The invention relates to a device and method for remote transmission in particular for portable objects (of the card, ticket, label type, etc.) linked by coupling, for example inductive coupling, with a fixed station (of the card reader, label requester types etc.).
The invention is in particular directed to a device including a transmitter and a receiver between which a secured transmission is provided. It is more particularly but not exclusively directed to the case when the transmitter is a transmitter of a chip card and when the receiver is a chip card reader.
It finds applications in all the fields of contactless data exchanges, by coupling, for example according to a non-limiting list between a portable object and a fixed station and, in particulars in the field of identification of things or objects in the field of access controls for example for computer services, or in the field of card toll payment.
Patent FR 2 776 865 granted to the present applicant, discloses a communications system between a transmitter of a card and a receiver illustrated in
A data exchange system includes a receiver 1 for example a card reader and one or more transmitters 10 mounted on portable objects. The receiver 1 includes a frequency generator 2, for example an oscillator, coupled in series with a load impedance rA and a tuned circuit 6. The tuned circuit 6 includes a capacitive impedance 5, an inductive impedance 3 in series. A detection circuit 9 which includes detection means illustrated as a diode 7 for example coupled capacitively to amplification and processing circuits 8, is coupled in parallel with the tuned circuit 6.
The transmitter 10 of the portable object includes a set of electronic circuits 11 connected to the terminals of a resonant circuit 19, for example as a capacitor 13 connected in parallel to an inductive coil 12.
In operation, the transmitter 10 of the portable object and the receiver circuit 1 are inductively coupled with each other through their respective inductive load, 3, 12.
The transmitter 10 of the portable object is for example remotely powered from the source 2. This case is often encountered for card readers.
A change in coupling is obtained by varying a load impedance 18b placed in series or as illustrated in
A more detailed embodiment of the transmitter 10 of the portable object described in the aforementioned patent is illustrated in
The rectifier 15 is a GRAETZ bridge connected to both terminals of the coils 12 through connection points 15a and 15c. A connection point 15b of the rectifier is directly connected to an output line Vss of the transmitter 10 of the portable object.
A connection point 15d of the rectifier 15 is connected to an input 18c of a modulator circuit 18. The modulator 18 includes an electronic dipole 18b mounted in parallel on a switching transistor 18a. This switch 18a and dipole 18b assembly is mounted in series on the power supply line Vdd, between an output point Vr of the rectifier 15 and an input point Vs of a differential amplifier 16b. The applied voltage at this input Vs relatively to the point Vss is the regulated voltage Vdd.
The electronic dipole 18b of the modulator 18 is selected so as to introduce a voltage drop Vr−Vdd between points 18c and 18d of the modulator 18, when the transistor 18a is open. When the transistor 18a is closed, the voltage drop introduced by the modulator 18 should be lower and preferably negligible.
In the embodiment described above, the electronic dipole 18b is a component with a non-linear current-voltage characteristic, such that the voltage on its terminals is practically constant, with which a modulation depth of the quality coefficient of the portable object may be maintained at a practically constant value.
The electronic dipole 18b may be a resistor or a diode, or a ZENER diode, or even a transistor in which the gate is connected to the drain. The electronic dipole 18b may also consist in a plurality of diodes associated in series. The components 14-18 form together the electronic circuit 11 illustrated in
Digitally encryption of the response of the transmitter 10 to the receiver 1 is known, by means of a key known to the receiver and which is used for decrypting the received encrypted message.
Encryption of the data sent by the transmitter requires that a certain number of operations be performed. This number may be significant as in the case of RSA (Rivest, Shamir, Adleman) encryption. Further, certain encryption algorithms require storage of a key which may be found by a third partly by a DPA (Differential Power Analysis) attack.
The object of the invention is to propose a method and a device with which detection of the message sent by the transmitter and received by the receiver may be made more difficult.
With the inventive object of the present invention, the transmitter may not perform any encryption calculation and may transmit clear text. The cost and size of the transmitter are thereby reduced since it is no longer necessary to provide key storage means and encryption means. There is no longer any risk of detection of a key by intrusion, which might jeopardize the security of the communication.
Further, even if a communication is recorded, its subsequent replaying would be absolutely useless as the receiver would not be able to understand this copy.
During a communication without any physical contact between the transmitter and the receiver, an intruder may intercept the exchanged signals. According to the invention, the receiver scrambles the signals transmitted by the transmitter so that only the receiver may decode the received signals.
The main idea is that the receiver will create a perturbation scrambling the signals transmitted by the transmitter. It will then be able to recover the signal sent by the transmitter by elimination on the received signals, the effects of the perturbation which it has created.
The diagram of
In
The noise transmitted by means provided for this purpose of the receiver, has characteristics such that it is impossible to infer back to the transmitted data, object of signal s, only by knowing the signal s′+b′ propagating between the transmitter and the receiver in the channel C.
For this, the noise signal b has the following characteristics:
The noise signal b is independent of the transmitted data. Thus it is impossible to infer back to s or s′, starting with only the signal s′+b′.
Its spectral bandwidth covers that of the signal transmitted by the transmitter.
The amplitude of the noise power spectral density is larger than that of the signal in the useful bandwidth of the signal a. The useful bandwidth of the signal s is the frequency range strictly necessary for transmitting the signal. In this way, it is not possible to separate the noise signal with simple band-pass filters. For this, the noise power is such that the signal is buried in the noise, i.e., the noise amplitude is so large that the signal can no longer be extracted without a predetermined error rate on the extracted signal. For this, the signal-to-noise ratio S/B of the signal power Ps to the noise signal powers Pb is less than a predetermined level. It is preferable that the noise should not be reproducible therefore it will generally be random.
To summarize, the invention relates to a method for secured communication between a transmitter and a receiver in which a range of power levels transmitted by the transmitter, a frequency band inside which the transmission occurs, are known or detectable by the receiver, the method including
The invention is particularly adapted to the field of contactless transmission for example if the transmitter is a chip card and the receiver is a chip card reader. The reader produces a signal supplying power to the card. The card has a transmission subcarrier frequency which is by convention known to the reader and which for example is a divided frequency or an integer multiple of the one of the tuned circuit of the reader. Generally, the card is introduced into a communications space provided in the reader for receiving the card. Introducing the card changes the added impedance in the circuits of the reader, so that detecting this change in impedance is information according to which a signal will be transmitted.
Preferably, the noise signal transmitted by the receiver is obtained by randomly modulating the signal supplying power to the transmitter by the receiver the modulation acting on the physical parameter, for example the phase, frequency amplitude, the same as the one modulated in the transmitted signal.
When the transmission signal is a digital signal with a bit period known beforehand it is advantageous to give a new random value to the modulated parameter of the noise signal, at each bit period of the transmitted signal and this synchronously with this signal. Thus, random drawing of the value of the selected parameter is performed synchronously with the bit period of the transmitted signal. As the modulation has a wide spectrum, it is certain that the spectral bandwidth of the scrambling noise is wider than the spectral bandwidth of the transmission signal, the power density being stronger in the vicinity of the carrier frequency of the transmission signal.
Preferably, the modulated parameter is a random variable which follows a Gaussian law or a uniform law with a mean of zero. Changing the electric power transmitted by the receiver to the transmitter is thereby avoided.
Preferably, the noise power level is determined according to a predetermined value in order to obtain a bit error rate larger than a predetermined value, in the absence of any knowledge on the noise signal transmitted by the receiver, which is the case of an intruder who attempts to sense the signal. When the transmission signal of the transmitter includes at least one transmission of a bit with a known value at a known instant, according to an advantageous alternative method of the invention, the transmission instants of the known values are used for evaluating the distortions undergone by the signals during transmission/reception.
During the other reception periods, an actual noise signal is calculated by using the previously evaluated distortions. This calculated noise signal is then subtracted from the received signal.
The invention also relates to a chip card reader device including means for generating a signal for supplying power to a transmitter of the card, for example a local oscillator, a space for receiving a card providing coupling between circuits borne by the card and transmission/reception means of the reader coupled with means for generating the power supply signal, characterized in that the receiver includes
means for modulating the power supply signal, which modulate the power supply signal,
a random signal generator coupled with said means for modulating the power supply signal,
means for processing the signal present on the transmission/reception means, these means being coupled with the random signal generator, with the transmission/reception means and with the modulation means, and including
subtraction means coupled with the antenna means and modulation means in order to subtract the modulation signal from the signal present on the transmission/reception means, and detection means coupled with the subtraction means in order to detect a useful signal.
In an alternative embodiment, the means for processing the signal present on the transmission/reception means include switching means with which, according to their position, the modulation signal may be subtracted, as indicated above, from the signal present on the transmission/reception means, or a known image of the useful signal may be subtracted from the signal present on the transmission/reception means.
Exemplary embodiments of the method according to the invention and of the devices capable of achieving the method will now be described by means of the appended drawings wherein
a-7d illustrate time diagrams of signals.
a illustrates the useful signal s transmitted by a transmitter
b illustrates the current in the antenna 3 of the receiver in the absence of scrambling.
c illustrates the noise generated by a modulation circuit of the receiver.
d finally illustrates a current in an antenna of the receiver in the presence of the noise and of the useful signal.
a-8e illustrate time diagrams of the different signals present during the processing of the combined signal: noise plus useful signal. It includes portions a-e.
a illustrates the useful signal as transmitted by the transmitter,
b illustrates the current present in the antenna of the reader in the absence of noise transmitted by the receiver,
c illustrates the current present in the antenna of the reader in the presence of noise transmitted by the receiver,
d illustrates the signal present in the means for processing the signal of the antenna of the receiver after subtracting the noise,
e illustrates the differential signal between the noiseless signal illustrated in portion d and the noise-suppressed signal i.e., the noise of which has been subtracted as illustrated in portion d.
In the drawings of the prior art or of the invention, the same reference numbers designate components with the same function.
A first exemplary embodiment of the method according to the invention will now be described for the case when the modulation of the signal s transmitted by the transmitter is binary phase shift keying modulation (BPSK).
Let fp be the carrier frequency of the signal s transmitted by the transmitter,
Let T be the duration off one bit (fp>>1/T)
Let V be the amplitude of the carrier frequency. The signal power spectral density Γ(f) is then:
In this formula, sinc designates a cardinal sine according to the definition
The frequency band used by the signal has a width of 2/T and is centered around fp.
Let us assume a noise b(t) of the form:
bk is a Gaussian random variable with zero mean and unit variance.
σ is a constant for adjusting the noise level.
This noise corresponds to adding a Gaussian noise to the symbols in the basic band.
The power spectral dispersion (PSD) Γb(f) of this noise is:
The noise corresponds to a random sequence of modulation amplitudes. This noise added to the signal masks the amplitude of the transmitted signal.
Therefore one has the same PSD as for the signal s except that V is replaced with σ. The noise spectral band is therefore actually the same as that of the signal.
The minimum coefficient σ remains to be determined for the scrambling to be effective.
The theoretical curves known per se, giving the number of false received bits relatively to the number of sent bits (bit error rate or BER) versus the signal-to-noise ratio V2/σ2 (ratio of the signal power over the noise power) is illustrated in
Thus, if it is desired that the eor rate be larger than 0.3, the signal-to-noise ratio should be less than −5.7 dB (a noise power 3.7 times greater than that of the signal). Therefore, if V=1 volt; σ should be √{square root over (3.7)}≈1.9 volts.
Generally, it is preferable that the noise power level be determined according to a predetermined value in order to obtain a bit error rate larger than a predetermined value in the absence of knowledge on the noise signal transmitted by the receiver.
In order that the noise should not be reproducible by two similar receivers, it is preferable that it be random.
Generating the noise is performed by means of random phenomenon, for example noise in a function of a transistor, in order to prevent the same noise to be generated by a third party.
It is then obvious that two identically manufactured receivers do not generate the same noise signal since this noise is thermal noise in the example. This means that there must be a real random phenomenon depending on the outside world, at the noise generation source.
In order that the noise should be unpredictable, and that the future noise only depends on the past noise, logic circuits which provide pseudo-random phenomena should not be used but rather signals of physical origin such as the thermal noise of a transistor should be used. Indeed, according to the communications protocol used, the signal s transmitted by the transmitter may be known at certain instants, if the future noise only depended on the past noise, then the noise during these periods and subsequently the whole noise chain would be able to be inferred from this.
The method for eliminating the noise by the receiver in order to recover the transmitted signal s is now tackled.
Between its transmission by the receiver and its reception by the detection circuit of the receiver, the noise signal has undergone various convolutions due to the electronics and to the transmission channel C as schematized in
In order that the receiver may eliminate b′ by knowledge of b, it must estimate the convolution H2. This estimation may for example be performed during an initialization phase of the communication.
As the communication is contactless, the filter H2 may change during the communication. Therefore the change of this filter during the communication should preferably be tracked.
A particular hardware embodiment of the invention will now be described with reference to
The means 33 for separating the noise of the receiver and the useful signal are coupled with the random signal generator. By means of this connection, a change in the impedance of the tuned circuit 6 due to the introduction of a card bearing a transmitter circuit in the receiver 1, is detected and transmitted to the random signal generator 32. The random signal generator 32 is coupled with means 33 for separating the noise of the receiver and the useful signal.
The operation is the following. When a card bearing a transmitter 10 is introduced in a space reserved for this purpose in the reader 1, it produces a change in the impedance of the tuned circuit 6 which is detected by the means 33. This detection causes the means 33 to transmit a signal for enabling the random noise generator 32. The random noise produced by the random noise generator 32 is received by the modulation circuit 31 and is used by this circuit in order to modulate the carrier frequency transmitted by the carrier frequency generator 2. This modulation may assume the form, as illustrated in
In the illustrated example, the emitter 10 is a remotely powered contactless card and the receiver 1 is an RF wave card reader, the receiving frequency is fc=13.56 MHz. The purpose is to scramble the transmission of the transmitter 10 of the card. The transmitter 10/receiver 1 system operates in a way known per se according to the protocol defined by the ISO 14443 standard for chip cards without any close contact:
As a reminder, according to this standard
The lowest binary rate is fc/128 (˜106 kbit/s).
The transmitter 10 of the card sends information to the reader 1 by load modulation for example as described earlier in connection with the prior art illustrated in
by modulating its load.
The subcarrier is BPSK modulated: one bit corresponds to 8 periods of the subcarrier.
The transmitter 10 of the card begins its transmission with a subcarrier of phase Φ0 for a period TR1. This phase Φ0 corresponds to a <<1>>. The phase Φ0+180° corresponds to a <<0>>.
The noise generated by the generator 32 is such that it prevents the detection of the phase of the subcarrier. It is assumed that the modulation of the load 18b of the card 10, in order to generate the useful signal s, will induce an amplitude modulation. This modulation is induced by a change in the resistance 18b illustrated in
and with random amplitude (an amplitude which may also assume negative values). The amplitude of the subcarrier
is randomly drawn every time a bit is transmitted by the random signal generator 32.
Thus, the generated noise occupies the same spectral band as the useful signal. If it is assumed that the algebraic amplitude of the subcarrier follows a Gaussian law, the variance of this amplitude is selected as explained earlier in connection with
Comments on the results will now be given in connection with
Portion a illustrates the useful signal s transmitted by the transmitter card 10. This is an impulse signal assuming the logic values 1 and 0.
Portion b illustrates the current in the antenna 3 of the receiver in the absence of scrambling. As the modulation is a BPSK modulation the signal is <<carried >> here by the phase of the subcarrier. As explainer earlier, the phase Φ0 corresponds to a <<1 >> and the phase Φ0+180′ corresponds to a <<0 >>
Portion c illustrates the noise generated by the modulation circuit 31 controlled by the random signal generator 32.
Finally, portion d illustrates the current in the antenna in the presence of noise and of the useful signal.
For the simulation plot of the graphs of
The electromagnetic field present at the antenna 3 is the field resulting from the fields generated by the reader 1 and the card 10. The noise field generated by the reader 1 is much more stronger than the one generated by the useful signal of the card 1. In the resulting field, the useful signal bearing the data to be transmitted is masked by the noise signal.
However, it should be noted that by placing oneself at a very small distance from the card relatively to the distance between the reader and the card, the field generated by the card is predominant. But, because of its nature, the card is in motion when it is used, and may be found anywhere in the operating space of the reader 1. Consequently, it is therefore impossible to place a spy device which would be much closer to the card than to the reader.
For subtracting the noise b′ from the combined signal of the noise and the useful signal, a′+b′, with the shape of the generated noise, it is possible to avoid estimating the H2 filter described earlier. Over a period of one bit, the noise is proportional to the following signal:
b0(t)=c(t+σ)·cos(2πft+φ)
wherein c(t) is a periodic square signal varying from +1 to −1 with a period 1/fs. The constant τ depends on the initial instant. Therefore one has:
b(t)=K·b0(t)
wherein K is a random number with a uniform probability density between −a and +a. For example, if the carrier has a non-modulated amplitude of 1 V, then a=0.2 V is selected in order to have a modulation index of 20%.
The number K is randomly drawn in the random signal generator 32 for each bit sent by the transmitter 10 of the card and is known to the reader and only to it, since it is received at the means 33.
The mean value of the amplitude of the noise signal sent by the reader 1 is constant over time as the mean value of the amplitude shift induced by the noise is zero. The influence of this noise on the parameters for regulating the voltage of the card 10 for it to be powered remotely, may therefore in a first approximation be neglected. In this case, the system is linear.
Thus, by the linearity of the system upon it returning to the readers the noise has become:
b′(t)=K·b0′(t)
Therefore knowledge of b0′(t) is sufficient in order to succeed in subtracting the noise.
The receiver digitizes the signal with a sampling frequency fe. With the following initialization sequence, the reference noise may be recorded:
This sequence may be performed during the period TR1 described earlier.
Next, the reader knowing K, the subtraction of the noise is performed for example by phase inversion of the noise signal, multiplication by K and addition to the combined signal. This method has the advantage of having a limited number of operations to be performed.
In portion a, the useful signal is illustrated as transmitted by the card 10.
In portion b, the current present in the antenna of the reader 1 is illustrated in the absence of noise transmitted by the receiver 1.
In portion c, the current present in the antenna 3 of the reader 1 is illustrated, in the presence of noise transmitted by the receiver 1.
In portion d, the signal present in the means 33 for processing the signal of the antenna 3 after subtraction of the noise is illustrated.
In portion e, is illustrated the differential signal between the noiseless signal illustrated in portion b and the noise-suppressed signal i.e., the noise of which has been subtracted as illustrated in portion d.
In
During a communication, the reference noise may change with the motion of the card 10 relatively to the reader 1, and the record therefore needs to be adapted. The protocol described in the ISO 14443 standard provides that each byte is surrounded with a bit set to 0 and a bit set to 1. These known bits may be used for updating the recorded reference noise.
Number | Date | Country | Kind |
---|---|---|---|
0452171 | Sep 2004 | FR | national |
Filing Document | Filing Date | Country | Kind | 371c Date |
---|---|---|---|---|
PCT/FR05/50779 | 9/26/2005 | WO | 3/23/2007 |