Encryption of radio frequency identification tags

• US 20050036620A1
• Filed: 07/23/2003
• Published: 02/17/2005
• Est. Priority Date: 07/23/2003
• Status: Abandoned Application

• Current Assignee: Martin S Casden, Randy Watkins
• Original Assignee: Martin S Casden, Randy Watkins
• Inventors: Watkins, Randy, Casden, Martin S.
• Application Number:
  US10/626,054
• Publication Number:
  US 20050036620A1
• Time in Patent Office: Days
• US Class Current: 380/259
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G07F 7/082 Features insuring the integrity of the data on or in the card
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G07F 7/1016 Devices or methods for securing the PIN and other transaction-data, e.g. by encryption arrangements for secret communication, see H04L9/00

Abstract

A method for encrypting and decrypting user data stored on identification tags, such as RFID tags, of the type having a tag identification code unique to each tag. An encryption/decryption key unique to each tag is based in part or in whole on the tag identification code of each tag, and the unique key is used to encrypt data for storage on the corresponding tag and to decrypt encrypted user data stored on the tag.

Claims

1. A method of encrypting identification tags of the type having a data storage for storing a fixed tag UID unique to each of said tags and variable user data, said tag UID and said user data being readable by a tag reader, said method comprising the steps of:

providing an identification tag having a permanent UID stored thereon;

providing an encryption engine operative for encrypting user data with an encryption key;

entering said UID to provide part or all of said encryption key;

entering user data for encryption by said engine;

encrypting said user data with said encryption key to derive encrypted user data; and

storing said encrypted user data in said data storage of said identification tag.

2. The method of claim 1 wherein said tag is an RFID tag and said data storage is readable by an RFID reader.

3. The method of claim 1 wherein said encryption engine comprises an encryption algorithm running on a digital processor platform enabled for reading and writing to said data storage.

4. The method of claim 3 wherein said digital processor platform is operatively associated with an RFID reader for reading and writing to said data storage.

5. The method of claim 3 wherein said encryption algorithm is a DES encryption algorithm.

6. The method of claim 1 wherein said encryption key is a final key based on a combination of said tag UID and a private key.

7. The method of claim 6 wherein said final key is derived by XORing said private key with said tag UID.

8. A method of decrypting encrypted user data stored on an encrypted identification tag, comprising the steps of:

providing a decryption engine operative for decrypting said encrypted user data with an encryption key;

presenting an encrypted identification tag for reading;

reading said tag UID and said encrypted user data stored on said encrypted identification tag;

providing said tag UID to said decryption engine for deriving said encryption key;

providing said encrypted user data to said decryption engine for decryption with said encryption key; and

decrypting said encrypted user data with said decryption engine to derive decrypted user data.

9. The method of claim 8 wherein said encrypted identification tag is an RFID tag and said tag is readable by an RFID reader.

10. The method of claim 8 wherein said decryption engine comprises a decryption algorithm running on a digital processor platform enabled for reading and writing to said encrypted identification tag.

11. The method of claim 10 wherein said digital processor platform is operatively associated with an RFID reader for reading and writing to said encrypted identification tag.

12. The method of claim 10 wherein said decryption algorithm is a DES decryption algorithm.

13. The method of claim 8 wherein said encryption key is a final key based on a combination of said tag UID and a private key.

14. The method of claim 13 wherein said final key is derived by XORing said private key with said tag UID.

15. A method for encrypting and decrypting user data stored on identification tags of the type having a UID code on each tag, comprising the steps of generating a key based in part or in whole on said UID code of one said tag, encrypting said user data with said key to derive encrypted user data for storage on said one tag, and decrypting encrypted user data read from said one tag with said key, such that a unique key is generated for encryption and decryption of user data on each tag.

16. The method of claim 15 wherein said identification tags are RFID tags.