Secure data tagging systems

• US 20050017844A1
• Filed: 06/08/2004
• Published: 01/27/2005
• Est. Priority Date: 12/11/2001
• Status: Active Grant

• Current Assignee: Tagsys SA
• Original Assignee: Tagsys Australia Pty Limited
• Inventors: Cole, Peter Harold
• Granted Patent: US 7,187,267 B2
• Time in Patent Office: Days
• US Class Current: 340/10.100
• CPC Class Codes: G06K 19/0723 the record carrier comprising an arrangement for non-contact communication, e.g. wireless communication circuits on transponder cards, non-contact smart cards or RFIDs
• CPC Class Codes: G06K 19/18 Constructional details
• CPC Class Codes: G06K 7/0008 General problems related to the reading of electronic memory record carriers, independent of its reading method, e.g. power transfer
• CPC Class Codes: G06K 7/10049 binary tree
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

A system is disclosed for secure communication between an interrogator and an RFID tag. The system includes means for singulating the tag in a population of RFID tags and means for extracting from the tag, identity data adapted to uniquely identify the tag. The system further includes means for securely communicating the identity data to a secure database, means for providing authentication data by the database and means for securely communicating the authenticating data to the interrogator. The system also includes means for providing a further communication between the tag and the interrogator, and wherein at least one stream of data between the tag and the interrogator includes random data generated via a random physical process. The tag and database may each include means for maintaining a count of secure authentications. The count may be separately maintained by the tag and database and may be incremented following each secure authentication. A method for secure communication between an interrogator and an RFID tag is also disclosed.

Claims

1. A system for secure communication between an interrogator and an RFID tag, said system including:

means for singulating said tag in a population of RFID tags;

means for extracting from said tag, identity data adapted to uniquely identify said tag;

means for securely communicating said identity data to a secure database;

means for providing authentication data by said database;

means for securely communicating said authenticating data to said interrogator; and

means for providing a further communication between said tag and said interrogator, wherein at least one stream of data between said tag and said interrogator includes random data generated via a random physical process.

2. A system according to claim 1 wherein said tag and said database each includes means for maintaining a count of secure authentications.

3. A system according to claim 2 wherein said count is separately maintained by said tag and by said database and is incremented following each secure authentication.

4. A system according to claim 1 wherein said interrogator includes said means for extracting and means for transmitting said authenticating data to said tag.

5. A system according to claim 1 wherein said tag includes said means for providing a further communication.

6. A system according to claim 1 including means for comparing said further communication with reference data for determining if said tag is authentic.

7. A system according to claim 6 wherein said interrogator includes said comparing means.

8. A system according to claim 6 wherein said database includes said comparing means.

9. A system according to claim 1 wherein said tag includes authentication test data for authenticating a transmission from said interrogator and authentication reply data for encoding a reply.

10. A system according to claim 9 wherein said tag includes a plurality of said authentication data.

11. A system according to claim 9 wherein said database includes a copy of said authentication data.

12. A system according to claim 9 wherein said authentication data is not reused.

13. A system according to claim 1 wherein said identity data includes a fixed data string.

14. A system according to claim 1 wherein said identity data includes a variable data string.

15. A system according to claim 1 wherein said identity data is encrypted.

16. A system according to claim 15 wherein said encryption includes an XOR operation of said authentication data and said identity data.

17. A method for secure communication between an interrogator and an RFID tag, said method including:

singulating said tag from a population of RFID tags;

extracting from said tag, identity data adapted to uniquely identify said tag;

securely communicating said identity data to a secure database;

providing authentication data by said database;

securely communicating said authentication data to said interrogator; and

providing a further communication between said tag and said interrogator, wherein at least one stream of data between said tag and said interrogator includes random data generated via a random physical process.

18. A method according to claim 17 including the step of maintaining a count of secure authentications.

19. A method according to claim 18 wherein said count is separately maintained by said tag and said database and is incremented following each secure authentication.

20. A method according to claim 17 wherein said further communication is from said tag to said interrogator.

21. A method according to claim 17 including comparing said further communication with reference data for determining if said tag is authentic.

22. A method according to claim 17 wherein said tag includes authentication test data for authenticating a transmission from said interrogator and authentication reply data for encoding a reply.

23. A method according to claim 22 wherein said tag includes a plurality of said authentication data.

24. A method according to claim 22 wherein said database includes a copy of said authentication data.

25. A method according to claim 22 wherein said authentication data is not reused.

26. A method according to claim 17 wherein said identity data includes a fixed data string.

27. A method according to claim 17 wherein said identity data includes a variable data string.

28. A method according to claim 17 wherein said tag identity data is encrypted.

29. A method according to claim 28 wherein said encryption includes an XOR operation of said authentication data and said identity data.