SECURE RFID PACKAGING

CROSS REFERENCE TO RELATED APPLICATION

[0001] This application claims the benefit of the filing date of U.S. Prov. Pat. Appl.

No. 60/697,288, entitled "SECURE RFID PACKAGING," filed July 6, 2005 by Sunil Dewan, the entire disclosure of which is incorporated herein by reference for all purposes.

BACKGROUND OF THE INVENTION

[0002] This application relates generally to radio-frequency ("RF") devices. More specifically, this application relates to security of RFID-device packaging.

[0003] An RF device is a device that incorporates electromagnetic technology in the radio-frequency portion of the electromagnetic spectrum to transmit a unique identification signal or data. The specific portion of the spectrum that is used may depend on a particular application, varying from low-frequency RF devices that operate at about several kHz, to higher-frequency RF devices that may operate at GHz levels; the transmission range is greater with higher frequencies, although devices that operate at such frequencies tend to be more costly.

[0004] RF devices have recently become popular for use in financial, nonfmancial, and other transactions, being used in lieu of bar codes and magnetic stripes on credit and debit cards. A typical RF device includes an RF transponder that communicates with a transceiver in response to commands transmitted via radio-frequency waves generated by the transceiver. The transceiver may be thought of as a reader, analogous to a bar-code or magnetic-stripe reader. Such a reader may be located, for example, at a retail establishment to permit the holder of the RF device to purchase items and conduct other financial and nonfinancial transactions. Because the transponder in the RF device may be relatively small, it is conveniently integrated into a wide variety of objects rather than being limited to a standard structure, as has tended to be the case for magnetic-stripe cards. For example, RF transponders may conveniently be included in credit cards and other financial cards or instruments, key fobs, jewelry such as bracelets or necklaces, cell-phone covers, and a variety of other types of objects. Financial cards that incorporate RF devices are sometimes referred

to as RF or contactless smart cards, and may incorporate various processing and memory components in addition to radio-frequency functions.

[0005] While the versatility of RF devices thus provides a diverse array of transaction options, there are also some risks associated with RF devices. One notable risk is the ability for electromagnetic signals to penetrate unsecured packaging. For example, characteristics of an RF device may maliciously be extracted, even from a sealed package that contains the RF device, by activating the transponder using a remote signal in a process sometimes referred to in the art as "sniffing." When the information is extracted by such a process, it may then be used improperly to conduct fraudulent financial transactions.

[0006] There is accordingly a need in the art for methods that improve the security of

RF devices.

BRIEF SUMMARY OF THE INVENTION

[0007] Embodiments of the invention therefore provide methods and systems for preparing radio-frequency devices for distribution. A plurality of such radio-frequency devices are received. Each device comprises an embedded radio-frequency transponder. Each of the radio-frequency devices is moved sequentially to a plurality of stations of a preparation device. At a first station, a radio-frequency identification code assigned to the each of the radio-frequency devices is encoded to personalize the each of the radio-frequency devices with recipient-specific radio-frequency identification data. At a second station, the each of the radio-frequency devices is packaged within a package such that the each of the radio-frequency devices within the package is electromagnetically shielded at radio frequencies.

[0008] In some embodiments, a recipient is identified for the each of the radio- frequency devices. At a third station, a package containing the each of the radio-frequency devices is labeled with a mailing address for the recipient.

[0009] There are a number of different ways the radio-frequency devices may be packaged in different embodiments. For instance, in one embodiment, the each of the radio- frequency devices is affixed to a carrier printed with metallic ink, and the carrier is inserted in the package, hi another embodiment, the package has an interior electromagnetic shield at radio frequencies, such as may be achieved when the interior is printed with metallic ink; the each of the radio-frequency devices may then be packaged by inserting the each of the radio-

frequency devices in the package. In still another embodiment, the each of the radio- frequency devices is inserted within a sleeve that includes shielding material that shields an interior of the sleeve from electromagnetic radiation at radio frequencies, with each of the sleeved radio-frequency devices being inserted in the package.

[0010] The radio-frequency devices may also be packaged with magnetic-stripe cards in some embodiments. A plurality of magnetic-stripe cards are received. At a third station, an identification of each of the plurality of magnetic-stripe cards is read from the each of the magnetic-stripe cards. The radio-frequency identification code to be assigned to a corresponding one of the radio-frequency devices is determined from the identification of the each of the plurality of magnetic-stripe cards. The magnetic-stripe card corresponding to the each of the radio-frequency devices is packaged with that radio-frequency device within the package.

[0011] The methods of the invention may be embodied in a system that comprises a plurality of stations, a controller in communication with the plurality of stations, and a memory coupled with the controller. The memory comprises a computer-readable storage medium having a computer-readable program embodied therein for operating the system to prepare radio-frequency devices for distribution in accordance with the description above.

BRIEF DESCRIPTION OF THE DRAWINGS

[0012] A further understanding of the nature and advantages of the present invention may be realized by reference to the remaining portions of the specification and the drawings wherein like reference numerals are used throughout the several drawings to refer to similar components, hi some instances, a sublabel is associated with a reference numeral and follows a hyphen to denote one of multiple similar components. When reference is made to a reference numeral without specification to an existing sublabel, it is intended to refer to all such multiple similar components.

[0013] Fig. 1 is a schematic illustration of one embodiment of a system providing automated preparation of RF devices for distribution;

[0014] Fig. 2 is a flow diagram illustrating a method for automated preparation of RF devices for distribution using the system of Fig. 1;

[0015] Fig. 3 is a schematic illustration of another embodiment of a system providing automated preparation of RF devices for distribution;

[0016] Fig. 4 is a flow diagram illustrating a method for automated preparation of RF devices for distribution using the system of Fig. 3;

[0017] Fig. 5 is a schematic illustration of a further embodiment of a system providing automated preparation of RF devices for distribution;

[0018] Fig. 6 is a flow diagram illustrating a method for automated preparation of RF devices for distribution using the system of Fig. 5; and

[0019] Fig. 7 is a schematic illustration of a controller that may be used with the automated systems in embodiments of the invention.

DETAILED DESCRIPTION OF THE INVENTION

[0020] Embodiments of the invention provide for automated preparation of RF devices for distribution in secure packaging. In many of the embodiments, existing equipment suitable for the preparation of magnetic-stripe cards may be used without significant modification, even though the RF devices may have different sizes and shapes from magnetic-stripe cards.

[0021] An example of one system for preparing RF devices is provided in Fig. 1, which is accompanied by the flow diagram of Fig. 2 illustrating a method using the system of Fig. 1. The description that follows thus makes simultaneous reference to Figs. 1 and 2. The illustrated embodiments make use of techniques to package the RF device 100, allowing it to be prepared for distribution using existing equipment already adapted for preparation of objects having that size. Typically, a plurality of such devices may be received at a preparation device 120, as indicated at block 212 of Fig. 2. The preparation device 120 may have a plurality of stations that are each adapted to perform a particular function. The operation of each station may be managed by a controller 124 that is also programmed to coordinate the movement of the encapsulating packages to the different stations as part of an automated process. The RF devices may be received by an input hopper 130 of the preparation device 120, from which it may be directed to different stations in accordance with instructions provided by the controller 124. Fig. 1 illustrates one particular sequence of stations to which the RF devices may be directed in a particular embodiment, but this

illustration is not intended to be exclusive. In other embodiments, some of the stations may be bypassed, additional stations may be included, or the order in which stations are visited may be changed.

[0022] In the illustrated embodiment, each RF device is initially moved to an RF encoder station 132, which is configured to encode the RF device with a particular RF identification code assigned to that device, thereby personalizing the RF device. This station will thus typically include a radio-frequency transceiver and an antenna to allow radio- frequency signals to be exchanged with the transponder 112 of the RF device and to identify the specific device. A database comprised by or accessible by the controller 124 includes an identification of the particular RF identification code to be assigned to the specific device, allowing that code to transmitted to the transponder 112 with the antenna at the RF encoder station 132 to personalize the RF device as indicated at block 216 of Fig. 2. The database may additionally correlate the assigned RF identification code with a particular individual, such as an anticipated recipient of the device. In some instances, the code may be further correlated with one or more financial accounts to enable the device to be used in providing access to such financial accounts.

[0023] In some embodiments, a check may be made to ensure that the RF identification code was correctly written to the transponder 112 by moving the RF device to an RF verifier station 134 as indicated at block 220. This station may also include an antenna and transceiver to allow exchange of radio-signal information with the device's transponder. The transponder is activated at the station, and an identification signal that purports to include the RF identification code is transmitted to the station. A check is made whether the received RF identification code matches the code assigned to that RF device by having the controller 124 check the database records of the assigned code and performing a comparison. In some instances, the RF encoder and RF verifier stations 132 and 134 may be the same station, but in other embodiments they are different stations. If the RF identification code written to the RF device is not successfully verified, the RF device may be moved to a reject bin 142, allowing the device to be discarded in the event that the transponder 112 is defective.

[0024] If the RF identification code is verified, the RF device may be moved to a packager station 136 as indicated at block 228. The RF device is shielded with a material that blocks radio-frequency waves, and will thereby prevent the RF device from being sniffed after it has been fully packaged at block 230. There are a number of different ways in which

the shielding may be provided. For example, metal-based inks may be printed on a carrier that holds the RF device within its package, or such inks may be printed within the package itself. In other instances, a sleeve that includes shielding material may be slipped over the device before it is packaged at block 230. Interfering with the ability to sniff the RF device in this way advantageously permits the RF device to be packaged and shipped to customers without having to encrypt information, hi some embodiments, the package may comprise an envelope, particularly if the device is sufficiently small. The package may be labeled at block 232 by moving it to a labeler 138; in some embodiments, such labeling may be unnecessary, such as where packaging the device provides automatic labeling through an envelope window. The prepared RF device is then moved to an output bin 140, from which the devices may be distributed to customers.

[0025] In a particular set of embodiments, usually where the size of the RF devices is small, the RF devices may be provided on a reel. This may be suitable, for example, where the RF devices comprise individual chips. The reel may conveniently be fed through the stations of the preparation device 120, which may additionally include a station equipped to separate the RF devices. For example, such a station could be equipped with a cutting tool to cut the reel between RF devices, advantageously using a known separation distance between devices defined by the structure of the reel.

[0026] In some embodiments, it may be desirable to prepare an RF device for distribution in combination with a magnetic-stripe card. Such embodiments may be especially useful, for example, in cases where the RF device is intended to be used in connection with financial transactions, recognizing that many points of sale may be equipped only with more traditional magnetic-stripe readers and not with RF readers. Providing a combination of an RF device, such as a fob, with a magnetic-stripe card gives the recipient the flexibility to choose which instrument to use in a given transaction. At those places equipped with RF readers, the more convenient RF device may be used, but it remains possible to enter into transactions using the same financial accounts by using the magnetic- stripe card if a merchant is equipped only to accept magnetic-stripe cards.

[0027] Thus, Fig. 3 provides an example of a system equipped to prepare RF devices in combination with magnetic-stripe devices. It is accompanied by the flow diagram of Fig. 4 illustrating a method using the system of Fig. 3. The description that follows thus makes simultaneous reference to Figs. 3 and 4. As indicated at blocks 404 and 408 of Fig. 4, the RF

devices 100 and the magnetic-stripe devices 304 are received. The illustration of the magnetic-stripe card 304 in Fig. 3 shows the back of such a card where the magnetic stripe 308 and a signature of a cardholder are provided.

[0028] The RF devices and the magnetic-stripe cards are paired as indicated in Fig. 3 so that pairs comprising an RF device and a magnetic-stripe card may be received by the preparation device 320 at block 412 of Fig. 4. Similar to the preparation device shown in Fig. 1, the preparation device 320 may have a plurality of stations at which specific functions may be performed, with functions and movement of the pairs between stations being managed by a controller 324. The sequence of stations illustrated in Fig. 3 is not intended to be limiting, nor is it intended to indicate exclusively which functions may be performed on the RF- device/magnetic-stripe-card pairs.

[0029] The pairs may be received at an input hopper 330 and may be moved together as a pair through the different stations as indicated in the embodiment of Fig. 4, or may be moved along separate paths with the controller 324 tracking the positions of the separate elements of each pair. At block 420, a determination is made whether to retrieve identification codes or to personalize devices. For example, the RF identification code corresponding to the magnetic-stripe code may be extracted from the magnetic-stripe card and encoded onto the RF device at block 424 to personalize the device by moving the pair to an RF encoder station 334. Such a station includes a transceiver and antenna to enable radio communications with the transponder of the RF device so that the corresponding code may be written to the RF device. In some instances, a verification may be performed at block 428 to ensure that the code is written to the device correctly. In some instances, this verification may be performed at the same station, but in other embodiments it is performed by moving the pair to a separate RF verification station 336, also equipped with a transceiver and antenna to enable exchange of radio-frequency information. The verification is performed by reading the RF identification code from the RF device and comparing it with records of the assigned RF identification code accessible to the controller. If the code is not verified, the RF-device/magnetic-stripe-card pair may be moved to a reject bin 344 as indicated at block 432.

[0030] If the code is verified, the pair may be moved to a packager station 338 at block 436. At the packager station, the RF device is shielded from being sniffed after it is inserted into a package at block 438. As described above, there are a number of different

ways that such shielding may be provided in different embodiments, including the use of metal-based inks printed on a carrier that holds the pair and/or printing such inks within the package itself. In other instances, a shielding sleeve may be slipped over the pair before they are packaged at block 438. In one embodiment, the pair are conveniently packaged within an envelope for delivery to a recipient. The packaged pair may conveniently be deposited in an output bin 342 by the preparation device, from which it may be distributed to the recipient.

[0031] In still other embodiments, the methods of the invention may be applied to RF devices embedded in still other types of objects. This includes RF devices that are provided in a variety of novelty-type items, the specific example of a baseball cap 504 being illustrated in Fig. 5. Such a device could be provided for sale to children at an amusement park, enabling the child to wear the cap and have value decremented automatically as he partakes in amusements. The form of the devices is virtually endless and may include such things as necklaces, bracelets, shoes, teddy bears, etc. Fig. 5 provides an illustration of a system that is suitable for preparing such RF devices, and is accompanied by the flow diagram of Fig. 6 illustrating a method for using the system of Fig. 5. The following description therefore makes reference to both Figs. 5 and 6.

[0032] The example used for the RF device in Fig. 5 is a baseball cap 504, which will be enclosed within a box 508. More realistically, the box enclosure 508 would additionally contain packing material to protect the item. As indicated at block 616 of Fig. 6, the RF device is received at an RF encoder 532 from an input hopper 530 that form part of a preparation device 520. To accommodate a larger size for certain devices, the preparation device 520 may be designed to accommodate objects having certain predefined sizes and shapes, although in other embodiments a variation of sizes may be accommodated by using position-recognition techniques, such as cameras, position sensors, and the like. The sequence of stations illustrated for the preparation device 520 in Fig. 5 is not intended to be limiting; in other embodiments, more or fewer stations may be provided and/or the stations may be encountered in a different order. A controller 524 is provided to coordinate movement of the enclosures and to control operations performed on the enclosures at the different stations.

[0033] Thus, similar to other embodiments described above, the RF device is encoded with an assigned RF identification code as determined by the controller 524 to personalize the device at block 616. In embodiments where a verification is performed to ensure that the

correct RF identification code has been written to the RF device, the device may be moved at block 620 to an RF verifier station 534 that is also equipped with a transceiver and antenna for communication with a transponder in the RF device. The RF verifier station 534 requests identification of code written to the RF device so that it may be compared by the controller 524 with the code that was to have been assigned. In other embodiments, the verification and encoding functions may be performed at a single station. If the verification fails, the device may be moved at block 624 to a reject bin. If the verification confirms that the correct code has been written, however, the device may be moved at block 628 to a packager 535 where the device is shielded from RF frequencies. Such shielding may be provided in a number of different fashions, including using metal-based inks printed on a carrier that holds the RF device, printing metal-based inks within the package itself, enclosing the device within a sleeve that is opaque at RF frequencies, and the like. The device is inserted into the package at block 630 and moved to a labeler 536 for labeling at block 632. The labeled enclosure may then be directed to an output bin 538, from which it may be distributed to a recipient.

[0034] Fig. 7 provides a schematic illustration of a structure that may be used to implement the host system controller 124, 324, or 524 in any of the preceding embodiments. Fig. 7 broadly illustrates how individual system elements may be implemented in a separated or more integrated manner. The controller is shown comprised of hardware elements that are electrically coupled via bus 726, including a processor 702, an input device 704, an output device 706, a storage device 708, a computer-readable storage media reader 710a, a communications system 714, a processing acceleration unit 716 such as a DSP or special- purpose processor, and a memory 718. The computer-readable storage media reader 710a is further connected to a computer-readable storage medium 710b, the combination comprehensively representing remote, local, fixed, and/or removable storage devices plus storage media for temporarily and/or more permanently containing computer-readable information. The communications system 714 may comprise a wired, wireless, modem, and/or other type of interfacing connection and permits data to be exchanged with other devices. Records of assigned RF identification codes, lookup tables for corresponding magnetic-stripe cards, and the like may be stored on the storage device 708, or may accessible from remote storage through the communications system 714.

[0035] The controller also comprises software elements, shown as being currently located within working memory 720, including an operating system 724 and other code 722, such as a program designed to implement methods of the invention. It will be apparent to

those skilled in the art that substantial variations may be made in accordance with specific requirements. For example, customized hardware might also be used and/or particular elements might be implemented in hardware, software (including portable software, such as applets), or both. Further, connection to other computing devices such as network input/output devices may be employed.

[0036] Thus, having described several embodiments, it will be recognized by those of skill in the art that various modifications, alternative constructions, and equivalents may be used without departing from the spirit of the invention. Accordingly, the above description should not be taken as limiting the scope of the invention, which is defined in the following claims.