Abstract: A state matcher for a logic circuit may detect at least one of a buggy state of the logic circuit, a precursor to a buggy state of the logic circuit and a verified state of the logic circuit based on a plurality of signal values indicative of a state of the logic circuit. A recovery controller for a microprocessor may reconfigure the microprocessor to a trusted feature mode in response to receiving a signal indicating that the microprocessor is in a predefined state and operate the microprocessor in the trusted feature mode for a predetermined period of time.

Abstract: A method and system for use in generating authentication codes associated with devices is disclosed. In at least one embodiment, the method and system may generate a secret value that depends on event state data that specifies an operating condition of a device, and may generate a series of authentication codes that depends on the secret value and a series of dynamic values.

Abstract: A remote sensing device is utilized to activate boundary alert sensors in a vehicle to reduce current loading during a key-off condition. Communication between the remote sensing device and the vehicle is via a radio-frequency interface that is part of a remote keyless entry system. The remote sensing device transmits a signal to the vehicle when an object is detected within a predetermined range of the remote sensing device. In response to the signal, the vehicle activates one or more boundary alert sensors. The boundary alert sensors may include a camera, a radar, and an ultrasonic sensor. The remote sensing device can be configured to extend a range of the radio-frequency interface by repeating messages that it receives.

Abstract: Systems and methods for access control management designed for multi-unit buildings are provided. The disclosed systems can use mobile devices, a local mesh network, access control devices, and wireless communication to facilitate multi-unit real estate management. Mobile devices can download and use credentials to access appropriate areas and units in a building through local wireless communications with access control devices.

Abstract: In one embodiment, a first message is obtained and encrypted to produce a ciphertext. The first message is encrypted such that decryption of the ciphertext utilizing a first key yields the first message, and decryption of the ciphertext utilizing a second key different than the first key yields a second message that is distinct from the first message but shares one or more designated characteristics with the first message. Encrypting the first message may more particularly comprise mapping the first key to a first seed, mapping the first message to a second seed, determining an offset between the first and second seeds, and generating the ciphertext based on the determined offset. Such an arrangement prevents an attacker from determining solely from the second message if decryption of the ciphertext has been successful or unsuccessful. Other embodiments include decryption methods, apparatus for encryption and decryption, and associated articles of manufacture.

Abstract: A system generally for personalizing and synchronizing fob data in the context of a distributed transaction system is disclosed. A dynamic fob synchronization system may comprise point of service (POS) devices configured with transponder-readers to initiate a transaction in conjunction with a fob, an enterprise data collection unit, and a fob object database update system. In an exemplary embodiment, a dynamic synchronization system (DSS) may comprise a personalization system and an account maintenance system configured to communicate with a fob object database update system (FODUS). Personalization of multi-function fobs may be accomplished using a security server configured to generate and/or retrieve cryptographic key information from multiple enterprise key systems during the final phase of the fob issuance process.

Abstract: Methods and systems are described for authorizing an item with an RFID tag to leave a facility. In one embodiment, a mobile device receives or determines an exit code (EC) to write into the tag in response to providing authorizing information. The EC may be based on information stored in the tag such as the tag's item identifier or other tag information (collectively an item identifier or II), a ticket value, other information such as the OC, a mobile identity or location, or any other suitable information. Upon verification of the EC, the tagged item is allowed to leave the facility. In another embodiment, the mobile device stores an item identifier (II) associated with the tag and provides authorizing information. Upon verifying the authorizing information and confirming that the stored II corresponds to the tagged item's II, the tagged item is allowed to leave the facility.

Abstract: An embodiment of the invention includes a method of authenticating a second device connected to a first device. The method includes transmitting a first data string from the first device to the second device and receiving a second data string at the first device from the second device. The method also includes generating a third data string using an alteration key at the first device and comparing the third data string and either the first data string or the second data string. The method further includes authenticating the second device if the compared data strings match.

Abstract: A motorcycle includes an ignition switch unit that allows at least starting operation of an engine and unlocking operation of a handlebar by operation of an ignition knob after restriction of turning of the ignition knob by a lock mechanism is canceled when electronic authentication is conducted. An emergency release mechanism is configured to directly or indirectly allow the starting operation of the engine by an emergency release key regardless of the electronic authentication. The emergency release key has a rod-like grip portion, and a magnet key provided to a lateral on a side of an end of the grip portion. A keyhole for the magnet key of the emergency release mechanism is arranged in a direction opposed to an insertion direction of the emergency release key.

Abstract: According to one aspect, a method, system and technique for system security for network resource access using cross-firewall coded requests is disclosed. The system and technique includes a firewall, a first appliance device located behind the firewall, and a second appliance device located before the firewall. The second appliance device is configured to receive a data request, convert the data request into a coded request, and transmit the coded request to the first appliance device, and wherein the coded request corresponds to a specific type of data request. The first appliance device is configured to receive the coded request from the second appliance device and, if the coded request corresponds to one of a plurality of codes of a command list maintained by the first appliance device, process the data request.

Abstract: A transponder (140) for communicating with a reader device (120), the transponder (140) comprising a processing unit (142) adapted for generating an identifier (210) during an initialization phase of a communication session with the reader device (120), the identifier (210) being generated as a combination of a first part (214) being a random number and of a second part (212) being identical to a portion (202) of a previous identifier (200) used during a previous communication session preceding the present communication session with the reader device (120), and a transmission unit (136) adapted for transmitting the identifier (210) to the reader device (120).

Abstract: An automatic locking system for a medical treatment device helps to ensure that an assistant is present during treatment of a patient. Among the features disclosed biometric authentication to verify that a trained assistant is present, a presence detector to ensure the assistant is continuously present during treatment, and warning and recovery processes that allow intermittent lapses in the continuous presence of the assistant.

Abstract: An improved barrier door one way wireless communication system for operating a barrier, such as a garage door, includes the transmission and reception of multibit code hopping data packets in combination with automatic RF channel switching. Packet data is transmitted automatically on more than one RF channels in a switching style while sending two or more redundant multibit code hopping data packets on each of the RF channels. The system also provides for the learning of a transmitter to a receiver where two or more code hopping data packets must be received and decoded by the receiver on all RF channels before a transmitter can be learned to a receiver. Once the transmitter is learned, actuation of the transmitter during a learn mode can open a window for learning of a single channel transmitter.

Abstract: A system and method for Dedicated Short-Range Communication (DSRC) between beacons and onboard units of a road toll system, wherein the beacons have a system-wide key and the onboard units have only individual keys, which are respectively formed from the system-wide key on the basis of a derivation code specific to the onboard units, wherein upon a communication from the onboard unit the derivation code is transmitted to the beacon in order to enable the beacon to emulate the individual key to encrypt/decrypt the communication with the onboard unit and/or for access to data stored in the onboard unit, and wherein upon communications with consecutive beacons the onboard unit transmits varying derivation codes.

Abstract: A communication data protection method based on symmetric key encryption, and an apparatus for enabling the method are provided. A communication data protection method using a Radio Frequency Identification (RFID) reader, the method including: receiving, from a tag, tag information including security parameter information and an encrypted Unique Item Identifier (UII); extracting the UII based on the security parameter information; transmitting, to the tag, a request message including a challenge value for replay prevention; and performing a tag authentication by receiving, from the tag, a response message including a handle and the challenge value.

Abstract: Some embodiments include a computer server. The computer server can be configured to: add a security system associated with a user account; provision one or more communication devices associated with the security system; configure a cryptographic key to associate at least a communication device amongst the communication devices with the security system; configure an access control file that is cryptographically signed by the computer server and encrypted with the cryptographic key associated with the security system, wherein the access control file contains permissions of the communication devices to the security system; and provide a data payload including the access control file to a first communication device of the communication devices.

Abstract: High-security communications against information leakage as well as high-speed communications are realized using present optical fiber networks. The methods are as follows: (1) A seed key is shared between a transmitter and a receiver in advance. Random numbers are transmitted using carrier light accompanied by fluctuations and bases that are decided by random numbers. The transmitter and receiver compare a shared basis that is determined by the seed key with the random basis, and decompose the random numbers superimposed on each bit into two sequences, based on whether the shared basis coincides with the random basis or not. Error correction is processed for each sequence in the receiver, and then the random numbers are shared between the transmitter and the receiver. (2) The amount of the random numbers shared between the transmitter and the receiver is reduced to secret capacity through privacy amplification, and the resultant random numbers are used as a secret key.

Abstract: An access control system includes: a lock control apparatus, an authentication terminal and a terminal to be authenticated; said authentication terminal sends own identity information to the lock control apparatus to be authenticated, and generates a random authorization code after receiving an authentication passing message responded by said lock control apparatus, and sends it to said terminal to be authenticated and lock control apparatus respectively; said lock control apparatus stores the identity information of a legal user, and authenticates the identity information sent by said authentication terminal, and responds said authentication passing message after passing authentication; and the lock control apparatus interworks with said terminal to be authenticated after receiving said random authorization code, and if judging that both of the random authorization codes are consistent, then unlocks; said terminal to be authenticated stores a received random authorization code, and interworks said random aut

Abstract: An RFID tag including a transmitting/receiving unit, a memory and a control unit. A first identification code, a second identification code, a password, and a set of data are stored in the memory. If the set of data is under protection, the set of data is accessible only when a verification procedure corresponding to the password is successfully performed. If the transmitting/receiving unit receives a request for accessing the second identification code, the control unit shall check whether the request includes the first identification code. As long as the checking result of the control unit is yes, even if the set of data is under protection and the verification procedure fails or the verification procedure is not successfully performed, the control unit shall still transmit the second identification code via the transmitting/receiving unit.

Abstract: A subset of codes is efficiently captured from a remote generator and used in a remote access device. The subset of codes contains more codes for common functions than for uncommon functions and enables operation of special functions.

Abstract: A method for registering an electronic key includes storing an electronic key ID and an encryption code in a controller to register the electronic key to the controller, and associating a communication subject ID, which is unique to a communication subject, with a controller ID, which is unique to the controller storing the electronic key ID and the encryption code, and the electronic key ID.

Abstract: An authentication string, such as a password, consists of characters. Each of the characters in the authentication string is randomly associated with a defined location on a device. For example, an area on a touch screen can be associated with a character in the authentication string. When a user selects a location associated with the character, feedback is provided that identifies the character. When the user selects a location that is not associated with the character, feedback is provided that does not identify the character. If the user responds by indicating that the associated location matches the character, the character is authenticated. If the user responds by indicating that a location not associated with the character is a match, the character is not authenticated. This process is then repeated for each character in the authentication string.

Abstract: The system for controlling vehicle ignition provides three separate levels of access to prevent unauthorized users from actuating ignition of a vehicle. The system includes a radio frequency identification tag having permanent computer readable memory and volatile computer readable memory associated therewith. The radio frequency identification tag is preferably embedded within a vehicle key. A predetermined permanently assigned authentication code is stored in the permanent computer readable memory and a variable time stamp is stored in the volatile computer readable memory. The permanently assigned authentication code and the variable time stamp are transmitted upon activation of the radio frequency identification tag. Vehicle ignition occurs only upon the mechanical operation of the key in a conventional ignition switch and matching of both the permanently assigned authentication code and the variable time stamp with codes and stamps stored in vehicle memory.

Abstract: A remote function fob associated with a vehicle is disclosed, the fob for enabling secure communication between the vehicle and a device. The fob may include a transceiver configured for communication with the device. The fob may further include a controller which may be configured to enable secure communication with the device via the transceiver. The controller may be further configured for operation with a code generated using a security protocol, the code to be used in secure communication between the device and the vehicle, the code for transmission to the device via the transceiver.

Abstract: The invention relates to a method for generating a currently valid one-time release code (1) for an electronic lock (9), which can be transitioned from the locked state thereof to the released state thereof by entering the currently valid one-time release code (1). In order to provide an electronic lock (9) having very high security against unauthorized actuation, according to the invention the currently valid one-time release code (1) is generated by encrypting the immediately previously valid one-time release code (5) by means of an encrypting algorithm (6), wherein the encryption takes place in consideration of an encrypting code (4) generated from an individual master code (2) that is entered and a key code (3) that is stored in the electronics of the lock (9).

Abstract: An apparatus and method for controlling a key lock in a portable terminal are provided. The apparatus includes a keypad, a key buffer, and an input controller. The keypad has a plurality of key buttons and detects at least one key input. The key buffer temporarily stores input key information. The input controller stores the at least one key input, which is detected by the keypad, in the key buffer in a key lock state and determines if a combination of key inputs stored in the key buffer includes an unlock key combination.

Abstract: A rolling code transmitter is useful in a security system for providing secure encrypted RF transmission comprising an interleaved trinary bit fixed code and rolling code. A receiver demodulates the encrypted RF transmission and recovers the fixed code and rolling code. Upon comparison of the fixed and rolling codes with stored codes and determining that the signal has emanated from an authorized transmitter, a signal is generated to actuate an electric motor to open or close a movable barrier.

Abstract: A method for use in relation to a security system includes receiving one or more items of information that each identify things or users associated with the security system, and forming a fixed portion of a security code using the one or more items of information. The fixed portion of the security code is stored in an apparatus that is configured to transmit the security code. A method and apparatus involving the receipt of such a security code are also disclosed. A method for use in relation to a security system includes generating a fixed portion of a security code, and setting a value of the fixed portion of the security code to a value that has a relationship to a fixed portion of a previously learned security code. The relationship indicates that the fixed portion of the security code is a replacement for the fixed portion of the previously learned security code. The fixed portion of the security code is stored in an apparatus that is configured to transmit the security code.

Abstract: A system for remote entry includes at least one trainable radio frequency transmitter having a plurality of selectable codes, any of which selected in accordance with a corresponding training code data. At least one receiver is configured to receive signals from said radio frequency transmitter, where the radio frequency transmitter is configured to transmit, and the receiver is configured to receive, coded radio frequency transmissions containing at least sparse binary codes that include binary transmissions implemented with a small duty cycle, corresponding to the training code data.

Abstract: A memory tag comprises an array of non-volatile memory, means for inductively obtaining power to enable receipt of data from and transmission of data to a reader device, a processor operable to process received data and to generate data to be transmitted; and a hash co-processor configured to apply a hash function to data applied to it. The array of non-volatile memory includes an area of write only memory. Reader devices for use with such memory tags and methods of using such memory tags are also described.

Abstract: An improved barrier door one way wireless communication system for operating a barrier, such as a garage door, includes the transmission and reception of multibit code hopping data packets in combination with automatic RF channel switching. Packet data is transmitted automatically on more than one RF channels in a switching style while sending two or more redundant multibit code hopping data packets on each of the RF channels. The system also provides for the learning of a transmitter to a receiver where two or more code hopping data packets must be received and decoded by the receiver on all RF channels before a transmitter can be learned to a receiver. Once the transmitter is learned, actuation of the transmitter during a learn mode can open a window for learning of a single channel transmitter.

Abstract: A secure communication link is provided between a movable barrier operator and a peripheral system. Information conveyed via this link is used by one, the other, or both such elements to further inform or direct their respective actions.

Abstract: Systems, methods, and devices that efficiently control the operating state of an electromagnetic lock under power on and power off conditions are presented. A lock component includes a solenoid component (e.g., bi-stable latching solenoid) that holds a lock pin in a locked or unlocked position without using power to hold the lock pin in the desired position, and using power to transition from one position to another position. A sensor component senses when power to the lock component will be lost, and if the lock pin is not in the desired position for the power off condition, the lock pin can be transitioned to the desired position, and if the lock pin is in the desired position for power off condition, the lock component can maintain the lock pin in the desired position, while the lock component is in the power off condition.

Abstract: A system for implementing a chip lockout protection scheme for an IC device includes an on-chip password register that stores a password externally input by a user; an on-chip security block that generates a chip unlock signal, depending on whether the externally input password matches a correct password; an on-chip false data generator; an input protection scheme configured to gate the external data inputs to functional chip circuitry upon entry of the correct password; and an output protection scheme in communication configured to steer true chip data to external outputs of the IC device upon entry of the correct password, and to steer false data generated by the false data generator to the external outputs upon entry of an incorrect password. The false generated by the false data generator is deterministic and based upon external data inputs, thereby obfuscating whether or not the correct password has been entered.

Abstract: A method for granting access to restricted areas such as computers, doors, vehicles, or other areas to which access by a user is controlled. An access code is transmitted from a central computer via radio waves to a user's radio terminal, such as a mobile telephone. The radio terminal transmits the access code over a short-range radio link to a communication device at the restricted area. The communication device transmits the access code to the central computer, which compares the received code with the code that the computer transmitted to the radio terminal to determine whether access should be granted.

Abstract: A system and method for controlling power windows of a vehicle includes a receiver mounted on the vehicle for receiving an open window request signal wirelessly from a portable device, at least one exterior condition sensor mounted on the vehicle for detecting an adverse exterior condition relative to the vehicle, and a controller mounted on the vehicle for communicating with the receiver and the at least one exterior condition sensor. The controller commands opening of the one or more power windows when the receiver receives the open window request signal provided the at least one exterior condition sensor does not detect an adverse exterior condition relative to the vehicle.

Abstract: A method and system for identifying an authentication status of a first item. An RFID reader transmits zero and a random number to a first RFID tag associated with the first item. The first RFID tag uses a hashing function to compute a hash (H1) of a concatenation of an identifier (Id1) of the first RFID tag, the random number, and a first secret key and sends the hash H1 to the RFID reader which then transmits the identifier Id1 and the random number to a second RFID tag. The second RFID tag uses the hashing function to compute a hash (H2) of a concatenation of the identifier Id1, the random number, and a second secret key and sends the hash H2 to the RFID reader. The authentication status of authentic or counterfeit is determined for the first item based on whether or not H1 is equal to H2.

Abstract: An operator system and related methods for automatically controlling access barriers which includes a base controller associated with at least one access barrier and at least one base receiver associated with the base controller. The system also includes at least one mobile transmitter that automatically and periodically generates at least one mobile signal detectable by the base receiver. The base controller selectively generates barrier movement commands upon receipt of the at least one mobile signal. Timers may be used to block receipt of any mobile signals for a period of time to prevent any further door movement. Such a system allows for hands-free operation of the access barrier. A discrete processing system may also be used to retrofit existing barrier operator systems for use in hands-free operation.

Abstract: A transmitter for transmitting an RF control signal to a remote system includes a user input device, a memory and a transmitter circuit. The memory includes control data associated with the remote device. The control data includes a first frequency and a second frequency. The transmitter circuit is coupled to the user input device and memory. In response to a single user input, the transmitter circuit generates a rolling code signal, transmits the rolling code signal at the first frequency for a predetermined amount of time, and, upon expiration of the predetermined about of time, transmits the rolling code signal at the second frequency.

Abstract: A method for configuring a transmitter device to transmit a recognized transmission to a receiving device is provided. The method includes transmitting a first transmission and transmitting a second transmission after the first transmission. The method further includes receiving, during the second transmission, a user input signal from an interface for receiving signals from one or more user interface elements. The method further includes storing an attribute associated with the second transmission in a memory device in response to the user input signal.

Abstract: A method includes transmitting, from a base station, a first request and receiving, from a transponder, a first code transmitted responsive to the first request. The method includes transmitting, from the base station, first encoded transmission information comprising a base station code encoded using the first code and a first identification. The base station transmits a second request, and a second code, transmitted by the transponder responsive to receiving the second request and encoded using a base station code extracted from the first encoded transmission information using the first code and the first identification, is received. Second encoded transmission information, including a second identification encoded using the second code, is transmitted from the base station.

Abstract: A rolling code transmitter is useful in a security system for providing secure encrypted RF transmission comprising an interleaved trinary bit fixed code and rolling code. A receiver demodulates the encrypted RF transmission and recovers the fixed code and rolling code. Upon comparison of the fixed and rolling codes with stored codes and determining that the signal has emanated from an authorized transmitter, a signal is generated to actuate an electric motor to open or close a movable barrier.

Abstract: Systems and methods are disclosed for sending a code from a mesh network key and wirelessly communicating the code with one or more mesh network appliances over a mesh network such as ZigBee; receiving the code over the mesh network by a mesh network lock controller; and providing access to the secured area upon authenticating the code.

Abstract: Apparatus and system for verifying a route taken during movement of an RFID tag, comprising a trusted platform module; sealed storage (80) comprising one or more stores (50, 52) for storing a public key (64), a private key (68) and a policy (62); and processors arranged to: receive data (60) read-out from the RFID tag (4) and comprising an RFID tag identity and an encrypted signature (9); use the public key (64) to decrypt the encrypted signature (9); verify that the decrypted signature (9) corresponds to a first entity from which, according to the policy (62), a second entity is authorised to receive the given RFID tag (4); use the private key (68) to provide an encrypted signature (9); and forward data comprising the encrypted signature (9) to an RFID tag writer (22).

Abstract: In a keyless entry system, a CPU in an ECU and a CPU in a remote control key each have an associated memory for storing respective function formulas, which are specified by primary function formula data. With this structure, function formulas used in the remote control key and the ECU can be changed to respective new function formulas. This technique makes it difficult to predict the function formulas used in the remote control key and the ECU, thereby further reducing any regularity of rolling codes generated by the function formulas.

Abstract: A passive entry and start system includes a controller that calculates the cryptology required for each remote identification device during idle transmission time to reduce overall system actuation time.

Abstract: An electro-mechanical lock for cargo containers or similar enclosed spaces such as storage units. The locking mechanism includes a dual-ratcheting mechanism, which is normally in the locked position, and which firmly secures doors of a container or other enclosure. To unlock the device, the user obtains a temporary access code and unlocks the device, either by a wireless interface or by, for example, a key pad. The device incorporates a rolling access code algorithm that changes the access code based upon a pre-defined customer selected time period during which the code is valid. Once the validity period expires the user must obtain a new access code from a secure access code source to unlock the device. When access is desired, the user contacts a remote secure access code source, which provides the access code for the associated lock and time period.

Abstract: A digital access control system including an input mechanism which can be operated from an unprotected area and a barrier which opens in response to operation of the input mechanism, wherein an energy store for supplying the barrier with opening power and a communication line for communication with a remote unit in the secure area are provided and the energy store is in a form of a low voltage buffer store and, for supplying power to the low voltage buffer store, a low voltage communication line is provided which has an associated low voltage Power Over Ethernet unit or an associated unit from a similar standard.

Abstract: A remote control system for a car-mounted device capable of realizing communication performance required for a keyless function and communication performance required for a smart function while suppressing increase in circuit scale. The remote control system includes a portable unit and an in-car unit. The portable unit includes: a function judgment mechanism judging whether the keyless function or the smart function is used; an amplification mechanism controlling transmission power in response to a result of judgment obtained at the function judgment mechanism; and a system clock generator controlling a transmission band in response to a result of judgment obtained at the function judgment part. The in-car unit includes: an in-car function judgment mechanism judging whether the keyless function or the smart function is used; and in-car system clock generator controlling a receiving band in response to a result of judgment obtained at the in-car function judgment mechanism.

Abstract: A method and system for identifying an authentication status of a first item. An RFID reader transmits zero and a random number to a first RFID tag associated with the first item. The first RFID tag uses a hashing function to compute a hash (H1) of a concatenation of an identifier (Id1) of the first RFID tag, the random number, and a first secret key and sends the hash H1 to the RFID reader which then transmits the identifier Id1 and the random number to a second RFID tag. The second RFID tag uses the hashing function to compute a hash (H2) of a concatenation of the identifier Id1, the random number, and a second secret key and sends the hash H2 to the RFID reader. The authentication status of authentic or counterfeit is determined for the first item based on whether or not H1 is equal to H2.