Security techniques in the RFID framework

• US 20060055508A1
• Filed: 05/31/2005
• Published: 03/16/2006
• Est. Priority Date: 09/01/2004
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Agarwal, Abhishek, Sriram, Balasubramanian, Ahmed, Mohamed Fakrudeen Ali, Goteti, Janaki Ram, Venkatesh, Ramachandran, Kumar, Anush
• Granted Patent: US 7,944,355 B2
• Time in Patent Office: Days
• US Class Current: 340/5.200
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06Q 10/08 Logistics, e.g. warehousing, loading or distribution; Inventory or stock management
• CPC Class Codes: G06Q 10/087 Inventory or stock management, e.g. order filling, procurement or balancing against orders

Abstract

The subject invention provides a system and/or a method that facilitates employing a security technique to an RFID network. An interface can receive role-based authorization data related to an operating system. A security component can enhance security to at least one of a manipulation of a process and a utilization of a device within the RFID network based at least in part upon role-based authorization data.

Claims

1. A system that facilitates employing security to an RFID network, comprising:

an interface that receives role-based authorization data related to an operating system; and

a security component that enhances security relating to at least one of a manipulation of a process and a utilization of a device within the RFID network based at least in part upon role-based authorization data.

2. The system of claim 1, the device is one of the following:

an RFID reader;

an RFID writer;

an RFID printer;

a printer;

a reader;

a writer;

an RFID transmitter;

an antenna;

a sensor;

a real time device;

an RFID receiver;

a real time sensor;

a device extensible to a web service; and

a real time event generation system.

3. The system of claim 1, the process is a high-level object that forms together at least one entity to create a meaningful unit of execution that relates to at least one of the following:

an outbound process;

a manufacturing process;

a shipping process;

a receiving process;

a tracking process;

a data representation process;

a data manipulation process;

a security process; and

a process utilizing one of an RFID device service, a device collection, a tag read, an event, an event queue, a tag write, a device configuration, and a number count.

4. The system of claim 3, the event is one of the following:

a tag read;

a tag read error;

a device up event;

a device down event; and

a management event.

5. The system of claim 1, the RFID network comprises a collection of devices that form a sub-system which includes:

an RFID reader that receives an RFID signal; and

an RFID tag that transmits to at least one device.

6. The system of claim 1, further comprising a role component that creates an RFID administrator and an RFID user group with respective permissions.

7. The system of claim 6, the RFID administrator manipulates the process within the RFID network.

8. The system of claim 7, the manipulation of the process is at least one of the following:

an execution;

a modification;

a creation;

a deletion;

a deployment; and

a termination.

9. The system of claim 6, the RFID administrator incorporates at least one of a user and a group from the operating system into the RFID user group to utilize an existing security hierarchy.

10. The system of claim 9, the RFID administrator dictates permission to at least one of the user and the group to manipulate the process within the RFID network, wherein the manipulation is at least one of a creation, modification, and deletion of such process.

11. The system of claim 10, at least one of the user and the group dictates permission to at least one of a disparate user and a disparate group to manipulate the process within the RFID network, wherein the manipulation is at least one of a creation, modification, and deletion of such process.

12. The system of claim 9, the RFID administrator dictates permission associated with a device within the RFID network to at least one of the user and the group.

13. The system of claim 1, further comprising a threat component that utilizes a track model analysis to determine a threat condition that the security component prevents.

14. The system of claim 1, further comprising at least one of the following:

1) an analyzer component that determines a characteristic of a role-based authorization model within the operating system to incorporate with the RFID network; and

     2) a manager component that manages at least one of a role and a permission associated with the RFID network.

15. The system of claim 1, further comprising at least one of the following:

1) an API component that invokes an API to modify permissions associated with at least one of an RFID administrator and an RFID user group; and

     2) a notification component that alerts an administrator of at least one of a security breach and an attempted security breach, wherein such breaches is at least one of internal and external.

16. A computer readable medium having stored thereon the components of the system of claim 1.

17. A computer-implemented method that facilitates employing security to an RFID network, comprising:

creating an RFID administrator and an RFID user group;

incorporating at least one of a user and a group associated with an authorization model within an operating system; and

enhancing security in the RFID network based at least in part upon the authorization model.

18. The method of claim 17, further comprising:

receiving a threat condition;

utilizing a track model analysis to determine a threat condition to protect against;

assigning at least one permission to at least one of the RFID administrator and the RFID user group;

providing a notification of a breach; and

utilizing an API to manage the security of the RFID network.

19. A data packet that communicates between at least two of a security component, the RFID network, the operating system, and an interface, the data packet facilitates the method of claim 17.

20. A computer-implemented system that facilitates employing security to an RFID network, comprising:

means for receiving role-based authorization data related to an operating system; and

means for enhancing security relating to at least one of a manipulation of a process and a utilization of a device within the RFID network based at least in part upon role-based authorization data.