally formed with the case and may remain on the case.
- the target may be a "wireless" device such as a wireless access point, where its antenna and circuitry may be designed to accommodate such communication.
- Many targets utilize foam inserts to isolate the target from shipping damage. The antenna could be easily integrated into those inserts.
- the packaging foam could serve as a "spacer" between the antenna element and the metal case of a target, and assist in maintaining the efficiency and operation of the antenna, thus facilitating the communications between reader and internal RFA device.
- the antenna substrate material could be any relatively stiff material that has the required dielectric properties for the antenna to function properly.
- FIG. 9 An alternative is to configure the antenna and connector as a "break away" system 275 as shown in Figure 9.
- a Mylar® substrate can be designed so that it sheers in a necked down area 277 along its length.
- a molded plastic part 281 can be used to bring the antenna 279 outside of the enclosure 280. It would also facilitate attachment of the internal RFA device to the target's PCB.
- the target enclosure 280 encloses a printed circuit board on which the internal RFA device 281 is positioned.
- An antenna member 279 is coupled to the internal RFA device 281 through a connector that is formed integrally with the internal RFA device. In this way, while internal RFA device 281 is shielded from RF and EM communications, antenna 279 is externally positioned for ready communication.
- antenna member 279 is shown having only the antenna structure external to the target enclosure, it will be appreciated that other parts of the internal circuitry may be moved external. For example, a power source in the form of an RF/EM converter may be provided on the antenna member 279, as well as a battery. In another example, some or all of the logic may be moved to the antenna member, as well as the restricted access storage for a target key. Of course, this latter configuration may be less secure, but may be useful to some applications.
- the switch and logic for the RFA device will remain within the target enclosure due to its coupling to utility means, which are within the target enclosure.
- the connector becomes important in terms of its electrical characteristics and requirements.
- the power storage and modulator/demodulator functions can be moved to the antenna side of the connector.
- the output of the modulator/demodulator is a pulse train of a much lower frequency riding on a DC level. This signal is not nearly as critical in terms of its connector requirements.
- the components that must move to the antenna side are small and inexpensive, and can be discarded along with the antenna.
- connectors such as the smart card interface, or the ZIF FFC type to be used at all RF frequencies.
- a major advantage of these connectors is that they use only exposed contacts on the antenna substrate for the connection. In this configuration an electro-mechanical connector on the antenna is not necessary. This drastically reduces cost and complexity for the antenna.
- a further advantage is that the matching network is now contained only on the antenna and is not affected by the connector, or internal RFA device that the manufacturer will integrate into the target. Alternatively, the entire RFA device may also be incorporated as part of the disposable element.
- the internal RFA device is integrated into the connector which mounts to the internal PCB of the target. This means that the manufacturer only has to place a single part on their internal board, and place a corresponding hole in their enclosure for the antenna connection.
- the connector and RFA assembly can utilize thru hole or SMT leads, and may also include mechanical locating mechanisms, or mechanical attachment mechanisms.
- FIG. 10 shows another example of the antenna member.
- the housing has a printed circuit board holding an internal RFA device, which is integrally formed with a connector piece.
- This arrangement is particularly useful when using an existing audio, video, data, or power connector on the target.
- the internal audio circuitry is typically constructed to operate at relatively low frequencies, for example less than 100 kHz, and in some cases may be designed to operate at less than 30 kHz. Accordingly, the otherwise desirable 900 megahertz or other radiofrequency signal received by the external antenna may not be robustly or effectively communicated into the internal RFA device when at a radio frequency. Accordingly, the radio frequency signal is demodulated to a lower frequency using the modulator- demodulator, which is mounted on the antenna member.
- the antenna may receive a 900 MHz RF communication, and demodulate that signal into the lower frequency signal capable of being transmitted through the audio level connector.
- a relatively low-frequency signal may be received by the internal RFA device, and used to change the state of the its switch.
- the RFA device can communicate and interface to the target.
- a system provided to isolate the RFA device from the target during RF communication with the reader.
- the RFA device is powered by the RF energy from the reader.
- the target is not powered, and is prevented from drawing energy from the RFA device during this time.
- the target 300 Once the target 300 is activated and powered, it provides any needed power to the RFA device, and interfaces with the output line as shown in Figure 11.
- power or output signal isolation is achieved by adding 2 switches, SWl (304), and SW2 (305) between the internal RFA device 302, and the target circuitry 306.
- the target circuitry 306 which interfaces to the internal RFA device will typically consist of a power supply 309 (PS), and a microprocessor (uP) 311. Since both the PS 309 output (VCC) and the input to uP 311 will be low during RF activation, both SWl and SW2 are opened during RF activation.
- SWl and SW2 can be implemented by a number of means including, but not limited too: diodes, bipolar devices, FETS, CMOS switches, etc.
- SWl and SW2 can be controlled either by the target power supply 309, or other target circuits. When the target is powered on, SWl is turned on supplying power to the internal RFA device.
- SW2 is turned on which allows communication between the internal RFA device and the target uP or other circuits.
- a uP may not be used, but the target can still be activated by using RFA Output to enable or disable its circuitry by any means that the manufacturer deems appropriate.
- VCC can be any voltage but will typically be: +3.3 V, or +5 V.
- Device 310 has an advanced integrated circuit 313 in the same package 311 as an RF device 312.
- Advanced integrated circuit 313 includes microprocessor 314 and integrated circuits 315, 316, and 317. It will be appreciated that other semiconductor or electronic components may be part of the advanced integrated circuit device 313.
- the arrangement and connection of components is similar to connections and arrangements for multi-chip modules (MCM) and system in a package (SIP) devices.
- MCM multi-chip modules
- SIP system in a package
- Device 310 operates in a manner similar to device to 235 described with reference to figure 6a, and therefore will not be described in detail.
- device 310 has an RF device 312, which has an output whose state is controlled by a switch.
- the switch In one state, the switch is coupled to ground, and in a second state the switch is allowed to float.
- the switch is set responsive to a received RF communication, and uses a low-power power circuit to facilitate changing the state of the switch.
- the reset port for the microprocessor couples to the output of the RF device 312, as well as to the reset pin for the package enclosure 311.
- the switch may either be in a closed configuration where it shunts to ground, or in an open state where it floats.
- the reset pin on the package 311 may either be in a reset state (pulled to ground) or in an operational state where the pin floats or is set to "1".
- the switch remains closed, and the microprocessor and the advanced integrated circuit device is not allowed to operate, irrespective of state of the reset pin.
- the switch has been opened responsive to an authorization, the advanced integrated circuit device operates normally. That is, it resets when a reset signal is received on the reset pin of the target, and operates normally when no reset signal is present.
- FIG 1 Ib another RP controlled advanced integrated circuit device is illustrated.
- the device illustrated in figure 1 Ib is similar to the device discussed with reference to figure 1 Ia, so will not be described in detail.
- the device 310 has an RF device having a switch as previously described, but also has additional conditional logic.
- the conditional logic is an AND gate.
- the AND gate has two inputs, and an output that is connected to the output line of the RF device 312. One input to the AND gate comes directly from the reset pin on the package, while the other input to the AND gate comes from the switch.
- the switch is set responsive to a received RF communication, and is initially set closed (0) until authorized, in which case the switch changes to an open (1) condition.
- the microprocessor As illustrated in the truth table, if the RF switch is in the closed position, then the output line is set low, and therefore the reset port for the microprocessor is also in a low or "0" state. In this state, the microprocessor continuously resets, and is therefore compromised and not able to fully function. However, after the switch has been set to its open state responsive to authorization, then the microprocessor and the advanced integrated circuit device responds normally to the reset pin. For example, when the reset pin on the package 311 is set to 0, that is, a reset is desired, the microprocessor will again reset. But, when the reset pin is high, or in its operational state, then the output line from the RF logic 312 becomes 1 or floats, and thereby enables the microprocessor to function in its fully operational state. It will be appreciated that other advanced integrated circuit devices may use different states for enabling and disabling operation, and that minor alterations to circuitry may be made to accommodate these differences.
- Method 330 has an RP device arranged with an advanced integrated circuit as shown in block 341.
- the RP device has a switch state 339 that is initially set at a first state.
- this first state may cause the reset pin of the advanced integrated circuit device to be pulled to ground or to a disabled state.
- the advanced integrated circuit monitors the state of the switch and operates at a first utility level as shown in block 332.
- the first utility level is a compromised condition.
- other states of operation may be used.
- the microprocessor may be operated in a limited or demonstration mode. It will be appreciated that multiple levels of utility may be enabled.
- the device is passed proximate to an activation system, and receives an RF activation signal as shown in block 333.
- the RF signal has the appropriate authorization code
- the device's low power source changes the state of the switch to a second state as shown in block 334.
- the device will be powered off when the low power source is used to switch the state of the switch.
- the low- power source may also be used to change a visual indicator on the microprocessor or device so that a consumer or clerk would be aware that the microprocessor has been activated.
- the advanced integrated circuit After activation, when the advanced integrated circuit is placed into a power- on condition, the advanced integrated circuit monitors the switch and finds the switch to be in state two. Accordingly, the. integrated circuit operates at a second utility.
- the second utility is the full operational capability of the microprocessor or advanced integrated circuit device.
- the internal RPA device 327 can utilize an "Enable" line 326 as shown in Figure 12.
- SW3 serves to isolate this line 326 in a manner similar to SW2 which was previously described.
- the Enable line 326 is an input to the internal RPA device from the target 325 microprocessor (uP), microcontroller 328, or other circuitry. It can be a state change, or a serial data stream.
- the internal RFA device can utilize this data stream along with its private key to output another serial data stream to the target microprocessor (uP), microcontroller, or other circuitry. This allows any number of encryption algorithms to be utilized which are tied to a private key known only to the manufacturer.
- the output data stream will change depending upon the encryption algorithm in a way only known to the manufacturer. It is also possible to integrate a low power microprocessor, microcontroller, or custom circuitry along with the internal RFA device function on a single silicon substrate. This provides a high level of tamper-proof protection if a OTP microprocessor, microcontroller, or custom circuitry with on-board EPROM is utilized. The microprocessor, microcontroller, or custom circuitry could securely communicate with the main system processor via an SPI, or I2C serial data link. [00102] The internal RFA device can also be utilized to activate targets that do not have microprocessors.
- the internal RFA device 352 can be used to turn on a power MOSFET 351 in series with load as shown in Figure 13.
- the power MOSFET 351 can be utilized in a way to eliminate the need for SW2.
- the gate of the FET 351 will not load the internal RFA device during RF activation.
- SWl is activated by the trigger switch of the cordless drill.
- the manufacturer may choose to encapsulate all of the circuitry for additional tamper proofing.
- the power MOSFET could be replaced by a solid state switch.
- a simple AC / DC converter could be used to power the RFA chip.
- Target 375 has an internal RFA device 376 that also is coupled to a battery 377 in order to increase versatility.
- Previously discussed internal RFA devices may also use this approach.
- An on-board battery 377 allows the internal RFA device to be "active". Thus, the internal RFA device and its functions can be powered by the battery 377. It no longer requires externally received RF energy to power it.
- One benefit of this approach is the increased frequency range that the internal RFA device would function over.
- An RF amplifier can be built on the front of the internal RFA device to improve receive sensitivity, and a RP power amplifier can also be built for transmission back to the reader.
- FIG. 14 shows an internal RFA device 376 that is powered by a small 1.5V battery 377. Any battery technology can be utilized, but a small primary battery would be preferred.
- the battery provides power to the internal RFA device as well as to the a power circuit, hi operation, the power circuit would be in sleep mode until activation occurs. When the internal RFA device output becomes active, the power circuit wakes up and provides its higher power function.
- the power circuit provides power to a motor or solenoid to provide mechanical motion. This mechanical motion could provide mechanical activation of the target by either locking or unlocking a mechanical function of the target in order to allow functionality.
- Audible, ultrasonic, optical, thermal, and any other function that require power can be utilized. This allows not only activation of the target by various means, but also can provide an indication back to the check-out clerk, or customer that the product has indeed been activated.
- the battery can provide energy to a LED indicator that is visible through a clear window in the target packaging. When successful activation has been achieved, the LED can be turned on (100% or blinking), to indicate activation.
- An alternate approach is to supply the LED as a stick-on label with a printed antenna that is applied to the outside of the target's package. When successful activation occurs, the battery and power circuit turn on a small transmitter.
- the antenna coupled to the internal RFA device may be constructed out of the same material/process used to construct the energy storage element (e.g. a thin-film battery) or some other element of the target (e.g. the materials comprising a reflective layer of an optical disc).
- the RFA devices described herein may be applied to a wide variety of non electrical/electronic targets for example: a. An optical disc with an embedded RFA device comprising an electro-optic film that acts as an optical shutter (Opens' and 'closes') that allows or disallows an interrogating laser light from reading the data structures contained within the disc. b.
- a media such as a document, passport, ticket, credit/debit or stored value card, optical disc with an embedded RFA device comprising electro-optic material that cover or reveal underlying content upon activation.
- a watch with an RFA device comprising an electro-mechanical actuator that prevents/ enables the watch's movements from working.
- a battery with an RFA device comprising electro-chemical material incorporated into a charge indicator.
- a target e.g. a computer
- individual options e.g. preloaded software or content, or hardware features
- enter preferences e.g. user or retailer name, configuration information etc.
- An RFA device configured to receive and output multiple data elements such as passwords or keys to decrypt preloaded software can be used for this purpose.
- targets it is desirable to activate multiple sub-assemblies within a single target to deter theft of the target for its parts.
- An example is a laptop computer which contains multiple valuable sub-assemblies such as a hard disk drive, LCD display, CPU, CD disk drive, etc.
- each subassembly may have its own internal RFA device and is activated by an activation signal to each assembly.
- FIG 15. Another example 400 of how multiple sub-assemblies can be individually activated is shown in Figure 15. [00107] Referring to figure 15, the operation of the switches SWl, SW2, and SW3, and the other blocks except for SAl, and SA2, are similar in operation to the system shown in Figure 12. Because it is desired to disable the uP, and sub-assemblies SAl, and SA2 unless activation of the target occurs, there are some important differences, however. When activation occurs, the internal RFA device remembers that it has been activated. When the target (e.g.
- a laptop computer is powered up or boot power is applied to the uP, SAl, SA2, and the internal RFA device. Since the target's manufacturer knows what the private key is for the particular internal RFA device used in the target, that information can be placed in the boot code section of the uP.
- the processor boots, it sends a data sequence to the internal RFA device enable line, and receives a modified data stream back on the internal RFA device output line. If the output data stream does not match what the boot code expects to see, the uP will not function. Thus, removing the uP without have the internal RFA device and the activation code renders the uP useless.
- the uP Once the uP boots, it sends data to the enable line of the internal RFA device instructing the internal RFA device to send data out to the sub-assemblies SAl, and SA2 telling them to activate.
- a custom chip in SAl, and SA2 compares the data from the RFA chip, to data from the uP. If they do not match, sub-assemblies SAl and SA2 will not function.
- This custom chip, in the sub-assemblies would have custom data encoding of its own built in, that the manufacturer knows about, and that the uP would also know. Without knowing what this encoding is, and without the private key, the sub-assembly will not function.
- the custom data encoding in the sub-assembly chip prevents supplying the same data to the IC inputs and making the sub-assembly function.
- existing connectors on common targets include the AC Power Mains, Audio, Video, DC Power, as well as many others, all of which may be used to couple in the RFA signals for target activation.
- One arrangement is shown in Figure 16 using a target's 425 audio input connector 426 to couple an RFA antenna member 428 to the internal RFA device 429 as an example.
- the target 425 in Figure 16 includes a frequency selective isolation network added to the target between the connector (audio input) and the target circuitry (audio circuits), associated with that connector.
- the RFA antenna member has the mating connector (plug) attached to it which plugs into the connector (jack) on the target. This connector type may change depending upon the function of the connector on the target (e.g. a power supply connector may be different than the audio input connector).
- the isolation network isolates the audio circuits from the RFA antenna member and the internal RFA device. When RF signals are present during the activation process, the RFA signals are passed to the internal RFA device. The target circuits associated with that connector (audio) are isolated from the RFA signal path, and do not affect the RFA signals.
- the RFA antenna may be removed and the target is connected to an audio source by plugging in the audio cable coming from the audio source.
- the isolation network 430 passes the audio signal to the audio circuits 432, and isolates the RFA circuits from the normal functionality of the connector and associated circuits.
- FIG 17 illustrates an electronic device 450 with an external antenna member 452 coupled to an AC connector or power cord 455. It plugs unto the prongs of the pendent AC power cord 455. With an appropriate physical connector the same design could be used for an EEC power entry connector.
- the transceiver / demodulator converts the incoming modulated RF (e.g., 900MHz) signal into a lower frequency (e.g. ⁇ 500KHz) demodulated data stream using appropriate digital encoding techniques. This low frequency ( ⁇ 500 KHz) demodulated signal is coupled to the power cord connector on the target.
- the isolation network which separates the activation data stream from the target power input module, is connected between the AC power connector, and the target power supply.
- inductors It consists of 2 inductors and 2 capacitors. These components are selected based on the frequency ratio between the signal frequency used by the target connector, (in this example 60 Hz), and the activation frequency being used, ( ⁇ 500 KHz). At 500 KHz, the inductors present a high impedance to the activation signals, while the capacitors present a low impedance. Thus, the activation signals couple to the activation circuitry, and the low power supply impedance is isolated by the inductors. When the target is powered by 60 Hz, this situation reverses. The inductors look like a low impedance and couple the 60 Hz energy to the supply, while the capacitors look like a high impedance to the 60 Hz energy, and prevents the 60 Hz from coupling into the activation circuitry.
- FIG. 18 illustrates an electronic device 460 with an external antenna member 462 coupled to an audio input port 465.
- Audio signals require bandwidths as high as 20 KHz, which means that the ratio of the activation signals to the audio signals is less than for the previous 60 Hz power example. This lower ratio may require a more complex filter topology in order to achieve the required isolation of the signals.
- a shunt capacitor in addition to the inductor has been added in the audio path. This results in a filter with more attenuation (sharper cutoff characteristic) for the activation signals. Since the audio input can be low level, additional components may be added to prevent damage to the audio input stages. A simple dual diode clamp with an appropriately sized resistor can accomplish this.
- the activation power diode Dl When the target is powered in the normal operational state, the activation power diode Dl is reverse biased by the target power, and thus presents a high impedance to the audio signal. This isolates the activation circuitry from the audio signal, as well as isolating the audio circuitry from any noise sources in the activation circuitry.
- FIG 19 illustrates an electronic device 470 with an external antenna member 472 coupled to an audio output port 475.
- the filter topology may be more complex at audio frequencies.
- the connector is an audio output, a different topology is required to protect the audio output circuits from overload.
- a simple 2 pole LC filter is shown, more poles may be required in order to achieve the required isolation of the activation signals without affecting the audio frequency response.
- FIG. 20 illustrates an electronic device 480 with an external antenna member 482 coupled to a connector 385 for a device which provides a source of DC power for other devices, i.e. Power-Source Equipment (PSE).
- PSE Power-Source Equipment
- the isolation network may not require its own filter capacitor.
- Figure 21 illustrates an electronic device 490 with an external antenna member 492 coupled to a connector 495 for a target which is powered by an external DC supply, such as an AC wall socket regulated DC supply.
- an external DC supply such as an AC wall socket regulated DC supply.
- This type of target is referred to as a Powered Device (PD).
- the isolation network for the target power supply consists of a single inductor.
- the target power supply's input filter capacitor is used with this inductor to form a low pass filter which provides a high impedance to the activation signals, and keeps the activation signal out of the power supply circuitry.
- the inductor helps attenuate external high frequency noise.
- Figure 22 illustrates an electronic device 500 with an external antenna member 502 coupled to a video input 505. Because video signals overlay the activation signals in the frequency domain, passive filter isolation networks are not effective at isolating the signals, hi these situations, isolation may be achieved by a switching device such as a relay or solid state switch, which is energized by target power during normal target operation. During activation, when the target is un-powered, relay Kl routes the activation signals to the activation circuitry. When the target is powered, it energizes relay Kl, which routes the video signal to the normal target circuits rather than the activation input.
- a switching device such as a relay or solid state switch
- Target 525 has an RFA device installed inside the housing 527 of target 525.
- the RFA device had its switch set to disable or substantially compromise the utility of the target.
- the utility can be, for example, the ability to power-on the target, or to fully use the features or benefits of the target device. In another example, the utility may be the aesthetic appeal of the target.
- the utility may be the ability for another device, such as a DVD player or a game console, to read information stored on the target.
- the RFA device 529 has an antenna 531 and a demodulator/modulator 535 for receiving an RF signal from an RF source.
- the RF source is an RF transmitter at a point-of-sale terminal.
- the RFA device also has a power source 533.
- the power source 533 may be associated with the demodulator/modulator circuit 535 for converting RF power to a usable electrical energy.
- power 533 may be a battery, or may be connected to an operational power source for target 525.
- the RFA device has a switch 537 that has been set during manufacturing to a position that causes the target's utility 544 to be unavailable.
- the target utility 544 communicates with switch 537 through a target interface 542.
- the target interface may be, for example, a power line, a logic line, a memory line, a multi-line interface, or an internal optical link. It will be appreciated that other ways may be used to interface the target utility to the switch 537.
- the target interface 542 may be dependent upon the particular physical construction of the RFA device 529.
- the RFA device may be constructed as an integrated circuit, in which case the target interface 542 may be a pin on an IC package device.
- the target interface 542 may couple the IC pin to one of the internal layers of a PC board to reduce tampering.
- the RFA device is a surface mount package, hi this case, the target interface 542 will be constructed as a pad or terminal interface on the surface mount package. It will be appreciated that other types of target interfaces may be used dependent on the physical packaging for the RFA device.
- a consumer may take target 525 to a point-of-sale terminal, pay for the target, and have the point-of-sale clerk confirm that the user is authorized to have an activated target.
- the point-of-sale terminal may transmit an RF signal to antenna 531.
- Antenna 531 cooperating with the demodulator modulator 535 and power source 533, receives an RF signal sufficient to change switch 537 to a different state.
- switch 537 is a fuse which is blown by the application of power 533.
- switch 537 is a change effecting device such as an electro-optical material.
- the electro-optical material changes state, which may be detected by the target utility through the target interface.
- the switch 537 Once the switch 537 is in its operational state, the next time the target utility 544 is activated, it will detect the new position of the switch 537 and allow the target to fully operate. Accordingly, the target 525 was shipped through the distribution channels in a disabled state, and upon authorization from a point of sale system, was activated using an RF signal, hi some arrangements, a confirmation signal may be sent back to the point-of- sale to device to confirm activation activity.
- Target 550 is similar to target 525 previously described, so will not be described in detail.
- Target 550 has a housing 566 that has a case 564 which shields the internal RFA device 568 from RF signals. Because of the shielding, the antenna member 552 is constructed to be attached external to case 564. More particularly, external RFA module 552 has an antenna structure 555, a power structure 557, and the demodulator modulator structure 559.
- the antenna member 552 may be constructed to couple through connector 562 to the internal RFA device 568.
- the connector 562 may be designed specially to receive the external antenna module 552, or may be a standard connector, as described with reference to figures 17 to 22.
- Connector 562 enables a received RP activation signal to be received in to switch 572, which then enables target utility 569 to determine whether or not the switch is in its active state. More particularly, the target utility 569 communicates through target interface to switch 572.
- the internal RPA device 568 may be constructed as an integrated circuit DIP, a surface mount package, or another component or module structure. After target 550 has been activated, the antenna member 552 may be removed from the connector and disposed. In some arrangements, a confirmation signal may be sent back to the point-of-sale to device to confirm activation activity. [00120] Referring now to figure 25, another target device 600 is illustrated. Target device 600 has a housing 617 that has a case 615 that provides RF shielding.
- an external antenna module 602 is positioned to efficiently receive RF communication signals from an RF reader through its antenna 604.
- the antenna cooperates with the demodulator modulator 608 to pass power or data signals to an RF ID portion 619.
- the RF ID portion 619 may be placed inside the target housing, or may be placed in another protected position.
- the RF ID portion 619 may be placed inside the target's packaging, while the external antenna module 602 may be placed on the outside of the package.
- the external module 602 may connect to the RF ID portion 619 in a variety of ways.
- the external model 602 may connect to a connector on the device.
- the adapter 610 may be constructed to cooperate with an existing connector 613 on the device, or may be specially constructed for the RF ID application.
- target 600 is taken by a consumer to a point-of-sale checkout terminal.
- an RF reader makes an RF inquiry to the antenna 604.
- Antenna 604 cooperates with the demodulator modulator 608 to retrieve an identifier 621 stored in logic/memory block 622.
- the RF reader also provides RF power source 606 for powering logical and transmission functions.
- the identifier 621 is wirelessly communicated back to the RF reader through antenna 604. By separating the RF ID portion 619 from its antenna portion 602, a more effective and robust RF ID system is enabled.
- RF ID device 625 has a target package 627.
- An RF ID 629 is attached to the target or installed within the target. However, the RF ID portion 629 is shielded from effective RF signals, so an antenna portion 631 is separately provided.
- the antenna portion 631 may be installed on another area of the target having better RF characteristics, or may be installed on a different area of target packaging.
- the RF ID antenna portion 631 may be disposable, or may be more permanently affixed to facilitate warranty or repair services.
Landscapes
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Storage Device Security (AREA)
- Transmitters (AREA)
Abstract
A radio frequency controller device enables the utility of a target to be controlled using an RF communication. The radio frequency controller device has a switch that is set to a defined state responsive to the RF communication. More particularly, conditional logic circuitry uses the RF communication to determine if the target's utility should be changed, and sets the state of the switch accordingly. The radio frequency controller device also has a target interface that allows the target to determine the state of the switch, and based on the state of the switch, a different utility will be available for the target. The radio frequency controller device also has an antenna for the RF communication, as well as a demodulator/modulator circuit. When used to control the utility of an electrical or electronic device, the radio frequency controller device has a low-power circuit portion that is used to set the state of the switch responsive to the RF communication, and also has a full power circuit portion that communicates with the target. In this way, the state of the switch may be set when the target is in a power-off condition, and the target is able to determine the state of the switch when the target is activated.
Description
TITLE Device and Method for Selectively Controlling the Utility of an Integrated Circuit Device
BACKGROUND
1. RELATED APPLICATIONS
[0001] The present application claims priority to U.S. provisional patent application 60/654,384, filed February 18, 2005, entitled "A Method and Means of RF Activation of a Target"; and is also a continuation-in-part to co-pending U.S. patent application number 11/296,082 filed December 7, 2005 and entitled "Method and System for Identifying a Target"; to U.S. patent application number 11/296,547 filed December 7, 2005 and entitled "Device and Method for Selectively Controlling a Processing Device"; to U.S. patent application number 11/296,081 filed December 7, 2005 and entitled "Device and Method for Selectively Controlling the Utility of a Target"; and to U.S. patent application number 11/295,867 filed December 7, 2005 and entitled "Device and Method for Selectively Activating a Target"; all of which are incorporated herein by reference.
2. FIELD
[0002] The present invention relates to a target that is enabled to have its utility controlled using RF communication, hi a particular example, the invention uses radio frequency (RF) devices and processes to set the level of utility available for advanced integrated circuit devices such as processors, MCM's (multi-chip module), or SIPs (system in a package) and the subsystems and finished goods into which they are incorporated
3. DESCRIPTION OF RELATED ART
[0003] Management of the supply chain is a concern for most manufactures, shippers, and retailers. In order to facilitate efficient check-out of products, manufacturers have place bar code labels on many consumer products. In a similar way, manufacturers and shippers have also labeled pallets of products with bar-code labels to increase shipping efficiency. However, bar code readers require a line-of-site reading, so can not, for example, account for products in the middle of a pallet, or for products buried in a
consumer's cart. An RFID (radio frequency identification) system overcomes this problem by labeling a product with an RFID tag. The RFID tag is attached to a product, and when interrogated by an associated RF reader, responds with its identification number. In this way, products can be identified and tracked without the need for line of sight scanning. Unfortunately, RFID has been slow to be adopted, due to the relatively high cost of RFID tags themselves, and to limitations in reading the RFID tags. For example, although RFID tags do not need line-of-sight scanning, the RFID tags must be in a position to receive and transmit low-level RF signals. This not only limits where on a product package an RFDD label may be placed, but also causes errors when a product is placed in a position where the label is shielded from the RF reader. [0004] Theft is also serious and growing problem in the distribution of products, hi one example, electronic devices continue to shrink in size, while increasing their utility. As these electronic devices become smaller and more capable, they also become easier and more attractive to steal. Devices, such as digital cameras, DVD players, MP3 players, and game devices are popular targets of theft, not only in the retail store by consumers, but also by others in the distribution chain. For example, retail store employees, shippers, warehousers, and even employees of the manufacturer often steal products, and even boxes of products, for their own use or to sell. Other types of products are also subject to theft, such as DVDs, CDs, game discs, game cartridges, and other types of media. These types of products are also in high demand, and being relatively small and valuable, are easy and attractive to steal.
[0005] In another example, microprocessors and other advanced integrated circuit devices are easy targets for theft. These advanced integrated circuit devices are small, expensive, and are easily sold in a "black" market, or readily incorporated into a thief s system or product. These advanced integrated circuit devices may consist of a single integrated circuit in a package, such as for some microprocessors, microcontrollers, or memory devices, or may have multiple integrated circuits in a single package. In this later construction, often referred to as a multi-chip module (MCM), several integrated circuits cooperate to provide advanced functionality. For example, an MCM may have a processor, modulators, amplifiers, and support circuitry for a complete wireless radio
system. This radio MCM may fit in a single package that connects into a target device through pins or a ball-grid array. The advanced integrated circuit may also be constructed for surface mount, and therefore may be provided in a reel of parts for automatic attachment to a target device. Another type of advanced integrated circuit device is the System in a Package, or SIP. An SIP is similar to an MCM in that it has multiple integrated circuit devices in a single package, but the level of integration among the integrated circuits may be higher. As the processors, MCM 's and SIP's advance, they have become smaller, making them even easier targets for theft. [0006] It is particularly difficult to implement an anti-theft circuit or scheme with these advanced integrated circuit devices.
First, these advanced integrated circuits may be sold boxed separately, and in this state will have no power for activating an anti-theft circuit.
Second, it is risky to have a clerk handle a circuit to disable any anti-theft mechanism. These devices are extremely sensitive to ESD (electro-static discharge), and unless strict anti-static processes are carefully followed, a clerk can easily destroy the device in the handling process.
Third, it is often commercially impractical to modify an integrated circuit to incorporate an anti-theft scheme. Some devices, such as advanced microprocessors, take years to design and implement, and would require substantial modifications of masks and processes, as well as additional and costly manufacturing steps. Further, there is limited space and power on these processors, and their designers already compete to add more advanced functionality, and thus would be highly resistant to dedicating scarce space and power to any new anti-theft circuitry.
And Fourth, many of these advanced integrated circuits have standard connection geometries, and are already designed into a wide range of products. In this way, an anti-theft circuit could not alter the pin or grid arrangement, and must be implemented within the current package-size limitations. For example, millions of computing devices are sold each year with Intel processors, and each processor has specific pin or grid connections, as well as an expected package
geometry. Any change to the pin or grid arrangement, or any violation of the size restrictions, could cause a substantial redesign effort for Intel's customers. Accordingly, any change to pin or grid arrangements or package sizing would be strongly resisted, even if the theft system would benefit the overall distribution chain.
[0007] From the facility where they are manufactured to the retail point-of-sale (POS) where they are sold many high-value consumer products are vulnerable to theft. Various security techniques are used to minimize the losses (video cameras, security staff, electronic tagging, storing high-value items behind locked cabinets etc.). Despite these efforts theft of high- value targets such as DVD's, CD's and video games; portable video game players, DVD players, digital cameras, computers, printers, televisions and the like cost manufacturers and retailers billions of dollars per year.
[0008] Such rampant theft increase the cost of manufacturing, shipping, and selling of products. Each entity in the distribution chain is at risk for theft, and must take steps to reduce or control the level of theft. This cost is ultimately borne by the legitimate purchaser, which places an unfair "theft tax" on purchased products. Also, since may products are so easily stolen from a retail environment, retailers must take extraordinary steps to secure products. For example, DVDs, CDs, and small electronic devices are often packaged in oversized holders to make them more difficult to hide. These holders, however, also interfere with a consumers ability to interact with the product, ultimately making the product less attractive to the consumer. In another example, retail stores may place their most valuable and easily stolen products in locked cases. In this way, retail consumers are completely distanced from these products, which reduces theft, but also makes the products difficult to purchase. The consumer cannot read the full labeling on these locked-up products, can not physically interact with them, and must get the attention of a retail clerk, who might have a key, in order to get to the product. In another attempted solution, retail stores put security tags on products, which are intended to be disabled at the check stand upon purchase. If a consumer leaves the store with a live tag, then an alarm sounds. A guard or clerk is expected to stop the consumer and determine if the consumer has shoplifted a product. This process may be dangerous for the guard or
clerk, and, since many of the alarms are false, causes undo stress for law-abiding consumers.
[0009] None of these attempts to stop retail theft has worked, and all make the retail experience less attractive to the consumer. In this way, the retailer is in the untenable position of having to accommodate and accept a certain (and sometimes significant) level of theft in order to maintain an attractive and desirable retail environment for paying customers. Further, neither the oversized holders, the locked cases, nor the guards address the significant level of theft that occurs between the manufacturer's dock to the retail shelf. Accordingly, the entire distribution chain has resigned itself to an "acceptable" level of theft, and passes the cost of theft on to the legitimate consumer. [0010] The distribution of products faces other challenges. For example, consumers want to choose products that have a particular set of functions or utility, and find it desirable to purchase products matched to their specific needs. Accordingly, manufacturers often manufacture a product in several difference models, with each model having a different set of features. Although this is desirable from the consumer's standpoint, it complicates the manufacturing, shipping, inventorying, shelving, and retailing processes. This problem exists in the configuration of electronic products, computers, gaming systems, DVDs, CDs, game cartridges, for example. For a specific example, a DVD movie disc may be available in a family version, a theater version, and an "uncut" version. Each has a different age restriction, and will appeal to different and significant markets. Accordingly, three different versions must be manufacture, shipped, inventoried, shelved, and managed. A similar problem exists with feature sets for games, computers, and other products.
[0011] Challenges also exist for non-commercial distribution of goods. For example, the military stores, transports, and maintains weapons and gear that is subject to theft and misuse. These weapons and gear must be available for rapid deployment and use, but yet must be sufficiently controlled so that they do not fall into enemy hands, or used in ways not approved by military command.
SUMMARY
[0012] Briefly, the present invention provides a radio frequency controller device that enables the utility of a target to be controlled using an RF communication. The radio frequency controller device has a switch that is set to a defined state responsive to the RF communication. More particularly, conditional logic circuitry uses the RF communication to determine if the target's utility should be changed, and sets the state of the switch accordingly. The radio frequency controller device also has a target interface that allows the target to determine the state of the switch, and based on the state of the switch, a different utility will be available for the target. The radio frequency controller device also has an antenna for the RF communication, as well as a demodulator/modulator circuit. When used to control the utility of an electrical or electronic device, the radio frequency controller device has a low-power circuit portion that is used to set the state of the switch responsive to the RF communication, and also has a full power circuit portion that communicates with the target. In this way, the state of the switch may be set when the target is in a power-off condition, and the target is able to determine the state of the switch when the target is activated.
[0013] In one arrangement, the radio frequency controller device has an internal module inside the target, and an external module outside the target. The external module has the antenna, so the antenna is able to robustly provided RF communication. The external module may electrically and mechanically connect to the target through a connector, such as a custom connector, power connector, audio connector, or video connector. In some cases, the connector may not sufficiently pass RF signals, so the RF signal is demodulated to a lower frequency using circuitry on the external module. Also, some standard connectors are likely to connect to target operating circuitry, so an isolation circuit may be useful to properly route signals between the external module and the internal module. The isolation circuit may also be useful to protect radio frequency controller device circuits from effects of the target circuit, as well as protect the target circuits from effects of the radio frequency controller device. The radio frequency controller device may be constructed, for example, as an integrated circuit DIP package, a surface mount package, silicon die, or as a printed circuit.
[0014] Advantageously, the disclosed radio frequency controller device enables an RF device to selectively change the utility of a target. The radio frequency controller device may be readily incorporated into targets such as electrical or electronic devices, so enables adaptable manufacturing process, flexible distribution accounting, and a denial- of-benefit security system. Since the radio frequency controller device may be constructed as commonly used surface mount or DIP packages, the radio frequency controller device may be economically installed in many electronic, electrical, and media devices. Also, the radio frequency controller device may be constructed as a single package, or may be constructed as- an internal module connected to an external module, which allows for the flexible positioning of device components. In this way, components that need RF communication capability may be placed in areas with improved RF reception. By separating the antenna or other RF-sensitive components from other logic circuitry, more robust detection is enabled. Also, the increased placement flexibility enables an RF control capability for a wider range of products, and allows for a more aesthetically appealing arrangement of components. For example, the externally visible portions of the radio frequency controller device may be made smaller and less intrusive, with the memory and logic portions placed in an out-of-sight location.,
BRIEF DESCRIPTION OF DRAWINGS
[0015] Fig. 1 is a block diagram of a radio frequency activation device with controlled utility.
[0016] Fig. 2 is a block diagram of a radio frequency activation device with controlled utility.
[0017] Fig. 3 is a block diagram of a prior art RFID chip.
[0018] Fig. 4 is a block diagram of a process for activating a target.
[0019] Fig. 5 is a block diagram of an RFA device.
[0020] Fig. 6 is a block diagram of an RFA device.
[0021] Figs. 6a-6e are block diagrams of an RF controlled advanced IC device.
[0022] Figs. 6f is a block diagram of a controlled advanced IC device.
[0023] Fig. 7 is a block diagram of an RFA device
[0024] Fig. 8 is an illustration of an electronic device with controlled utility having an external antenna member.
[0025] Fig. 9 is a diagram of an electronic device with controlled utility having an external antenna member.
[0026] Fig. 10 is a diagram of an electronic device with controlled utility having an external antenna member
[0027] Fig. 11 is a block diagram of a target activated using an RFA internal device.
[0028] Figs. 11a and 1 Ib are block diagrams of an RF controlled advanced IC device.
[0029] Fig. l ie is a flowchart of a method for using an RF controlled advanced IC device.
[0030] Fig. 12 is a block diagram of a target activated using an RFA internal device.
[0031] Fig. 13 is a block diagram of a target activated using an RFA internal device..
[0032] Fig. 14 is a block diagram of a target activated using an RFA internal device.
[0033] Fig. 15 is a block diagram of a target activated using an RFA internal device.
[0034] Fig. 16 is a block diagram of a target activated using an RFA internal device.
[0035] Fig. 17 is a circuit diagram of a target having controlled utility.
[0036] Fig. 18 is a circuit diagram of a target having controlled utility.
[0037] Fig. 19 is a circuit diagram of a target having controlled utility.
[0038] Fig. 20 is a circuit diagram of a target having controlled utility.
[0039] Fig. 21 is a circuit diagram of a target having controlled utility.
[0040] Fig. 22 is a circuit diagram of a target having controlled utility.
[0041] Fig. 23 is a block diagram of a radio frequency activation device with controlled activation.
[0042] Fig. 24 is a block diagram of a radio frequency activation device with controlled activation.
[0043] Fig. 25 is a block diagram of a radio frequency identification device.
[0044] Fig. 26 is a block diagram of a radio frequency identification device.
DETAILED DESCRIPTION
[0045] Referring now to figure 1, a target device 10 is illustrated. Target device 10 includes a radio frequency activation (RFA) device 14 within the housing 12 of the target. The RFA device is used for controlling the utility of the target 10. To facilitate ease of manufacture, the RFA device 14 is provided in a package convenient for large- scale production. For example, the RFA device may be in the form of an integrated circuit package, or in the form of a surface mount device. Either way, the RFA device may be easily designed into a target's circuitry or logic, and may be readily installed on a printed circuit board or other substrate. In this way, the RFA device may be included with a target device in a cost effective manner. It will be appreciated that the RFA device may be provided in other manufacture-friendly forms.
[0046] Target 10 may be an electronic device such as a computer, TV, appliance, MP3 player, camera, game counsel, or toy. In another example, the target may be a tangible media, such as an optical disc, DVD, CD, or game cartridge. During manufacture or preparation of the target 10, the RFA device 14 has been incorporated into the target in a way that allows the RFA device 14 to control the utility of the target. For example, the RFA device 14 has a switch 31 that couples to some utility 16 of the target. The switch is coupled to the utility 16 through the target interface, which may be a logic line, a power line, a control line, a multi-line interface, or a memory location. Also, it will be appreciated that the target interface may be selected according to the physical form of the RFA device. For example, if the RFA device is in an integrated circuit DIP package, then the target interface will include an IC pin coupled to a trace in the target's printed circuit board. In the case of a surface mount form, the target interface will include a pad contact to the printed circuit board or other substrate.
[0047] The switch 31 is set by the RFA device according to received data, and is used to control the utility available for the target or for use of the target. More particularly, the switch 31 has multiple states, with each state being associated with an available state of utility for the target, hi a specific application, the switch may be switched between two available states of utility. La operation, the RFA device acts as an interface between two distinct systems. First, the RFA device has a low-power RF circuit that is configured
to receive data from a low-power RF source, and using power received from the RP source, determine if the target is authorized to have its utility changed. If so, the RPA device, using its low-power circuit, sets the switch to the authorized state. The second system is the full power circuit of the target electronic device. This full power target utility circuit may include, for example, microprocessors, power supplies, memory systems, and other electric and electronic components. The target utility circuit couples to the switch in a way that allows the target utility circuit to act according to the state of the switch. For example, each time the target is activated, the target utility circuit tests the state of the switch, and depending of the switch's state, presents a particular level of utility. Stated more succinctly: the state of the switch is set using a low power circuit, which sets the utility available to the full power circuit. In a typical case, the RPA device will also be powered from the full power circuit. In other cases, the RPA device may remain passive when the target is operating.
[0048] When the target 10 enters the distribution chain, the target 10 is set to have one utility. For example, this utility could be a severely comprised utility, where the target has no useful function available. In another example, the utility may be set to a demonstration utility that allows limited demonstration functionality. It will be appreciated that the available utility may be set according the requirements of the specific distribution chain. At some point in the distribution chain, for example, when the target is transferred to a consumer, it may be desirable to change the available utility. Accordingly, when the target in the presence of an activation device at a point-of-sale, the activation device or another reader is able to read an identifier value or other identification from the target. The activation device uses the identifier to generate or retrieve an authorization key. Provided the point-of-sale device has authorization to change the utility of the target, the activation device transmits the authorization key to the RPA device 14. In one example, the activation device reads the ID 29 from the RFA device 14, and transmits the authorization key to the RPA device 14 using an RF (radio frequency) communication. It will be appreciated that other types of wireless communication may be used. For example, the communication may use infrared (IR)
communication in one or both directions. In another example, the target may make physical contact with the activation device for effecting the communications. [0049] The RFA device 14 uses the received authorization key to set the switch 31 to another state. Then, when the consumer tries to use the target 10 in its full-power state, the target utility 16 is able to function according to the new state set in switch 31. In this switch state, the target has a different utility than when the switch was in the first state, which is typically a fully-functioning state. The RFA device 14 has logic 25 coupled to the switch 31 that uses the authorization key to effect a change the switch 31. In one example, the RFA device 14 has a restricted access key 27 that was defined and stored with the RFA device 14 during the manufacturing process for the target 10. This restricted access key may not be externally read, altered, or destroyed, but may be read or otherwise used by the RFA logic 25. This restricted access key 27 may be compared or otherwise used with the received authorization key to determine if the RFA device 14 is enabled to change states of the switch 31.
[0050] In a specific example of target 10, target 10 is illustrated to be an MP3 player. During manufacture of the MP3 target device, an RFA device is installed in the MP3 player. The RFA device may be, for example, an RFA integrated circuit DIP device, a surface mount device, or other circuit module. In the case where the RFA device is a surface mount device, the RFA device is applied to a circuit board of the player in a way that the RFA switch 31 is able to control a utility function 16 of the player. For example, the RFA device may connect to the power source of the player's operational circuitry so that the player will not function until the switch is changed. In another example, the RFA device couples to the decoder processor in the player, and restricts the ability of the player to properly play music files until the switch is in a proper position. In yet another example, the RFA device may couple to the processor, and restrict the options available in the user interface until the switch is in the proper position. In this way, the player may have a limited demonstration interface until the full user interface is enabled by changing the switch. A restricted access key is also stored in the RFA device, and the switch 31 is set to a state so that the MP3 player's utility is compromised.
[0051] The MP3 player is thereby manufactured and ready for sale as a compromised MP3 player that will not properly power-on or function. In this way, the compromised MP3 player would be nearly useless to a consumer, and therefore would be less likely to be a target of theft. The manufacturer has also stored an accessible identification 29 in the RFA device, hi some cases, the identification may be pre-stored in the RPA device, and in others, the manufacturer will assign the E) during the manufacturing process. For example, the accessible identifier may be a stored value that is accessible through, for example, an RFID reader system. The compromised MP3 player may be shipped through the distribution chain and to the retailer with a substantially reduced threat of theft. Also, the retailer may display and make the MP3 player available for customer handling in a retail environment with reduce risk of theft. In this way, reduced security measures may be taken at the retail level, such as using locked cases or sophisticated packaging, since the consumer would obtain no benefit by stealing a nonworking, compromised MP3 player.
[0052] When a consumer decides to purchase the MP3 player, the consumer may take the MP3 player to the point-of-sale terminal and have it passed proximally to an activation device. As the MP3 player is close to the activation device, its accessible ID 29 is read by the activation device by retrieving the stored accessible ID using a wireless or EM (electromagnetic) communication. For example, the communication may be an RF (radio frequency) communication. The communication from the point-of-sale device to the RFA device 14 is though antenna 18. In one arrangement, antenna 18 is able to both receive and transmit data to the point of sale terminal. The point-of-sale terminal may have a network connection to an operation center, and sends the accessible ID value to the operation center. The operation center, which has a database of RFA device identifications associated with their restricted access keys, retrieves the particular authorization key for the RFA device in the MP3 player that is at the point-of-sale device. At the point-of-sale terminal, additional confirmation actions may be taking place. For example, a clerk may be accepting payment from the consumer, or may be checking a consumer's identification or age. These other confirmation criteria may then be used to confirm that the point-of-sale terminal is ready to restore the utility of the MP3 player.
Provided the activation device determines restoration is appropriate, the activation device transmits the authorization key to the RFA device using a wireless communication. The RFA device 14 receives the authorization key, and using its logic 25, compares the authorization key to its pre-stored restricted access key 27. If the keys match, then the RFA device 14 uses its low-power source to change the state of the switch 31. In the new state, the target utility 16 is fully available to consumer.
[0053] In another example, the consumer purchases the MP3 player from an online retailer, and the MP3 player is shipped or mailed to the consumer. In this scenario, several alternatives exist as to where the utility for the MP3 player may be restored. In one alternative, the online retailer has an activation device in their warehouse or shipping department, and a retail employee restores the utility to the MP3 player as part of the shipping process. In another alternative, the MP3 player is shipped with compromised utility, and the shipper has an activation device that they use to restore utility prior or at the time of delivery. In this alternative, the driver of the delivery track may restore utility as the consumer accepts the MP3 player, thereby removing risk of theft during the entire shipping process. In a final alternative, the consumer has a home activation device, and the consumer uses the activation device to restore utility to the MP3 player. In this last alternative, the MP3 player is in a compromised utility from the manufacturer all the way to the consumer's location, and it is the consumer, after the commercial transaction is complete, that finally restores utility to the MP3 player.
[0054] In some cases, the RFA device may have additional circuitry for confirming that the utility has been restored. For example, the state of the switch may be measured, or another test or measurement may be taken. According to whether or not the switch was set successful, a different value may be placed in a confirmation memory. The confirmation memory may be read by an activation device to confirm to the consumer and to the network operations center that activation was successful. By confirming successful activation, the retailer may have a higher degree of confidence of consumer satisfaction, and may accurately and timely report and authorize payment to the supplier of the MP3 player.
[0055] RFA device 14 is constructed to receive an authorization key via a demodulator/modulator 23. Demodulator/modulator 23 may be a wireless communication circuit, such as a radio frequency or electro-magnetic receiver. The RFA device 14 has logic 25 which is configured to receive the authorization code and make a determination if the switch 31 should have its state changed. The logic 25 may include logic structures as well as dynamic or non-volatile memory. In one example, logic 25 uses a target key 27 in making the determination of whether or not the switch can change to another state. In one example, target key 27 has been stored during the manufacturing process in a manner that is not readable using external devices. For example, target key 27 may be placed in a nonvolatile, non erasable and non alterable memory of the RFA device during manufacture. This target key may be the same value as the authorization key, so the logic simply performs a comparison between the restricted access target key 27 and the received authorization key to determine if the switch 31 of the RF device may be changed. It will be understood that other logical processes may be used in making this determination. Provided the logic 25 determines the switch 31 may be changed, the logic causes the switch 31 to change states. In one example, the switch 31 is a change effecting device. The change effecting device may be, for example, an electronic switch, an electrical switch, a fuse, a conditional break in a trace, a logical state, or may be a set of values defined in a memory location, hi another example, the change effecting device is an electrically switchable optical material such as electrochromic material. It will be appreciated that other devices may be used for the change effecting device. [0056] The change effecting device may change state upon the application of an activation power , or may use logical process to set or change values stored in memory. The activation power 21 may be, for example, a separate battery which powers the logic 25, the demodulator/modulator 23, and the switch 31. In another example, the activation power 21 may be a converter for converting a received radio frequency or electromagnetic energy into available power. Also, the activation power may be wholly or partially obtained from a source external to the target. It will be appreciated that other electronic components may be necessary to implement such a converter. In another example, activation power may be provided by the operational power for the full device.
For example, if the full device is an MP3 player, and the MP3 player has an operational rechargeable battery, the rechargeable battery may have sufficient initial charge to power the RFA device while the target is in the distribution chain. In yet another example, activation power may be provided by multiple power sources. For example, a small battery may power the change effecting device, while an RF or EM converter device may power the logic and communication circuit. It will be appreciated that many options and alternatives exist for powering the circuitry within the RFA device 14. [0057] RFA device 14 may have a confirmation circuit or memory with logic 25 which changes state according to the actual or probable state of the switch 31. In some cases, the actual state of the switch may be detected, or the actual state of the switch may be measured. In other cases, the actual states may not be conveniently measured or detected, so some aspect of the change process may be measured or detected instead. In this case, a confirmation that change process was being successfully performed leads to a high probability that the utility of the target was also successfully changed. Accordingly, the confirmation logic may directly detect the state of the switch 31, or may have measured the electrical processes used in making the change. For example, the current passing through a fuse may be measured, and thereby confirm that a sufficient amount of electricity has passed through the fuse to cause it to break. Although not a direct detection of the state of the switch, it is highly probable that the state of the fuse has changed, resulting in a change of state in the switch. In another example, logic 25, and may confirm that logical processes were properly performed for setting the switch. In another example, logic 25 may directly connect to the utility means 16 itself, to confirm that the switch changed. Once logic 25 receives confirmation that the switch changed, that confirmation signal may be communicated to an activator device using a transmitter, or may be read responsive to a request from the activator. The RFA device 14 may therefore provide feedback to the activation and distribution control system to confirm that utility has been changed. This information may then be used to generate reports or to initiate payment to parties within the distribution chain.
[0058] Referring now to figure 2, another target 50 for a distribution control system is illustrated. Target 50 is similar to target 10 described with reference to figure 1 and
therefore will not be discussed in detail. As with target 10, target 50 has a RFA device 51 installed during manufacture, which includes a demodulator/modulator 58 for receiving an authorization code from an external activation device. The demodulator/modulator 58 cooperates with logic 67 to switch the state of the switch 72 between a first state and a second state. Responsive to this change in state, target utility 76 provides a different level of utility for target 50.
[0059] The RFA device 51 may have a power source 56 for powering the communication, logic, and switch. In another example, an operational power source 78 in the target may be used to power certain portions of the RFA device. The RFA device may also have a restricted access target key 68, and an accessible target ID 69. The demodulator/modulator 58 may be used to send the target ID value 69 to an activation device. The RFA device 51 has the primary components of the target stored in a housing 65 of the target. In one example, housing 65 is a case or other enclosure. Since housing 65 or other aspects of the target may restrict wireless communication to components within the housing 65, certain circuits and processes for RFA device 51 are on an external antenna member 52, while an internal RFA portion 67 is inside the housing 65. In the example illustrated in figure 2, the antenna member 52 has the activation power 56, (which may be in the form of a battery or RF/EM converter), demodulator/modulator 58, and an antenna 54. In this way, the circuitry needing clear access to wireless communications is positioned external to the target housing. Other circuitry for changing utility of the target may be positioned in the internal portion 67. It will be appreciated that other circuitry may be moved from the internal portion 67 to the antenna member 52. For example, the target key and logic may be moved externally in some cases. Also, if activation power 56 includes a battery, that battery may be positioned either within the housing 52 or on the antenna member 52.
[0060] The antenna member 52 may be mounted or adhered to the target housing 52, or may be positioned remote from the target and coupled to the target housing 52 through a wired connection. In another example, the antenna member 52 may couple to the target housing 52 through a connector 61 available on the target's case 63. In one example, the target case 63 may have power input ports, on which the antenna member 52 may
temporarily mounted. In such a case, the target 50 would be activated with the antenna member 52 coupled to the power plug of the case 63, and after processing at the activation terminal, the antenna member 52 would be removed from the power plug, and the power plug inserted into a wall outlet to place the electronic device in its operable state. It will be appreciated that other available connectors may be used. For example, an existing audio, video, or data connector may be used. However, when using a standard connector 61, it may be desirable to provide an isolation circuit to protect the RFA circuits from loading effects of the target circuits. The target circuits may load the signals at the RFA IC and prevent proper operation. In some cases, the target could actually damage the RFA IC, for instance when a DC or AC connector is used. The isolation circuit may also protect target circuits from possible detrimental effects of signals passed into the target from antenna member 52. By arranging the antenna member 52 external to the target, more robust communication with the activation device may be maintained, as well as more efficient and. effective power conversion when converting power from an available RF or EM source.
[0061] Generally, the target activation system described with reference to figures 1 and 2 uses a Radio Frequency Activation (RFA) device for selectively activating the target. The RFA device comprises in part a "switch" through which the RFA device is communicatively coupled (data and/or power) to a target. The switch is any mechanism that can be set so that it affects the target's utility (e.g. that prevents the target from functioning properly) and later switched to 'activate' the target (e.g. to restore or enable the target's utility). In certain cases the switch may also serve to de-activate, or disable, the operation of a target based on commands or criteria. In certain cases the switch may serve to control access to media, data, information, instructions/commands etc. (collectively referred to herein as "content") stored in the target. In many embodiments the switch may be logical (e.g. a memory bit) and it may include additional elements/components such as a fuse or electromechanical actuator. RFA devices may comprise different types of "switches" including, but not limited to, logical/data, electronic, electrical, electro-optic ("optical switch or shutter") and electro-mechanical: any mechanism that responds to an electrical stimulus and effects a change in the target.
An RFA device may also comprise an optical switch consisting in part of an ultraviolet, visible or infrared light output.
[0062] Depending on the application, switches may be switched only one time, only a limited number of times, or an unlimited number of times. Further, they may be reversible. The change effected in the target may be temporally offset from the initiation of the RFA switch. For example, an RFA device coupled to an AC powered drill may be 'activated' at the retail check-stand (e.g. a switching relay coupled to the RFA device and the drill's power supply is enabled), but the effect of the switch (the drill powers-up) is realized only when the drill is plugged into AC power. The functions of the RFA device including the switch may be combined in different ways and distributed among one or more components / locations in, or coupled, to a target. Further the RFA device may be configured in such a way that some of the functions may be physically decoupled (removed) from the target after the activation has taken place. The antenna, for instance, might be removed. Many of the circuits and processes described herein are applicable to conventional passive and active RFID tags arid similar wireless technologies or products. [0063] A typical known passive RFID tag 175 is shown in figure 3. It consists of an antenna, an impedance matching network, power storage, a modulator / demodulator, memory and logic. The antenna is usually configured on a Mylar® or Kapton® substrate 177 and is connected to a silicon based RFID chip portion 179 through an impedance matching network. The chip receives energy from the antenna through the matching network and stores it within the chip to power the memory and logic functions. A modulator / demodulator allows digital data to be transmitted to, or received from the tag. The memory block typically contains a serial number in a read-only area of memory. Additional memory storage is often provided for storing other data such as product or manufacturing information, distribution, service, or interrogation history, etc. Different types of tags may provide OTP (One Time Programming) or unlimited programming via EEPROM technology. The public identification and other information typically stored in memory are accessible via an external wireless reader.
[0064] Unlike the known RFID chip, the RFA device is communicatively coupled to the target (typically via electrical contacts) and it may transmit/receive data, power, or
commands with the target. The RFA device also contains logic and typically data, instructions, or commands for conditionally switching the switch based on input received from a device external to the device (e.g. an' RF activation device). An RFA device for example, may allow the manufacturer, RFA device manufacturer or a third party to store a hidden or "private key" into write-once memory in addition to the public key and other information. This private key may be randomly generated or it may be based on an algorithm. Further, the RFA device may contain a separate blank area of memory to store a key received from an external source (e.g. an RF activator at the point-of-sale). In this example, logic in the RFA device (pre-programmed instructions or commands) compares the received key to the previously stored private key. If they match (or some other conditional state is realized), the logic will switch the switch (e.g. set a memory bit or blow a fuse), hi such a configuration the stored private key would be inaccessible to an RFDD reader or any external device. The key, commands, and instructions that define the logical comparison process are typically stored in write-once memory, or permanently configured in hardware or firmware.
[0065] In certain embodiments, the logic in the RFA device may be supplemented or combined with additional instructions or commands received from outside the RFA device. There may also be more than one private key stored in memory (also typically write-once memory) within the RFA chip. The logic effectuated may be conditional upon which private key, or combination of private keys, that match the received key. At a minimum the logic consists of instructions or commands embedded in the RFA device, which are sufficient to initiate action upon the realization of a conditional state. In many embodiments the logic is entirely contained within the RFA device. [0066] In some embodiments, the private key (or private keys) stored within the RFA device may enable cryptographic methods to be used to protect data, instructions or commands transmitted to, and received by, the RFA device or the target to which it is coupled. Li such embodiments the RFA device may include an encryption or decryption algorithm. An example of an RFA enabled encryption process 200 (figure 4) would work as follows: the target manufacturer 201 stores a public key (the ID), a private key and an encryption key in an RFA device coupled to a target 202. The public key is readable by
an activation terminal 205 external to the RPA activation device (e.g. an RPID activator linked to a central Network Operations Center (NOC) as illustrated in Figure 4. The private key and the encryption key are stored in write-once memory and cannot be read or otherwise ascertained from the RPA device by an external device. [0067] The manufacturer 201 encrypts the private key using the encryption key and transmits the encrypted private key paired to the public ID to the NOC 206. When the public key in the target's RPA device is read, for example using an RPID reader at a retail check-stand 204, and transmitted to the NOC, the NOC uses the public ID to lookup the associated encrypted private key. The NOC then transmits the encrypted private key to the RFA device coupled to the target. The RFA device then uses its stored encryption key and stored algorithm to decrypt the private key. The decrypted private key can then be used for comparison to the private key stored in write-once memory in the RPA device. The decryption and comparison process occurs entirely within the RFA device. This approach reduces the risk of a clear-text private key being illicitly obtained from the NOC or during the communication from the target manufacturer to the NOC or from the NOC to the RFA device. Asymmetric encryption schemes using algorithms such as that utilized in the RSA Public Key Encryption scheme and described in the U.S. patent for the RSA algorithm (# 4,405,829, "Cryptographic Communications System And Method") and now in the public domain, may also be applied using combinations of public and private keys (including those used as encryption keys), and algorithms embedded within the RFA device.
[0068] Other encryption schemes may involve an encryption key provided by a 3rd party. For example, a manufacturer may store a retailer specific encryption key in the RFA device coupled to its target and use it, independently or in conjunction with other keys, to encrypt the private key. To decrypt the private key received from the NOC, the algorithm in the RPA device needs the 3rd party key (e.g. input at the check-stand independent of the NOC). In another embodiment a 3rd party key may be stored by the RPA device manufacturer and be unknown to the target manufacturer. The 3rd party encryption key may then be sent to NOC or via an alternative path to the reader and on to the RFA device. Encryption systems such as those described above can be used to secure
the conditional logic process effectuated within the RPA device (e.g. to prevent unauthorized switching of the embedded switch). They may also be used to secure the transmission to, and usage within, an RFA device of data, instructions or commands. Further, such encryption systems can be used to enable different parties independently or in combination to effectuate control over the conditional logic and the dependent outcome (switching the RFA Switch).
[0069] It is important to note the difference between the RFA device and some RFDD tags such as EPC generation 2.0 devices, which can utilize passwords for the purpose of controlling access to information (data) stored in the memory of the RFID tags. These passwords control the ability to read the information stored in the memory, and also the ability to write new information, or change existing information that is already stored. In these cases, the only thing being accessed or changed is the data itself. Even the password can be changed by writing a new password to the location in memory where the password is stored. Further, these password schemes only affect the ability to read and write data via the RF communication path to the external RFID reader, and do not interact with the target or the target's utility. The RFA device works in a fundamentally different way. The private key(s) is stored in memory within the RFA device at the time of programming by the manufacturer of the target device, the manufacturer of the RFA device or a 3rd party. These private key(s) are typically stored in write-once memory and cannot be read back by the RF reader (or any device external to the RFA device) nor preferably can they be changed in the future by any means. Once a private key(s) is programmed into an RFA device, prior knowledge of it is required to supply the correct key(s) that meet the conditions necessary for the RFA switch to be switched. [0070] In certain embodiments involving more than one private key, one of the private keys, the primary private key, may configure the logic within the RFA device to combine the secondary private keys stored in memory to result in an computed key that can be compared to the received key sent to the RFA device from the external reader at the time of activation. If the computed key matches the received key then the RFA device enables an output (and optionally an input that affects the target's utility. This output is a typically via a physical connection (e.g. an electrical contact or pin) that can logically
function in a number of different ways (e.g. a state change or a defined data sequence) depending upon RFA device logic configuration information supplied to the RFA device by the target. This logical data sequence can be a function of the primary key, and other configurable logical means within the RFA device. In another example, the logical sequence uses an externally generated data stream, such as a data stream provide to the RFA device from the target circuitry, such as from a microprocessor. The logical configuration information can be sent to the RFA device via a number of techniques such as a serial link to the enable pin of the RFA device, or by a pair of dedicated mode pins on the RFA device. The configuration means is primarily controlled by the target, but could also be a function of commands stored within the RFA device or sent to the RFA device from the reader after completion of the activation comparison process. [0071] It may be desirable to deactivate a target, for example in the situation where a target is returned to a retail outlet after having been purchased and activated. One preferred method of reactivating a target is to send a command to the RFA device that causes the output line (pin) to be deactivated. If the target is to be reactivated, it may be desirable to generate a computed key that is used for comparing a received key that is different from the previously received key (for matching to the computed private key) and to effectuate the conditional logic. An example of a way to securely affect such a system is to use a counter within the RFA device that keeps track of the number of times that the RFA device has been deactivated. The RFA device internally generates a new computed key automatically through its logic by using the primary key and the state of the deactivation counter. This process can be taken further by logically combining the secondary keys in a different sequence. The private keys are not changed. The sequence is known to the manufacturer (or the party that originally stored the key in the RFA device), and is tied to the public key (e.g. ID, serial number) of the RFA device. The reader has access to the deactivate counter state, and sends that data along with the RFA device's public key back to the NOC in order to receive the correct (sequential) key. The reader cannot change the key and/or key sequence directly by writing data to the RFA device. The RFA device itself changes the key or key sequence by using the mode configuration information in addition to its own internal logic.
[0072] To prevent attempts to defeat the security scheme effectuated within the RFA device by repeated transmission of keys to the RPA device, there are several alternative techniques that can be employed. One is to limit the number of false key submissions, and particularly the number of false key submissions over a period of time. Logic and programmable memory within the RPA device could automatically shut down, temporarily or permanently, the internal authorization process after a specified number of false comparisons. Another solution would be for the logic, using an internal clock, to limit the rate at which the RFA devices receives or processes digital keys or compares them to the private keys. Alternatively, the speed of the RFA device (e.g. clock speed) could be limited to achieve a similar outcome.
[0073] A denial-of-benefit security system depends on everyone involved with the product including would-be thieves, employees and consumers to be aware that the target's utility is compromised and it must be activated before its value is restored. A successful denial-of-benefit security system therefore depends on a means for generating awareness of the target's participation in the security scheme in addition to the mechanism internal to the target that alters its utility (the switch). One cost effective solution is to couple an RFA device with a visible "symbol", mark, icon or message on the outside of the target or its associated package that identifies the target as a participant in the system. Further, the symbol can be positioned on a target's package relative to the RFA device's antenna (which is coupled to the target within) to facilitate placement of an external reader.
[0074] In certain embodiments the RFA device, independently or in conjunction with elements within the target, may employ means for determining the status of the switch or target (e.g. did the RFA switch, switch, as intended; is the target active, what features were enabled or disabled), and communicating such information to an external device such as an RFID reader coupled to a point-of-sale system. Depending on the specific embodiment, the means may include logic or circuitry to measure or test elements of the RFA device or the target to which it is coupled. For example, when a 'successful' comparison is made of a received key and a private key, a value can be written to a memory that is externally accessible to an external device. In another example, the
electrical properties (e.g. resistance, capacitance etc.) of circuitry or materials in elements of the RFA switch in the target can be measured, when the target is powered, and the results output to an external device. An example of communicating the state of the RPA device would be to set an indicator state for a directly coupled element such as an LED. Another example would be the removable antenna element of an RFA device (described herein) combined with an electro-chromic film that changes appearance depending on the state of the RFA device (e.g. red prior to activation, green after).
[0075] In embodiments where the status information is output to a communicatively coupled external device (e.g. an RFID reader) the information can be used locally or transmitted to a remote location like the NOC or to the manufacturer or a 3rd party. The information can be used to execute dependent actions such as retry an activation if the initial attempt failed. The information can also be used to determine the state of a target (active or inactive) or whether it's been activated before. The information can also be used aggregated (e.g. at the NOC) to identify, diagnose and report problems. It may also be used to identify unauthorized attempts to breach the system. The status of an RFA device can also be used as a dependent variable for a variety of transaction systems. For example, a customer cannot be charged until the target is activated. Alternatively, a target cannot be activated until the customer is charged, has evidenced an ability to pay (e.g. a test to see if a credit card or customer account is valid), or payment is made. The status of an RFA device can also be used in conjunction with other security schemes. For example, in a retail store, a product that had not been successfully activated at the check- stand could be detected by an RF sensing system located at the exit doors and an alarm triggered.
[0076] Figure 5 illustrates one configuration of an RFA device 225. In this configuration the switch 227 consists of a memory bit that can be switched "True", setting a logic state at the "Output", that can be read by the microprocessor in the target and affect its utility. Alternately, the output switch line 227 (associated with the output bit) could be used to pull down the reset line of the microprocessor, microcontroller, or any other logic line of the target circuitry, that would cause the target to not function when turned on. Only if the codes matched, would the line be allowed to go "true" by the
RFA device, and the target to function normally. It will be appreciated that "true" may be represented in some circuits as a "high" value, and in other circuits as a "low" value. [0077] Referring now to figure 6a, an RF (Radio Frequency) controlled advanced integrated circuit device is illustrated. The device 235 has an advanced integrated circuit 238 within package enclosure 237. In one example, the package enclosure is typical packaging for holding electronic integrated circuits, and has pins or a ball grid for coupling to a printed circuit board or other substrate of a target device. For example, the advanced integrated circuit may be a microprocessor, a processor, or may comprise multiple connected integrated circuit devices or other electronic components. For example, the advanced integrated circuit may include a processor, a radio, amplifiers, and associated circuitry for constructing a wireless transmitter and receiver. In another example, the advanced integrated circuit is a microprocessor for use in general purpose computing devices. Often, an advanced integrated circuit device is required to conform to pre-existing pin or grid layouts, as well as specific geometric limitations. Accordingly, the pinout characteristics for the package enclosure 237 may be arranged according to the pinout expected for the regular implementation of the advanced integrated circuit. For example, an Intel Pentium processor has an expected pinout which has been widely adopted by makers of computing devices. If the advanced circuit device 238 is the operational circuitry for such a Pentium device, then the pinouts for the package enclosure 237 will be according to the defined pin structure for a Pentium processor. Ih this way, the antitheft advantages of the device 235 may be adopted without any required design change to the end target device.
[0078] The advanced integrated circuit device 238 may have a power input port, ground input port, and a reset port. As illustrated, the power and ground ports may be connected to associated pins on the package 237 for powering and grounding the advanced integrated circuit device. Other pins would couple to data and communication lines according to the specific advanced device used. Many advanced integrated circuit devices have a reset or other enable/disable line for controlling the operation of the advanced integrated circuit device. For example, the reset port may have two states: a first state that allows the advanced integrated circuit device's operational circuitry to
operate normally, and a second state that causes the device's operational circuitry to reset or otherwise disrupt or compromise operation. In a similar way, other enable or disable ports may be provided. It will be appreciated that different types of advanced integrated circuit devices may have different types of enable/disable ports, and that multiple such ports may be provided. Typically, if such a reset or enable/disable port is held to its reset condition, the advanced integrated circuit device will be compromised, that is, will not operate as intended.
[0079] As illustrated in figure 6a, the reset port for the advanced integrated circuit 238 is connected to an output line for the RF device 239. The RF device 239 is thereby able to set the state of the reset port, and determine whether the operational circuitry is able to function. The RF device 239 is also powered by an external power connection, and is also grounded to an external grounding connection. Accordingly, when power is applied to the pin on package 237, the advanced integrated circuit device 238 and the RF device 239 are powered, and the reset port of the advanced integrated circuit device 238 is set to an operational state or a compromised state. In this regard, the RF device 239 has an internal switch that determines the state of the output line, and accordingly sets the state at the reset port. This internal switch is set according to a received RF signal. More particularly, the RF device 239 may receive an RF signal on its antenna structure. Typically, this RF signal is received when there is no power applied to the package pins, and the advanced integrated circuit is in a power-off condition. In one example, the antenna structure includes a connection to an unassigned pin on the package 237. In another example, the antenna may be internal to the package 237, or may be positioned on the package 237, or may have an externally connected antenna. [0080] The RF signal may require a matching circuit to be properly received by the RF device 239. The RF device 239 also has a low-power circuit for setting the state of the internal switch. As a more fully described with referenced to figure 1, the switch of the RF device 239 is set according to data received in an RF communication, which is used to control the state of the switch. In one example, the RF device 239 holds a restricted access key in an unalterable and unreadable memory. An RF signal is received on the antenna, with the RF signal having a received authorization key. The RF device
239 compares the received authorization key to the internally stored restricted access key, and determines if the switch may be set to its other state. If authorized, the RF device 239 uses a low-power circuit to change the state of the switch, and thereby change the state of the output line. In one construction, the low-power circuit derives its power from the RF energy received at the antenna. In another example, the low-power power source may be provided by an internal or external battery.
[0081] In a specific example, device 235 is a microprocessor complying with an industry or commercial standard. The RF device 239 is manufactured with its internal switch set to a closed or "0" state. In this configuration, the switch acts to couple the output line to ground. Accordingly, if the pins for package 237 are connected to power and ground, the output line for the RF device 239 will continuously hold the reset port of the advanced integrated circuit device 238 to a low state. Typically, an advanced integrated circuit device resets upon a low state on its reset pin, so the advanced integrated circuit 238 will not operate when the switch for the RF device 239 is closed. Accordingly, the advanced integrated circuit device is manufactured and transported through the distribution chain in a state that renders it unusable, and is therefore less likely to be stolen. In this way, the compromised microprocessor may be shipped through the distribution chain and to a retailer with a substantially reduced threat of theft. Also, the retailer may display and make the microprocessor available for customer handling in a retail environment with reduced risk of theft. In this way reduced security measures may be taken at the retail level, such as using locked cases or sophisticated packaging, since the consumer or employee would obtain no benefit by stealing a nonworking, compromised microprocessor.
[0082] When a consumer decides to purchase the microprocessor, the consumer may take the processor to a point of sale terminal and have it passed proximately to an activation device. As the microprocessor is passed by the activation device, it has an accessible ID read from the RF device 239. The point-of-sale terminal may cooperate with a network and network operations center to retrieve an authorization key for the particular microprocessor present at the point-of-sale terminal. Provided the user has properly paid for the microprocessor, the point-of-sale device or scanner uses its
activation device to transmit the authorization key to the RF device 239 through the antenna. The RF device 239 receives the authorization key, and using its internal logic or comparison circuitry, compares the authorization key to its pre-stored restricted access key. If the keys match, then the RF device 239 uses its low power source, which may be derived from the received RF energy, to switch the internal switch to an open (1) state. In one example, the change to the open state is made permanent. In another example, the change may be more temporary in nature. Also, it will be appreciated that an externally perceptible identification may also be switched, so that a consumer or clerk may visually confirm that the microprocessor has been activated. This visual indictor may be an electro-chromic material, for example. It will also be understood that the point of sale terminal or the network may also receive a confirmation from the RF device 239 that the microprocessor has been properly activated.
[0083] With the switch now permanently in an open state, the package enclosure may be placed in its operating environment and powered. When the device 235 is powered, power will be applied to the advanced integrated circuit 238 as well as the RF device 239. However, the switch internal to the RF device 239 is now open, so the output of the RF device 239 floats or is set to a "on" (1) condition. Since the reset port is now at a "1" state, the operational circuitry does not continually reset. In this way, the microprocessor operational circuitry 238 is allowed to operate at its full operational capability. [0084] It will be appreciated that the RF device 239 may be positioned inside packaging 237 along with the advanced integrated circuit 238. As shown in figure 6b, the RF device 239 may be positioned between the advanced circuit 238 and the pinout connection area. This area is particularly convenient for wire bonding from the pins to the RF device 239, as well as for providing wire bond or connection between the RF device 239 and the advanced circuit 238. However, sometimes there may not be enough space between the pinouts and the advanced circuit device to allow for this RF device placement. In such a case, as shown in figure 6c, the RF device 239 may be attached to the top of the advanced circuit 238. The RF device 239 may be adhered with an adhesive, for example, and wire bonded to circuitry within the advanced integrated circuit, as well as to the pins of the enclosure. In another example, the RF device 239
may be attached to the packaging 237 itself, as shown in figure 6d. In this construction, an alternative to wire bonding may be used to connect the RF device 239 to the advanced circuit 238 and to its package pins. Finally, figure 6e shows an arrangement where the packaging 237 does not have enough space to support the RF device 239. In this arrangement the RF device 239 is provided in a different package than the advanced circuit device 238, and is coupled to the advanced circuit device in a socket arrangement. In this arrangement the RF device 239 acts to simply pass through most connections from the advanced circuit device packaging, but couples to power and ground connections, and provides a switch in the enable or reset line. By using this construction, the RF device 239 may act as a receiving socket for a standard microprocessor or other advanced circuit device.
[0085] In some cases, it may be desirable to allow the low power circuitry to set the state of the switch while the advanced integrated circuit has its operational power applied. For example, a computer system may be placed in a power-on condition for test and configuration, and while the circuit is being tested, the switch may be set to selectively enable or disable functionality. In this arrangement, the activation device is part of the system test equipment. In another example, a device may have persistent operational power, or may be constructed in a way that makes it undesirable to temporarily disable the operational power. Accordingly, the low power circuitry is arranged to allow an activation device to set the state of the switch while operational power is on. It will be appreciated that known isolation circuitry may be needed between the operational power and low power sub-systems.
[0086] Figure 6f shows another example of a controlled advanced integrated circuit device. Controlled device 235 a is similar to device 235 discussed with reference to figure 6a, so will not be discussed in detail. Device 635 a has an advanced integrated circuit device 238a, which may have operational circuitry for implementing a microprocessor, memory, or other function. The device 238a may be a single integrated circuit device, or may be arranged as a multi-chip module or system in a package. The controlled device 235a has an internal device 239a that has a switch that may be set to multiple states, and the utility of the operational circuitry is set responsive to the state of
the switch. As more fully described above, the state of the switch is set by a low-power circuit. Device 235 a has a connection port that enables an electrical connection to be made from outside device 235a to the internal device 239a. In this way, a power or communication signal may be established with the internal device 239a. The port may connect to an assigned or unassigned pin, or may be a separate port on the package. This connection may be used to test or configure the advanced integrated circuit during manufacturing, testing, or servicing. When using the connection port and physical connection, the internal device may still operate as described with reference to figure 6a. More particularly, the internal device may have a stored restricted access key, and if a proper authorization key or code is received from the connection port, a low power circuit may operate to change the state of the switch. The low power circuit may be powered by connection to one of the package's pins, or may have a separate power port. In another example, the power is provided from the connection port, and the authorization code is modulated onto the power signal. It will be appreciated that many options exist for connecting and communicating to the low-power circuit and switch. [0087] The internal device 239a may only receive communications from the connection port, or may optionally include an antenna for receiving RP communications and signals. In this way, the connection port may be used in some parts of the distribution chain, such as during manufacturing and for service or repair, and the RP connection may be used at other parts of the distribution chain, for example, during consumer point-of-sale transactions. The antenna may be internal to the package, part of the package, part of an assigned or unassigned pin-out, or may be externally connected to the package. If external, the antenna may be removable or disposable. In one example, the connection port is used to access and set the switch during manufacturing and testing, and an external antenna is used to activate the advanced integrated circuit at a point of sale transaction. After activation, the consumer or clerk removes and disposes of the antenna. Then, if the device 235a needs service at a later time, service personnel would access the switch using the connection port.
[0088] Referring now to figure 6, many commercial products have either a metal shield, or a metal case, which will not allow efficient RF coupling from the reader to an
internally installed internal RFA device. For these types of targets, it may be desirable to place the antenna 234 outside the metal enclosure 231. The internal RFA device 236 however, could be mounted on the printed circuit board 232 (PCB) of the target and some type of connector 233 would connect the two. This leads to the configuration generally shown in Figure 6. The construction shown in Figure 6 allows the RF antenna 234 to couple through the metal enclosure 231 of the target via the PCB mounted connector 233. The internal RFA device would also be placed on the PCB 232 of the target. It is desirable for the connector to pass RF signals at one of the 3 primary frequency bands in use today for RFID tags: 13.56 MHz, 900 MHz, or 2.4 GHz, but may require additional circuitry to adequately pass RF signals. In the alternative, a higher quality connector capable of more readily passing RF signals may be used. It is desirable to use an inexpensive connector such as a zero insertion force flat flexible cable (ZIF FFC) or a smart card connector for this interconnect. It may also be desirable for the matching network to be on the antenna side of the connector. This implementation allows the antenna to be disconnected from the target after it has been activated. Another similar configuration 240 is to integrate the RFA device into a custom connector 242 so that only a single device needs to be installed on the PCB 244 of the target, as shown in Figure 7. [0089] As described with reference to figures 6 and 7, the connector allows the antenna to be placed outside of the target's enclosure. As shown in figure 8, a target device 250 has an antenna 252 attached to the target's connector. The antenna is electrically coupled to an internal RFA device, which enables efficient RF communication and power conversion. Also, the antenna member 252 would be removable after activation. The antenna 252 may have a mating adaptor that causes the antenna 252 to be oriented in a particular direction. For example, the antenna may be oriented perpendicular to the enclosure so that the RF energy can couple to it in a more effective way. A stiff substrate may be used for the antenna so that it will be self supporting and can maintain a particular orientation such as that shown in Figure 8. It is important to note the ability to orient the antenna so that it does not lie up against the metal enclosure. This prevents the metal enclosure from loading the antenna and changing its impedance, and ultimately it's coupling efficiency to the reader. As shown
in figure 8, the antenna will couple better with a reader located in front of, or behind the target. If the connector and antenna is rotated 90 degrees, then the antenna would couple the best from the top or the bottom of the target. The connector can be located almost anywhere on the target's PCB. It is desirable to mount it near a corner of the target if possible to minimize RF coupling issues. The antenna may be configured as part of the target's packaging or shipping container.
[0090] Referring to figure 8, a controlled electronic target device 250 is illustrated. Electronic device 250 is an electronic device having a case for enclosing and protecting the utility means and other operational circuitry and devices. In one example, the case is metallic, and therefore restricts wireless communication to components and circuitry within the target. In this way wireless communication to devices and components inside the target would require an unduly strong RF or EM signal to robustly and effectively communicate. To improve the effectiveness of wireless communication, an antenna member 252 is installed external to the case, and electrically coupled to an internal RFA device within the housing. In this way, the antenna 252 may be readily accessible for wireless communication with an activating device, while still maintaining the switch for the RFA device within the target housing. In a particular example, a connector is positioned on the housing. This connector may be a connector specifically designed for antenna 252, or may be an existing connector for the target. For example, if the target is an audio device, the target is likely to have several existing audio connectors. In another example, target 250 may be powered through an AC or DC external power connector. In this way, the connector may be a power plug or adapter input. It will be appreciated that other types of connectors, such as Ethernet data ports, serial data ports, USB connections, and other standard audio, video, and data connector types may be used. [0091] hi use, antenna 252 is attached to connector during the manufacture or the shipping process. At the point-of-sale environment, an activating device cooperates with the antenna 252 to send and receive information and power to and from the RFA internal device, which is inside the target enclosure, hi particular, the antenna may receive a request for an identification value and transmit an identification value to the internal RFA device. The activation device, after performing its authorization routines, may then send
an authorization key through the antenna 445 into the internal RFA device. The internal RFA device has logic coupled to the antenna through the connector which determines that it may change its switch to another state. After the state of utility has been changed, the internal RFA device may report the verification of the change through the antenna 252 back to the activation device. Typically, at this point a consumer will transport the electronic device 250 to another location, and place the electronic device in an operable state. The consumer may remove the antenna member 252 and dispose of it. In another example, antenna member 252 is integrally formed with the case and may remain on the case.
[0092] In some cases it may be advantageous to utilize devices contained within the target to effect communication with the internal RFA device, for example when the target is a "wireless" device such as a wireless access point, where its antenna and circuitry may be designed to accommodate such communication. Many targets utilize foam inserts to isolate the target from shipping damage. The antenna could be easily integrated into those inserts. Using effective antenna design practices, the packaging foam could serve as a "spacer" between the antenna element and the metal case of a target, and assist in maintaining the efficiency and operation of the antenna, thus facilitating the communications between reader and internal RFA device. The antenna substrate material could be any relatively stiff material that has the required dielectric properties for the antenna to function properly. Traditionally Mylar® or Kapton® have been used, but a variety of materials including stiff cardboard, or coated paper may also be used. [0093] An alternative is to configure the antenna and connector as a "break away" system 275 as shown in Figure 9. For example a Mylar® substrate can be designed so that it sheers in a necked down area 277 along its length. A molded plastic part 281 can be used to bring the antenna 279 outside of the enclosure 280. It would also facilitate attachment of the internal RFA device to the target's PCB. In figure 9, the target enclosure 280 encloses a printed circuit board on which the internal RFA device 281 is positioned. An antenna member 279 is coupled to the internal RFA device 281 through a connector that is formed integrally with the internal RFA device. In this way, while internal RFA device 281 is shielded from RF and EM communications, antenna 279 is
externally positioned for ready communication. Although antenna member 279 is shown having only the antenna structure external to the target enclosure, it will be appreciated that other parts of the internal circuitry may be moved external. For example, a power source in the form of an RF/EM converter may be provided on the antenna member 279, as well as a battery. In another example, some or all of the logic may be moved to the antenna member, as well as the restricted access storage for a target key. Of course, this latter configuration may be less secure, but may be useful to some applications. Typically however the switch and logic for the RFA device will remain within the target enclosure due to its coupling to utility means, which are within the target enclosure. [0094] At 900 MHz and at 2.4 GHz, the connector becomes important in terms of its electrical characteristics and requirements. Referring to figure 10, As an alternative 290, rather than passing RF through the connector, the power storage and modulator/demodulator functions, can be moved to the antenna side of the connector. The output of the modulator/demodulator is a pulse train of a much lower frequency riding on a DC level. This signal is not nearly as critical in terms of its connector requirements. The components that must move to the antenna side are small and inexpensive, and can be discarded along with the antenna. This allows connectors such as the smart card interface, or the ZIF FFC type to be used at all RF frequencies. A major advantage of these connectors is that they use only exposed contacts on the antenna substrate for the connection. In this configuration an electro-mechanical connector on the antenna is not necessary. This drastically reduces cost and complexity for the antenna. A further advantage is that the matching network is now contained only on the antenna and is not affected by the connector, or internal RFA device that the manufacturer will integrate into the target. Alternatively, the entire RFA device may also be incorporated as part of the disposable element.
[0095] In one arrangement, the internal RFA device is integrated into the connector which mounts to the internal PCB of the target. This means that the manufacturer only has to place a single part on their internal board, and place a corresponding hole in their enclosure for the antenna connection. The connector and RFA assembly can utilize thru
hole or SMT leads, and may also include mechanical locating mechanisms, or mechanical attachment mechanisms.
[0096] It is also possible to utilize an existing connector on some targets rather than adding a separate connector. For instance, on many commercial audio and video products, the low level audio input can be utilized. Most of these products use an RCA phono jack for the audio input connector. The antenna shown in figure 10 above can have an adaptor that is constructed to be terminated in a RCA phono plug, and would be plugged into the phono jack. Once the target was activated, the antenna and phono plug would be discarded. The audio input on the target would now function only as an audio input. Figure 10 shows another example of the antenna member. In this example, the housing has a printed circuit board holding an internal RFA device, which is integrally formed with a connector piece. This arrangement is particularly useful when using an existing audio, video, data, or power connector on the target. For example, it may be desirable to use an audio connector to connect the external antenna member. However, the internal audio circuitry is typically constructed to operate at relatively low frequencies, for example less than 100 kHz, and in some cases may be designed to operate at less than 30 kHz. Accordingly, the otherwise desirable 900 megahertz or other radiofrequency signal received by the external antenna may not be robustly or effectively communicated into the internal RFA device when at a radio frequency. Accordingly, the radio frequency signal is demodulated to a lower frequency using the modulator- demodulator, which is mounted on the antenna member. For example, the antenna may receive a 900 MHz RF communication, and demodulate that signal into the lower frequency signal capable of being transmitted through the audio level connector. In this way, a relatively low-frequency signal may be received by the internal RFA device, and used to change the state of the its switch.
[0097] There are several methods by which the RFA device can communicate and interface to the target. Typically, and in particular in embodiments where the RFA device interfaces with circuitry in the target, there is a system provided to isolate the RFA device from the target during RF communication with the reader. During activation, the RFA device is powered by the RF energy from the reader. The target however, is not
powered, and is prevented from drawing energy from the RFA device during this time. Once the target 300 is activated and powered, it provides any needed power to the RFA device, and interfaces with the output line as shown in Figure 11. In Figure 11 power or output signal isolation is achieved by adding 2 switches, SWl (304), and SW2 (305) between the internal RFA device 302, and the target circuitry 306. The target circuitry 306 which interfaces to the internal RFA device will typically consist of a power supply 309 (PS), and a microprocessor (uP) 311. Since both the PS 309 output (VCC) and the input to uP 311 will be low during RF activation, both SWl and SW2 are opened during RF activation. SWl and SW2 can be implemented by a number of means including, but not limited too: diodes, bipolar devices, FETS, CMOS switches, etc. SWl and SW2 can be controlled either by the target power supply 309, or other target circuits. When the target is powered on, SWl is turned on supplying power to the internal RFA device. A short time later SW2 is turned on which allows communication between the internal RFA device and the target uP or other circuits. In some targets, a uP may not be used, but the target can still be activated by using RFA Output to enable or disable its circuitry by any means that the manufacturer deems appropriate. VCC can be any voltage but will typically be: +3.3 V, or +5 V.
[0098] Referring now to figure l la, an RF controlled advanced integrated circuit device is illustrated. Device 310 has an advanced integrated circuit 313 in the same package 311 as an RF device 312. Advanced integrated circuit 313 includes microprocessor 314 and integrated circuits 315, 316, and 317. It will be appreciated that other semiconductor or electronic components may be part of the advanced integrated circuit device 313. The arrangement and connection of components is similar to connections and arrangements for multi-chip modules (MCM) and system in a package (SIP) devices. Device 310 operates in a manner similar to device to 235 described with reference to figure 6a, and therefore will not be described in detail. As with device 235, device 310 has an RF device 312, which has an output whose state is controlled by a switch. In one state, the switch is coupled to ground, and in a second state the switch is allowed to float. The switch is set responsive to a received RF communication, and uses a low-power power circuit to facilitate changing the state of the switch. The reset port for
the microprocessor couples to the output of the RF device 312, as well as to the reset pin for the package enclosure 311. As illustrated in the truth table, the switch may either be in a closed configuration where it shunts to ground, or in an open state where it floats. The reset pin on the package 311 may either be in a reset state (pulled to ground) or in an operational state where the pin floats or is set to "1". If the RP device has not received a proper authorization, then the switch remains closed, and the microprocessor and the advanced integrated circuit device is not allowed to operate, irrespective of state of the reset pin. However, once the switch has been opened responsive to an authorization, the advanced integrated circuit device operates normally. That is, it resets when a reset signal is received on the reset pin of the target, and operates normally when no reset signal is present.
[0099] Referring now to figure 1 Ib, another RP controlled advanced integrated circuit device is illustrated. The device illustrated in figure 1 Ib is similar to the device discussed with reference to figure 1 Ia, so will not be described in detail. The device 310 has an RF device having a switch as previously described, but also has additional conditional logic. In this case, the conditional logic is an AND gate. The AND gate has two inputs, and an output that is connected to the output line of the RF device 312. One input to the AND gate comes directly from the reset pin on the package, while the other input to the AND gate comes from the switch. As described earlier, the switch is set responsive to a received RF communication, and is initially set closed (0) until authorized, in which case the switch changes to an open (1) condition. As illustrated in the truth table, if the RF switch is in the closed position, then the output line is set low, and therefore the reset port for the microprocessor is also in a low or "0" state. In this state, the microprocessor continuously resets, and is therefore compromised and not able to fully function. However, after the switch has been set to its open state responsive to authorization, then the microprocessor and the advanced integrated circuit device responds normally to the reset pin. For example, when the reset pin on the package 311 is set to 0, that is, a reset is desired, the microprocessor will again reset. But, when the reset pin is high, or in its operational state, then the output line from the RF logic 312 becomes 1 or floats, and thereby enables the microprocessor to function in its fully operational state. It will be
appreciated that other advanced integrated circuit devices may use different states for enabling and disabling operation, and that minor alterations to circuitry may be made to accommodate these differences.
[00100] Referring now to figure lie, a flowchart of a process for using an advanced integrated circuit is illustrated. Method 330 has an RP device arranged with an advanced integrated circuit as shown in block 341. The RP device has a switch state 339 that is initially set at a first state. In one example, this first state may cause the reset pin of the advanced integrated circuit device to be pulled to ground or to a disabled state. In this way, even when the device is powered on 337, the advanced integrated circuit monitors the state of the switch and operates at a first utility level as shown in block 332. In this example, the first utility level is a compromised condition. However, it will be appreciated that other states of operation may be used. For example, rather than fully disabling the operation of the microprocessor, the microprocessor may be operated in a limited or demonstration mode. It will be appreciated that multiple levels of utility may be enabled. At some later time, the device is passed proximate to an activation system, and receives an RF activation signal as shown in block 333. Provided the RF signal has the appropriate authorization code, the device's low power source changes the state of the switch to a second state as shown in block 334. Typically, the device will be powered off when the low power source is used to switch the state of the switch. Optionally, the low- power source may also be used to change a visual indicator on the microprocessor or device so that a consumer or clerk would be aware that the microprocessor has been activated. After activation, when the advanced integrated circuit is placed into a power- on condition, the advanced integrated circuit monitors the switch and finds the switch to be in state two. Accordingly, the. integrated circuit operates at a second utility. In one example, the second utility is the full operational capability of the microprocessor or advanced integrated circuit device.
[00101] To increase tamper proofing of the target, the internal RPA device 327 can utilize an "Enable" line 326 as shown in Figure 12. SW3 serves to isolate this line 326 in a manner similar to SW2 which was previously described. The Enable line 326 is an input to the internal RPA device from the target 325 microprocessor (uP), microcontroller
328, or other circuitry. It can be a state change, or a serial data stream. The internal RFA device can utilize this data stream along with its private key to output another serial data stream to the target microprocessor (uP), microcontroller, or other circuitry. This allows any number of encryption algorithms to be utilized which are tied to a private key known only to the manufacturer. Since the incoming data stream from the target can be varied, the output data stream will change depending upon the encryption algorithm in a way only known to the manufacturer. It is also possible to integrate a low power microprocessor, microcontroller, or custom circuitry along with the internal RFA device function on a single silicon substrate. This provides a high level of tamper-proof protection if a OTP microprocessor, microcontroller, or custom circuitry with on-board EPROM is utilized. The microprocessor, microcontroller, or custom circuitry could securely communicate with the main system processor via an SPI, or I2C serial data link. [00102] The internal RFA device can also be utilized to activate targets that do not have microprocessors. For example, if the target 350 has a DC supply 355 such as a cordless drill, the internal RFA device 352 can be used to turn on a power MOSFET 351 in series with load as shown in Figure 13. The power MOSFET 351 can be utilized in a way to eliminate the need for SW2. The gate of the FET 351 will not load the internal RFA device during RF activation. In this embodiment SWl is activated by the trigger switch of the cordless drill. The manufacturer may choose to encapsulate all of the circuitry for additional tamper proofing. For AC powered devices, the power MOSFET could be replaced by a solid state switch. A simple AC / DC converter could be used to power the RFA chip.
[00103] Referring now to figure 14, another RFA activated target 375 is shown. Target 375 has an internal RFA device 376 that also is coupled to a battery 377 in order to increase versatility. Previously discussed internal RFA devices may also use this approach. An on-board battery 377 allows the internal RFA device to be "active". Thus, the internal RFA device and its functions can be powered by the battery 377. It no longer requires externally received RF energy to power it. One benefit of this approach is the increased frequency range that the internal RFA device would function over. An RF amplifier can be built on the front of the internal RFA device to improve receive
sensitivity, and a RP power amplifier can also be built for transmission back to the reader. Since the internal RFA device circuits are typically already CMOS or other low power technology, they draw very little current from the battery prior to activation. Thus, the shelf life prior to activation can be quite long. Some versatility comes from using the battery to power additional circuits and/or functions that can be added that may not be practical to power by RF energy. For instance, Figure 14 shows an internal RFA device 376 that is powered by a small 1.5V battery 377. Any battery technology can be utilized, but a small primary battery would be preferred. The battery provides power to the internal RFA device as well as to the a power circuit, hi operation, the power circuit would be in sleep mode until activation occurs. When the internal RFA device output becomes active, the power circuit wakes up and provides its higher power function. This function draws its energy from the 1.5V battery rather than from RF-generated power, so is able to perform a wider range of electrical functions. In figure 14, the power circuit provides power to a motor or solenoid to provide mechanical motion. This mechanical motion could provide mechanical activation of the target by either locking or unlocking a mechanical function of the target in order to allow functionality.
[00104] Many other functions and behaviors can be implemented using this approach. Audible, ultrasonic, optical, thermal, and any other function that require power can be utilized. This allows not only activation of the target by various means, but also can provide an indication back to the check-out clerk, or customer that the product has indeed been activated. For instance, the battery can provide energy to a LED indicator that is visible through a clear window in the target packaging. When successful activation has been achieved, the LED can be turned on (100% or blinking), to indicate activation. An alternate approach is to supply the LED as a stick-on label with a printed antenna that is applied to the outside of the target's package. When successful activation occurs, the battery and power circuit turn on a small transmitter. The transmitted signal picked up by the printed antenna on the label and causes the LED to light. Further, the antenna coupled to the internal RFA device may be constructed out of the same material/process used to construct the energy storage element (e.g. a thin-film battery) or some other element of the target (e.g. the materials comprising a reflective layer of an optical disc).
[00105] In addition to the electrical/electronic targets described above, the RFA devices described herein may be applied to a wide variety of non electrical/electronic targets for example: a. An optical disc with an embedded RFA device comprising an electro-optic film that acts as an optical shutter (Opens' and 'closes') that allows or disallows an interrogating laser light from reading the data structures contained within the disc. b. A media such as a document, passport, ticket, credit/debit or stored value card, optical disc with an embedded RFA device comprising electro-optic material that cover or reveal underlying content upon activation. c. A perfume bottle with an RFA device comprising electro-chromic materials embedded in the glass that produce an unattractive appearance or message until the RFA tag is activated. d. A watch with an RFA device comprising an electro-mechanical actuator that prevents/ enables the watch's movements from working. e. A battery with an RFA device comprising electro-chemical material incorporated into a charge indicator.
[00106] In some situations it is desirable to mass produce a target (e.g. a computer), package it for shipment and then activate individual options (e.g. preloaded software or content, or hardware features) or enter preferences (e.g. user or retailer name, configuration information etc.) at either the manufacturing facility or the retail point-of- sale. An RFA device configured to receive and output multiple data elements such as passwords or keys to decrypt preloaded software can be used for this purpose. For some classes of targets it is desirable to activate multiple sub-assemblies within a single target to deter theft of the target for its parts. An example is a laptop computer which contains multiple valuable sub-assemblies such as a hard disk drive, LCD display, CPU, CD disk drive, etc. In one example each subassembly may have its own internal RFA device and is activated by an activation signal to each assembly. Another example 400 of how multiple sub-assemblies can be individually activated is shown in Figure 15.
[00107] Referring to figure 15, the operation of the switches SWl, SW2, and SW3, and the other blocks except for SAl, and SA2, are similar in operation to the system shown in Figure 12. Because it is desired to disable the uP, and sub-assemblies SAl, and SA2 unless activation of the target occurs, there are some important differences, however. When activation occurs, the internal RFA device remembers that it has been activated. When the target (e.g. a laptop computer) is powered up or boot power is applied to the uP, SAl, SA2, and the internal RFA device. Since the target's manufacturer knows what the private key is for the particular internal RFA device used in the target, that information can be placed in the boot code section of the uP. When the processor boots, it sends a data sequence to the internal RFA device enable line, and receives a modified data stream back on the internal RFA device output line. If the output data stream does not match what the boot code expects to see, the uP will not function. Thus, removing the uP without have the internal RFA device and the activation code renders the uP useless. Once the uP boots, it sends data to the enable line of the internal RFA device instructing the internal RFA device to send data out to the sub-assemblies SAl, and SA2 telling them to activate. A custom chip in SAl, and SA2 compares the data from the RFA chip, to data from the uP. If they do not match, sub-assemblies SAl and SA2 will not function. This custom chip, in the sub-assemblies, would have custom data encoding of its own built in, that the manufacturer knows about, and that the uP would also know. Without knowing what this encoding is, and without the private key, the sub-assembly will not function. The custom data encoding in the sub-assembly chip prevents supplying the same data to the IC inputs and making the sub-assembly function. [00108] In many instances it may be desirable for the manufacturer to utilize an existing connector on the target device to couple in the RFA signals from the RFA Antenna member to the internal RFA device in the target. Examples of existing connectors on common targets include the AC Power Mains, Audio, Video, DC Power, as well as many others, all of which may be used to couple in the RFA signals for target activation. One arrangement is shown in Figure 16 using a target's 425 audio input connector 426 to couple an RFA antenna member 428 to the internal RFA device 429 as an example. The target 425 in Figure 16 includes a frequency selective isolation network
added to the target between the connector (audio input) and the target circuitry (audio circuits), associated with that connector. The RFA antenna member has the mating connector (plug) attached to it which plugs into the connector (jack) on the target. This connector type may change depending upon the function of the connector on the target (e.g. a power supply connector may be different than the audio input connector). The isolation network isolates the audio circuits from the RFA antenna member and the internal RFA device. When RF signals are present during the activation process, the RFA signals are passed to the internal RFA device. The target circuits associated with that connector (audio) are isolated from the RFA signal path, and do not affect the RFA signals. Once activation is complete, the RFA antenna may be removed and the target is connected to an audio source by plugging in the audio cable coming from the audio source. In this mode, the isolation network 430 passes the audio signal to the audio circuits 432, and isolates the RFA circuits from the normal functionality of the connector and associated circuits. This general method can be applied to specific embodiments as shown in the following figures and examples.
[00109] Figure 17 illustrates an electronic device 450 with an external antenna member 452 coupled to an AC connector or power cord 455. It plugs unto the prongs of the pendent AC power cord 455. With an appropriate physical connector the same design could be used for an EEC power entry connector. In this embodiment, the transceiver / demodulator converts the incoming modulated RF (e.g., 900MHz) signal into a lower frequency (e.g. ~500KHz) demodulated data stream using appropriate digital encoding techniques. This low frequency (~500 KHz) demodulated signal is coupled to the power cord connector on the target. The isolation network which separates the activation data stream from the target power input module, is connected between the AC power connector, and the target power supply. It consists of 2 inductors and 2 capacitors. These components are selected based on the frequency ratio between the signal frequency used by the target connector, (in this example 60 Hz), and the activation frequency being used, (~500 KHz). At 500 KHz, the inductors present a high impedance to the activation signals, while the capacitors present a low impedance. Thus, the activation signals couple to the activation circuitry, and the low power supply impedance is isolated by the
inductors. When the target is powered by 60 Hz, this situation reverses. The inductors look like a low impedance and couple the 60 Hz energy to the supply, while the capacitors look like a high impedance to the 60 Hz energy, and prevents the 60 Hz from coupling into the activation circuitry.
[00110] Figure 18 illustrates an electronic device 460 with an external antenna member 462 coupled to an audio input port 465. Audio signals require bandwidths as high as 20 KHz, which means that the ratio of the activation signals to the audio signals is less than for the previous 60 Hz power example. This lower ratio may require a more complex filter topology in order to achieve the required isolation of the signals. In this example a shunt capacitor in addition to the inductor has been added in the audio path. This results in a filter with more attenuation (sharper cutoff characteristic) for the activation signals. Since the audio input can be low level, additional components may be added to prevent damage to the audio input stages. A simple dual diode clamp with an appropriately sized resistor can accomplish this. When the target is powered in the normal operational state, the activation power diode Dl is reverse biased by the target power, and thus presents a high impedance to the audio signal. This isolates the activation circuitry from the audio signal, as well as isolating the audio circuitry from any noise sources in the activation circuitry.
[00111] Figure 19 illustrates an electronic device 470 with an external antenna member 472 coupled to an audio output port 475. As described in Figure 17, the filter topology may be more complex at audio frequencies. In this case since the connector is an audio output, a different topology is required to protect the audio output circuits from overload. Although a simple 2 pole LC filter is shown, more poles may be required in order to achieve the required isolation of the activation signals without affecting the audio frequency response. Also, it may be desirable to include the isolation filter within the feedback loop of the audio output amplifier as shown in order to minimize the impact to the audio frequency response.
[00112] Figure 20 illustrates an electronic device 480 with an external antenna member 482 coupled to a connector 385 for a device which provides a source of DC power for other devices, i.e. Power-Source Equipment (PSE). Because of the large output
capacitance associated with sourcing DC power, the isolation network may not require its own filter capacitor. The added inductor in combination with the PSE output filter capacitor, form the isolation network to keep the target circuitry from loading the KFA signal. As in the case of the audio amplifier output, it may be desirable to include the isolation network in the feedback loop of the output voltage regulator thereby minimizing the effect of the isolation network on the normal operation of the power sourcing equipment.
[00113] Figure 21 illustrates an electronic device 490 with an external antenna member 492 coupled to a connector 495 for a target which is powered by an external DC supply, such as an AC wall socket regulated DC supply. This type of target is referred to as a Powered Device (PD). As shown, the isolation network for the target power supply consists of a single inductor. The target power supply's input filter capacitor is used with this inductor to form a low pass filter which provides a high impedance to the activation signals, and keeps the activation signal out of the power supply circuitry. When the target is powered by an external DC source in normal operation, the inductor helps attenuate external high frequency noise. Because the input filter capacitor will normally be quite large, (high capacitance), clamp diodes may not be needed. [00114] Figure 22 illustrates an electronic device 500 with an external antenna member 502 coupled to a video input 505. Because video signals overlay the activation signals in the frequency domain, passive filter isolation networks are not effective at isolating the signals, hi these situations, isolation may be achieved by a switching device such as a relay or solid state switch, which is energized by target power during normal target operation. During activation, when the target is un-powered, relay Kl routes the activation signals to the activation circuitry. When the target is powered, it energizes relay Kl, which routes the video signal to the normal target circuits rather than the activation input. This provides a very high degree of isolation between activation signals and target circuitry. This approach is feasible in all systems in which the connector being used is not the source of power for the target. It may be desirable to use a solid state switch rather than a relay to accomplish signal switching, hi these cases, two solid state
switches may need to be connected back to back in series so that their substrate diodes do not conduct when the target is powered off, and activation signals are present. [00115] Many other target connectors can be utilized as the activation signal port using the techniques described above and depicted in Figures 17 to 22. Many connectors have unused pins, which can be used for activation signals without any isolation networks. Connectors which fall into these categories include, but are not limited to: USB ports, Ethernet ports, mouse ports, keyboard ports, PCMCIA ports, memory card ports, S video ports, game ports, serial ports, parallel ports, phone jacks, and battery connectors. [00116] Referring now to figure 23, a target 525 is illustrated. Target 525 has an RFA device installed inside the housing 527 of target 525. When target 525 was manufactured, the RFA device had its switch set to disable or substantially compromise the utility of the target. In this way the target's utility 544 would be unavailable if the target is stolen. The utility can be, for example, the ability to power-on the target, or to fully use the features or benefits of the target device. In another example, the utility may be the aesthetic appeal of the target. In another example, the utility may be the ability for another device, such as a DVD player or a game console, to read information stored on the target. The RFA device 529 has an antenna 531 and a demodulator/modulator 535 for receiving an RF signal from an RF source. In one example, the RF source is an RF transmitter at a point-of-sale terminal. The RFA device also has a power source 533. The power source 533 may be associated with the demodulator/modulator circuit 535 for converting RF power to a usable electrical energy. In another example, power 533 may be a battery, or may be connected to an operational power source for target 525. The RFA device has a switch 537 that has been set during manufacturing to a position that causes the target's utility 544 to be unavailable. The target utility 544 communicates with switch 537 through a target interface 542. The target interface may be, for example, a power line, a logic line, a memory line, a multi-line interface, or an internal optical link. It will be appreciated that other ways may be used to interface the target utility to the switch 537.
[00117] It will also be appreciated that the target interface 542 may be dependent upon the particular physical construction of the RFA device 529. For example, the RFA device
may be constructed as an integrated circuit, in which case the target interface 542 may be a pin on an IC package device. The target interface 542 may couple the IC pin to one of the internal layers of a PC board to reduce tampering. In another example, the RFA device is a surface mount package, hi this case, the target interface 542 will be constructed as a pad or terminal interface on the surface mount package. It will be appreciated that other types of target interfaces may be used dependent on the physical packaging for the RFA device.
[00118] In use, a consumer may take target 525 to a point-of-sale terminal, pay for the target, and have the point-of-sale clerk confirm that the user is authorized to have an activated target. At that point, the point-of-sale terminal may transmit an RF signal to antenna 531. Antenna 531, cooperating with the demodulator modulator 535 and power source 533, receives an RF signal sufficient to change switch 537 to a different state. In one example, switch 537 is a fuse which is blown by the application of power 533. In another example, switch 537 is a change effecting device such as an electro-optical material. Upon the application of an electrical current, the electro-optical material changes state, which may be detected by the target utility through the target interface. Once the switch 537 is in its operational state, the next time the target utility 544 is activated, it will detect the new position of the switch 537 and allow the target to fully operate. Accordingly, the target 525 was shipped through the distribution channels in a disabled state, and upon authorization from a point of sale system, was activated using an RF signal, hi some arrangements, a confirmation signal may be sent back to the point-of- sale to device to confirm activation activity.
[00119] Referring now to figure 24, another target 550 is illustrated. Target 550 is similar to target 525 previously described, so will not be described in detail. Target 550 has a housing 566 that has a case 564 which shields the internal RFA device 568 from RF signals. Because of the shielding, the antenna member 552 is constructed to be attached external to case 564. More particularly, external RFA module 552 has an antenna structure 555, a power structure 557, and the demodulator modulator structure 559. The antenna member 552 may be constructed to couple through connector 562 to the internal RFA device 568. The connector 562 may be designed specially to receive the external
antenna module 552, or may be a standard connector, as described with reference to figures 17 to 22. Connector 562 enables a received RP activation signal to be received in to switch 572, which then enables target utility 569 to determine whether or not the switch is in its active state. More particularly, the target utility 569 communicates through target interface to switch 572. The internal RPA device 568 may be constructed as an integrated circuit DIP, a surface mount package, or another component or module structure. After target 550 has been activated, the antenna member 552 may be removed from the connector and disposed. In some arrangements, a confirmation signal may be sent back to the point-of-sale to device to confirm activation activity. [00120] Referring now to figure 25, another target device 600 is illustrated. Target device 600 has a housing 617 that has a case 615 that provides RF shielding. Therefore, any RF ID device placed inside case 615 would not be able to sufficiently receive an RF signal. Accordingly, an external antenna module 602 is positioned to efficiently receive RF communication signals from an RF reader through its antenna 604. The antenna cooperates with the demodulator modulator 608 to pass power or data signals to an RF ID portion 619. The RF ID portion 619 may be placed inside the target housing, or may be placed in another protected position. For example, the RF ID portion 619 may be placed inside the target's packaging, while the external antenna module 602 may be placed on the outside of the package. The external module 602 may connect to the RF ID portion 619 in a variety of ways. For example, the external model 602 may connect to a connector on the device. The adapter 610 may be constructed to cooperate with an existing connector 613 on the device, or may be specially constructed for the RF ID application. On use, target 600 is taken by a consumer to a point-of-sale checkout terminal. At the point-of-sale checkout terminal an RF reader makes an RF inquiry to the antenna 604. Antenna 604 cooperates with the demodulator modulator 608 to retrieve an identifier 621 stored in logic/memory block 622. Preferably, the RF reader also provides RF power source 606 for powering logical and transmission functions. The identifier 621 is wirelessly communicated back to the RF reader through antenna 604. By separating the RF ID portion 619 from its antenna portion 602, a more effective and robust RF ID system is enabled.
[00121] Referring now to figure 26, an RF ID enabled device 625 is illustrated. RF ID device 625 has a target package 627. An RF ID 629 is attached to the target or installed within the target. However, the RF ID portion 629 is shielded from effective RF signals, so an antenna portion 631 is separately provided. The antenna portion 631 may be installed on another area of the target having better RF characteristics, or may be installed on a different area of target packaging. The RF ID antenna portion 631 may be disposable, or may be more permanently affixed to facilitate warranty or repair services. [00122] While particular preferred and alternative embodiments of the present intention have been disclosed, it will be appreciated that many various modifications and extensions of the above described technology may be implemented using the teaching of this invention. All such modifications and extensions are intended to be included within the true spirit and scope of the appended claims.
Claims
1. An RF controlled advanced integrated circuit device, comprising: an advanced integrated circuit device; an RF device, comprising: a switch coupled to operating circuitry in the advanced integrated circuit device; a low-power circuit constructed to set the state of the switch responsive to a received RF signal; a power source coupled to the low-power circuit and available to power the low-power circuit; and <>. wherein the state of the switch selectably sets the utility of the operational circuitry for the advanced integrated circuit device.
2. The RF controlled advanced integrated circuit device according to claim 1, wherein the advanced integrated circuit device and the RF device are in a same package enclosure.
3. The RF controlled advanced integrated circuit device according to claim 2, wherein the RF device is mounted adjacent to the advanced integrated circuit device.
4. The RF controlled advanced integrated circuit device according to claim 2, wherein the RF device is mounted on the advanced integrated circuit device.
5. The RF controlled advanced integrated circuit device according to claim 2,' wherein the RF device is mounted on a surface of the package enclosure.
6. The RF controlled advanced integrated circuit device according to claim 2, wherein the package enclosure has pinouts, and an unassigned pin is coupled to the RF device as part of an antenna structure for the RF device.
7. The RF controlled advanced integrated circuit device according to claim 1, wherein the low power circuitry further comprises: an antenna; a modulator/demodulator; and conditional circuitry.
8. The RF controlled advanced integrated circuit device according to claim 7, wherein the antenna is removable.
9. The RF controlled advanced integrated circuit device according to claim 7, wherein the conditional circuitry is a logic circuit, a processor, a microprocessor, a microcontroller, or a comparison circuit.
10. The RF controlled advanced integrated circuit device according to claim 1, wherein the power source is a modulator/demodulator or a battery.
11. The RF controlled advanced integrated circuit device according to claim 1, wherein the operating circuitry operates at compromised utility responsive to a first state of the switch, and operates at a full operational utility responsive to a second state of the switch.
12. The RF controlled advanced integrated circuit device according to claim 1, further including an isolation switch between the low power circuit and the operating circuitry.
13. The RF controlled advanced integrated circuit device according to claim 1, wherein the advanced integrated circuit is selected from the group consisting of: integrated circuit; memory, MCM (multi-chip module); processor; micro-processor; SIP (system in a package).
14. The RF controlled advanced integrated circuit device according to claim 1, wherein the switch further comprises a change effecting device.
15. The RF controlled advanced integrated circuit device according tθ' claim 14, wherein the change effecting device is an electrically switchable optical material.
16. The RF controlled advanced integrated circuit device according to claim 1, wherein the switch is a change effecting device, and the change effecting device is a memory value, an electronic switch, an electrical switch, a mechanical switch, a fuse, an electro-mechanical device, a chemical change, an electro-optical filter, an optical emitter, an EM emitter, or a power controller.
17. The RF controlled advanced integrated circuit device according to claim 1, wherein the advanced integrated circuit device and the RF device are in different package enclosures.
18. The RF controlled advanced integrated circuit device according to claim 17, wherein the package for the advanced integrated circuit device has connector pins or grids that connect to mating connectors on the package of the RF device.
19. The RF controlled advanced integrated circuit device according to claim 1, wherein the low power circuit is constructed to set the state of the switch responsive to an electrical signal, and the electrical signal is generated responsive to the received RF signal.
20. The RF controlled advanced integrated circuit device according to claim 1, wherein the power source is available to power the low-power circuit when the advanced integrated circuit device is in a power-off state, and the state of the switch is selectably set when the advanced integrated circuit device is in the power-off state.
21. The RF controlled advanced integrated circuit device according to claim 1, wherein the power source is available to power the low-power circuit when the advanced integrated circuit device is in a power-on state, and the state of the switch is selectably set when the advanced integrated circuit device is in the power-on state.
22. An RF activated advanced integrated circuit device , comprising: a package enclosure; an advanced integrated circuit device in the package; an RF device in the package, comprising: a switch having multiple states coupled to operating circuitry in the advanced integrated circuit device; an activation circuit constructed to set the state of the switch responsive to a received RF signal; a power source coupled to the activation circuit and available to power the activation circuit when the advanced integrated circuit is in a power-off state; and wherein the state of the switch is selectably set when the advanced integrated circuit is in the power-off state.
23. The RF activated advanced integrated circuit device according to claim 22, wherein the operating circuitry is compromised when the switch is in one state, and is functional when the switch is in the other state.
24. The RF activated target advanced integrated circuit according to claim 23, wherein the RF device further includes an RF antenna a) in the package, b) on the package, c) removable from the package, d) external to the package, e) connected to an unassigned pin for the package; or f) shared with an assigned pin for the package.
25. The RF activated target device according to claim 23, wherein the advanced integrated circuit is selected from the group consisting of: integrated circuit; memory, MCM (multi-chip module); processor; micro-processor; or SIP (system in a package).
26. A system for controlling a processor, comprising: an RF device having an output line; a processor connected to the output line of the RF device and operating the steps comprising: receiving a signal from the RF controller device on the output line; and operating the processor at a functional level according to the received signal.
27. The system according to claim 26, wherein the RF device and the processor are inside the same package enclosure.
28. The system according to claim 26, wherein the RF device includes a switch that is set responsive to receiving an RF signal, and the state of the switch determines the signal on the output line.
29. The system according to claim 28, wherein the switch is permanently set to an activated state responsive to the RF device receiving the RF signal.
30. An RF controlled advanced integrated circuit device, comprising: a package enclosure; an RF device in the package, comprising: a switch; a low-power circuit constructed to set the state of the switch responsive to a received RF signal; a power source coupled to the low-power circuit and available to power the low-power circuit when the advanced integrated circuit device is in a power- off state; and an output line having a first state and a second state; an advanced integrated circuit device in the package, comprising: an input line connected to the output line of the RF device; operational circuitry connected to the input line; a power connection for powering the operational circuitry; wherein the operational circuitry operates at first utility when the input line is at its first state, and at a second utility when the input line is at its second state.
31. The RF controlled advanced integrated circuit device according to claim 30, wherein the switch sets the state of the output line.
32. The RF controlled advanced integrated circuit device according to claim 31, wherein the switch sets the state of the output line so that in the first state the output line is shunted to ground.
33. The RF controlled advanced integrated circuit device according to claim 31, wherein the switch sets the state of the output line so that in the second state the output line floats.
34. The RF controlled advanced integrated circuit device according to claim 30, wherein the RF device further comprises conditional logic, and the conditional logic sets the state of the output line.
35. The RF controlled advanced integrated circuit device according to claim 34, wherein the conditional logic sets the state of the output line so that in the first state the output line is shunted to ground.
36. The RF controlled advanced integrated circuit device according to claim 34, wherein the conditional logic sets the state of the output line so that in the second state the output line floats.
37. The RF controlled advanced integrated circuit device according to claim 34, wherein the conditional logic is an AND gate that has a reset signal as one input, the switch state as a second input, and the output line as its logical output.
38. The RF controlled advanced integrated circuit device according to claim 34, wherein the conditional logic is a gate selected from the group consisting of: AND, OR, NOR, NAND, and XOR.
39. The RF controlled target device according to claim 30, wherein the advanced integrated circuit is selected from the group consisting of: integrated circuit; memory; MCM (multi-chip module); processor; micro-processor; or SIP (system in a package).
40. An RF activated microprocessor, comprising: a package enclosure; an RF device in the package, comprising: a switch; a low-power circuit constructed to set the state of the switch responsive to a received RF signal; a power source coupled to the low-power circuit and available to power the low-power circuit when the advanced integrated circuit device is in a power- off state; and an output line having a first state and a second state; a microprocessor circuit device in the package, comprising: an input line connected to the output line of the RF device; processor circuitry connected to the input line; a power connection for powering the operational circuitry; wherein the processor circuitry is compromised when the input line is at its first state, and fully operational when the input line is at its second state.
41. The RF activated microprocessor according to claim 40, further including an antenna connected to the RF device, and wherein a pin on the package enclosure comprises a portion of the antenna.
42. The RF activated microprocessor according to claim 40, wherein the input line is a reset line.
43. The RF activated advanced integrated circuit device according to claim 40, wherein the switch sets the state of the output line.
44. The RF activated advanced integrated circuit device according to claim 43, wherein the switch sets the state of the output line so that in the first state the output line is shunted to ground.
45. The RF activated advanced integrated circuit device according to claim 43, wherein the switch sets the state of the output line so that in the second state the output line floats.
46. The RF activated advanced integrated circuit device according to claim 40, wherein the RF device further comprises conditional logic, and the conditional logic sets the state of the output line.
47. The RF activated advanced integrated circuit device according to claim 46, wherein the conditional logic sets the state of the output line so that in the first state the output line is shunted to ground.
48. The RF activated advanced integrated circuit device according to claim 46, wherein the conditional logic sets the state of the output line so that in the second state the output line floats.
49. The RF activated advanced integrated circuit device according to claim 46, wherein the conditional logic is an AND gate that has a reset signal as one input, the switch state as a second input, and the output line as its logical output.
50. A controlled advanced integrated circuit device, comprising: an advanced integrated circuit device; a switch coupled to operating circuitry in the advanced integrated circuit device; a low-power circuit constructed to set the state of the switch responsive to a received electrical signal; a power connection coupled to the low-power circuit and available to power the low-power circuit; and wherein the state of the switch selectably sets the utility of the operational circuitry for the advanced integrated circuit device.
51. The controlled advanced integrated circuit device according to claim 50, further comprising a package for holding the advanced integrated circuit and the switch.
52. The controlled advanced integrated circuit device according to claim 51, further comprising an electrical port on the package connected to the switch.
53. The controlled advanced integrated circuit device according to claim 51, further comprising a pin on the package connected to the switch.
54. The controlled advanced integrated circuit device according to claim 50, wherein the switch is a change effecting device, and the change effecting device is a memory value, an electronic switch, an electrical switch, a mechanical switch, a fuse, an electro- mechanical device, a chemical change, an electro-optical filter, an optical emitter, an EM emitter, or a power controller.
55. The controlled advanced integrated circuit device according to claim 50, wherein the advanced integrated circuit is selected from the group consisting of: integrated circuit; memory; MCM (multi-chip module); processor; micro-processor; or SIP (system in a package).
Priority Applications (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
EP06735634A EP1854240A2 (en) | 2005-02-18 | 2006-02-21 | Device and method for selectively controlling the utility of an integrated circuit device |
JP2007556395A JP2008537197A (en) | 2005-02-18 | 2006-02-21 | Apparatus and method for selectively controlling utilization of an integrated circuit device |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US65438405P | 2005-02-18 | 2005-02-18 | |
US60/654,384 | 2005-02-18 |
Publications (2)
Publication Number | Publication Date |
---|---|
WO2006089280A2 true WO2006089280A2 (en) | 2006-08-24 |
WO2006089280A3 WO2006089280A3 (en) | 2008-01-10 |
Family
ID=36917163
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/US2006/006065 WO2006089280A2 (en) | 2005-02-18 | 2006-02-21 | Device and method for selectively controlling the utility of an integrated circuit device |
Country Status (3)
Country | Link |
---|---|
EP (1) | EP1854240A2 (en) |
JP (1) | JP2008537197A (en) |
WO (1) | WO2006089280A2 (en) |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US9798695B2 (en) | 2012-08-07 | 2017-10-24 | Nokia Technologies Oy | Access control for wireless memory |
US10693506B2 (en) | 2015-12-10 | 2020-06-23 | Samsung Electronics Co., Ltd. | Electronic device comprising antenna |
Families Citing this family (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20110233271A1 (en) * | 2010-03-23 | 2011-09-29 | Rfmarq, Inc. | System and Method To Track And Authenticate Semiconductor Chips, Multi-Chip Package Modules, And Their Derivative System Products |
Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6249227B1 (en) * | 1998-01-05 | 2001-06-19 | Intermec Ip Corp. | RFID integrated in electronic assets |
US20030102842A1 (en) * | 2001-11-30 | 2003-06-05 | Mikitaka Tamai | Battery pack provided with authentication circuitry |
US20050033689A1 (en) * | 2001-07-10 | 2005-02-10 | American Express Travel Related Services Company, Inc. | A system and method for dynamic fob synchronization and personalization |
-
2006
- 2006-02-21 WO PCT/US2006/006065 patent/WO2006089280A2/en active Application Filing
- 2006-02-21 EP EP06735634A patent/EP1854240A2/en not_active Withdrawn
- 2006-02-21 JP JP2007556395A patent/JP2008537197A/en active Pending
Patent Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6249227B1 (en) * | 1998-01-05 | 2001-06-19 | Intermec Ip Corp. | RFID integrated in electronic assets |
US20050033689A1 (en) * | 2001-07-10 | 2005-02-10 | American Express Travel Related Services Company, Inc. | A system and method for dynamic fob synchronization and personalization |
US20030102842A1 (en) * | 2001-11-30 | 2003-06-05 | Mikitaka Tamai | Battery pack provided with authentication circuitry |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US9798695B2 (en) | 2012-08-07 | 2017-10-24 | Nokia Technologies Oy | Access control for wireless memory |
US10693506B2 (en) | 2015-12-10 | 2020-06-23 | Samsung Electronics Co., Ltd. | Electronic device comprising antenna |
Also Published As
Publication number | Publication date |
---|---|
WO2006089280A3 (en) | 2008-01-10 |
EP1854240A2 (en) | 2007-11-14 |
JP2008537197A (en) | 2008-09-11 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US20060192653A1 (en) | Device and method for selectively controlling the utility of an integrated circuit device | |
US20060119487A1 (en) | Device and method for selectively activating a target | |
US20070194945A1 (en) | Mobile Device for Selectively Activating a Target and Method of Using Same | |
US20060095385A1 (en) | Method and network for selectively controlling the utility a target | |
US6957333B2 (en) | System and method for encrypted communications between electronic devices | |
US7447143B2 (en) | RFID security device for optical disc | |
US9836934B2 (en) | Security tag for inventory and anti-theft alarm system | |
EP1971970B1 (en) | Programming station for a security system for protecting merchandise | |
US20050240498A1 (en) | Product verification and activation system, method and apparatus | |
US20070011033A1 (en) | System and process for providing insurance | |
CN1809833B (en) | For reducing the method for the theft incidence of the electronic equipment for buying | |
US20160125380A1 (en) | Apparatus and methods for communicating asset information | |
US20070016462A1 (en) | System and process for distributing products | |
WO2006089280A2 (en) | Device and method for selectively controlling the utility of an integrated circuit device | |
CN101444034A (en) | Device and method for selectively controlling the utility of a taget | |
WO2004036521A2 (en) | Security status indication for consumer equipment | |
WO2009058122A1 (en) | An rfid system for providing data and power | |
WO2008036546A2 (en) | System and method for packaging and distributing media | |
CN101405805A (en) | Method and apparatus for authenticating static data carriers | |
CN101438528A (en) | Method, system, and network for selectively controlling the utility a target | |
KR102378444B1 (en) | Kiosk comprising lock apparatus |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
121 | Ep: the epo has been informed by wipo that ep was designated in this application | ||
WWE | Wipo information: entry into national phase |
Ref document number: 2007556395 Country of ref document: JP |
|
NENP | Non-entry into the national phase in: |
Ref country code: DE |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2006735634 Country of ref document: EP |