Giesecke & Devrient Gmbh

International Business Machines Corporation

Giesecke+devrient Mobile Security Gmbh

Walter Hinz

Klaus Finkenzeller

Wolfgang Fischer

Ludwig Fischer

Dieter Sonnentag

Tayssir Scheib

Stephan Spitz

Martin Seysen

Harmut Droege

Hartmut Droege

Norbert Albrecht

Hermann Weilacher

Erich Englbrecht

Thomas Palsherm

Erich Engelbrecht

Methods and a system involve secure communication between an RFID tag and a reader via the over-the-air interface, and to corresponding RFID tags and corresponding readers. A modification of the Rabin method is employed wherein within the framework of the encryption of a plaintext M into which an identification element of the RFID tag or of an object furnished therewith is incorporated, there is computed by the RFID tag, the Montgomery residue (Montgomery reduction) of the square of the plaintext M modulo n with respect to a Montgomery base R, i.e. C*=MRmod n, and the resultant ciphertext C* is employed for authenticating the RFID tag. The modulus n=p&#xb7;q is the public key of the reader, the prime numbers p, q are the private key of the reader, and the Montgomery base R is an integer that is larger than the modulus n.

Methods and system for secure communication between an RFID tag and a reader

A method for monitoring a system includes reading devices and a plurality of portable communication units, wherein during operation of the system, for a communication unit there are carried out a plurality of data transactions between at least one reading device and the communication unit via a corresponding communication interface. Within the framework of a data transaction a first data set is transferred from a reading device to the communication unit and stored. A second data set stored in the communication unit is transferred to the reading device. Chaining occurs with first and second data sets of the respective data transactions are formed so that in two consecutive data pairs the first data set of the one data pair corresponds to the second data set of the other data pair, and a criterion is checked for being fulfilled.

Method for monitoring a system comprising a number of readers and a plurality of portable communication units

In a method for writing (S, S) of operating data () through a writing system () comprising a central station () and at least one distribution station () to a portable data carrier () connected with the at least one distribution station () within the framework of a production of the data carrier () there is generated (S, S) an individual addressing for the data carrier () connected with the at least one distribution station (), via which addressing the data carrier () is uniquely addressable system-wide upon the writing (S, S) of the operating data (). In doing so, at least a part of the system-wide unique individual addressing can be generated (S, S) by the data carrier () itself or by the distribution station () with which the data carrier () is connected.

Writing operating data into a portable data carrier

The invention relates to a method for carrying out an application with the help of a portable data carrier (). With the method according to the invention via a first data channel () of the portable data carrier () a data connection with a first external device () is formed. Involving the first external device (), a first part of the application is executed. Via a second data channel () of the portable data carrier () a data connection with the first or a second external device () is formed. From the portable data carrier () via the second interface () there are transferred identification data, which were provided on the execution of the first part of the application, to the external device (). A second part of the application is not executed until after a release by a user.

Method for executing an application with the aid of a portable data storage medium

A system is proposed for performing transactions with terminals which fundamentally allow a plurality of different transactions to be performed. The terminals () are connected for this purpose via a terminal network () with at least one node computer () via which they can be set up for performing a transaction. The suitability for performing a further, hitherto unprepared transaction can be provided later anytime without any special setup measures. A terminal () requests for this purpose data providing the functionality required for performing the further transaction from a node computer () following a trigger signal designating the further transaction. The transaction is then performed in interaction between a terminal () and a node computer ().

System for carrying out a transaction

Point of sale terminal

Control unit with a printer

Growing community of inventors

Garching, Germany

Walter Hinz