Giesecke & Devrient Gmbh

Giesecke+devrient Mobile Security Gmbh

Giesecke+devrient Currency Technology Gmbh

Elatec Gmbh

Klaus Finkenzeller

Michael Baldischweiler

Wolfgang Rankl

Walter Hinz

Martin Seysen

Gisela Meister

Karl Eglof Hartel

Volker Stöhr

Dirk Riesenbeck

Wittich Kaule

Manfred Heim

Thomas Giering

Bernd Wunderer

Dieter Stein

Norbert Holl

Lars Hoffmann

Marius Dichtl

Stefan Kluge

Mario Keller

Theodor Burchard

Ullrich Martini

Friedrich Kretschmar

Walter Schneider

Albert Ojster

Ralf Hobmeier

Thomas Stocker

Denny Brandl

Alexander Steinkogler

Hans Graf

Armin Bartsch

Johannes Luyken

Thomas Hildebrandt

Ralf Liebler

Werner Ness

Helmut Scherzer

Dirk Wacker

Hermann Sterzinger

Sven Ehrich

Stephan Rasch

Dominik Samson

Hans-Jürgen Roth

Carsten Bohn

Florian Pfeiffer

Rainer Schmidtke

Thorsten Pillo

Christoph Schiller

Harald Reiner

Christian Voellmer

Bernd Brus

Vui Huang Tea

Juergen Schuetzmann

Markus Krombholz

Sönke Schröder

Oskar Dicklberger

Alfred Rossmadl

Nils Diezmann

Matthias Zeleny

Ferdinand Burianek

Katharina Schulz

Wilfried Rill

Fabiola Bellersheim

Thomas Goetz

Werner Mathé

Carles Barrobés I Meix

Uwe Kapp

Richard Bosch

Emil Knies

Eckart Schroeder-Bergen

Denis Kim

Volker STÖHR

Sebastian Wallner

Ferdiand Burianek

Georg Forster

René Winkler

Ulrich Auracher

Steffen Hoffmann

Paul Noras

Werner Hofer

A method in a system comprising at least one portable data carrier, an authentication server and at least one reading device of at least one service provider which is couplable to the authentication server. The data carrier is adapted to communicate contactlessly with the reading device and comprises a security marking which can be read contactlessly by the reading device and on the basis of which the data carrier can be authenticated by the authentication server. The method comprises the step of equipping the data carrier with a data-carrier management marking that encodes a piece of data-carrier management information and readable contactlessly by a portable terminal. The method includes contactlessly reading out the data-carrier management marking by a portable terminal, transferring the data-carrier management information encoded in the data-carrier management marking to the authentication server, and managing the data carrier in the system employing the data-carrier management information.

Management, authentication and activation of a data carrier

A portable data carrier comprises a first electrical oscillating circuit, which includes a first antenna coil and a first electrical load, and at least one second electrical oscillating circuit, which comprises a second antenna coil and a second electrical load. The first antenna coil and the second antenna coil are geometrically arranged relative to each other such that there is no mutual inductance between the first antenna coil and the second antenna coil.

Data carrier having two oscillating circuits

A method for managing portable data carriers in a system having at least one portable data carrier, an authentication server, and several service providers systems each including reading devices and a service provider unit. The reading devices may request an authentication information item of the data carrier and relay the authentication information item to the authentication server. The authentication server may authenticate the data carrier on the basis of the authentication information item and establish an application identity associated with the data carrier in the service provider system with the help of the security identity The established application identity associated with the data carrier may be transmitted from the authentication server to the reading device of the service provider system.

Transaction system

A method for protection against a relay attack on a system is composed of at least a first and a second communication device. Data are transmitted wirelessly between the first and the second communication device. The first communication device ascertains a first spectrum of all wirelessly transmitted signals to be received at the location of the first communication device within a frequency band. The second communication device likewise ascertains a second spectrum of all wirelessly transmitted signals to be received at the location of the second communication device within the frequency band. The frequency band is limited by a minimum and a maximum frequency. The second communication device transmits the second spectrum to the first communication device. The first communication device compares the first spectrum with the second spectrum in order to ascertain whether the second communication device is located at the location of the first communication device.

Protection against a relay attack

A method for sealing and checking a product for manipulation with a seal and to a corresponding seal, wherein the seal comprises an antenna, a chip, a measuring element, and a measurement device. For sealing and checking the product for manipulation, a step of arranging the seal at the product to be sealed is carried out, wherein the product is mechanically sealed. The seal receives a check query by means of contactless data transmission from a read-write device, determines the physical property of the measuring element as a first measurement value by the seal, prepares a response to the query by the chip, sends by means of contactless transmission the response to the read-write device, the response of the chip relating to the first measurement value, and compares the first measurement value with a reference value.

Seal and method for testing a product for manipulation

A method for producing an output bit stream for a first signal of a first carrier frequency by a security module involves the security module receiving an input signal comprising the first signal and a second signal of a second carrier frequency. A mixed signal is formed which has the first signal at the first carrier frequency, the second signal at the second carrier frequency, and a mixed product at an intermediate frequency. The mixed product is demodulated by a second nonlinear component to output a second baseband signal for generating a second bit stream relating to the first signal in the mixed product. The output logic produces the output bit stream for the first signal, and selects either the first bit stream or the second bit stream as the output bit stream for the first signal.

Method and security module for receiving two signals

A method for carrying out a transaction between a portable data carrier, such as a chip card, and a terminal is described. An information item (TID) about the terminal is transferred to the portable data carrier upon the transmission of transaction data by a communication between the portable data carrier and the terminal. As a result, the portable data carrier obtains from the information item a locational position (ZID, WID, GID) of the terminal. Further, there is ascertained a locational position (OP) of the portable data carrier to which the portable data carrier has access. Finally, the portable data carrier compares the locational position (ZID, WID, GID) of the terminal with its locational position (OP), and initiates a measure for protecting the transaction in case a deviation between the two locational positions (ZID, WID, GID; OP) exceeds a predetermined threshold.

Method for carrying out a transaction between a portable data carrier and a terminal

A method and a circuit are arranged for adapting a first reference value for generating a first bit stream from an input signal by a first amplitude adapting unit. The input signal comprises a first and a second signal. The first signal and the second signal form a baseband sum signal. A first non-linear component demodulates the input signal and outputs a demodulated input signal. The amplitude adapting unit outputs the first bit stream from the demodulated input signal on the basis of a first reference value. A reference-value adapting unit comprises a detection unit which detects the first and the second signal. Upon discontinuation of the first and second signals, an adjusting unit adjusts the first reference value to a basic reference value.

Method and security module for adaptation of a reference value for generation of a bit stream

A method for checking a circuit devised for contactless data communication, which comprises an antenna and an electronic component coupled with the antenna, comprises the following steps: generating an alternating magnetic field of a field strength, and arranging the circuit in the alternating field region. Then the electronic circuit is excited by means of an energy pulse. In a further step, an oscillation of the circuit in response to the excitation of the circuit by the energy pulse is captured. The captured oscillation of the circuit is finally evaluated, in particular with regard to a self-resonant frequency of the circuit.

Method and apparatus for checking a circuit

An apparatus for communicating with a portable data carrier comprises a first communication interface, based on wireless data transfer technology, for receiving and/or transmitting data via a first communication channel, and a second communication interface, based on different contactless data transfer technology, for receiving and/or transmitting data via a second communication channel. A first software interface to the first communication interface via which an application program stored in the apparatus can communicate with the first communication interface. The apparatus has a second software interface via which the application program can communicate with the second communication interface, with the communication from the first software interface to the first communication interface, and vice versa, being passed via the second software interface.

Apparatus for communicating with a portable data carrier

Methods and a system involve secure communication between an RFID tag and a reader via the over-the-air interface, and to corresponding RFID tags and corresponding readers. A modification of the Rabin method is employed wherein within the framework of the encryption of a plaintext M into which an identification element of the RFID tag or of an object furnished therewith is incorporated, there is computed by the RFID tag, the Montgomery residue (Montgomery reduction) of the square of the plaintext M modulo n with respect to a Montgomery base R, i.e. C*=MRmod n, and the resultant ciphertext C* is employed for authenticating the RFID tag. The modulus n=p&#xb7;q is the public key of the reader, the prime numbers p, q are the private key of the reader, and the Montgomery base R is an integer that is larger than the modulus n.

Methods and system for secure communication between an RFID tag and a reader

A method for access control to a computer with a mobile end device relies on using contactless interfaces. An authentication to the computer is carried out with the mobile end device and upon a successful authentication the access to the computer is granted or maintained. For preparing the authentication, a certificate is loaded into the mobile end device from a portable data carrier separate from the mobile end device. For authentication, authentication data comprising the certificate or obtained from the certificate are provided to the computer from the mobile end device via the contactless interfaces.

Method for computer access control by means of mobile end device

A transaction system has a terminal device contactlessly communicating in the near zone for carrying out transactions with transaction partners disposed in the near zone. A relay end device is arranged to set up a contactless data communication with the terminal device and to relay transaction data received from the terminal device to a remotely disposed transaction unit. A server device switches the relay end device with the transaction unit as a transaction partner for the terminal device, depending on the type of the transaction.

A method for monitoring a system includes reading devices and a plurality of portable communication units, wherein during operation of the system, for a communication unit there are carried out a plurality of data transactions between at least one reading device and the communication unit via a corresponding communication interface. Within the framework of a data transaction a first data set is transferred from a reading device to the communication unit and stored. A second data set stored in the communication unit is transferred to the reading device. Chaining occurs with first and second data sets of the respective data transactions are formed so that in two consecutive data pairs the first data set of the one data pair corresponds to the second data set of the other data pair, and a criterion is checked for being fulfilled.

Method for monitoring a system comprising a number of readers and a plurality of portable communication units

A method for contactlessly checking the functionality of an antenna coil for a portable data carrier comprises the steps of exciting the antenna coil, detecting the free, damped oscillation of the antenna coil in response to the excitation, and evaluating the detected free, damped oscillation. The excitation of the antenna coil is effected inductively through a pulsed magnetic field, which may be generated by a single direct-current pulse, such as a Dirac pulse, by means of an exciting coil attached to a pulse generator. The detection of the oscillation of the antenna coil is effected through a measuring antenna, and the evaluation is effected by means of an evaluation device connected to the measuring antenna.

Method for checking an antenna coil

Growing community of inventors

Unterfohring, Germany

Klaus Finkenzeller