NFC Lock Programming via Mobile Applet and SIM Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The complexity and risk of errors in programming contactless NFC locks during installation hinder their widespread adoption, as they require specific equipment and expertise, even though they offer enhanced security features.

Innovation Solution

A mobile phone with an NFC chip and antenna is used to download and execute an applet that automates the programming process, including encryption algorithms and keys, ensuring secure implementation without specialized tools, using a unique lock identifier and transport key for secure communication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional programming methods with specialized equipment are used, then security programming is reliable, but device complexity and ease of operation deteriorate

Engineering Contradiction:
Improvesecurity programming reliabilityVSAvoidprogramming ease
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

A mobile phone serves as an intermediary device between the lock and the programming system. The phone executes an applet that communicates with the lock via NFC, eliminating the need for specialized programming equipment. The phone's SIM card acts as a secure element to authenticate and exchange cryptographic data, making the programming process as easy as using a smartphone while maintaining security integrity.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The lock performs self-programming by receiving cryptographic data directly from the mobile phone through NFC communication. The system automatically generates and installs security parameters, encryption keys, and authentication data without requiring manual configuration or specialized tools, enabling end-users to program locks themselves.

Inventive Principle:
Principle #25Self-service

2Reliability

If traditional programming methods with specialized equipment are used, then security programming is reliable, but device complexity worsens

Engineering Contradiction:
Improvesecurity programming reliabilityVSAvoidprogramming equipment complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The mobile phone serves multiple functions: it acts as a secure element container with its SIM card, a communication interface via NFC, a processing unit to execute the programming applet, and a user interface for monitoring progress. This universal device replaces multiple specialized tools (programming cards, authentication devices, configuration software) with a single multi-functional platform that everyone already possesses.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The mobile phone functions as an intermediary that bridges the gap between the lock's security requirements and the user's simplicity needs. It handles cryptographic operations, authenticates with the lock, transfers security parameters, and manages the programming sequence, thereby eliminating the need for complex specialized programming equipment while ensuring reliable security configuration.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Ease of operation

If simplified programming methods are used, then ease of operation improves, but security level deteriorates

Engineering Contradiction:
Improveprogramming easeVSAvoidsecurity level
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The mobile phone's SIM card is pre-configured as a secure element with cryptographic capabilities before the programming process begins. The applet is pre-loaded with the necessary security protocols and authentication mechanisms. This preliminary preparation ensures that even though the programming process is simplified for the user, robust security measures are already in place to protect the lock during and after programming.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The mobile phone acts as a secure intermediary that enforces cryptographic protocols during the programming process. It authenticates the lock, securely transmits encryption keys and security parameters, and verifies the programming completion. This intermediary role ensures that simplified user interaction does not compromise security, as the phone handles all cryptographic operations according to established security standards.

Inventive Principle:
Principle #24Intermediary (Mediator)

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

This method simplifies the programming of NFC locks, making it accessible to lay users while maintaining high security levels from manufacturing to final installation, reducing errors and increasing distribution potential.

Implementation Method 1

the coupling between a wearable device and a lock is achieved by varying a magnetic field produced by a coil (a technique known as 'inductive coupling')

Methodology Applied
Scientific EffectInductive coupling: Electromagnetic Induction

Implementation Method 2

The wearable device within this range receives energy from this field (which, among other things, powers the device, which generally lacks its own power source)

Methodology Applied
Scientific EffectMagnetic field energy transfer: Electromagnetic Induction

Data Source

PatentEP2425581B1System for programming a lock comprising contactless NFC communication means
Publication Date: 2019.05.22 ASSA ABLOY AB
  • EP2425581B1 patent drawingFigure 1

AI summary

The invention relates to a system including a lock (10) provided with electronic NFC transceiver circuits and electric circuits for controlling mechanical locking/unlocking members, and a portable telephone (16) provided with circuits for NFC mode of operation. The telephone comprises means for initializing the lock, said means including means for: downloading, from a remote site (20), an applet and elements required for initializing the lock; verifying, using the telephone, the identifier and the transport key stored in the lock against the downloaded ones; deactivating the transport key of the lock; loading, onto the lock, a unique random algorithm and a cryptographic key that have been downloaded; and generating a message notifying of the termination of the initialization of the lock.