System and Method for Loading an Embedded Device to Authenticate and Secure Transactions
A system is provided for authenticating and securing product transactions. An integrated circuit is attached to a target, such as an optical disc or electronic device. The integrated circuit has an RF transceiver that is capable of establishing communication with an associated reading device. The integrated circuit also has a hidden memory, which can not be read externally, and a user memory. The hidden memory stores an authentication message, while the user memory stores readable authentication information. The hidden authentication message and the authentication information are related through a cryptographic process. However, even though the integrated circuit benefits from the cryptographic security, the integrated circuit only operates relatively simple logic operations. In this way, a highly secure transaction is enabled without requiring significant processing power or time at the integrated circuit. When the integrated circuit is placed near the reader, the reader reads the authentication information, and with the cooperation of a network operation center, uses the authentication information to derive an activation code. The reader passes the activation code to the integrated circuit, which compares the activation code to its hidden activation message. If they have a proper relationship, the communication has been authenticated, and the integrated circuit proceeds to perform an action.
1 . A system for loading an embedded system, comprising;
a network operations center operating a network load application;
the network load application operating the steps of;
generating a public/private key pair;
storing the private key; and,
transmitting the public key to a loader operating a loader load application;
the loader load application performing the steps of;
receiving the public key;
generating a plaintext token;
generating an encrypted token; and,
transmitting the plaintext token and the encrypted token to an embedded system.
2 . The system of claim 1 , wherein the network load application performs the additional step of storing the public key.
3 . The system of claim 1 , wherein the private key is stored in a database.
4 . The system of claim 1 , wherein the plaintext token and the encrypted token are related by a cryptographic algorithm.
5 . The system of claim 1 , wherein the encrypted token is generated by encrypting the plaintext token with the public key.
6 . The system of claim 1 , wherein the network load application performs the additional step of transmitting an identifier for the public/private key pair to the loader.
7 . The system of claim 6 , wherein the loader load application performs the additional steps of;
receiving an identifier for the public/private key pair; and,
transmitting the identifier for the public/private key pair to the embedded system.
8 . The system of claim 1 , wherein the network load application performs the additional step of transmitting an identifier for a manufacturer to the loader.
9 . The system of claim 8 , wherein the loader load application performs the additional steps of;
receiving an identifier for the manufacturer; and,
transmitting the identifier for the manufacturer to the embedded system.
10 . The system of claim 1 , wherein the network load application performs the additional step of transmitting an identifier for a merchant to the loader.
11 . The system of claim 10 , wherein the loader load application performs the additional steps of;
receiving an identifier for the merchant; and,
transmitting the identifier for the merchant to the embedded system.
12 . The system of claim 1 , wherein the network load application performs the additional step of transmitting an identifier for the embedded system to the loader.
13 . The system of claim 12 , wherein the loader load application performs the additional steps of;
receiving an identifier for the embedded system; and,
transmitting the identifier for the embedded system to the embedded system.
14 . The system of claim 1 , wherein the plaintext token is randomly generated.
15 . The system of claim 1 , wherein the plaintext token is not randomly generated.
16 . A system for loading an embedded system, comprising;
a network operations center operating a network load application;
the network load application operating the steps of;
generating a first public/private key pair;
storing the first public/private key pair in a database;
transmitting the first public key to a loader operating a loader load application;
the loader load application performing the steps of;
receiving the first public key;
generating a second public/private key pair;
generating an authentication code; and,
transmitting the authentication code and the second public key to an embedded system.
17 . The system of claim 16 , wherein the authentication code and the second public key are related by a cryptographic algorithm.
18 . The system of claim 16 , wherein the first public/private key pair and the second public/private key pair are related by a cryptographic algorithm.
19 . The system of claim 16 , where the authentication code is generated using identification the first public key and the second private key.
20 . The system of claim 16 , wherein the network load application performs the additional step of transmitting an identifier for the first public/private key pair to the loader.
21 . The system of claim 16 , wherein the loader load application performs the additional steps of;
receiving an identifier for the first public/private key pair; and,
transmitting the identifier for the first public/private key pair to the embedded system.
22 . The system of claim 16 , wherein the network load application performs the additional step of transmitting an identifier for a manufacturer to the loader.
23 . The system of claim 22 , wherein the loader load application performs the additional steps of;
receiving an identifier for the manufacturer; and,
transmitting the identifier for the manufacturer to the embedded system.
24 . The system of claim 16 , wherein the network load application performs the additional step of transmitting an identifier for a merchant to the loader.
25 . The system of claim 24 , wherein the loader load application performs the additional steps of;
receiving an identifier for the merchant; and,
transmitting the identifier for the merchant to the embedded system.
26 . The system of claim 16 , wherein the network load application performs the additional step of transmitting an identifier for the embedded system to the loader.
27 . The system of claim 26 , wherein the loader load application performs the additional steps of;
receiving an identifier for the embedded system; and,
transmitting the identifier for the embedded system to the embedded system.
28 . A system for loading an embedded system, comprising;
a network operations center operating a network load application;
the network load application operating the steps of;
generating a public/private key pair;
storing the private key; and,
transmitting the public key to a loader operating a loader load application;
the loader load application performing the steps of;
receiving the public key;
generating an authentication message;
transmitting the authentication message; and,
transmitting authentication information to an embedded system.
29 . The system of claim 28 , wherein the authentication information is selected from a group consisting of;
an encrypted representation of the authentication message;
a public key;
an identifier for the public/private key pair;
an identifier for a manufacturer; and,
an identifier for the embedded system.