Protection device and dongle and method for using the same

Abstract

Methods and systems for suspending a physical protection of an object by a protection device. A host device receives a first and second public key, a third public key and a signed combined identifier incorporating the first and second public keys. The host device authenticates the first and second public keys using a signature of the signed identifier and authenticates the protection device. The host device sends an unlock request to the dongle.

1 . A system for physically protecting an object comprising:
 a protection device having a controllable actuator for engaging and releasing physical protection of an object, and   a dongle associated with the protection device,   the protection device comprises an internal memory and a first data connection interface, and the internal memory of the protection device stores at least a first private key,   the dongle comprises an internal memory, a second data connection interface compatible with the first data connection interface of the protection device, and a third data connection interface, and the internal memory of the dongle stores at least a second private key, a third public key, and a signed combined identifier,   wherein the signed combined identifier incorporates at least a first public key, which is cryptographically associated with the first private key, and a second public key, which is cryptographically associated with the second private key, and   wherein the signed combined identifier comprises a signature from a third private key, which third private key is cryptographically associated with the third public key.   
     
     
         2 . The system according to  claim 1 , wherein the internal memory of the dongle further stores a contract script. 
     
     
         3 . The system according to  claim 2 , wherein the internal memory of the protection device further stores a signature of a contract script signed with the second private key. 
     
     
         4 . The system according to  claim 2 , wherein the internal memory of the dongle further stores a signature of the contract script signed with the first private key. 
     
     
         5 . The system according to  claim 1 , wherein the second public key is different from the first public key, wherein the third public key is different from the first public key and from the second public key. 
     
     
         6 . The system according to  claim 1 , wherein the dongle sends the signed combined identifier via the third data connection interface. 
     
     
         7 . The system according to  claim 1 , wherein the dongle receives an unlock request via the third data connection interface. 
     
     
         8 . The system according to  claim 7 , wherein the dongle generates an unlock command in reaction to receiving the unlock request, signs the generated unlock command using the second private key, and sends the signed unlock command via the second data connection interface. 
     
     
         9 . The system according to  claim 8 , wherein the protection device receives a signed unlock command via the first data connection interface. 
     
     
         10 . The system according to  claim 9 , wherein the protection device authenticates the received unlock command using a signature of the received unlock command and using the second public key, and
 responsive to determining that the received unlock command is authentic, controls the controllable actuator to release physical protection of the object.   
     
     
         11 . The system according to  claim 1 , wherein the internal memory of the protection device is a tamper-proof memory. 
     
     
         12 . The system according to  claim 1 , wherein the internal memory of the dongle is a tamper-proof memory. 
     
     
         13 . The system according to  claim 1 , wherein the third data connection interface is a wireless data connection interface. 
     
     
         14 . The system according to  claim 1 , wherein the first data connection interface and the second data connection interface support an Inter-Integrated Circuit protocol.