Identification object, procedure and use

Abstract

The invention relates to an identification object (10) having an NFC transponder (12) and an input element (18), a method for communicating with this identification object (10) and its use. The identification object (10) communicates by means of NFC communication and has an input element (18) with which a data exchange is authorized.

Description

[0001] The invention relates to an identification object with an NFC transponder and an input element, a method for communicating with this identification object, and its use. The identification object communicates via NFC communication and has an input element with which a data exchange is authorized.

[0002] Radio remote controls for unlocking vehicles are well known. Some are designed with multiple buttons on a control panel, allowing the vehicle to be unlocked with one button and locked with another, for example.

[0003] Recently, the market for digital keys has been growing. These are used in the form of small objects that serve as keys or in vehicle users' mobile devices. Conventional keys are also evolving into design-oriented objects.

[0004] NFC technology (NFC: Near Field Communication) has emerged as a suitable technology for unlocking vehicles. It requires very little infrastructure on the vehicle, namely NFC readers that are accessible from the outside and are primarily located on the vehicle doors, as well as another one inside the vehicle to start the vehicle. For this purpose, an NFC transponder, also known as an NFC tag, is provided as a key or in a key that is held up to a reader. This reader creates an electromagnetic field from which the transponder, using its antenna arranged as a coil, draws energy for communication and then sends data that, for example, indicate its authorization to start the vehicle. DE 10 2011 088 511 A1 discloses an additional use of the remote key with NFC for interacting with a user interface.

[0005] A disadvantage of NFC technology is its limited range, which is typically just a few centimeters. This can be inconvenient, especially inside the vehicle, when starting the vehicle, because the key must be carefully held or placed close to the corresponding NFC reader.

[0006] In addition to the limited range, there is always the risk of third-party attacks on NFC communication, for example through a relay attack.

[0007] This gives rise to two needs for the further development of vehicle keys: For the sake of convenience, the range of NFC communication should be increased, while simultaneously improving the security of communication. The invention seeks to address these needs, namely, to propose solutions for extending the range and improving the security of using NFC-based keys.

[0008] DE 10 2010 064 257 A1 shows a radio key in which an attack using cryptographic methods is to be prevented.

[0009] DE 10 2019 120 106 A1 relates to a carrier layer for a valuable or security document and to such a document, wherein a conductor track of an RFID transponder is applied to the carrier layer. This conductor track has a switching point, preferably in the form of an interruption in the conductor track, which can be converted between a closed and an open configuration. In the event of an interruption, the conductor track is closed (bridged) by pressing in this area, so that the previously deactivated antenna is activated and the conductor track is closed, thus enabling communication with the RFID transponder.

[0010] The object of the invention is achieved with an identification object according to claim 1, a method according to claim 8 and a use according to claim 10. Further preferred embodiments of the invention result from the remaining features mentioned in the subclaims.

[0011] An identification object according to the invention is formed with an NFC transponder which has a memory with sensitive data stored thereon and a coil, and at least one input element, wherein the NFC transponder is configured to establish an NFC communication connection with an NFC reader when a voltage is induced across the coil by an electromagnetic field of the NFC reader, and wherein the NFC transponder (12) is further configured to transmit sensitive data stored in the memory of the NFC transponder via the already existing NFC communication connection only after actuation of the input element.

[0012] An NFC transponder or NFC tag consists of a processor and an antenna arranged in the form of a coil and connected to the processor. An NFC transponder also contains a memory on which at least one identifier or its identity is stored. This memory can contain instructions that, when executed by the processor, control connected components, exchange data with them, and process them.

[0013] When the coil enters an electromagnetic field, a voltage is induced in the coil, supplying power to the processor. The processor can then function as intended, for example, executing instructions stored in memory.

[0014] According to the invention, the identification object has an input element. The identification object, and in particular the NFC transponder, is configured to transmit data only after the input element has been actuated. In the simplest case, such an input element can be a button that is communicatively connected to the processor of the NFC transponder. Instructions in its memory provide for querying the status of the input element and thus detecting an actuation as soon as it occurs. This can, of course, only occur if sufficient energy is available.

[0015] The instructions stored in the NFC transponder's memory now comprise a sequence according to which, after the NFC transponder's coil is activated, the processor queries the input element, evaluates the data, and only begins data transmission after the input element has been activated. In the current technology, this transmission starts automatically and without such confirmation, thus exposing it to the risk of third-party attacks.

[0016] However, by requesting an actuation of the input element, a user can actively determine whether and when data can be transferred from the identification object to an NFC reader. This can be referred to as an authorization process and increases the security of the communication between the NFC reader and the identification object because it is only initiated under user control.

[0017] The inventive method for exchanging data via NFC communication is implemented with the previously described identification object. Accordingly, as is common with NFC communication, an electromagnetic field of an NFC reader induces a current through the coil of the NFC transponder. The processor queries the input element and evaluates its status. Only when this indicates user activation does the data transfer of the sensitive data take place via the existing NFC communication connection to the NFC reader.

[0018] Such an identification object and method can be used to open a vehicle door, a room door, a safe, and / or as a means of payment. All that is required is that the relevant data is stored in the NFC transponder's memory and / or its identification number is known to the reading system and marked with authorization for the desired action.

[0019] If the identification object is held against an externally accessible NFC reader of a vehicle, an NFC communication connection is established, but the identification object does not yet transmit any data that could unlock the vehicle. This only happens when the user activates the input element. Then, the data is transmitted to the vehicle's reader. If the data stored on the identification object indicates authorization to open the vehicle, the vehicle can be opened.

[0020] Any other door can be opened in the same way with an NFC-based lock, including room doors such as those in offices or hotel rooms, as well as safes. In general, security devices can be protected from unauthorized opening with an identification object according to the invention.

[0021] The identification object can also be used as a means of payment. To do so, data must be stored in its memory that corresponds to that of a payment method such as an EC card or credit card. If an identification object configured as a means of payment is used for payment, the data relevant for the payment is only transmitted to the cash register's NFC reader once the input element has been activated.

[0022] The use of an identification object according to the invention and the method according to the invention for the aforementioned (non-exhaustive) processes clearly demonstrates the desirability of increased security against third-party attacks. This is achieved by requiring data transmission from the identification object to the NFC reader only upon active activation of the input element for authorization. Since this is unpredictable for third parties and, in such a situation, it is difficult for them to attack the communication between the identification object and the NFC reader unnoticed due to the limited range, this requirement is met.

[0023] The method according to the invention can be further developed in such a way that the data about at least one data exchange that has taken place are stored on a memory of the NFC transponder and can be read out at a later time.

[0024] The aim is to store the fact that a data exchange or multiple data exchanges have taken place, the counterparty, and optionally also the time and / or the transmitted data or information about the transmitted data. The memory of the NFC transponder in the identification object would have to be designed with the necessary capacity for the desired number of transactions to be stored. Furthermore, an additional energy supply beyond the electromagnetic field may be required, such as a dedicated energy storage device in the identification object, as will be explained below with reference to optional configurations of the identification object.

[0025] The user can subsequently check or track, at any time and using an NFC reader, which transactions the identification object was used for and, depending on the stored information, when and with whom. This is perceived as an increase in security and perceived control, and improves the user experience. Furthermore, the user may also detect uses that they did not personally perform.

[0026] In order to read out the data about a data exchange that has taken place, an application can be provided on a user's mobile device, for example.

[0027] According to one embodiment, the identification object can have a light source that is activated when a connection to an NFC reader is established. This light source should be as small as possible and have low energy consumption so that it can be operated with the electrical energy that the NFC transponder draws from the electromagnetic field.

[0028] The processor of the NFC transponder in the identification object controls the light, so that it illuminates when a communication connection has been established between the NFC reader and the identification object. The light indicates that the identification object is within range of an active NFC reader and that data exchange is possible. This informs the user that they can authorize or initiate the data exchange by pressing the input element.

[0029] Preferably, the instructions executed by the processor of the identification object should be designed such that the query of the input element and the resulting data transmission are only initiated when the luminous device indicates the existing communication connection. The method according to the invention can be adapted accordingly.

[0030] As already mentioned, the identification object can be used for various purposes. If the memory of the NFC transponder in the identification object, or optionally an additional memory connected to the processor, is sufficiently large, multiple uses can be stored on it. In this case, it would be useful for the input element to be designed as a rotary wheel with at least two keypads.

[0031] The identification object would then have a rotary dial that can be used to select an application for the identification object. Each of the functions or uses to be implemented is assigned to a keypad. The relevant data is also referred to as secrets.

[0032] To select a function or use, the rotary wheel is moved so that the button with the desired function or use is rotated to a predetermined position. For example, a counter contact for a button can be provided there, which closes when the button rotated above it is pressed, thus indicating that it has been pressed. In this exemplary embodiment, no further contact is provided for the remaining buttons on the rotary wheel.

[0033] If the data is to be transferred, this button must be pressed. This enables multiple use of the identification object and also ensures that only the data relevant to the current use is transferred.

[0034] A further feature of the identification object is that it has an energy storage device. In the simplest case, this can be a battery. Such an energy storage device can be used to power the light source, but also to exchange large amounts of data over an extended period of time.

[0035] Above all, the presence of an energy storage device enables an extension of the range of NFC communication, since the energy for operating the processor and / or for data transmission does not have to be obtained from the electromagnetic field of the NFC reader.

[0036] This primarily provides additional convenience for the user. They no longer have to hold the identification object directly against the reader or place it on it, but simply hold it close. Ranges of up to 60 cm can be achieved. For example, a vehicle user can simply place the identification object used as a vehicle key next to them or on the passenger seat, and the NFC reader located in the interior can detect the identification object, allowing the vehicle to be started. If the identification object is used as a means of payment, the user no longer has to get as close as possible to the reader, but can conveniently complete the payment process from a standing position near the checkout.

[0037] The additional range does not entail an increased risk of attacks by third parties, since data exchange only occurs after the input element has been activated.

[0038] Preferably, the energy storage device is rechargeable, in particular wirelessly rechargeable. It should therefore be possible to recharge the energy storage device once the energy stored therein has been used up. For this purpose, wired charging can be provided, whereby a cable can be connected to the identification object to charge its energy storage device. For this purpose, the identification object must have a charging socket connected to the rechargeable energy storage device.

[0039] However, wireless charging is preferred, for example, using the coil of the NFC transponder. This coil is stimulated by an electromagnetic field, and the resulting energy is primarily fed into the energy storage device when no other use is currently being made.

[0040] If the identification object according to the invention has an energy storage device, the range of the identification object can be adjustable. This should enable the user to adapt the range of the identification object to their needs. This can be achieved by adjusting the transmission power of the NFC transponder in the identification object, for example, using an application on a user's mobile device. Optionally, the range adjustment can be set on an application-specific basis if more than one function or use of the identification object is intended. This allows the user's various security requirements to be taken into account.

[0041] To expand and / or make communication with the identification object more flexible, the identification object can include a Bluetooth module and / or a UWB module. For this purpose, an additional radio module for communication via Bluetooth and / or an additional radio module for communication via ultra-wideband (UWB) is arranged in the identification object. Using UWB communication, data can be exchanged at close range at a high data rate. Bluetooth is an alternative communication method between participants, but operates on a narrower frequency range than UWB.

[0042] This extension of the identification object is particularly suitable for transferring data for various functions or uses of the identification object to it and / or reading data about completed data transmissions, since UWB and Bluetooth allow faster data exchange than NFC communication.

[0043] Of course, these additional communication channels can also be used as an alternative to NFC communication for the intended purpose of the identification object, for example, to open doors. Furthermore, a greater range can be achieved than with NFC communication.

[0044] If a UWB module and / or Bluetooth module is present, it is recommended to provide a larger or additional energy storage device (or even one at all if the identification object is otherwise designed without its own energy storage device).

[0045] With the identification object according to the invention, the associated method, and the use thereof, the use of NFC communication can be made more convenient and secure. Data exchange only occurs after the process has been explicitly initiated by the user actuating the input element. Since this is difficult to predict from the outside, third-party attacks on the NFC communication between the identification object and an NFC reader are difficult. The range of the identification object can also be extended through optional configurations.

[0046] The various embodiments of the invention mentioned in this application can be advantageously combined with one another, unless stated otherwise in the individual case.

[0047] The invention is explained below in exemplary embodiments with reference to the accompanying drawings. They show: Fig. 1 an exemplary embodiment of the identification object according to the invention, and Fig. 2a-c a simplified representation of the method according to the invention.

[0048] Fig. 1 shows an exemplary embodiment of an identification object 10 according to the invention with an NFC transponder 12, which is formed with a processor 14 and a coil 16, which are connected to each other.

[0049] The identification object 10 further comprises a light source 24 coupled to the processor 14. Also communicatively connected to the processor 14 is an input element 18 in the form of a rotary wheel 20 with four buttons 22. In the plan view below, an energy storage device 26 is arranged (outer ring in the illustration). The input element 18 could alternatively also be a single button. The embodiment shown here, however, allows the storage and use of four different secrets or uses of the identification object 10. To select one of these, the rotary wheel 20 is rotated until the button 22 corresponding to the desired function is positioned in front of the marking 21. To clarify the selection, Fig. 1 the selected key 22 is outlined in solid lines and the others are dashed.

[0050] Since the identification object can have any shape, provided that the coil 16 of the NFC transponder 12 is not impaired in its function, the identification object 10 has in the Fig. 1 has no outer contour.

[0051] The function and use of the Fig. 1 shown identification object 10 is determined by means of Fig. 2a to 2c. The identification object 10 is shown in a highly simplified manner in each of these figures.

[0052] For example, a user 30 wants to open his vehicle. To do so, he moves with his identification object 10 into the range of the NFC reader 28 of his vehicle, for example at its vehicle door ( Fig. 2a). The NFC reader 28 creates an electromagnetic field, inducing a voltage in the coil 16 of the NFC transponder 12, which can be used to operate the processor 14. However, since the identification object 10 is designed with its own energy storage device 26, this is not necessary, and only the communication between the identification object 10 and the NFC reader 28 takes place via the electromagnetic field.

[0053] Initiated by contact with the NFC reader 28, the processor 14 begins processing the instructions stored in its memory (not separately labeled). This initially activates the light source 24 so that it indicates the existing communication connection between the NFC reader 28 and the identification object 10 ( Fig. 2b). The status of the input element 18, i.e. the position of the rotary wheel 20 and a possible actuation of the predetermined key 22, is then queried ( Fig. 2c). If this is the case, the data stored in the memory of the identification object 10, which indicates authorization to open the vehicle, is transmitted to the vehicle or its NFC reader 28.

[0054] While the communication between the identification object 10 and the NFC reader 28 is still ongoing, data relating to this communication, i.e. its existence, the time and the communication partners, are stored in the memory of the identification object 10 so that the user 30 can later read them using an application on his mobile phone.

[0055] Optionally, the user 30 can adjust the range of the identification object 10 by adjusting the transmission power of the NFC transponder 12 using the above application. List of reference symbols 10 Identification object 12 NFC transponders 14 NFC transponder processor 16 NFC transponder coil 18 Input element 20 rotary wheel 21 Marking for rotary wheel 22 button 24 bulbs 26 energy storage units 28 NFC reader 30 users

Claims

[1] Identification object (10) with an NFC transponder (12) having a memory with sensitive data stored thereon and a coil, and at least one input element (18), wherein the NFC transponder (12) is configured to establish an NFC communication connection with an NFC reader when a voltage is induced across the coil by an electromagnetic field of the NFC reader, and wherein the NFC transponder (12) is further configured to transmit sensitive data stored in the memory of the NFC transponder (12) via the already existing NFC communication connection only after actuation of the input element (18). [2] Identification object (10) according to claim 1, characterized by that it has a lighting means (24) which is controlled when a connection with an NFC reader (28) is established. [3] Identification object (10) according to claim 1 or 2, characterized bythat the input element (18) is designed as a rotary wheel (20) with at least two key fields (22). [4] Identification object (10) according to one of the preceding claims, characterized by that it has an energy storage device (26). [5] Identification object (10) according to claim 4, characterized by that the energy store (26) is rechargeable, in particular wirelessly rechargeable. [6] Identification object (10) according to claim 4 or 5, characterized by that the range of the identification object (10) can be adjusted by adjusting the transmission power of the NFC transponder (12). [7] Identification object (10) according to one of the preceding claims, characterized by that it includes a Bluetooth module and / or a UWB module. [8] Method for exchanging data by means of NFC communication with an identification object (10) according to one of the preceding claims, characterized bythat an NFC communication connection is established with an NFC reader when a voltage is induced across the coil of the NFC transponder (12) of the identification object (10) by an electromagnetic field of the NFC reader, and that data worthy of protection stored in the memory of the identification object (10) are only transmitted via the existing NFC communication connection after the input element (18) has been actuated. [9] Method according to claim 8, characterized by that the data about at least one data exchange are stored on a memory of the NFC transponder (12) and can be read out at a later time. [10] Use of an identification object (10) according to one of claims 1 to 7 for opening a vehicle door, for opening a room door, for opening a safe and / or as a means of payment.

Images