Chip Card PUF Authentication and Secure Data Channel
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing chip card systems lack effective protection against deliberate manipulation, particularly in hybrid chip cards where unauthorized changes can compromise security-critical functions, leading to potential economic damage.
Innovation Solution
The method employs Physical Unclonable Functions (PUFs) integrated into the chip card material to derive cryptographic keys, establishing a cryptographically protected data transmission channel between chips, ensuring authentication and preventing manipulation by altering the PUF-based signals, thus securing chip card functions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If error detection codes (EDC) with checksums are used to protect data, then data integrity against errors is improved, but protection against deliberate manipulation is not achieved
Solution Approach 1:
The patent applies preliminary action by pre-calculating and attaching an error detection code (EDC) to data before transmission or storage. This EDC serves as a preliminary protective measure that enables future verification of data integrity without requiring real-time computation during data usage.
Solution Approach 2:
The patent introduces an intermediary mechanism (the EDC checksum) that mediates between the original data and the verification process. This intermediary value allows third parties to verify data integrity without having access to or modification of the original sensitive data, thus protecting against manipulation while maintaining reliability.
2Adaptability or versatility
If chip cards use multiple chips for enhanced functionality, then versatility is improved, but susceptibility to manipulation increases
Solution Approach 1:
The patent applies preliminary anti-action by implementing a verification mechanism that proactively detects and prevents manipulation attempts before they can compromise the chip card system. The EDC calculation and comparison process serves as a preventive measure that counteracts potential manipulation of individual chips or their interconnections.
Solution Approach 2:
The patent implements feedback by creating a closed-loop verification system where the EDC is calculated from original data, attached to the data, and then used to verify the data's integrity during or after transmission. This feedback mechanism provides continuous verification that detects manipulation attempts in multi-chip systems.
3Ease of operation
If sensitive data is stored in chip card memory for later use, then functionality is improved, but vulnerability to unauthorized access increases
Solution Approach 1:
The patent introduces an intermediary verification layer (EDC checksum) between the stored sensitive data and any access attempts. This intermediary mechanism allows legitimate access while blocking unauthorized access, as any modification to stored data would result in EDC verification failure without requiring direct exposure of the sensitive data itself.
Data Source
Figure 1~2
Figure 3~4
Figure 5
AI summary
The invention relates to a method for performing a chip card function (128, 168) provided by a first (104) and/or second (154) chip of a chip card (102), wherein the card material of the chip card forms a first Physical Unclonable Function (PUF) with respect to a first sensor element (112) of the first chip, comprising: a1) reception of a first signal (Sig I) determined by the first Physical Unclonable Function by the first sensor element (112); b1) derivation of a first cryptographic key (PS_A) by the first chip from the first signal; c1) authentication of the first chip to the second chip using the first cryptographic key; d) establishment of a cryptographically protected data transmission channel (210) between the first and second chips; and e) data exchange between the first and second chips via the data transmission channel to perform the chip card function.